Data protection information according to articles 13, 14 and 21 GDPR for the ODOSCOPE GmbH website

I. General information

1. Responsible

We, ODOSCOPE GmbH, take the protection of your personal data and the legal obligations serving this protection very seriously. The legal requirements demand comprehensive transparency regarding the processing of personal data. Only if the processing is comprehensible for you as a data subject, you will be sufficiently informed about the purpose, type and scope of the processing.

Our data protection declaration therefore explains in detail which personal data are processed by us when you use our website (https://www.odoscope.com/), all other websites that refer to it and in the other cases that may be explained here (for definitions see I.2.).

Responsible in the sense of the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG) and other data protection regulations is

ODOSCOPE GmbH

Widdersdorfer Straße 403
50933 Köln
Deutschland
Telefon: + 49 221 1653 97-80
Fax: +49 221 16 5397-85
E-Mail: info@odoscope.com

In the following referred to as “responsible person” or “we”.

You can reach the data protection officer at:

ODOSCOPE GmbH
Mr. Sascha Kremer
Widdersdorfer Straße 403
50933 Köln
E-Mail: privacy@odoscope.com

Please note that links on our website may take you to other websites that are not operated by us but by third parties. Such links are either clearly marked by us or are recognizable by a change in the address line of your browser. We are not responsible for compliance with data protection regulations and safe handling of your personal data on these websites operated by third parties.

2. Definitions

From the GDPR

This data protection declaration uses the terms of the legal text of the GDPR. You can view the definitions (Art. 4 GDPR), for example at https://eur-lex.europa.eu/legal-content/DE/TXT/?uri=CELEX:32016R0679

Cookies and similar technologies

Cookies are text files which are stored on your end device by a website or read out there. They contain combinations of letters and numbers, e.g. in order to recognise the user and his settings when connecting to the cookie-setting website again, to enable the user to remain logged in to a customer account or to statistically analyse a certain usage behaviour.

WebStorage technology enables variables and values to be stored locally in the user’s browser cache. The technology includes both the so-called “sessionStorage”, which remains stored until the browser tab is closed, and the “localStorage”, which is stored in the browser cache until the cache is emptied by the user. The localStorage technology makes it possible, among other things, to recognize the user and his settings when he visits our website.

Categories of data

When we specify the categories of data processed, this refers in particular to the following data: master data (e.g. name, address, dates of birth), contact data (e.g. e-mail addresses, telephone numbers, messenger services), content data (e.g. text entries, photographs, videos, contents of documents/files), contract data (e.g. subject matter of the contract, terms, customer category), payment data (e.g. bank details, payment history, use of other payment service providers), usage data (e.g. history on our website, use of certain content, access times, contact or order history), connection data (e.g. device information, IP addresses, URL referrers).

3. Information on data processing

We process personal data only to the extent permitted by law. Personal data will only be passed on in the cases described below. Personal data is protected by appropriate technical and organisational measures (e.g. pseudonymisation, encryption).

Unless we are required by law to store or disclose personal data to third parties (in particular law enforcement agencies), the decision as to which personal data is processed by us for how long and to what extent we disclose it depends on which functions of the website you use in each individual case.

4. Storage duration

Personal data shall be erased as soon as the purpose of the processing ceases to exist or a prescribed retention period expires, unless there is a need to retain personal data in order to conclude or fulfil a contract. As far as we have to inform you about the storage period of cookies and similar technologies, you will find the relevant information at the end of this privacy policy (under III. ).

Personal data that we process in the context of an application will be stored for a period of six months after the application process is completed.

5. Automated decisions in individual cases including profiling

Automated decisions in individual cases, including profiling, do not take place.

6. Rights of data subjects

As a data subject, you have the right to information in accordance with Art. 15 GDPR, the right to correction in accordance with Art. 16 GDPR, the right to deletion in accordance with Art. 17 GDPR, the right to restriction of processing in accordance with Art. 18 GDPR and the right to data transferability in accordance with Art. 20 GDPR. The right of information and the right of deletion are subject to the restrictions set out in Articles 34 and 35 of the Federal Data Protection Act. You have the right to complain to a data protection supervisory authority (Art. 77 GDPR in conjunction with Art. 19 BDSG).

