Privacy Policy.Last updated: October 2026

This privacy policy applies to all personal data processed by us within the company and to all personal data processed by companies we engage as processors. By personal data we mean information within the meaning of Article 4(1) GDPR, such as a person's name, email address, and postal address.

The scope of this privacy policy covers:

• all online presences (websites) we operate
• social media presences and email communication
• contact forms and other digital communication channels

We process your data only where at least one of the following conditions applies:

1. Consent (Article 6(1)(a) GDPR): you have given us your consent to process data for a specific purpose.
2. Contract (Article 6(1)(b) GDPR): processing is necessary to perform a contract or to take steps prior to entering into a contract.
3. Legal obligation (Article 6(1)(c) GDPR): we are subject to a legal obligation that requires the processing.
4. Legitimate interests (Article 6(1)(f) GDPR): processing is necessary to protect our legitimate interests, provided your fundamental rights do not override them.

In addition to the GDPR, the German Federal Data Protection Act (Bundesdatenschutzgesetz, BDSG) applies in Germany.

Controller

Andreas Baderobjective partner AGBergstraße 45/169469 Weinheim, GermanyEmail: info@objective-partner.com

Data protection officer

Oliver Wilkeningobjective partner AGBergstraße 45/169469 Weinheim, GermanyEmail: datenschutzbeauftragter@objective-partner.comPhone: +49 174 341 43 95

Legal notice (Impressum): www.operaide.ai/legal/imprint

We store personal data only for as long as is strictly necessary to provide our services and products. This means we delete personal data as soon as the reason for processing it no longer applies. In some cases we are legally required to retain certain data beyond the original purpose, for example for accounting purposes (retention obligation of six to ten years under the German Commercial Code and Fiscal Code).

Should you wish your data to be deleted, or should you withdraw your consent to processing, the data will be deleted as swiftly as possible, provided no retention obligation applies.

Under Articles 13 and 14 GDPR you have the following rights:

• Right of access (Article 15 GDPR): you have the right to know whether and which of your data we process.
• Right to rectification (Article 16 GDPR): you may request that inaccurate data be corrected.
• Right to erasure (Article 17 GDPR): you may request the erasure of your data (the "right to be forgotten").
• Right to restriction of processing (Article 18 GDPR): you may request that we only store your data and process it no further.
• Right to data portability (Article 20 GDPR): you may request your data in a commonly used format.
• Right to object (Article 21 GDPR): you may object at any time to the processing of your data based on legitimate interests.
• Right to lodge a complaint (Article 77 GDPR): you may lodge a complaint with the competent data protection supervisory authority at any time.

Competent supervisory authority:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg(State Commissioner for Data Protection and Freedom of Information, Baden-Württemberg)Heilbronner Straße 35, 70191 Stuttgart, GermanyPhone: +49 711 61 55 41-0Email: poststelle@lfdi.bwl.deWebsite: https://www.baden-wuerttemberg.datenschutz.de/

We transfer or process data in countries outside the EU (third countries) only where you have consented to such processing, where it is required by law, or where it is contractually necessary. Where third country transfers take place, they are based on appropriate safeguards, such as the EU Standard Contractual Clauses under Article 46 GDPR, or on an adequacy decision of the European Commission.

Please note: Vercel Inc. (USA) is our hosting provider and HubSpot, Inc. (USA) is our CRM provider. We have entered into data processing agreements with both in accordance with Article 28 GDPR. Data transfers to Vercel in the USA take place on the basis of the EU Standard Contractual Clauses, which are part of Vercel's data processing agreement. HubSpot is certified under the EU-US Data Privacy Framework, and transfers to HubSpot also take place on the basis of the EU Standard Contractual Clauses.

To protect personal data we have implemented both technical and organisational measures (TOMs). Our website is operated exclusively over HTTPS (TLS encryption), so that data transmitted between your browser and our web server is encrypted.

This website is hosted and operated via Vercel.

