Privacy notice pursuant to Art. 13 GDPR

This Privacy Policy was written using a service of
www.einfach-dsgvo.de

Name and address of the controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection provisions is:

OCTUM GmbH
Renntalstr. 16
74360 Ilsfeld
Germany
Phone: +49 7062 914 94-0
Email: info@octum.de

Name and address of the data protection officer

The controller’s data protection officer is:
suasio GmbH - Frank Dreher
Hauptstr.120b
77815 Bühl
Phone: +49 7223 95666-0
Email: datenschutz@suasio.de
www.suasio.de

General information on data processing

Lawfulness of the processing of personal data

We are informing you of the lawful basis for our processing of data in compliance with Art. 13 GDPR. Insofar as the lawful basis is not described precisely in the Privacy Notice, the following applies:
The lawfulness of obtaining consent is based on Art. 6(1)(a) in conjunction with Art. 7 GDPR. The lawfulness of processing with the aim of rendering our services, performing contracts and responding to enquiries is based on Art. 6(1)(b) GDPR. The lawfulness of processing in order to fulfil our legal obligations is based on Art. 6(1)(c) GDPR. If the processing of your data is necessary to safeguard the legitimate interests of our company or a third party and these interests are not overridden by the interests, fundamental rights and basic freedoms of the data subject, the lawfulness of such processing is based on Art. 6(1)(f) GDPR. If the vital interests of the data subject or another natural person necessitate the processing of personal data, the lawfulness of this processing is based on Art. 6(1)(d) GDPR.

Data erasure and storage time

We adhere to the basic principles of data minimisation pursuant to Art. 5(1)(c) GDPR and the limitation of storage pursuant to Art. 5(1)(e) GDPR. We store your personal data only for the duration required in order to achieve the purposes stated here or for the retention periods stipulated by law. After the purpose of data storage ceases to apply or after the expiry of these retention periods, the data in question will be erased as soon as possible.

Note on the forwarding of data to third countries

Our website also incorporates tools from companies based in third countries. If these tools are enabled, your personal data can be transferred to the servers of these companies. As a rule, the level of data protection in third countries is not as high as in EU data protection legislation. There is therefore a risk that your data may be passed on to the authorities in these countries. We do not have any influence over these processing activities.

External links

This website may contain links to third-party websites or other websites for which we are responsible. If you follow a link to a website outside of our scope of responsibility, please note that these websites have their own privacy notices. We accept no responsibility or liability for these third-party websites or their privacy notices. Therefore, check before using these websites whether you agree with the privacy policies they contain.

You can recognise external links in that they are shown in a different colour from the rest of the text or are underlined. Your cursor will show you external links when you hover over them. Your personal data will only be transferred to an external link’s destination if you click on the link in question. In this case, the operator of the other website will be informed of your IP address, the time at which you clicked on the link, the website on which you clicked on the link, and other information that you will find in the privacy notice of the provider in question.

Please also note that individual links may result in the transfer of data outside the European Economic Area. Consequently, authorities in other countries may gain access to your data. You may not be entitled to any legal redress against such data access. If you do not wish your personal data to be transferred to the link’s destination or exposed without your volition to access by authorities in other countries, please do not click on any links.

Rights of the data subject

As a data subject within the meaning of the GDPR, you can assert various rights. The rights of data subjects as stipulated by the GDPR are the right of access (Article 15), the right to rectification (Article 16), the right to erasure (Article 17), the right to restriction of processing (Article 18), the right to object (Article 21), the right to lodge a complaint with a supervisory authority and the right to data portability (Article 20).

Right to revoke consent:
Some types of data processing can only take place with your express consent. You can revoke consent that you have granted at any time. However, this does not affect the lawfulness of data processing up until the time consent is revoked.

Right to object:
If the processing is based on Art. 6(1)(e) or (f) GDPR, as a data subject you are entitled to object to the processing of your personal data at any time for reasons based on your particular situation. You also have this right in the case of profiling based on these provisions within the meaning of Art. 4(4) GDPR. If we are unable to demonstrate a legitimate interest in the processing that overrides your interests, rights and freedoms or serves the purpose of asserting, exercising or defending legal claims, we will refrain from processing your data after an objection has been made.
If the processing of personal data serves the purpose of direct advertising, you are also entitled to raise an objection at any time. The same applies to profiling used in connection with direct advertising. In this case, too, we will stop processing your personal data as soon as you raise an objection.

Right to lodge a complaint with a supervisory authority:
If it is your opinion that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State that is where you normally reside or work, or is the location of the alleged infringement, without prejudice to any administrative or judicial redress.