The data protection supervisory authority responsible for us/ for our head office is: The State Commissioner for Data Protection of North Rhine-Westphalia, Kavalleriestrasse 2-4, 40213 Düsseldorf. However, you are free to complain to any other data protection supervisory authority.

7. Obligation of the responsible person to notify

We will notify all recipients to whom your personal data has been disclosed of any correction or deletion of your personal data or of any restriction on processing in accordance with Art. 16, Art. 17 Para. 1 and Art. 18 GDPR, unless such notification is impossible or involves a disproportionate effort. We will inform you of the recipients if you request.

8. Duty to provide

Unless otherwise explained below in the information on the legal basis, you are not obliged to provide personal data. However, in the cases of Art. 6 para. 1 letter b GDPR, the personal data is required for the performance or conclusion of a contract. If you do not provide the personal data concerned, the performance or conclusion of the contract is not possible. If you do not make the data available in the cases of Art. 6 para. 1 letter a, f GDPR, it is not possible to use the affected parts of our website.

9. Right of objection and withdrawal of consent

You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you which is carried out pursuant to Article 6, paragraph 1, letter e or f of the DPA. Where personal data are processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing.

In accordance with Art. 7 Para. 3 S. 1 GDPR, you have the right to revoke any consent given to us at any time. This does not affect the legality of the processing carried out on the basis of the consent until the revocation. The revocation therefore only applies to the processing planned after the revocation. The revocation is possible informally by post or e-mail. If you submit an objection, we will no longer process your personal data, unless another (legal) basis permits this. If, however, a revocation is made and there is no other legal basis, the personal data must be deleted immediately at your request in accordance with Art. 17 para. 1 letter b GDPR.

Objection and revocation can be made without any formality and should be addressed to:

ODOSCOPE GmbH
Widdersdorfer Straße 403
50933 Köln
Deutschland
Telefon: + 49 221 1653 97-80
Fax: +49 221 16 5397-85
E-Mail: info@odoscope.com

You can also revoke your consent(s) by deactivating the respective data processing services directly in our Consent Tool. Please note that you must do this on each end device on which you have visited our website and consented to data processing.

II. Data processing in connection with the use of our website

The use of the website and its functions regularly requires the processing of personal data.

1. Informational use of the website

Purpose of processing: Functionality and optimization of the website, as well as ensuring the security of our information technology systems for purely informational use (without the use of additional functions such as contact forms or social media plugins) of our website.

Legal basis: Art. 6 Abs. 1 Buchst. f DSGVO

Categories of data: usage data, connection data

Recipient of the data: None

Intended third country transfer: None

Do we store or read personal data on your device based on your consent? No

2. Functions on our website

Subscription to our newsletter

Purpose of processing: Subscription to our newsletter on our news and offers; proof of your consent; ensuring the security of our information technology systems; personalization of our newsletter based on your usage behavior.

Legal basis: Article 6(1)(a), (f) GDPR

Categories of data: Master data, contact data, usage data, connection data

Recipient of the data: HubSpot European Office, Ground Floor, Two Dockland Central Guild Street, Dublin 1, Ireland

Intended third country transfer: USA (Based on the standard data protection clauses of the EU Commission, Article 46 Para. 2 lit.c GDPR)

Do we store or read personal data on your device based on your consent? Yes, see the overview at the end of this privacy policy.

Request for whitepapers, checklists, e-books

Purpose of processing: Request or download of whitepapers, checklists, e-books etc.; evaluation of your usage behavior.

Legal basis: Article 6(1)(a), (b) GDPR

Categories of data: Master data, contact data, usage data and connection data

Recipient of the data: HubSpot European Office, Ground Floor, Two Dockland Central Guild Street, Dublin 1, Ireland

Intended third country transfer: USA (Based on the standard data protection clauses of the EU Commission, Article 46 Para. 2 lit.c GDPR)

Do we store or read personal data on your device based on your consent? Yes, see the overview at the end of this privacy policy.

