211015_ok-rework_logo-tuev

Notes on data protection

211015_ok-rework_icons_zahnrad-footer

Notes on data protection

Your personal data will be processed and protected in accordance with the statutory provisions. In the following text, we will provide you with information on how we handle your personal data, for what purpose this data is used, to whom we may pass it on and what rights you have in terms of the processing of your data.

Principles of data processing

Person responsible
Responsible for the processing of your personal data within the meaning of the DS-GVO:

OK Rework GmbH
Im Glühmoor 26
28307 Bremen

You can find further information about our company, details of the persons authorized to represent us and also further contact options in the imprint of our website.

Purpose of data processing
As a matter of principle, we use the personal data we receive from you only for the purposes for which we received or collected them, such as to answer your inquiries, to establish, process and terminate contracts concluded with you, for technical administration and possibly to advertise our products and services, if we have your consent or if this is permitted by a statutory provision.

Data processing for other purposes is only considered if the necessary legal requirements exist. In this case, we will of course comply with any information obligations.

Legal basis for data processing
The legal basis for the processing of your personal data is basically – unless there are other specific legal provisions – Art. 6 and Art. 49 DSGVO. In particular, the following possibilities come into consideration here:

Data processing on the basis of consent (Art. 6 para. 1 lit. a) DSGVO).
Data processing on the basis of consent (Art. 49 (1) lit. a) DSGVO)
Data processing for the performance of contracts (Art. 6 para. 1 lit. b) DSGVO
Data processing for the fulfillment of contracts (Art. 49 para. 1 lit. b) or c) DSGVO
Data processing for the fulfillment of a legal obligation (Art. 6 para. 1 lit. c) DSGVO
Data processing on the basis of a balancing of interests (Art. 6 para. 1 lit. f) DSGVO).

We refer to the relevant terminology in connection with the respective processing so that you can classify on what basis we process your personal data.

Storage period/deletion of data
Insofar as no specific storage time was mentioned a requirement may exist in particular if the data is still needed to fulfill contractual services, to check and grant or defend against warranty and, if applicable, guarantee claims. If you assert a justified request for deletion or revoke consent to data processing, your data will be deleted unless we have another legally permissible reason for storing your personal data (e.g. retention periods under tax or commercial law). In the case of legal retention obligations, deletion will only be considered after the expiry of the respective retention obligation.

Recipients / disclosure to third parties
Your personal data will only be disclosed or transferred to third parties, e.g. service providers/suppliers, if this is necessary for the purpose of fulfilling the contract, we are legally obliged to do so, the disclosure is permissible on the basis of a balancing of interests within the meaning of Art. 6 (1) lit. f) DSGVO, or if you have given your prior consent. We select our service providers/suppliers carefully – especially with regards to data protection and data security – and take all measures required by data protection law for permissible data processing.

Place of data processing
A transfer of personal data provided by you to a third country does not generally take place. If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or this occurs in connection with the use of third-party services or disclosure / transfer of data to third parties, this will only be done to fulfill our (pre)contractual obligations, due to a legal obligation, based on our legitimate interests, or based on your consent.

Note on data transfer to the USA
We will only pass on your data to service providers who transfer your data to the USA with your express consent. We would like to point out that the USA is not a safe third country in the sense of EU data protection law. US companies are obliged to hand over personal data to security authorities without you as the data subject being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g. intelligence services) process, evaluate and permanently store your data located on US servers for monitoring purposes. We have no influence on these processing activities.

Notes on consent to data processing
You can revoke a granted consent to the processing of your personal data at any time for the future without additional costs, i.e. with no higher fees than those usually incurred for the transmission. The lawfulness of the data processing carried out until the revocation remains unaffected by the revocation.

Your rights as a data subject
You have the right to information about your personal data processed by us. Within the framework of the legal and data protection requirements, you have a right to data portability, correction, restriction of processing and deletion, as well as, if applicable, a right of revocation or a right to object to data processing for the future. In particular you have the right to object to the processing of your data in connection with direct marketing, if this is carried out on the basis of a balancing of interests, in accordance with Art. 21 (1) and (2) DSGVO. You have the right to lodge a complaint about the processing of personal data by us with a data protection supervisory authority.

Requests for information should be made in writing or must be verified by other means to ensure that the information is provided to the correct person.

For this purpose, as well as for further questions on the subject of data protection, you can contact us at any time at the address given in the imprint.

Protection of stored data
We use technical and organizational security measures in order to protect the personal data you have made available to us from manipulation, loss, destruction or access by unauthorized persons. Our security measures are continuously improved and adapted according to the state of the art. It cannot be ruled out that data transmitted by you without encryption can be viewed by third parties during transmission. It is pointed out that with regard to data transmission via the Internet (e.g. communication by e-mail) no conclusive secure transmission can be guaranteed. Sensitive data should therefore either not be transmitted at all or only via a secure connection (SSL) over the Internet.

