data protection
Data protection and data security for our customers and users are a high priority for us. We observe the data protection regulations, in particular the EU General Data Protection Regulation ("DSGVO"), the Federal Data Protection Act ("BDSG") and the Telemedia Act ("TMG").
In this Privacy Policy we will explain to you which information (including personal data) will be processed by us during your visit and your use of our aforementioned website ("Website").
I. Who is responsible for data processing?
Data protection law for the processing of personal data and service providers within the meaning of the TMG is the oeser + orlet GmbH, Im Steinfeld 9, 07751 Jena, Germany, Tel: +49 (0) 3641 44 09 55, info@oeser-orlet.de. As far as this data protection information refers to "we" or "us", this refers in each case to the aforementioned company.
II. What principles do we observe?
In compliance with data protection regulations, we process your personal data only if permitted by law or if you have given your consent. This also applies to the processing of personal data for advertising and marketing purposes.
On this website we can also collect information that does not allow us to draw any direct conclusions about you. In certain cases - especially when combined with other data - this information can nonetheless be considered "personal data" in the sense of data protection law. Furthermore, we may also collect on this website such information, which prevents us from identifying you, either directly or indirectly; this is e.g. summarized information about all users of this website.
III. Which data do we process?
You can access our website without directly providing personal information (such as your name, postal address or e-mail address). Again, we need to collect and store certain information in order to provide you with access to our website.
1. Logfiles:
When you visit this website, our web server will automatically save the domain name or IP address of the requesting computer (usually your internet access provider), including the date, time and duration of your visit, the subpages / URLs, the You visit and information about the Application (s) and Devices you use to view our Sites.
2. Cookies:
In order to make our offer as user-friendly as possible, we use - as many well-known companies - so-called cookies. Cookies are small text files that are stored in the Internet browser you are using. These files help us to identify certain browsing preferences of our visitors and to tailor our site accordingly. Most of the cookies we use are so-called session cookies. They are automatically deleted after your visit. We also use permanent cookies. These serve to improve the user guidance. Our cookies do not collect personal information and are not suitable for identifying you on third party websites. You can set your browser to inform you about the placement of cookies. This makes the use of cookies transparent to you. You can also refuse to accept cookies via your browser settings. However, under certain circumstances this may mean that you can not use all functions of the website.
3. Website analysis via Google Analytics:
We also use Google Analytics on our website, a web analytics service provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google"), to continually improve our website. Google Analytics also uses cookies, which are stored on your computer, and allow the analysis of the use of the website. The information generated by the cookie about the use of this website by you are usually sent to a Google server in Europe (or in a member state of the European Economic Area) for the anonymization of the IP address, so that a person-relatedness is excluded. Only after the anonymization of the IP address is the shortened IP address sent to a Google server in the USA and stored there. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. Google Analytics is used on this website with an extension for the anonymous collection of IP addresses (so-called IP masking). On our behalf, Google will use the information collected to evaluate your use of the website, to compile reports on website activity and to provide us with other website-related services. The IP address provided by Google Analytics as part of Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by a corresponding setting of your browser software. We point out, however, that in this case you may not be able to use all the functions of this website in full. In addition, you may prevent the collection by Google of the data generated by the cookie and related to your use of the website (including your IP address) and the processing of such data by Google by downloading the browser plug-in available under the following link and install: tools.google.com/dlpage/gaoptout. An opt-out cookie will be set which prevents the future collection of your data when visiting this website. For more information about Google Analytics privacy policy, see [http://www.google.com/analytics/terms/en.html] and here [http://www.google.com/intl/de/analytics/privacyoverview. html].
4. Facebook social plugin
We have integrated a social network button Facebook (1601 South California Avenue, Palo Alto, CA 94304, USA - www.facebook.com) on our website. You can recognize the Facebook buttons by the Facebook logo or the "Like-Button" ("Like").
In order to prevent an automatic transmission of information to Facebook when calling our website, we have implemented the so-called "two-click solution": In addition to the Facebook button there is another surface that looks like a switch. Only when you press this button and then click on the Facebook button again will information (such as the address of our website and your user ID) be transmitted to Facebook.