Right to data portability:
If your data are processed automatically due to your consent or the fulfilment of a contract, you have the right to receive these data in a structured, commonly used and machine-readable format. Furthermore, you have the right to demand the transfer and provision of these data to another controller, if this is technical practicable.

Right of access, right to rectification and erasure:
You have the right to obtain information about your processed personal data as regards the purpose of data processing, the categories, the recipients, and the duration of storage. If you have any questions on this or other subjects relating to personal data, you can of course contact us using the contact details provided in the Imprint.

Right to the restriction of processing:
You can assert your right to restrict the processing of your personal data at any time. To do this, one of the following conditions must apply:

• You contest the accuracy of the personal data. You have the right to demand the restriction of processing for the period during which the accuracy of the data is being investigated.
• If processing is unlawful, you can request the restriction of the use of the data as an alternative to erasure.
• If we no longer need your personal data for the purposes of the processing, but you need the data in order to assert, exercise or defend legal claims, you may request the restriction of processing as an alternative to erasure.
• If you object to the processing in accordance with Art. 21(1) GDPR, your and our interests will be weighed against each other. Until this assessment is complete, you are entitled to request the restriction of processing.

The restriction of processing means that, with the exception of storage, the personal data may only be processed with your consent or for the assertion, exercise or defence of legal claims or to protect the rights of another natural or legal person or on grounds of important public interest of the European Union or a Member State.

Website provision (web host)

Our website is hosted by:

STRATO AG
Otto-Ostrowski-Straße 7, 10249 Berlin
Germany

When you access our website, we automatically collect and store information in so-called server log files. Your browser automatically transfers this information to our servers or the servers of our host company.

This information is as follows:

• IP address of the website visitor’s device
• Device used
• Hostname of the computer on which the website was accessed
• Visitor’s operating system
• Browser type and version
• Name of the retrieved file
• Time of the server request
• Volume of data
• Information on whether the retrieval of data was successful

These data are not merged with other data sources. Instead of operating this website on our own server, we can also operate it on the server of an external service provider (host company), which we will in this case have named above. The personal data collected by this website will then be stored on the servers of the host company. In addition to the data mentioned above, the web host also stores for us such information as contact enquiries, contact details, names, website access data, meta- and communication data, contract data and other data that are generated by a website. The lawfulness of the processing of these data is based on Art. 6(1)(f) GDPR. Our legitimate interest is the technically error-free presentation and optimisation of this website. When the website is accessed in order to enter into contractual negotiations with us or to conclude a contract, lawfulness shall furthermore be based on (Art. 6(1)(b) GDPR). In the event that we have contracted a host company, a contract for the processing of orders exists with this service provider.

Use of local storage objects, session storage objects and cookies

Our website uses local storage objects, session storage objects and/or cookies. Local storage involves a mechanism that enables the storage of data in the browser of your device. These data mostly contain user preferences, such as the “day” or “night” mode of a website, and are retained until you manually delete the data. Session storage is very similar to local storage, except that the duration of storage lasts only for the current session, i.e. until the current tab is closed. After this, the session storage objects will be deleted from your device. Cookies are pieces of information that a web server (a server that provides web content) stores on your device in order to be able to identify this device. They are stored on your device either temporarily for the duration of a session (session cookies) and deleted when your visit to a website ends, or permanently (permanent cookies) until you delete them yourself or your web browser deletes them automatically.

These objects can also be stored on your device by third-party companies when you visit our site (third-party requests). This enables us, as the operator, and you, as the visitor to this website, to make use of certain third-party services that are installed on this website. Examples include the processing of payments or the showing of videos.

These mechanism have multiple and diverse possible uses. They can improve the functionality of a website, manage shopping basket functions, make the use of the website more secure and convenient, and conduct analyses on visitor flows and behaviour. Depending on the individual functions, they may be governed by data protection legislation. If they are necessary for the website’s operation and intended to ensure the availability of certain functions (shopping basket function) or are used to optimise the website (e.g. cookies for measuring visitor behaviour), their lawful use is subject to Art. 6(1)(f) GDPR. As a website operator, we have a legitimate interest in the storage of local storage objects, session storage objects and cookies in order to ensure the technically error-free and optimised availability of our services. In all other cases, local storage objects, session storage objects and cookies are only stored with your express consent (Art. 6(1)(a) GDPR).

If local storage objects, session storage objects or cookies from third-party companies are used, or if they are used for analytical purposes, we will notify you separately in this Privacy Notice. Your consent, which is required, will be requested and may be revoked at any time.

