Data protection information according to articles 13, 14 and 21 GDPR for the ODOSCOPE GmbH website
I. General information
1. Responsible
We, ODOSCOPE GmbH, take the protection of your personal data and the legal obligations serving this protection very seriously. The legal requirements demand comprehensive transparency regarding the processing of personal data. Only if the processing is comprehensible for you as a data subject, you will be sufficiently informed about the purpose, type and scope of the processing.
Our data protection declaration therefore explains in detail which personal data are processed by us when you use our website (https://www.odoscope.com/), all other websites that refer to it and in the other cases that may be explained here (for definitions see I.2.).
Responsible in the sense of the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG) and other data protection regulations is
ODOSCOPE GmbH
Aachener Straße 524-528
50933 Köln
Deutschland
Telefon: + 49 221 1653 97-80
Fax: +49 221 16 5397-85
E-Mail: info@odoscope.com
In the following referred to as “responsible person” or “we”.
You can reach the data protection officer at:
ODOSCOPE GmbH
Mr. Sascha Kremer
Aachener Straße 524-528
50933 Köln
E-Mail: privacy@odoscope.com
Please note that links on our website may take you to other websites that are not operated by us but by third parties. Such links are either clearly marked by us or are recognizable by a change in the address line of your browser. We are not responsible for compliance with data protection regulations and safe handling of your personal data on these websites operated by third parties.
2. Definitions
From the GDPR
This data protection declaration uses the terms of the legal text of the GDPR. You can view the definitions (Art. 4 GDPR), for example at https://eur-lex.europa.eu/legal-content/DE/TXT/?uri=CELEX:32016R0679
Cookies and similar technologies
Cookies are text files which are stored on your end device by a website or read out there. They contain combinations of letters and numbers, e.g. in order to recognise the user and his settings when connecting to the cookie-setting website again, to enable the user to remain logged in to a customer account or to statistically analyse a certain usage behaviour.
WebStorage technology enables variables and values to be stored locally in the user’s browser cache. The technology includes both the so-called “sessionStorage”, which remains stored until the browser tab is closed, and the “localStorage”, which is stored in the browser cache until the cache is emptied by the user. The localStorage technology makes it possible, among other things, to recognize the user and his settings when he visits our website.
Categories of data
When we specify the categories of data processed, this refers in particular to the following data: master data (e.g. name, address, dates of birth), contact data (e.g. e-mail addresses, telephone numbers, messenger services), content data (e.g. text entries, photographs, videos, contents of documents/files), contract data (e.g. subject matter of the contract, terms, customer category), payment data (e.g. bank details, payment history, use of other payment service providers), usage data (e.g. history on our website, use of certain content, access times, contact or order history), connection data (e.g. device information, IP addresses, URL referrers).
3. Information on data processing
We process personal data only to the extent permitted by law. Personal data will only be passed on in the cases described below. Personal data is protected by appropriate technical and organisational measures (e.g. pseudonymisation, encryption).
Unless we are required by law to store or disclose personal data to third parties (in particular law enforcement agencies), the decision as to which personal data is processed by us for how long and to what extent we disclose it depends on which functions of the website you use in each individual case.
4. Storage duration
Personal data shall be erased as soon as the purpose of the processing ceases to exist or a prescribed retention period expires, unless there is a need to retain personal data in order to conclude or fulfil a contract. As far as we have to inform you about the storage period of cookies and similar technologies, you will find the relevant information at the end of this privacy policy (under III. ).
Personal data that we process in the context of an application will be stored for a period of six months after the application process is completed.
5. Automated decisions in individual cases including profiling
Automated decisions in individual cases, including profiling, do not take place.
6. Rights of data subjects
As a data subject, you have the right to information in accordance with Art. 15 GDPR, the right to correction in accordance with Art. 16 GDPR, the right to deletion in accordance with Art. 17 GDPR, the right to restriction of processing in accordance with Art. 18 GDPR and the right to data transferability in accordance with Art. 20 GDPR. The right of information and the right of deletion are subject to the restrictions set out in Articles 34 and 35 of the Federal Data Protection Act. You have the right to complain to a data protection supervisory authority (Art. 77 GDPR in conjunction with Art. 19 BDSG).
The data protection supervisory authority responsible for us/ for our head office is: The State Commissioner for Data Protection of North Rhine-Westphalia, Kavalleriestrasse 2-4, 40213 Düsseldorf. However, you are free to complain to any other data protection supervisory authority.
