Privacy policy
This page tells you what we collect, why we collect it, who else sees it, how long we keep it, and what you can ask us to do. We write in plain English, so that it is also easy to read if English is not your first language. If a sentence is unclear, write to us and we will explain it.
The short version
This is a summary. The sections below are the binding text.
We collect what you type into a form, plus the technical data that every web server receives.
One form on this site sends data to us: the demo booking on /book-a-demo. It creates a record in our CRM.
Odoo, the software behind this site, keeps its own short record of which pages a visitor opened. That is the only measurement here.
We do not use Google Analytics, Google Tag Manager, advertising cookies or profiling.
Our fonts are on our own server. Your browser loads nothing from another company's server.
You can ask us at any time what we hold about you, and you can ask us to delete it.
Who is responsible
dodorent
Robert-Bosch-Str. 48
72810 Gomaringen
Germany
Managing directors: Daniel Pommranz, Elias Niklaus, Jort de Vreeze
+49 162 2338552
We are a small company and we do not have to appoint a data protection officer under Section 38 BDSG. Data protection questions go to the email address above and are answered by one of the managing directors.
When you book a demo
You can ask for a 30-minute partner demo on this website. The form is part of Odoo, the software this website runs on. We only receive what you type into it. There is no automatic calendar booking: you tell us when it suits you and we answer by email.
This is what the form asks for:
- Your name
- Your company name
- Your work email address
- Your phone number, if you enter one
- Your answer to the question "What describes you best?"
- Your Odoo partner profile or company website, if you enter one
- One or two preferred times for the call
- Anything you write in the free text field
- The fact that you ticked the box confirming you read this page, and the address of the page the form was sent from
To answer you, to agree a time, to prepare for the call, and to contact you about that call.
Article 6(1)(b) GDPR, because the booking is a step you ask for before a possible contract. If no contract is being discussed, we rely on Article 6(1)(f) GDPR and our legitimate interest in answering business enquiries.
The form creates a record in the CRM, which runs in the same Odoo system on the same server. The three managing directors can see it. You are not required by law to give us this data. Without it we cannot arrange the demo.
If you reached the form through a link we shared, for example a QR code at a trade fair, Odoo can store the campaign values carried by that link together with your enquiry. See the cookie section for how that works.
When you write to us by email
If you email us, we receive your email address, your name if your mail program sends it, and whatever you write. We use it to answer you.
The legal basis is Article 6(1)(b) GDPR if your message is about a possible contract, and otherwise Article 6(1)(f) GDPR, our legitimate interest in answering business messages.
Email is not encrypted end to end. Please do not send us sensitive information by email. If you want a safer channel, call us and we will agree on one.
Hosting and server log files
This website runs on Odoo 19, which we host ourselves. The server is a virtual machine rented from DigitalOcean; its address is located in Frankfurt am Main, Germany. DigitalOcean, LLC is registered in the United States, which is why it also appears under "Data outside the EU".
The domain dodorent.com uses Cloudflare name servers, so Cloudflare answers the DNS queries for our domain. The website itself is not routed through Cloudflare: your browser connects straight to our server. We use no content delivery network.
Every time a page is opened, the server writes a log entry. We do not merge this data with anything else, and we do not use it to identify you. A log entry of this kind holds:
- Your IP address
- The date and time of the request
- The page you asked for
- The page you came from, if your browser sends it
- Your browser type and version, and your operating system
- The amount of data transferred
To deliver the site, to find technical faults, and to defend against attacks.
Article 6(1)(f) GDPR. Our legitimate interest is a website that works and is not abused.
Services from other companies
We load no analytics script, no tag manager, no advertising script and no content delivery network. One service does run on this site: Cloudflare Turnstile, a spam check on our demo form. It takes the place of a captcha, so you do not have to solve a puzzle. When you open a page that carries the form, your browser loads a small script from Cloudflare, and Turnstile decides in the background whether the request comes from a person or from a program. For that check Cloudflare processes your IP address and technical properties of your browser. Provider is Cloudflare, Inc., 101 Townsend Street, San Francisco, California 94107, USA. Cloudflare states that Turnstile sets no cookies for this purpose and that it does not use the data for advertising or for building profiles. The legal basis is Art. 6(1)(f) GDPR: we have a legitimate interest in keeping our form free of automated submissions. Cloudflare describes the processing at cloudflare.com/turnstile-privacy-policy. Our fonts are stored on our own server, so your browser does not have to fetch them from anywhere else.
Apart from that one check, your browser makes no request to another company while you are on this site. Every other file the page loads comes from dodorent.com.
Cookies and tracking
Only what the site needs to work.
- We use: session_id, a cookie set by Odoo. It keeps your session together while you move through the site and while you fill in the form. Scripts cannot read it.
- We use: frontend_lang, which remembers which language version of the site you are on.
- We use: tz, which holds your time zone so that times are shown correctly.
- We use: odoo_utm_source, odoo_utm_medium and odoo_utm_campaign, but only if the link you followed carried campaign parameters.
- We do not use: Google Analytics or any other analytics tool from another company.
- We do not use: Google Tag Manager.