Application by e-mail

Purpose of processing: Processing of your application and carrying out of the application procedure; consideration of your application in future application procedures with us, provided you have given your express consent.

Legal basis: Article 88(1) GDPR in conjunction § Article 26 (1) sentence 1 BDSG; for storage for future application procedures Article 6 (1) letter a GDPR in conjunction with Art. 7 GDPR, § 26 Paragraph 2 BDSG

Categories of data: Master data, contact data, content data, connection data; if applicable, special categories of personal data within the meaning of Art. 9 para. 1 GDPR (only the data relating to your application that you provide us with will be stored)

Recipient of the data: None

Intended third country transfer: None

Do we store or read personal data on your device based on your consent? No

Customer account (CRM)

Purpose of processing: Use of a customer account; ensuring data and information security; login to personal area; if necessary, further description by ODOSCOPE.

Legal basis: Article 6(1)(b), (f) GDPR

Categories of data: Master data, contact data, contract data, payment data, usage data, connection data

Recipient of the data: HubSpot European Office, Ground Floor, Two Dockland Central Guild Street, Dublin 1, Ireland

Intended third country transfer: USA (Based on the standard data protection clauses of the EU Commission, Article 46 Para. 2 lit.c GDPR)

Do we store or read personal data on your device based on your consent? No

Contact form

Purpose of processing: Processing of your contact request; evaluation of your communication with us Legal basis: Article 6(1)(a), (f) DPA; Article 6(1)(b) DPA (if the request leads to a later conclusion of a contract or concerns an existing contract)

Legal basis: Contact data, master data, content data, usage data, connection data (depending on the content of your request)

Categories of data: HubSpot European Office, Ground Floor, Two Dockland Central Guild Street, Dublin 1, Ireland

Recipient of the data: USA (Based on the standard data protection clauses of the EU Commission, Article 46 Para. 2 lit.c GDPR)

Intended third country transfer: Yes, see the overview at the end of this privacy policy.

Links to Youtube und LinkedIn

On our website we use buttons for the integration of the social plugins of YouTube and LinkedIn. This solution prevents direct transmission of your data to the social networks and prevents these providers from reading and storing information on your terminal device. When you use our website, therefore, no connection is yet established to the servers of the social networks. This only happens when you click on one of the buttons. If you click on a corresponding button, a new page is opened that is retrieved from the servers of the respective social network. From that time the operator of the social network obtains knowledge that our website was accessed via your IP address. At the same time, the provider may place cookies on your terminal device or read cookies, unless you have prohibited the use of cookies in your browser.

3. Embedded tools and services

HubSpot Marketing Hub

Purpose of processing: E-mail marketing, especially newsletter dispatch; evaluation of the click and usage behaviour for optimisation and demand-oriented design of the website; connection to the HubSpot CRM.

Legal basis: Article 6(1)(a) GDPR

Categories of data: Contact data, if applicable content data, usage data, connection data

Recipient of the data: HubSpot European Office, Ground Floor, Two Dockland Central Guild Street, Dublin 1, Ireland

Intended third country transfer: USA (Based on the standard data protection clauses of the EU Commission, Article 46 Para. 2 lit.c GDPR)

Do we store or read personal data on your device based on your consent? Yes, see the overview at the end of this privacy policy.

LinkedIn Conversion Tracking – LinkedIn Insight Tag

Purpose of processing: measuring the impact of our advertisements and displaying advertising that is in line with our interests.

Legal basis: Art. 6 para. 1 letter a GDPR

Categories of data: usage data, connection data

Recipient of the data: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”)

Intended third country transfer: On a case-by-case basis USA (Based on the standard data protection clauses of the EU Commission, Article 46 Para. 2 lit.c GDPR)

Do we store or read personal data on your device based on your consent? Yes, see the overview at the end of this privacy policy.

Matomo

Purpose of processing: Statistical evaluation, optimization and needs-based design of our website.