Provider: Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USAPrivacy notice: https://vercel.com/legal/privacy-notice

When you access our website, Vercel automatically records technical data and stores it in server log files. This includes:

• the IP address of the requesting device
• date and time of access
• name and URL of the file retrieved
• browser type and version
• operating system
• referrer URL (the page visited previously)

This data is processed to ensure the technical operation of the website. It is not combined with other data sources.

Legal basis: Article 6(1)(f) GDPR (legitimate interest in the secure and stable operation of the website)

Vercel sets no cookies on our website. All content of the website, including fonts, is delivered from our own domain: no content is loaded from other servers such as Google Fonts or public content delivery networks.

We have entered into a data processing agreement with Vercel in accordance with Article 28 GDPR.

We don't use cookies.

No cookies, no tracking, no cookie banner. Our website works without them: we don't analyse your visit, and no analytics or advertising service learns that you were here.

Settings stored in your browser

If you choose a colour scheme (light or dark) or close the announcement bar on our website, this choice is stored in your browser's local storage, so the website remembers it on your next visit. It stays in your browser and is not transmitted to us. You can delete it at any time in your browser settings.

Legal basis: Section 25(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG), as the storage is strictly necessary to provide the function you requested.

Should we ever use cookies or analytics, we will ask for your consent first and update this privacy policy.

If you contact us via our contact form or by email, the data you provide (salutation, first and last name, email address, phone number, company and your message) is processed and stored in order to handle your enquiry. Together with the form we receive the address of the page you sent it from, so we know which topic your enquiry relates to.

The contact form sends your data directly from your browser to HubSpot's data centre in the EU. This data is not passed on to third parties without your consent. The data is deleted once the matter has been concluded, provided no statutory retention obligations apply.

Legal bases:

• Article 6(1)(a) GDPR (consent)
• Article 6(1)(b) GDPR (steps prior to entering into a contract, or performance of a contract)
• Article 6(1)(f) GDPR (legitimate interest in professional communication)

Contact enquiries are processed and stored via HubSpot CRM. The data processing agreement concluded with HubSpot applies.

If you request a demo or an AI Bootcamp via our website, the data you enter (for example your name, company, email address, and details of your use case) is processed in order to prepare and carry out the demo or the bootcamp and to contact you.

Legal basis: Article 6(1)(b) GDPR (steps prior to entering into a contract) and Article 6(1)(f) GDPR (legitimate interest)

If you tick the box in our contact form, you agree to receive communications from Operaide, a brand of objective partner AG, by email. We process your email address and your name solely on the basis of this consent. You can withdraw your consent at any time: the unsubscribe link is included in every email.

Legal basis: Article 6(1)(a) GDPR (consent)

Emails are sent and managed via HubSpot.

When someone earns an Operaide certification, we publish a certificate page that shows the holder's name, the certification, the date of issue and a certificate ID. The page can only be found through its link, which the holder can share, for example on LinkedIn. It is excluded from search engines.

Legal basis: Article 6(1)(b) GDPR (performance of the certification). Holders can ask us at any time to take their certificate page down.

We maintain presences on social networks, in particular on LinkedIn and YouTube. If you visit our social media profiles, the privacy terms of the respective provider apply. For LinkedIn, the responsible entity is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. For YouTube, it is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Our website only links to these profiles. It doesn't embed content from them, so no data is transmitted to LinkedIn or YouTube until you follow a link.

We point out that LinkedIn and Google also process user data in the USA. Both are certified under the EU-US Data Privacy Framework.

LinkedIn privacy policy: https://www.linkedin.com/legal/privacy-policyGoogle privacy policy: https://policies.google.com/privacy

We engage the following processors, with whom we have concluded data processing agreements in accordance with Article 28 GDPR:

We reserve the right to amend this privacy policy if legal requirements or our data processing practices change. The current version is always available on our website. We recommend reviewing this privacy policy regularly.

Last updated: October 2026