Use of third-party services

Third-party services are used on our website. Third-party, or external, services are services from third parties that are used on our website. This may happen for different reasons, such as the embedding of videos, for example, or for website security. When these services are used, personal data are also forwarded to the respective providers of these third-party services. If we have no legitimate interest in the use of these services, before such use we will obtain your consent as a visitor to our website, which you may revoke at any time (Art. 6(1)(a) GDPR).

Analytics

We process the personal data of visitors to our website in order to analyse user behaviour. The analysis of the obtained data enables us compile information on the use of the individual components of our website. This allows us to increase the user-friendliness of our website. Using these analytical tools, we can create user profiles to display targeted or interest-based advertising messages, recognise visitors to our website the next time they visit, measure their click/scroll behaviour and their downloads, create heat maps, recognise page views, measure the visit duration or bounce rates, and track the origin of website visitors (city, country and website the visitor has come from). Using analytical tools, we can improve our market research and marketing activities.

Processing only takes place if you have given consent to this data processing (using our consent banner on the website). The lawfulness of this processing is based on consent (Art. 6(1)(a) GDPR). Without your consent, data processing in the manner described above does not take place. If you revoke your consent (e.g. using the consent banner or another option available on this website), we will terminate this data processing. The lawfulness of the processing carried out up until consent was revoked remains unaffected.

Google Analytics

We use the Google Analytics service on our website. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The use of this service can result in the transfer of data to a third country (the U.S.). The provider is certified in accordance with the EU-U.S. Data Privacy Framework and therefore offers a reasonable level of data protection.

Further information can be found in the provider’s privacy notice at the URL: https://policies.google.com/privacy

Consent management

In order to adhere to data protection requirements, we use a consent management tool on our website. We use this tool to obtain the necessary consent for the setting of cookies or the use of third-party services. The obtained consent is stored. Processing is necessary in order to fulfil a legal obligation to which the controller (website operator) is subject. The lawfulness of processing is therefore based on Art. 6(1)(c) GDPR.

Typo3 Cookie Manager

We use the Typo3 Cookie Manager service on our website. The provider of this service is the TYPO3 Association, Sihlbruggstrasse 105, 6340 Baar, Switzerland.
As this service is hosted locally on the web server, there is no transfer of data to third parties.

Content delivery network (CDN)

We use a content delivery network (CDN) to optimise the performance and availability of our website. To do this, the service provider that makes this network available processes your IP address and the information about when you visited our website. All further information on data processing by this service provider can be found in its privacy notice.

We base this processing on a legitimate interest (Art. 6(1)(f) GDPR).

Our legitimate interest in the use of a content delivery network consists in presenting our website as quickly, securely and reliably as possible.

Google Static

We use the Google Static service on our website. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The use of this service can result in the transfer of data to a third country (the U.S.). The provider is certified in accordance with the EU-U.S. Data Privacy Framework and therefore offers a reasonable level of data protection. Further information can be found in the provider’s privacy notice at the URL:
https://policies.google.com/privacy

Content management system

A content management system enables the creation, editing, organisation and presentation of digital content. We use a content management system to create content for our website. This enable us to design a more attractive website.

We base this processing on a legitimate interest (Art. 6(1)(f) GDPR).

Our legitimate interest lies in the technically error-free presentation and optimisation of the website.

Typo3 CMS

We use the Typo3 CMS service on our website. The provider of this service is the TYPO3 Association, Sihlbruggstrasse 105, 6340 Baar, Switzerland.
As this service is hosted locally on the web server, there is no transfer of data to third parties.

Document management system

A document management system is used for improved document management. This enables the database-supported management of electronic documents. Different personal data are processed, depending on which documents and information are in the documents and whether these are encrypted.

Processing only takes place if you have given consent to this data processing (using our consent banner on the website). The lawfulness of this processing is based on consent (Art. 6(1)(a) GDPR). Without your consent, data processing in the manner described above does not take place. If you revoke your consent (e.g. using the consent banner or another option available on this website), we will terminate this data processing. The lawfulness of the processing carried out up until consent was revoked remains unaffected.

RawGit

We use the RawGit service on our website. The provider of this service is Ryan Grove, U.S.
The use of this service can result in the transfer of data to a third country (the U.S.).

Map service

We use a map service on this website. In order for you to use and view the map on the website, it must be downloaded from the provider’s server. When this happens, your IP address is sent to the provider’s server. Cookies and other technologies, and even fonts, may be downloaded. You can find out more about this in the provider’s Privacy Policy.

Processing only takes place if you have given consent to this data processing (using our consent banner on the website). The lawfulness of this processing is based on consent (Art. 6(1)(a) GDPR). Without your consent, data processing in the manner described above does not take place. If you revoke your consent (e.g. using the consent banner or another option available on this website), we will terminate this data processing. The lawfulness of the processing carried out up until consent was revoked remains unaffected.

