Privacy policy

1. Controller

Dennis Braß, sole trader, Rudolfstr. 105, 42285 Wuppertal, Germany. Email: info@orgazee.com.

2. Organisation data responsibility

Clubs, associations, federations and other organisations remain responsible for personal data belonging to their members, officers, employees and contacts. Orgazee processes this data as a processor on the organisation’s instructions.

3. Purposes and legal bases

We process data for the website, registration, contract performance, platform operation, support, security, billing and legal obligations. The legal bases include Article 6 GDPR and, for non-essential browser storage, Section 25 TDDDG.

Website and server logs: Article 6(1)(f) GDPR.

Registration, account, trial and contract: Article 6(1)(b) GDPR.

Billing and statutory retention: Article 6(1)(b) and (c) GDPR.

Support, security and error analysis: Article 6(1)(f) GDPR.

Analytics and marketing measurement: Article 6(1)(a) GDPR, only with consent.

4. Hosting and server location

The core platform, Orgazee storage and AI features run on servers in Nuremberg, Germany. The hosting provider is Netcup.

5. Registration and use

Registration and use may involve organisation details, names, email addresses, credentials, roles, permissions, contract and usage data, support requests and content entered by the organisation.

6. Payments and billing

Paid plans are processed through Stripe unless another payment route is agreed. Stripe processes payment and billing data under its own responsibility or as a service provider. Orgazee does not store full card details. Information: stripe.com/privacy.

7. Email delivery

Orgazee may use an SMTP provider such as Zoho for system and contract emails. If an organisation configures its own SMTP details, delivery uses that chosen provider.

8. Storage and cloud connections

Files can be stored in tenant-separated Orgazee storage in Germany. An organisation may optionally connect Dropbox, Google Drive, Microsoft OneDrive, Nextcloud/WebDAV or S3-compatible storage.

9. AI features

Orgazee AI features run on an Orgazee server in Nuremberg. Organisation content is not sent to external AI providers for model training.

10. Cookies, local storage and analytics

Essential browser storage supports login, security, organisation, roles and requested features. Google Analytics and reach measurement run only with consent, which can be changed or withdrawn in the analytics settings.

11. Recipients

Recipients may include Netcup for hosting, Stripe for payments, Zoho or another SMTP provider for email, Google Analytics after consent and an external cloud provider activated by the organisation.

12. Transfers outside the EU

The core platform is operated in Germany. Stripe, Google Analytics or optional cloud providers may process data outside the EU/EEA. Where required, appropriate safeguards such as EU Standard Contractual Clauses are used.

13. Retention

Data is kept only as long as needed for the contract, operation, security, support, billing or legal retention duties, then deleted or restricted unless a legal duty requires otherwise.

14. Data subject rights

Data subjects have the GDPR rights of access, correction, erasure, restriction, portability and objection. Consent can be withdrawn at any time for the future. For organisation data, the organisation is normally the first contact.

You may also complain to a data protection supervisory authority, particularly the Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Germany.

15. Changes

This policy may be updated when the law, services or processing activities change.