Legal basis: Art. 6 para. 1 letter a GDPR

Categories of data: usage data, connection data

Recipient of the data: None

Intended third country transfer: None

Do we store or read personal data on your device based on your consent? Yes, see the overview at the end of this privacy policy.

YouTube

Purpose of processing: Integration of videos via the video plugin of YouTube; personalization of our website.

Legal basis: Article 6(1)(a) GDPR

Categories of data: usage data, connection data

Recipient of the data: Google Ireland Ltd, Gordon House, Barrow Street Dublin 4 Ireland

Intended third country transfer: On a case-by-case basis USA (Based on the standard data protection clauses of the EU Commission, Article 46 Para. 2 lit.c GDPR)

Do we store or read personal data on your device based on your consent? Yes, see the overview at the end of this privacy policy.

III. Information on the storage period of consent-based cookies and similar technologies

In the following we inform you about the names and functional duration of the cookies and similar technologies used by the above mentioned plugins and services – in case of your consent – according to the following scheme:

Name of the service: Name of the cookie/similar technology (functional duration).

Access to a cookie/similar technologies is basically only possible from the Internet address from which the cookie is set. This means that we have no access to the cookies of the providers used (above). These have no access to our cookies. Third parties have no access to our cookies or those of the providers used. Access by third parties can only be gained through technical attacks which we cannot control and for which we are not responsible.

Cookie Name	Domain	Validity
1P_JAR	www.google.com	1 day
ANID	www.google.com	12 months
IDE	www.doubleclick.net	20 days
NID	www.google.com	6 months
OGPC	www.google.com	30 days
UULE	www.google.com	1 day
UserMatchHistory	www.linkedin.com	30 days
_cfduid	www.offers.odoscope.com	30 days
_cfduid	www.hscollectedforms.net	30 days
_cfduid	www.hsadspixel.net	30 days
_cfduid	www.offers.odoscope.com	session
_hssc	www.odoscope.com	1 day
_hssrc	www.odoscope.com	session
_hstc	www.odoscope.com	21 days
Hubspotuk	www.odoscope.com	session
_pk_id.7.e089	www.odoscope.com	13 months
_pk_ses.7.e089	www.odoscope.com	3 weeks
bcookie	www.linkedin.com	1 day
lang	www.ads.linkedIn.com	Session
lang	www.linkedin.com	1 day
lissc	www.linkedin.com	12 months
pull_language	www.odoscope.com	12 months

IV. Notes on external pages ODOSCOPE GmbH

Facebook page

Purpose of processing: We operate a page on our company at https://www.facebook.com/odoscope (“Facebook Page”). When you visit and use our Facebook page, Facebook can evaluate your usage behavior and provide us with information obtained from this (“Insights”). The use of the Page-Insights is for the purpose of economic optimization and demand-oriented design of our Internet presence.

Legal basis: Article 6(1)(f) GDPR

Categories of data: If applicable master data, if applicable contact data, content data, usage data, connection data

Recipient of the data: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland („Facebook“)(as jointly responsible – the substance of the agreement can be found at https://www.facebook.com/legal/terms/page_controller_addendum)

Intended third country transfer: None

Do we store or read personal data on your device based on your consent? No

LinkedIn page

Purpose of processing: We operate a page on our company at https://www.linkedin.com/company/odoscope (“LinkedIn Page”). When you visit and use our LinkedIn site, LinkedIn may evaluate your use of the LinkedIn site and provide us with information obtained from such use. This information is used for the purpose of economic optimisation and demand-oriented design of our website.

Legal basis: Art. 6 para. 1 letter f GDPR

Categories of data: If applicable master data, if applicable contact data, content data, usage data, connection data

Recipient of the data: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (as jointly responsible party – the substance of the agreement can be found at https://legal.linkedin.com/pages-joint-controller-addendum

Intended third country transfer: None

Do we store or read personal data on your device based on your consent? No

Twitter Account

Purpose of processing: We operate a page on our company at https://twitter.com/odoscope (“Twitter Account”). When visiting and using our Twitter account, Twitter can evaluate your usage behavior.