Also in this case we as the operator of this website have no knowledge of the content of the transmitted data and their use by Facebook. We do not know when you clicked on which button. For more information about the use of Facebook data, please refer to the Facebook Privacy Policy [http://de-de.facebook.com/policy.php]
5. Newsletter registration
If you would like to receive the newsletter we offer, we need a valid e-mail address from you. In order to be able to check whether you are the owner of the specified e-mail address or whose owner agrees to receive the newsletter, we will send an automated e-mail to the e-mail address provided after the first registration step. Only after confirmation of the newsletter registration via a link in the confirmation e-mail will we include the specified e-mail address in our mailing list. We do not collect any further information beyond the e-mail address and registration confirmation information. Your consent to the storage of the data, the e-mail address and their use for sending the newsletter, you can withdraw at any time with effect for the future.
6. Registration / customer account
When registering as a registered user - especially when creating a customer account - we collect personal data resulting from the registration form on our website. We may require you to re-enter data collected during the registration process (especially for your identification) and collect additional personal information if you wish to use certain content on our website or place an order.
7. Customer communication
In order to ensure communication with our customers and end users, we process all the information you have provided to us when contacting us or which we have requested from you (eg your name, address and other contact details); In addition, we save the reason for contacting.
IV. For what purposes and on what legal basis do we process your data?
1. The processing of the personal data contained in the log files, if necessary, in order to enable you to use our website; this is done on the basis of § 15 para. 1 TMG.
2. The processing of the data collected via cookies (including the web analysis services etracker and Google Analytics) and the pseudonymous user profiles is for purposes of advertising, market research and the needs-based design of our website based on § 15 Abs. 3 TMG.
3. The processing of the newsletter data is carried out for the purpose of registering for the newsletter and sending it under your consent on the basis of Article 6 paragraph 1 c) GDPR. Please note that you can revoke your consent to us at any time with future effect, e.g. by clicking on the corresponding link in each of our newsletters or by sending a message by post, fax or e-mail via one of the contact channels listed on the first page of this privacy policy
4. If you place an order through our website or register on our website as a user or for a customer account, we process the data collected in this context for the execution of the contracts concluded with you on the basis of Article 6 paragraph 1 b) GDPR.
5. We may also process the data stored in connection with the use of our website and the data stored for the purpose of customer and consumer communication in order to fulfill the legal obligations to which we are subject; this is done on the basis of Article 6 (1) (c) GDPR.
6. As far as necessary, we process your data beyond the aforementioned purposes also for the protection of our legitimate interests or the interests of third parties; this is done on the basis of Article 6 (1) (f) GDPR. In particular, our legitimate interests include
a) the assertion of legal claims and the defense of legal disputes;
b) ensuring consumer-friendly communication in the cases of III.9;
c) the prevention and investigation of criminal offenses;
d) the management and development of our business, including risk management.
V. Am I required to provide data?
The information required for registering for our newsletter, making online orders, ensuring consumer-friendly communication or registering as a user or creating a customer account is marked as mandatory in the relevant area of ??the website (for example, an online form); Without the provision of mandatory information, we can not allow you to use the respective functionality. In order to ensure a consumer-friendly communication, at least your name and your e-mail address are necessary.
In addition, if we collect personal information from you, we will tell you when we collect it whether the provision of that information is required by law or contract or is required to conclude a contract. In doing so, we generally identify those information that is provided voluntarily and is not based on any of the aforementioned obligations or that is not required to conclude a contract.
VI. Who receives my data?
Your personal data is generally processed within our company. Depending on the type of personal information, only certain departments / organizational units have access to your personal information. These include, in particular, the specialist departments involved in the provision of our digital services (such as websites) and our IT department. A role and authorization concept limits access within our organization to those functions and to the extent required for the particular purpose of the processing.
We may also transfer your personal information to third parties outside our company to the extent permitted by law. These external receivers may include in particular
VII. Is automated decision making used?
In connection with the operation of our website, we generally do not use automated decision-making (including profiling) within the meaning of Art. 22 DSG-VO. If we use such procedures in individual cases, we will inform you separately about this to the legally required extent.
VIII. Are data transmitted to countries outside the EU / EEA?
The processing of your personal data takes place in principle within the EU or the European Economic Area.
