Privacy policy

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Oocean Ventures GmbH Urbanstraße 116 10967 Berlin, Germany Email: hello@oocean.ventures

This privacy policy applies to the website ayori.health. Separate privacy information applies to the AYORI app.

This website is hosted by Cloudflare (Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA). Cloudflare processes the data that is technically generated when the website is accessed on our behalf.

When you access the website, information transmitted by your browser is processed automatically: in particular the IP address, the date and time of access, the page requested, and details of your browser and operating system. This data is technically necessary to deliver the website and to ensure its stability and security.

The legal basis is our legitimate interest in the secure and reliable operation of the website (Art. 6 (1) (f) GDPR). A data processing agreement (Art. 28 GDPR) is in place with Cloudflare. Insofar as data is transferred to the USA, this is done on the basis of the EU Commission’s Standard Contractual Clauses.

The fonts used on this website are served directly from our own server (self-hosting). No fonts are loaded from external servers (such as Google Fonts); your IP address is therefore not transmitted to any third party for this purpose.

When you sign up for our waiting list, we process the email address you provide in order to inform you about the launch of AYORI. Providing it is voluntary.

Sign-up uses the double opt-in procedure: you first receive an email asking you to confirm your sign-up. Only after your confirmation do we add you to the waiting list. We use the service Brevo (Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany) to send the confirmation and information emails. We additionally store the email address in our database at Supabase (see “Recipients and transfers to third countries”).

The legal basis is your consent (Art. 6 (1) (a) GDPR). You can withdraw your consent at any time with effect for the future, for example via the unsubscribe link in every email or by message to hello@oocean.ventures. We store your email address until you unsubscribe or the purpose ceases to apply.

You can take part in a voluntary survey on our website. Your answers are stored anonymously and do not allow any conclusions to be drawn about your identity. The legal basis is your consent (Art. 6 (1) (a) GDPR).

If you voluntarily provide an email address as part of the survey (e.g. to express interest in a beta version), it is stored separately from your survey answers and is not linked to them. The same information as for the waiting list applies to this email address.

To protect our forms (waiting list, survey) from automated submissions, we use Cloudflare Turnstile. This processes technical information about your browser as well as your IP address in order to verify that the input comes from a human. Turnstile does not perform any personal tracking and does not set advertising cookies.

In addition, we limit the number of requests per IP address to prevent abuse and overload. The legal basis is our legitimate interest in the security and functionality of our services (Art. 6 (1) (f) GDPR).

To measure the reach of our website, we use Cloudflare Web Analytics (Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA). For this purpose, Cloudflare automatically inserts a measurement script into our pages that collects aggregated usage statistics – such as pages visited, referrer, approximate country-level location, and browser and device type. Cloudflare Web Analytics works without cookies and without cross-device recognition, does not build profiles of individual visitors, and does not use fingerprinting. Your IP address is transmitted to Cloudflare in the process; it is used solely to compile the statistics and is not stored permanently by Cloudflare. The legal basis is our legitimate interest in a privacy-friendly analysis of website usage (Art. 6 (1) (f) GDPR).

In addition, to evaluate the technical stability and use of our interfaces, we collect aggregated, non-personal telemetry data (e.g. the route accessed, response time, status code) using the Cloudflare Analytics Engine. This data deliberately contains no IP addresses, no email addresses, and no other personal content, and does not allow any conclusions to be drawn about individual people.

We do not set any cookies for advertising or tracking purposes. Strictly necessary cookies that Cloudflare may set for security and abuse prevention (such as bot detection) are exempt from this; they serve solely the secure operation of the website and do not require consent.

To provide our services, we use carefully selected providers as processors:

– Cloudflare (hosting, bot protection, reach measurement and telemetry) – Supabase (database; hosted in the EU, Frankfurt region) – Brevo / Sendinblue (sending of waiting-list emails)

Data processing agreements pursuant to Art. 28 GDPR are in place with these providers. Insofar as personal data is transferred to countries outside the EU or the EEA (in particular the USA), this is done on the basis of appropriate safeguards, in particular the EU Commission’s Standard Contractual Clauses.

You have the right at any time to access the data stored about you (Art. 15 GDPR), to rectification (Art. 16), erasure (Art. 17), and restriction of processing (Art. 18), to data portability (Art. 20), and to object to processing (Art. 21). You can withdraw any consent you have given at any time with effect for the future (Art. 7 (3) GDPR).

To exercise your rights, a message to hello@oocean.ventures is sufficient. You also have the right to lodge a complaint with a data protection supervisory authority — the authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information.

Last updated: June 2026. We will update this privacy policy as soon as changes to our services or the legal situation make this necessary.