Google Maps

We use the Google Maps service on our website. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The use of this service can result in the transfer of data to a third country (the U.S.). The provider is certified in accordance with the EU-U.S. Data Privacy Framework and therefore offers a reasonable level of data protection.

Further information can be found in the provider’s privacy notice at the URL: https://policies.google.com/privacy

Interface software

Business processes run faster, more cheaply and are less prone to errors if they are automated via interfaces with the aid of software. This way, they can be efficiently integrated in company processes via our own website or via social networks. We deploy our own website interface software, to link different applications together and to securely transfer personal data from one application to another.

Processing only takes place if you have given consent to this data processing (using our consent banner on the website). The lawfulness of this processing is based on consent (Art. 6(1)(a) GDPR). Without your consent, data processing in the manner described above does not take place. If you revoke your consent (e.g. using the consent banner or another option available on this website), we will terminate this data processing. The lawfulness of the processing carried out up until consent was revoked remains unaffected.

Google APIs

We use the Google APIs service on our website. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The use of this service can result in the transfer of data to a third country (the U.S.). The provider is certified in accordance with the EU-U.S. Data Privacy Framework and therefore offers a reasonable level of data protection.

Further information can be found in the provider’s privacy notice at the URL: https://policies.google.com/privacy

Google Tag Manager

We use the Google Tag Manager service on our website. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The use of this service can result in the transfer of data to a third country (the U.S.). The provider is certified in accordance with the EU-U.S. Data Privacy Framework and therefore offers a reasonable level of data protection.

Further information can be found in the provider’s privacy notice at the URL: https://policies.google.com/privacy

Video/music services

Audios and videos are integrated in our website. These are retrieved from our provider’s server – the audio or video platform. In order to play an audio or video, your device establishes a connection to the audio or video platform and transfers personal data to it. These data include, in particular, your IP address, location data, and information about your browser and device.

Processing only takes place if you have given consent to this data processing (using our consent banner on the website). The lawfulness of this processing is based on consent (Art. 6(1)(a) GDPR). Without your consent, data processing in the manner described above does not take place. If you revoke your consent (e.g. using the consent banner or another option available on this website), we will terminate this data processing. The lawfulness of the processing carried out up until consent was revoked remains unaffected.

YouTube

We use the YouTube service on our website. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The use of this service can result in the transfer of data to a third country (the U.S.). The provider is certified in accordance with the EU-U.S. Data Privacy Framework and therefore offers a reasonable level of data protection.

Further information can be found in the provider’s privacy notice at the URL: https://policies.google.com/privacy

Web fonts

To achieve the uniform presentation of fonts, this website uses so-called web fonts, which are made available by an external provider and are downloaded by your browser when you visit the website. This informs the provider of the web font that our website has been accessed from your IP address, as your browser establishes a direct connection to the web font provider.

Processing only takes place if you have given consent to this data processing (using our consent banner on the website). The lawfulness of this processing is based on consent (Art. 6(1)(a) GDPR). Without your consent, data processing in the manner described above does not take place. If you revoke your consent (e.g. using the consent banner or another option available on this website), we will terminate this data processing. The lawfulness of the processing carried out up until consent was revoked remains unaffected.

Google Fonts

We use the Google Fonts service on our website. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The use of this service can result in the transfer of data to a third country (the U.S.). The provider is certified in accordance with the EU-U.S. Data Privacy Framework and therefore offers a reasonable level of data protection.

Further information can be found in the provider’s privacy notice at the URL: https://policies.google.com/privacy

Advertisements

Our website uses tools that facilitate or enable the placement of ads and the evaluation of the success of enabled ads. In doing this, personal data are processed, in particular your IP address, access times and device information.

Processing only takes place if you have given consent to this data processing (using our consent banner on the website). The lawfulness of this processing is based on consent (Art. 6(1)(a) GDPR). Without your consent, data processing in the manner described above does not take place. If you revoke your consent (e.g. using the consent banner or another option available on this website), we will terminate this data processing. The lawfulness of the processing carried out up until consent was revoked remains unaffected.

Google Ads

We use the Google Ads service on our website. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The use of this service can result in the transfer of data to a third country (the U.S.). The provider is certified in accordance with the EU-U.S. Data Privacy Framework and therefore offers a reasonable level of data protection.

Further information can be found in the provider’s privacy notice at the URL: https://policies.google.com/privacy

Google Double Click

We use the Google Double Click service on our website. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The use of this service can result in the transfer of data to a third country (the U.S.).

Further information can be found in the provider’s privacy notice at the URL: https://policies.google.com/privacy