Further information on data protection:

Protection of minors
Consent to the processing of personal data can only be given by a person of legal age. For information society services, the consent of a child is permissible from the age of sixteen in accordance with Art. 8 DSGVO.

Contacting us by e-mail, telephone or fax
If you contact us by e-mail, telephone or fax, your inquiry including all resulting personal data (name, inquiry) will be stored and processed by us for the purpose of processing your request. We do not pass on this data without your consent. The processing of this data is based on Art. 6 (1) lit. b DSGVO, if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the requests sent to us (Art. 6 (1) (f) DSGVO) or on your consent (Art. 6 (1) (a) DSGVO) if this has been requested. The data you send to us via contact requests will remain with us until you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies. Mandatory legal provisions – in particular legal retention periods – remain unaffected.

Contact form
If you send us inquiries via the contact form, your data from the inquiry form, including the contact data you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. A transfer of the personal data provided by you to a third country or an international organization does not take place and is also not planned. Your personal data will not be passed on to external third parties. The processing of this data is based on Art. 6 para. 1 lit. b) DSGVO, if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the requests addressed to us (Art. 6 (1) (f) DSGVO) or on your consent (Art. 6 (1) (a) DSGVO) if this has been requested. The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies. Mandatory legal provisions – in particular retention periods – remain unaffected.

Further notes on data processing on this website:

On the one hand, your data is collected by you providing it to us. This can be, for example, data that you enter in a contact form. Other data is collected automatically or after your consent when you visit the website by our IT systems. This is mainly technical data (e.g. Internet browser, operating system or time of page view). This data is collected automatically as soon as you enter this website. Some of the data is collected to ensure error-free provision of the website. Other data may be used to analyze your user behavior.

Every access to our website and every retrieval of a file stored on the website is logged. The storage serves internal system-related and statistical purposes.

Logged are:

  •     Name of the retrieved file
  •     date and time of the retrieval
  •     Amount of data transferred
  •     message about successful retrieval
  •     operating system used
  •     browser and browser type
  •     the Internet page from which you were redirected
  •     the internet service provider
  •     visited pages
  •     requesting domain

In addition, the IP addresses of the requesting computers are logged. However, the responsible party does not draw any conclusions about a person.

This data is only required to display the content of our website correctly, to optimize the content for you on a permanent basis and to support prosecutions in the event of hacker attacks.

Personal data is collected and processed by us in accordance with the provisions of the German Telemedia Act (TMG), the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

External hosting
This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster’s servers. This may include, but is not limited to, IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated via a website.

The hoster is used for the purpose of fulfilling contracts with our potential and existing customers (Art. 6 para. 1 lit. b DSGVO) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f DSGVO).

Our hoster will only process your data to the extent necessary to fulfill its service obligations and follow our instructions regarding this data.

In order to ensure data protection-compliant processing, we have concluded an order processing agreement with our hoster.

Storage of anonymized data/cookies
Our Internet pages use so-called „cookies“. Cookies are small text files. They are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your terminal device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your end device until you delete them yourself or until an automatic deletion or a deletion after a period of time by your web browser.

Many cookies are technically necessary, as certain website functions would not work without them. Other cookies are used to evaluate user behavior or to display advertising.

In some cases, cookies from third-party companies may also be stored on your terminal device when you enter our site (third-party cookies). These enable us or you to use certain services of the third-party company.

Cookies collect and store usage data in anonymous form. Cookies enable an analysis of your use of the website. The data is collected and stored exclusively in pseudonymous form. They are not used to identify you personally and are not merged with data about the bearer of the pseudonym.

Cookies that are required to carry out the electronic communication process (necessary cookies) or to provide certain functions that you have requested (functional cookies) are stored on the basis of Art. 6 (1) lit. f DSGVO, unless another legal basis is specified. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services. If consent to the storage of cookies has been requested, the storage of the cookies in question is based exclusively on this consent (Art. 6 para. 1 lit. a) DSGVO); consent can be revoked at any time for the future.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be limited.

Insofar as cookies are used by third-party companies or for analysis purposes, we will inform you separately about this within the scope of this data protection declaration and, if necessary, request your consent.