7. Obligation of the responsible person to notify
We will notify all recipients to whom your personal data has been disclosed of any correction or deletion of your personal data or of any restriction on processing in accordance with Art. 16, Art. 17 Para. 1 and Art. 18 GDPR, unless such notification is impossible or involves a disproportionate effort. We will inform you of the recipients if you request.
8. Duty to provide
Unless otherwise explained below in the information on the legal basis, you are not obliged to provide personal data. However, in the cases of Art. 6 para. 1 letter b GDPR, the personal data is required for the performance or conclusion of a contract. If you do not provide the personal data concerned, the performance or conclusion of the contract is not possible. If you do not make the data available in the cases of Art. 6 para. 1 letter a, f GDPR, it is not possible to use the affected parts of our website.
9. Right of objection and withdrawal of consent
You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you which is carried out pursuant to Article 6, paragraph 1, letter e or f of the DPA. Where personal data are processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing.
In accordance with Art. 7 Para. 3 S. 1 GDPR, you have the right to revoke any consent given to us at any time. This does not affect the legality of the processing carried out on the basis of the consent until the revocation. The revocation therefore only applies to the processing planned after the revocation. The revocation is possible informally by post or e-mail. If you submit an objection, we will no longer process your personal data, unless another (legal) basis permits this. If, however, a revocation is made and there is no other legal basis, the personal data must be deleted immediately at your request in accordance with Art. 17 para. 1 letter b GDPR.
Objection and revocation can be made without any formality and should be addressed to:
ODOSCOPE GmbH
Aachener Straße 524-528
50933 Köln
Deutschland
Telefon: + 49 221 1653 97-80
Fax: +49 221 16 5397-85
E-Mail: info@odoscope.com
II. Data processing in connection with the use of our website
The use of the website and its functions regularly requires the processing of personal data.
1. Informational use of the website
Purpose of processing: Funktionsfähigkeit und Optimierung der Website, sowie Gewährleistung der Sicherheit unserer informationstechnischen Systeme bei rein informatorischer Nutzung (ohne Verwendung von Zusatzfunktionen wie Kontaktformularen oder Social Media Plugins) unserer Website.
Legal basis: Art. 6 Abs. 1 Buchst. f DSGVO
Categories of data: usage data, connection data
Recipient of the data: Mittwald CM Service GmbH & Co. KG Webhoster
Intended third country transfer: None
Do we store or read personal data on your device based on your consent? No
2. Functions on our website
Subscription to our newsletter
Purpose of processing: Subscription to our newsletter on our news and offers; proof of your consent; ensuring the security of our information technology systems; personalization of our newsletter based on your usage behavior.
Legal basis: Article 6(1)(a), (f) GDPR
Categories of data: Master data, contact data, usage data, connection data
Recipient of the data: HubSpot European Office, Ground Floor, Two Dockland Central Guild Street, Dublin 1, Ireland
Intended third country transfer: USA (in accordance with Decision (EU) 2016/1250 – “EU-US data protection shield”, standard data protection clauses in accordance with Art. 46 Para. 2 lit. c GDPR have also been concluded)
Do we store or read personal data on your device based on your consent? Yes, see the overview at the end of this privacy policy.
Request for whitepapers, checklists, e-books
Purpose of processing: Request or download of whitepapers, checklists, e-books etc.; evaluation of your usage behavior.
Legal basis: Article 6(1)(a), (b) GDPR
Categories of data: Master data, contact data, usage data and connection data
Recipient of the data: HubSpot European Office, Ground Floor, Two Dockland Central Guild Street, Dublin 1, Ireland
Intended third country transfer: USA (in accordance with Decision (EU) 2016/1250 – “EU-US data protection shield”, standard data protection clauses in accordance with Art. 46 Para. 2 lit. c GDPR have also been concluded)
Do we store or read personal data on your device based on your consent? Yes, see the overview at the end of this privacy policy.
Application by e-mail
Purpose of processing: Processing of your application and carrying out of the application procedure; consideration of your application in future application procedures with us, provided you have given your express consent.