Only in connection with the involvement of service providers for the provision of web analysis services may there be a transmission of information to recipients in so-called "third countries". "Third countries" are countries outside the European Union or the Agreement on the European Economic Area in which it is not possible to assume a level of data protection comparable to that in the European Union.
If the information provided also includes personal data, we will ensure that the required level of data protection is guaranteed in the third country or recipient in the third country prior to such transmission. This may be the result, in particular, of a so-called "adequacy decision" by the European Commission, which establishes an adequate level of data protection for a given third country as a whole. Alternatively, we may also base the transfer of data on the so-called "EU Standard Contractual Clauses" agreed with a recipient or, in the case of US recipients, on compliance with the principles of the so-called "EU-US Privacy Shield". We will gladly provide you with further information on the appropriate and appropriate guarantees for maintaining an adequate level of data protection upon request; The contact details can be found at the beginning of this privacy policy. For information on EU-US Privacy Shield participants, see www.privacyshield.gov/list.
IX. How long will my data be stored?
In principle, we store your personal data as long as we have a legitimate interest in this storage and do not outweigh your interests in the non-continuation of the storage.
Even without a legitimate interest, we can continue to store the data if we are legally obliged to do so (for example to fulfill retention obligations). We delete your personal data even without your intervention, as soon as their knowledge is no longer necessary to fulfill the purpose of the processing or the storage is otherwise legally inadmissible.
In general, be
X. What rights do I have?
You have the right as an affected person
To exercise these rights, you may at any time - e.g. via one of the contact ways indicated at the beginning of this data protection information - contact us.
They are also entitled to file a complaint with a competent supervisory authority for data protection, Art. 77 DSGVO.
In this Privacy Policy we will explain to you which information (including personal data) will be processed by us during your visit and your use of our aforementioned website ("Website").
I. Who is responsible for data processing?
Data protection law for the processing of personal data and service providers within the meaning of the TMG is the oeser + orlet GmbH, Im Steinfeld 9, 07751 Jena, Germany, Tel: +49 (0) 3641 44 09 55, info@oeser-orlet.de. As far as this data protection information refers to "we" or "us", this refers in each case to the aforementioned company.
II. What principles do we observe?
In compliance with data protection regulations, we process your personal data only if permitted by law or if you have given your consent. This also applies to the processing of personal data for advertising and marketing purposes.
On this website we can also collect information that does not allow us to draw any direct conclusions about you. In certain cases - especially when combined with other data - this information can nonetheless be considered "personal data" in the sense of data protection law. Furthermore, we may also collect on this website such information, which prevents us from identifying you, either directly or indirectly; this is e.g. summarized information about all users of this website.
III. Which data do we process?
You can access our website without directly providing personal information (such as your name, postal address or e-mail address). Again, we need to collect and store certain information in order to provide you with access to our website.
1. Logfiles:
When you visit this website, our web server will automatically save the domain name or IP address of the requesting computer (usually your internet access provider), including the date, time and duration of your visit, the subpages / URLs, the You visit and information about the Application (s) and Devices you use to view our Sites.
2. Cookies:
In order to make our offer as user-friendly as possible, we use - as many well-known companies - so-called cookies. Cookies are small text files that are stored in the Internet browser you are using. These files help us to identify certain browsing preferences of our visitors and to tailor our site accordingly. Most of the cookies we use are so-called session cookies. They are automatically deleted after your visit. We also use permanent cookies. These serve to improve the user guidance. Our cookies do not collect personal information and are not suitable for identifying you on third party websites. You can set your browser to inform you about the placement of cookies. This makes the use of cookies transparent to you. You can also refuse to accept cookies via your browser settings. However, under certain circumstances this may mean that you can not use all functions of the website.