Consent in the Cookie Banner:
If you consent to the setting of cookies and further processing of your personal data through the cookie banner, we and our partner may use the data collected with the cookies for marketing purposes. Furthermore, it may happen that your data is transferred to the USA. This will then be done in accordance with your consent pursuant to Art. 6 (1) a) or Art. 49 (1) a) DSGVO. You can revoke your consent at any time for the future at no additional cost, i.e. no higher than the usual fees incurred for the transfer. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Cookiebot
We use on our website a web service provided by Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark (hereinafter: cookiebot.com). We use this data to ensure the full functionality of our website. In this context, your browser may transmit personal data to cookiebot.com. The legal basis for the data processing is Art. 6 para. 1 lit. f DSGVO. The legitimate interest consists in an error-free function of the website. The data is deleted as soon as the purpose of its collection has been fulfilled. For more information on the handling of the transmitted data, please refer to the privacy policy of cookiebot.com: https://www.cookiebot.com/de/privacy-policy/.

You can prevent the collection as well as the processing of your data by cookiebot.com by disabling the execution of script code in your browser or by installing a script blocker in your browser.

Analysis und marketing
The setting of analysis and marketing cookies and the resulting data processing such as tracking and analysis or, if applicable, transfer to the USA will only take place after your consent in accordance with Art. 6(1)(a) or Art. 49(1)(a) DSGVO. You can revoke your consent at any time with effect for the future.

Google Analytics
This website uses functions of the web analysis service Google Analytics. The provider is Google IrelandLimited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyze the behavior of website visitors. In doing so, the website operator receives various usage data, such as page views, dwell time, operating systems used and the origin of the user. This data may be summarized by Google in a profile that is assigned to the respective user or their end device.

Google Analytics uses technologies that enable the recognition of the user for the purpose of analyzing user behavior (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is usually transferred to a Google server in the USA and stored there.

The use of this tool is based on your consent to cookies and further data processing such as tracking and analysis or transmission to the USA in accordance with Art. 6 para. 1 lit. a) or Art. 49 para. 1 lit. a) DSGVO. The consent can be revoked at any time for the future.

We have activated the IP anonymization function on this website. This means that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.

This website uses the „demographic characteristics“ function of Google Analytics to display suitable advertisements to website visitors within the Google advertising network. This allows reports to be generated that include statements about the age, gender, and interests of site visitors. This data comes from interest-based advertising from Google as well as from visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as shown in the item „Objection to data collection“.

You can prevent the collection and processing of your data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

For more information on how Google Analytics handles user data, please see Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

We have concluded an order processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Google Tag Manager
This website uses the Google Tag Manager. Through this service, website tags can be managed through an interface. The Google Tool Manager only implements tags.

This means that no cookies are used and no personal data is collected. The Google Tool Manager triggers other tags, which in turn may collect data. However, the Google Tag Manager does not access this data. If a deactivation has been made at domain or cookie level, it remains in place for all tracking tags, insofar as these are implemented with the Google Tag Manager.

Google Remarketing / Google Audiences
This website uses the functions of Google Analytics Remarketing. The provider is Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Remarketing analyzes your user behavior on our website (e.g. clicking on certain products) in order to classify you in certain advertising target groups and subsequently play suitable advertising messages to you when you visit other online offers (remarketing or retargeting).

Furthermore, the advertising target groups created with Google Remarketing can be linked with Google’s cross-device functions. In this way, interest-based, personalized advertising messages that have been adapted to you depending on your previous usage and surfing behavior on one end device (e.g. cell phone) can also be displayed on another of your end devices (e.g. tablet or PC).

For target group formation, we use, among other things, the customer matching of Google Remarketing. In this process, we transfer certain customer data (e.g., e-mail addresses) from our customer lists to Google. If the customers in question are Google users and logged into their Google account, they are shown matching advertising messages within the Google network (e.g. on YouTube, Gmail or in the search engine).

The use of this tool is based on your consent to cookies and further data processing such as tracking and analysis or transmission to the USA in accordance with Art. 6 para. 1 lit. a) or Art. 49 para. 1 lit. a) DSGVO. The consent can be revoked at any time.

If you have a Google account, you can object to personalized advertising at the following link: https://www.google.com/settings/ads/onweb/.

Further information and the data protection provisions can be found in Google’s privacy policy at: https://policies.google.com/technologies/ads?hl=de.

Google Conversion-Tracking
This website may use Google Conversion Tracking. The provider is Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland.

With the help of Google conversion tracking, Google and we can recognize whether the user has performed certain actions. For example, we can evaluate which buttons on our website were clicked how often and which products were viewed or purchased particularly frequently. This information is used to create conversion statistics. We learn the total number of users who clicked on our ads and what actions they took. We do not receive any information with which we can personally identify the user. Google itself uses cookies or similar recognition technologies for identification.

The use of this tool is based on your consent to cookies and further data processing such as tracking and analysis or transmission to the USA in accordance with Art. 6 para. 1 lit. a) or Art. 49 para. 1 lit. a) DSGVO. The consent can be revoked at any time for the future.

More information on Google conversion tracking can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=de.