Legal basis: Article 6(1)(f) GDPR

Categories of data: If applicable master data, if applicable contact data, content data, usage data, connection data

Recipient of the data: Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, Ireland

Intended third country transfer: None

Do we store or read personal data on your device based on your consent? No

Xing page

Purpose of processing: We operate a page on our company (“Xing page”) at https://www.xing.com/companies/odoscopegmbh When you visit and use our Xing site, New Work SE (“Xing”) can evaluate your usage behaviour and provide us with information obtained from this. This information is used for the purposes of economic optimisation and demand-oriented design of our website.

Legal basis: Article 6(1)(f) GDPR

Categories of data: Master data, contact data, content data, usage data, connection data

Recipient of the data: New Work SE, Dammtorstrasse 30, 20354 Hamburg

Intended third country transfer: None

Do we store or read personal data on your device based on your consent? No

YouTube channel

Purpose of processing: We operate a page on our company at https://www.youtube.com/channel/UCQkGJ7acUiHAHTJJR5WRr-Q (“YouTube Channel”). When you visit and use our YouTube Channel, Google can evaluate your usage behaviour and provide us with information obtained from this. This information is used for the purpose of economic optimization and demand-oriented design of our Internet presence.

Legal basis: Art. 6 para. 1 letter f GDPR

Categories of data: Master data, contact data, content data, usage data, connection data

Recipient of the data: Google Ireland Ltd, Gordon House, Barrow Street Dublin 4 Ireland

Intended third country transfer: None

Do we store or read personal data on your device based on your consent? No

Cookie Consent

Purpose of processing: When you visit our website, certain information is stored on or read from your terminal device if this is absolutely necessary for the operation of our website. This includes information processed by the “Cookie Consent” service to ensure that only those cookies are set or read that are technically absolutely necessary to operate our website or to which you have consented. We have selected the operator according to data protection-friendly and technical criteria.

Legal basis: Art. 6 para. 1 lit. c, f GDPR

Data categories: Usage data, connection data

Recipients of the data: CookieYes Limited, 3 Warren Yard Warren Park, Wolverton Mill, Milton Keynes, MK12 5NW, United Kingdom.

Intended third country transfer: UK (adequacy decision).

Do we store or read personal data on your end device based on your consent? No

Google Ads Conversion Tracking

Purpose of processing: measuring the success of our Google Ads advertising campaigns.

Legal basis: Art. 6 para. 1 letter a GDPR

Data categories: Usage data, connection data

Recipients of the data: Google Ireland Ltd, Gordon House, Barrow Street Dublin 4 Ireland.

Intended third country transfer: In individual cases, USA (based on the standard data protection clauses of the EU Commission, Art. 46 para. 2 lit. c DSGVO).

Do we store or read out personal data on your end device based on your consent? Yes

Google Fonts

Purpose of processing: more personalized design of our website.

Legal basis: Art. 6 para. 1 lit. a DSGVO.

Data categories: Connection data

Recipients of the data: Google Ireland Ltd, Gordon House, Barrow Street Dublin 4 Ireland.

Intended third country transfer: In individual cases, USA.

Do we store or read out personal data on your end device based on your consent? No

Google CDN

Purpose of processing: Outsourcing of content to additional domains for website optimization.

Legal basis: Art. 6 para. 1 letter f DSGVO.

Data categories: Connection data, usage data

Recipients of the data: Google Ireland Ltd, Gordon House, Barrow Street Dublin 4 Ireland.

Intended third country transfer: In individual cases, USA

Do we store or read out personal data on your end device based on your consent? No

Google Double Click

Purpose of processing: marketing of advertising

Legal basis: Art. 6 para. 1 lit. A DSGVO

Data categories: Connection data, usage data

Recipients of the data: Google Ireland Ltd, Gordon House, Barrow Street Dublin 4 Ireland.

Intended third country transfer: In individual cases, USA

Do we store or read out personal data on your end device based on your consent? No

Google Tag Manager

We use the Google Tag Manager to integrate third-party content. This is a technical solution that does not itself store or read any cookies or similar technologies that require consent, but merely controls the conditions under which the other programs used on our website and described below are activated.

Status: March 2022