3. Website analysis via Google Analytics:
We also use Google Analytics on our website, a web analytics service provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google"), to continually improve our website. Google Analytics also uses cookies, which are stored on your computer, and allow the analysis of the use of the website. The information generated by the cookie about the use of this website by you are usually sent to a Google server in Europe (or in a member state of the European Economic Area) for the anonymization of the IP address, so that a person-relatedness is excluded. Only after the anonymization of the IP address is the shortened IP address sent to a Google server in the USA and stored there. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. Google Analytics is used on this website with an extension for the anonymous collection of IP addresses (so-called IP masking). On our behalf, Google will use the information collected to evaluate your use of the website, to compile reports on website activity and to provide us with other website-related services. The IP address provided by Google Analytics as part of Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by a corresponding setting of your browser software. We point out, however, that in this case you may not be able to use all the functions of this website in full. In addition, you may prevent the collection by Google of the data generated by the cookie and related to your use of the website (including your IP address) and the processing of such data by Google by downloading the browser plug-in available under the following link and install: tools.google.com/dlpage/gaoptout. An opt-out cookie will be set which prevents the future collection of your data when visiting this website. For more information about Google Analytics privacy policy, see [http://www.google.com/analytics/terms/en.html] and here [http://www.google.com/intl/de/analytics/privacyoverview. html].
4. Facebook social plugin
We have integrated a social network button Facebook (1601 South California Avenue, Palo Alto, CA 94304, USA - www.facebook.com) on our website. You can recognize the Facebook buttons by the Facebook logo or the "Like-Button" ("Like").
In order to prevent an automatic transmission of information to Facebook when calling our website, we have implemented the so-called "two-click solution": In addition to the Facebook button there is another surface that looks like a switch. Only when you press this button and then click on the Facebook button again will information (such as the address of our website and your user ID) be transmitted to Facebook.
Also in this case we as the operator of this website have no knowledge of the content of the transmitted data and their use by Facebook. We do not know when you clicked on which button. For more information about the use of Facebook data, please refer to the Facebook Privacy Policy [http://de-de.facebook.com/policy.php]
5. Newsletter registration
If you would like to receive the newsletter we offer, we need a valid e-mail address from you. In order to be able to check whether you are the owner of the specified e-mail address or whose owner agrees to receive the newsletter, we will send an automated e-mail to the e-mail address provided after the first registration step. Only after confirmation of the newsletter registration via a link in the confirmation e-mail will we include the specified e-mail address in our mailing list. We do not collect any further information beyond the e-mail address and registration confirmation information. Your consent to the storage of the data, the e-mail address and their use for sending the newsletter, you can withdraw at any time with effect for the future.
6. Registration / customer account
When registering as a registered user - especially when creating a customer account - we collect personal data resulting from the registration form on our website. We may require you to re-enter data collected during the registration process (especially for your identification) and collect additional personal information if you wish to use certain content on our website or place an order.
7. Customer communication
In order to ensure communication with our customers and end users, we process all the information you have provided to us when contacting us or which we have requested from you (eg your name, address and other contact details); In addition, we save the reason for contacting.
IV. For what purposes and on what legal basis do we process your data?
1. The processing of the personal data contained in the log files, if necessary, in order to enable you to use our website; this is done on the basis of § 15 para. 1 TMG.
2. The processing of the data collected via cookies (including the web analysis services etracker and Google Analytics) and the pseudonymous user profiles is for purposes of advertising, market research and the needs-based design of our website based on § 15 Abs. 3 TMG.
3. The processing of the newsletter data is carried out for the purpose of registering for the newsletter and sending it under your consent on the basis of Article 6 paragraph 1 c) GDPR. Please note that you can revoke your consent to us at any time with future effect, e.g. by clicking on the corresponding link in each of our newsletters or by sending a message by post, fax or e-mail via one of the contact channels listed on the first page of this privacy policy
4. If you place an order through our website or register on our website as a user or for a customer account, we process the data collected in this context for the execution of the contracts concluded with you on the basis of Article 6 paragraph 1 b) GDPR.
5. We may also process the data stored in connection with the use of our website and the data stored for the purpose of customer and consumer communication in order to fulfill the legal obligations to which we are subject; this is done on the basis of Article 6 (1) (c) GDPR.
6. As far as necessary, we process your data beyond the aforementioned purposes also for the protection of our legitimate interests or the interests of third parties; this is done on the basis of Article 6 (1) (f) GDPR. In particular, our legitimate interests include
a) the assertion of legal claims and the defense of legal disputes;
b) ensuring consumer-friendly communication in the cases of III.9;
c) the prevention and investigation of criminal offenses;
d) the management and development of our business, including risk management.