- We do not use: advertising cookies, retargeting pixels or social network pixels.
- We do not use: profiling or automated decision-making.
- We do not use: a cookie banner, because we set no optional cookies.
Odoo keeps a visitor record of its own. It stores a random identifier, the pages you opened and when, the language you are reading and your time zone. If you later send the form, the record is linked to your enquiry, so it stops being anonymous at that point. It is the only measurement on this site, it stays on our own server, and nobody outside dodorent sees it. A daily job in Odoo deletes visitor records that have been inactive. We rely on Article 6(1)(f) GDPR for this and you can object to it at any time; see "Your rights".
If you reach this site through a link we shared, for example the QR code at our booth, the link can carry parameters such as utm_source or utm_campaign. Odoo puts them into the three cookies named above and stores them with your enquiry, so we can see which channel brought you here. These parameters say something about the link, not about you.
The cookies named above are strictly necessary for a service you asked for, so they need no consent under Section 25(2) TDDDG. Where the data is also personal data, we rely on Article 6(1)(f) GDPR. Because we set no optional cookies, this site does not ask you for cookie consent. If that ever changes, we will ask you first and change this page.
Legal bases at a glance
The same information as above, in one place.
-
What we doBooking a demoWhat we useName, company, work email, phone, your answers, preferred timesLegal basisArticle 6(1)(b) GDPR, and Article 6(1)(f) GDPR where no contract is being discussed
-
What we doAnswering your emailWhat we useYour message and your addressLegal basisArticle 6(1)(b) or 6(1)(f) GDPR
-
What we doRunning and securing the websiteWhat we useServer log filesLegal basisArticle 6(1)(f) GDPR
-
What we doSpam check on the demo form (Cloudflare Turnstile)What we useIP address and technical browser propertiesLegal basisArticle 6(1)(f) GDPR
-
What we doOdoo's own record of your visit, and campaign parametersWhat we useA random identifier, pages and times, language, time zone, utm valuesLegal basisArticle 6(1)(f) GDPR
-
What we doBookkeeping, once a business relationship existsWhat we useInvoices and related recordsLegal basisArticle 6(1)(c) GDPR with Section 147 AO and Section 257 HGB
How long we keep data
We delete what we no longer need.
- Demo bookings and enquiries: while we are in contact with you, and up to 24 months after the last contact.
- Emails: as long as we need them to answer you and to document what was agreed.
- Server log files: only as long as we need them to run and secure the site.
- Odoo visitor records: a job inside Odoo deletes records of visitors who have been inactive. It runs once a day.
- Accounting records, once a business relationship exists: 10 years, as German tax and commercial law requires.
If you ask us to delete your data, we delete it, unless the law tells us to keep it. In that case we stop using it for anything else and delete it when the retention period ends.
Who else sees your data
Your data stays with us and with the companies that run our systems for us. Each of them acts only on our instructions, under a data processing agreement as required by Article 28 GDPR.
- DigitalOcean: the virtual server that this website, its database and our CRM run on. The server is located in Frankfurt am Main, Germany.
- Cloudflare: the name servers for dodorent.com. Cloudflare answers DNS queries for our domain. The traffic of the website itself does not pass through Cloudflare.
- The provider of the infrastructure our own mail server runs on, in Germany: it carries our business mailboxes and the emails we send you.
- Our tax advisor and our bank, but only once there is a business relationship and only for the documents that bookkeeping requires.
We do not sell data. We do not pass data to advertising networks.
Data outside the EU
The server that runs this website is in Frankfurt am Main, Germany, and our mail server is in Germany as well. Your enquiry is stored in Germany.
Two of the companies named above are American or have an American parent: DigitalOcean and Cloudflare. Data they handle can therefore reach servers or staff outside the EU. For those transfers we rely on the European Commission's Standard Contractual Clauses and, where the company is certified, on the EU-US Data Privacy Framework. You can ask us which one applies, at info@dodorent.com.
Your rights
You do not need a reason to ask, and we do not charge you for it.
Ask us what data we hold about you and get a copy.
Have wrong data corrected.
Have your data deleted.
Have us keep the data but stop using it.
Get the data you gave us in a machine-readable file.
Take back a consent at any time, for the future.
Go to a supervisory authority instead of, or as well as, us.
You have the right to object at any time, on grounds relating to your particular situation, to processing that we base on Article 6(1)(f) GDPR. If you object, we stop, unless we can show compelling legitimate grounds that override your interests. If we ever use your data for direct marketing, you can object to that at any time with no reason at all, and we stop immediately.
To use any of these rights, write to info@dodorent.com. We answer within one month. If a request is complicated, we may need up to two months more, and we will tell you why within the first month.
You can also complain to a supervisory authority. The authority responsible for us is:
Changes to this page
We change this page when the website changes, for example if we add a service or a form. The version number and the date at the top and at the bottom tell you which text you are reading.
We do not send you a message when this page changes. If you come back to the site, please read it again.
Questions about your data?
One of the managing directors handles data protection questions at dodorent. Write to us and say what you want to know or what you want us to do. We answer within one month, usually within a few working days.
Email us about data protection