Imprint & Legal

Imprint

Information pursuant to § 5 TMG (German Telemedia Act)

Urs Mueller
Gotenstr. 21
10829 Berlin
Germany

Contact

Email: admin(at)orgdesignsim.org

Responsible for content pursuant to § 55 (2) RStÄV

Urs Mueller
Gotenstr. 21
10829 Berlin
Germany

About This Application

Orgdesignsim is an educational organizational-design simulation. Participants restructure a virtual company over a simulated year, balancing performance, employee morale, fairness and finances. It is designed for use in educational settings (universities, schools, executive workshops).

Cookie Policy

Orgdesignsim uses only essential cookies that are strictly necessary for the application to function. We do not use any tracking, analytics, or advertising cookies.

Essential Cookies We Use

• Participant Session Cookie — Maintains your simulation session while you play. Expires after the session ends or after a period of inactivity.
• Educator Login Cookie — A signed cookie that remembers an educator is logged in to the backoffice, so credentials need not be re-entered on every page.
• Security / Anti-Forgery Tokens — Where used, these validate that form submissions originate from this application.

What We Do Not Use

• No Google Analytics or similar tracking services
• No advertising or marketing cookies
• No third-party cookies of any kind
• No fingerprinting or cross-site tracking

Because we only use essential cookies, no cookie consent banner is required under EU regulations. These cookies cannot be disabled as they are necessary for the application to function securely.

Privacy Policy

Last updated: June 2026

1. Data Controller

Urs Mueller
Gotenstr. 21, 10829 Berlin, Germany
Email: admin(at)orgdesignsim.org

2. Data We Collect

From Participants:

• Email address (required to enter a simulation session)
• Display name (optional; if omitted, derived from the email address)
• Session code (links you to a specific educator’s session)
• Simulation data (the decisions you make and the results your run produces)
• Activity timestamps

From Educators (Session Administrators):

• Email address (for account login)
• Password (stored only as a bcrypt hash — we never store plaintext passwords)
• Session data (session names, codes, configuration, and associated participant results)

Technical Data:

• IP addresses, where processed for security and abuse prevention, are held in memory only and are not written to persistent storage
• No server-side access logs containing IP addresses are retained for tracking

3. How We Use Your Data

• To provide the educational simulation functionality
• To allow educators to review participant results for their own sessions (the debrief)
• To authenticate educators and maintain session security
• To prevent abuse (any IP processing is in memory only)

4. Data Visibility & Access Controls

Educators can view the participants in their own sessions (names or pseudonyms and the email used to join) and those participants’ simulation results — this is the purpose of the classroom debrief. Educators only ever see data for sessions they created, and can delete or archive sessions and their data.

5. Data Retention

Participant login sessions expire automatically after 24 hours. Saved simulation results are retained so that educators can run the debrief, and can be deleted or archived by the educator at any time. Personal data is removed on request (see your rights below).

6. Legal Basis (GDPR)

We process personal data on the basis of Article 6(1)(f) GDPR — legitimate interest. Our legitimate interest is providing an educational tool that helps participants and educators explore organizational design. The processing is necessary for this purpose and is balanced against the minimal data collected and our strong data protection measures.

7. Third-Party Data Sharing

We do not share, sell, or transfer your personal data to any third parties. No external analytics services, advertising networks, or data brokers receive any data from this application.

8. Data Storage & Security

• All data is stored on servers located in Germany
• All connections are encrypted via HTTPS (TLS)
• Passwords are hashed using bcrypt and never stored in plaintext
• The application uses signed session cookies and secure session management

9. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR) — Request information about what data we store about you
• Right to rectification (Art. 16 GDPR) — Request correction of inaccurate data
• Right to erasure (Art. 17 GDPR) — Request deletion of your personal data
• Right to data portability (Art. 20 GDPR) — Receive your data in a structured, machine-readable format
• Right to object (Art. 21 GDPR) — Object to the processing of your data
• Right to restriction of processing (Art. 18 GDPR) — Request that we limit how we process your data

To exercise any of these rights, please contact us at admin(at)orgdesignsim.org.

10. Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority for our location is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59–61
10555 Berlin
Germany
www.datenschutz-berlin.de

Terms of Use

1. Purpose

Orgdesignsim is provided exclusively for educational purposes. It is designed to facilitate classroom discussions and workshops about organizational design, leadership trade-offs, and the human and ethical dimensions of restructuring decisions.

2. Acceptable Use

• Use this tool honestly and in good faith when participating in a session
• Do not attempt to access sessions or data that do not belong to you
• Do not attempt to disrupt the service through automated requests or other abuse
• Do not use this tool for any commercial purpose without prior written consent

3. Educator Responsibilities

• Educators are responsible for informing their participants about the purpose of the simulation and how data will be used
• Educators should use session data responsibly and in accordance with their institution’s policies
• Educators must not share individual participant data outside the educational context

4. Disclaimer

This application is provided “as is” without warranties of any kind, express or implied. We do not guarantee uninterrupted availability or error-free operation. The tool is intended for educational exploration and should not be used as a basis for real personnel or business decisions.

5. Governing Law & Jurisdiction

These terms are governed by the laws of the Federal Republic of Germany. The exclusive place of jurisdiction is Berlin, Germany, to the extent permitted by law.