Legal basis: Article 88(1) GDPR in conjunction § Article 26 (1) sentence 1 BDSG; for storage for future application procedures Article 6 (1) letter a GDPR in conjunction with Art. 7 GDPR, § 26 Paragraph 2 BDSG
Categories of data: Master data, contact data, content data, connection data; if applicable, special categories of personal data within the meaning of Art. 9 para. 1 GDPR (only the data relating to your application that you provide us with will be stored)
Recipient of the data: None
Intended third country transfer: None
Do we store or read personal data on your device based on your consent? No
Customer account (CRM)
Purpose of processing: Use of a customer account; ensuring data and information security; login to personal area; if necessary, further description by ODOSCOPE.
Legal basis: Article 6(1)(b), (f) GDPR
Categories of data: Master data, contact data, contract data, payment data, usage data, connection data
Recipient of the data: HubSpot European Office, Ground Floor, Two Dockland Central Guild Street, Dublin 1, Ireland
Intended third country transfer: USA (in accordance with Decision (EU) 2016/1250 – “EU-US data protection shield”, standard data protection clauses in accordance with Art. 46 para. 2 lit. c GDPR have also been concluded)
Do we store or read personal data on your device based on your consent? No
Contact form
Purpose of processing: Processing of your contact request; evaluation of your communication with us Legal basis: Article 6(1)(a), (f) DPA; Article 6(1)(b) DPA (if the request leads to a later conclusion of a contract or concerns an existing contract)
Legal basis: Contact data, master data, content data, usage data, connection data (depending on the content of your request)
Categories of data: HubSpot European Office, Ground Floor, Two Dockland Central Guild Street, Dublin 1, Ireland
Recipient of the data: USA (in accordance with Decision (EU) 2016/1250 – “EU-US data protection shield”, standard data protection clauses have also been concluded in accordance with Art. 46 Para. 2 lit. c GDPR)
Intended third country transfer: Yes, see the overview at the end of this privacy policy.
3. Embedded tools and services
HubSpot Marketing Hub
Purpose of processing: E-mail marketing, especially newsletter dispatch; evaluation of the click and usage behaviour for optimisation and demand-oriented design of the website; connection to the HubSpot CRM.
Legal basis: Article 6(1)(a) GDPR
Categories of data: Contact data, if applicable content data, usage data, connection data
Recipient of the data: HubSpot European Office, Ground Floor, Two Dockland Central Guild Street, Dublin 1, Ireland
Intended third country transfer: USA (in accordance with Decision (EU) 2016/1250 – “EU-US data protection shield”, standard data protection clauses in accordance with Art. 46 Para. 2 lit. c GDPR have also been concluded)
Do we store or read personal data on your device based on your consent? Yes, see the overview at the end of this privacy policy.
LinkedIn Conversion Tracking – LinkedIn Insight Tag
Purpose of processing: measuring the impact of our advertisements and displaying advertising that is in line with our interests.
Legal basis: Art. 6 para. 1 letter a GDPR
Categories of data: usage data, connection data
Recipient of the data: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”)
Intended third country transfer: On a case-by-case basis USA (according to decision (EU) 2016/1250 – “EU-US data protection shield”).
Do we store or read personal data on your device based on your consent? Yes, see the overview at the end of this privacy policy.
Matomo
Purpose of processing: Statistical evaluation, optimization and needs-based design of our website.
Legal basis: Art. 6 para. 1 letter a GDPR
Categories of data: usage data, connection data
Recipient of the data: None
Intended third country transfer: None
Do we store or read personal data on your device based on your consent? Yes, see the overview at the end of this privacy policy.
YouTube
Purpose of processing: Integration of videos via the video plugin of YouTube; personalization of our website.
Legal basis: Article 6(1)(a) GDPR
Categories of data: usage data, connection data
Recipient of the data: Google Ireland Ltd, Gordon House, Barrow Street Dublin 4 Ireland
Intended third country transfer: In individual cases USA (according to resolution (EU) 2016/1250 – “EU-US data protection shield”)
Do we store or read personal data on your device based on your consent? Yes, see the overview at the end of this privacy policy.
III. Information on the storage period of consent-based cookies and similar technologies
In the following we inform you about the names and functional duration of the cookies and similar technologies used by the above mentioned plugins and services – in case of your consent – according to the following scheme:
Name of the service: Name of the cookie/similar technology (functional duration).
