Privacy policy

1. Controller

The controller in the sense of the GDPR is:

The Black Swan GmbH
Im Mediapark 5
50670 Cologne
Germany

Email: team@voll-ausgebucht.de
Phone: +49 (0)221 789 601 63

2. Data collected and purpose of processing

Application and member account

When applying for membership we collect your first and last name, email address, role or company and, if applicable, your industry. This data is used to review your application and to provide the member area. Legal basis is Art. 6 (1) lit. b GDPR (pre-contractual measures / contract performance).

Profile and networking data

As a member you provide profile information that is visible to other members (e.g. name, role, industry, brief self-description). This data is used exclusively to facilitate one-on-one video calls and mutual referrals within the platform. Legal basis is Art. 6 (1) lit. b GDPR.

Invited persons

When you invite another person to OkayNetwork.online as a member, you transmit their name and email address. You confirm that the invited person agrees with this transmission. Legal basis is Art. 6 (1) lit. f GDPR (legitimate interest in a closed referral network).

Server logs

Each visit to our website automatically records the following data: IP address, date and time of access, requested URL, referrer URL, browser type and version. This data is stored for a maximum of 7 days and is used solely to ensure secure operation. Legal basis is Art. 6 (1) lit. f GDPR (legitimate interest).

Cookies and sessions

We use only technically necessary session cookies to authenticate signed-in users. No tracking or advertising cookies are used. The session cookie is deleted on sign-out or when closing the browser.

3. Visibility within the platform

OkayNetwork.online is a closed networking platform. Profile data is visible exclusively to approved members — not to the public. The contents of one-on-one video calls are neither recorded nor monitored by the provider.

3a. Optional Google Calendar connection

Members can voluntarily connect their Google Calendar with OkayNetwork.online in the settings. When connecting via Google OAuth, a refresh token is stored that the platform uses solely to add events for accepted one-on-one video calls to the calendar (including automatic creation of a Google Meet link). No existing calendar entries are read, modified or analyzed. The connection can be disconnected at any time in the settings; the refresh token is then revoked at Google and removed from our database. Legal basis is Art. 6 (1) lit. a GDPR (consent).

4. Data sharing

We do not share your data with third parties unless required for contract performance or by law. There is no transfer to third countries outside the EU. Hosting takes place on servers of Strato AG in Germany.

5. Hosting

This website is hosted at:

Strato AG
Pascalstraße 10
10587 Berlin

Strato acts as a processor pursuant to Art. 28 GDPR. The servers are located in Germany.

6. Retention period

We store your data as long as your account is active or as required for the purposes described in this policy. After cancellation of your account, your data will be deleted within 30 days, unless statutory retention obligations apply (e.g. tax law retention for 10 years pursuant to § 147 AO).

7. Your rights

Under the GDPR you have the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)

To exercise your rights please contact: team@voll-ausgebucht.de

You also have the right to file a complaint with a data-protection supervisory authority. The competent authority for North Rhine-Westphalia is the Landesbeauftragte für Datenschutz und Informationsfreiheit NRW.

8. Data security

This website is operated via HTTPS. Passwords are stored exclusively as bcrypt hashes and cannot be viewed by us. A brute-force protection is active against automated attacks on the sign-in.