Microsoft Advertising (formerly Bing Ads)
On the website, we use technologies from Microsoft Advertising (formerly Bing Ads), which are provided and operated by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA („Microsoft“). In doing so, Microsoft sets a cookie on your terminal device if you have reached our website via a Microsoft Bing ad. In this way, Microsoft and we can recognize that someone has clicked on an ad, has been redirected to our website and has reached a previously determined target page („conversion site“). We only learn the total number of users who clicked on a Bing ad and were then redirected to the conversion site. Microsoft collects, processes and uses information via the cookie, from which usage profiles are created using pseudonyms. These usage profiles are used to analyze visitor behavior and are used to display advertisements. No personal information about the identity of the user is processed.

The use of this tool is based on your consent to the setting of cookies/tracking and data processing in the USA basis in accordance with Art. 6 para. 1 lit. a) or Art. 49 para. 1 lit. a) DSGVO. The consent can be revoked at any time.

If you do not want information about your behavior to be used by Microsoft as explained above, you can refuse the setting of a cookie required for this – for example, via browser settings that generally disable the automatic setting of cookies. You can also prevent the collection of data generated by the cookie and related to your use of the website, as well as the processing of this data by Microsoft, by declaring your objection under the following link https://choice.microsoft.com/de-DE/opt-out. For more information on data protection and the cookies used by Microsoft and Bing Ads, please visit the Microsoft website at https://privacy.microsoft.com/de-de/privacystatement.

Matomo
This website uses the open source web analytics service Matomo. Matomo uses technologies that enable cross-page recognition of the user to analyze user behavior (e.g. cookies or device fingerprinting). The information collected by Matomo about the use of this website is stored on our server. The IP address is anonymized before storage.

With the help of Matomo, we are able to collect and analyze data about the use of our website by website visitors. This allows us to find out, among other things, when which page views were made and from which region they come. We also collect various log files (e.g. IP address, referrer, browsers and operating systems used) and can measure whether our website visitors perform certain actions (e.g. clicks, purchases and the like).

The use of this tool in the case of pure log file evaluation is based on our legitimate interest pursuant to Art.6 para.1 lit.f ) DSGVO. Our legitimate interest is to evaluate the functionality and usability of our website. If the tool is used with cookies, the use is based on your consent to cookies and further data processing such as tracking and analysis pursuant to Art. 6 para. 1 lit. a) DSGVO. You can revoke this consent at any time for the future.

Further information on your data subject rights

Information: You have the right to request information from us at any time about the personal data we have stored about you (Art. 15 DSGVO). This also concerns the recipients or categories of recipients, if data is passed on to them, the purpose and duration of storage.

Correction, deletion, restriction of processing: In addition, you have the right to demand correction under the conditions of Art. 16 DS-GVO, deletion under the conditions of Art. 17 DS-GVO or restriction of processing under the conditions of Art. 18 DSGVO.

Data portability:Furthermore, you may request data transfer at any time under the conditions of Art. 20 DSGVO.

Automated decisions in individual cases including profiling.
You have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects vis-à-vis you or similarly significantly affects you. Automated decision-making based on the personal data collected will not take place.

Right of appeal to supervisory authority: Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority. For this purpose, you can contact the data protection supervisory authority of your usual place of residence or our registered office.

Objection to processing: In the case of processing of personal data for the performance of tasks in the public interest (Art. 6 (1) sentence 1 lit. e) DSGVO) or for the performance of legitimate interests (Art. 6 (1) sentence 1 lit. f) DSGVO), you may object to the processing of personal data relating to you at any time with effect for the future. In the event of an objection, we must refrain from any further processing of your data for the aforementioned purposes unless there are compelling legitimate grounds for processing that override your interests, rights and freedoms, or the processing is necessary for the assertion, exercise or defense of legal claims.

Under the conditions of Article 21 (1) DSGVO, data processing may be objected to on grounds relating to the particular situation of the data subject.

RIGHT TO OBJECT TO DATA COLLECTION IN SPECIAL CASES AND TO DIRECT MARKETING (ART. 21 DSGVO).

IF DATA PROCESSING IS CARRIED OUT ON THE BASIS OF ART. 6 ABS. 1 LIT. E OR F DSGVO, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING IS FOR THE PURPOSE OF ASSERTING, EXERCISING OR DEFENDING LEGAL CLAIMS (OBJECTION UNDER ARTICLE 21(1) DSGVO).

IF YOUR PERSONAL DATA ARE PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSE OF DIRECT MARKETING (OBJECTION PURSUANT TO ARTICLE 21 (2) DSGVO).

Data Protection Officer:
We have appointed a data protection officer in our company. You can reach her under the following contact option: s.pesch-gogolin@albrecht-mediapro.de.

Changes to this data protection notice
We revise this data protection notice when changes are made to this website or on other occasions that make this necessary. You will always find the current version on this website.

Cookie Information