V. Am I required to provide data?
The information required for registering for our newsletter, making online orders, ensuring consumer-friendly communication or registering as a user or creating a customer account is marked as mandatory in the relevant area of ??the website (for example, an online form); Without the provision of mandatory information, we can not allow you to use the respective functionality. In order to ensure a consumer-friendly communication, at least your name and your e-mail address are necessary.
In addition, if we collect personal information from you, we will tell you when we collect it whether the provision of that information is required by law or contract or is required to conclude a contract. In doing so, we generally identify those information that is provided voluntarily and is not based on any of the aforementioned obligations or that is not required to conclude a contract.
VI. Who receives my data?
Your personal data is generally processed within our company. Depending on the type of personal information, only certain departments / organizational units have access to your personal information. These include, in particular, the specialist departments involved in the provision of our digital services (such as websites) and our IT department. A role and authorization concept limits access within our organization to those functions and to the extent required for the particular purpose of the processing.
We may also transfer your personal information to third parties outside our company to the extent permitted by law. These external receivers may include in particular
- affiliates to whom we transfer personal information for internal administrative purposes;
- the service providers engaged by us who provide services for us on a separate contractual basis, which may also include the processing of personal data, as well as the subcontractors of our service providers who are involved with our consent;
- non-public and public entities, to the extent that we are required by law to transmit your personal information.
VII. Is automated decision making used?
In connection with the operation of our website, we generally do not use automated decision-making (including profiling) within the meaning of Art. 22 DSG-VO. If we use such procedures in individual cases, we will inform you separately about this to the legally required extent.
VIII. Are data transmitted to countries outside the EU / EEA?
The processing of your personal data takes place in principle within the EU or the European Economic Area.
Only in connection with the involvement of service providers for the provision of web analysis services may there be a transmission of information to recipients in so-called "third countries". "Third countries" are countries outside the European Union or the Agreement on the European Economic Area in which it is not possible to assume a level of data protection comparable to that in the European Union.
If the information provided also includes personal data, we will ensure that the required level of data protection is guaranteed in the third country or recipient in the third country prior to such transmission. This may be the result, in particular, of a so-called "adequacy decision" by the European Commission, which establishes an adequate level of data protection for a given third country as a whole. Alternatively, we may also base the transfer of data on the so-called "EU Standard Contractual Clauses" agreed with a recipient or, in the case of US recipients, on compliance with the principles of the so-called "EU-US Privacy Shield". We will gladly provide you with further information on the appropriate and appropriate guarantees for maintaining an adequate level of data protection upon request; The contact details can be found at the beginning of this privacy policy. For information on EU-US Privacy Shield participants, see www.privacyshield.gov/list.
IX. How long will my data be stored?
In principle, we store your personal data as long as we have a legitimate interest in this storage and do not outweigh your interests in the non-continuation of the storage.
Even without a legitimate interest, we can continue to store the data if we are legally obliged to do so (for example to fulfill retention obligations). We delete your personal data even without your intervention, as soon as their knowledge is no longer necessary to fulfill the purpose of the processing or the storage is otherwise legally inadmissible.
In general, be
- deletes the log data within seven days, unless further storage is required for lawful purposes such as the detection of misuse and the detection and removal of technical malfunctions;
- the data processed in connection with an order or in connection with the consumer communication deleted at the latest after expiry of the statutory retention periods; and
- the data processed in connection with a user or customer account registration is deleted upon completion of the registration or upon deletion of the customer account. The personal data that we need to store in order to fulfill our retention obligations will be stored until the end of the respective retention obligation. Insofar as we store personal data solely for the purpose of fulfilling retention requirements, these are generally blocked so that they can only be accessed if this is necessary in view of the purpose of the retention obligation.
X. What rights do I have?
You have the right as an affected person
- for information about the personal data stored about you, Art. 15 GDPR;
- for correction of incorrect or incomplete data, Art. 16 GDPR;
- for deletion of personal data, Art. 17 GDPR;
- to restriction of processing, Art. 18 GDPR; ¬ on data portability, Art. 20 GDPR, and
- to object to the processing of your personal data, Art. 21 GDPR.
To exercise these rights, you may at any time - e.g. via one of the contact ways indicated at the beginning of this data protection information - contact us.
They are also entitled to file a complaint with a competent supervisory authority for data protection, Art. 77 DSGVO.