Access to a cookie/similar technologies is basically only possible from the Internet address from which the cookie is set. This means that we have no access to the cookies of the providers used (above). These have no access to our cookies. Third parties have no access to our cookies or those of the providers used. Access by third parties can only be gained through technical attacks which we cannot control and for which we are not responsible.
| Cookie Name | Domain | Validity |
|---|---|---|
| 1P_JAR | www.google.com | 1 day |
| ANID | www.google.com | 12 months |
| IDE | www.doubleclick.net | 20 days |
| NID | www.google.com | 6 months |
| OGPC | www.google.com | 30 days |
| UULE | www.google.com | 1 day |
| UserMatchHistory | www.linkedin.com | 30 days |
| _cfduid | www.offers.odoscope.com | 30 days |
| _cfduid | www.hscollectedforms.net | 30 days |
| _cfduid | www.hsadspixel.net | 30 days |
| _cfduid | www.offers.odoscope.com | Session |
| _hssc | www.odoscope.com | 1 day |
| _hssrc | www.odoscope.com | Session |
| _hstc | www.odoscope.com | 21 days |
| _pk_id.7.e089 | www.odoscope.com | 13 months |
| _pk_ses.7.e089 | www.odoscope.com | 3 weeks |
| bcookie | www.linkedin.com | 1 day |
| hubspotutk | www.odoscope.com | Session |
| lang | www.ads.linkedin.com | Session |
| lang | www.linkedin.com | 1 day |
| lissc | www.linkedin.com | 12 months |
| pll_language | www.odoscope.com | 12 months |
IV. Notes on external pages ODOSCOPE GmbH
Facebook page
Purpose of processing: We operate a page on our company at https://www.facebook.com/odoscope (“Facebook Page”). When you visit and use our Facebook page, Facebook can evaluate your usage behavior and provide us with information obtained from this (“Insights”). The use of the Page-Insights is for the purpose of economic optimization and demand-oriented design of our Internet presence.
Legal basis: Article 6(1)(f) GDPR
Categories of data: If applicable master data, if applicable contact data, content data, usage data, connection data
Recipient of the data: Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (as jointly responsible – the substance of the agreement can be found at https://www.facebook.com/legal/terms/page_controller_addendum
Intended third country transfer: None
Do we store or read personal data on your device based on your consent? No
LinkedIn page
Purpose of processing: We operate a page on our company at https://www.linkedin.com/company/odoscope (“LinkedIn Page”). When you visit and use our LinkedIn site, LinkedIn may evaluate your use of the LinkedIn site and provide us with information obtained from such use. This information is used for the purpose of economic optimisation and demand-oriented design of our website.
Legal basis: Art. 6 para. 1 letter f GDPR
Categories of data: If applicable master data, if applicable contact data, content data, usage data, connection data
Recipient of the data: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (as jointly responsible party – the substance of the agreement can be found at https://legal.linkedin.com/pages-joint-controller-addendum
Intended third country transfer: None
Do we store or read personal data on your device based on your consent? No
Twitter Account
Purpose of processing: We operate a page on our company at https://twitter.com/odoscope (“Twitter Account”). When visiting and using our Twitter account, Twitter can evaluate your usage behavior.
Legal basis: Article 6(1)(f) GDPR
Categories of data: If applicable master data, if applicable contact data, content data, usage data, connection data
Recipient of the data: Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, Ireland
Intended third country transfer: None
Do we store or read personal data on your device based on your consent? No
Xing page
Purpose of processing: We operate a page on our company (“Xing page”) at https://www.xing.com/companies/odoscopegmbh When you visit and use our Xing site, New Work SE (“Xing”) can evaluate your usage behaviour and provide us with information obtained from this. This information is used for the purposes of economic optimisation and demand-oriented design of our website.
Legal basis: Article 6(1)(f) GDPR
Categories of data: Master data, contact data, content data, usage data, connection data
Recipient of the data: New Work SE, Dammtorstrasse 30, 20354 Hamburg
Intended third country transfer: None
Do we store or read personal data on your device based on your consent? No
YouTube channel
Purpose of processing: We operate a page on our company at https://www.youtube.com/channel/UCQkGJ7acUiHAHTJJR5WRr-Q (“YouTube Channel”). When you visit and use our YouTube Channel, Google can evaluate your usage behaviour and provide us with information obtained from this. This information is used for the purpose of economic optimization and demand-oriented design of our Internet presence.
Legal basis: Art. 6 para. 1 letter f GDPR
Categories of data: Master data, contact data, content data, usage data, connection data
Recipient of the data: Google Ireland Ltd, Gordon House, Barrow Street Dublin 4 Ireland
Intended third country transfer: None
Do we store or read personal data on your device based on your consent? No
Status: April 2020
