Privacy information


Partner

Information on how we process your personal data and your information rights in accordance with Articles 13, 14, and 21 of the General Data Protection Regulation (“GDPR”).

We hereby inform you about the processing of your personal data by us and the claims and rights to which you are entitled under the data protection regulations.



1. General Information

Who is responsible for data processing and who can I contact?

Controller

The legal person responsible for the collection, processing and / or use of personal data in connection with our websites and products (“Controller”) is:

odoscope GmbH
Lichtstraße 25
50825 Cologne
Germany
E-Mail: info@odoscope.com

Sollten Sie Fragen oder Anregungen zum Datenschutz haben, können Sie sich gerne auch an unsere Datenschutzbeauftragte wenden.



Data Protection Officer:

Dr. Judith Nink
Phone: +49(2238)5408700
E-Mail: privacy@odoscope.com
Fax: +49(2238)5408709



What sources and data categories do we use for processing your personal data?

Sources

Data you provided to us directly or indirectly through business cards; emails; professional social networks; our company website, or similar.

Categories of Personal Data

Contact data, contact person, communication data, bank details


The purposes for processing data

This data is collected and processed:



Legal Basis to Process Data

Collection and processing is necessary for the performance of a contract to which the data subject is a party or in order to take steps at the request of the data subject prior to entering into a contract (GDPR Art. 6(1)(b))

The personal data will be processed if required for (i) entering into a contract, (ii) the appropriate processing of our contract, or (iii) for the mutual fulfilment of obligations arising from the contract in accordance with Article 6(1)(b) of the GDPR.


Processing is necessary for our legitimate interests (GDPR Art. 6(1)(f))

If necessary, we process your data beyond the actual scope of performance of our contract to protect our legitimate interests and those of third parties, e.g. odoscope newsletters (information about our products) or odoscope news sent by our service providers.


Processing is based on your consent (GDPR Arts. 6(1)(a), 7)

By giving us your consent to process personal data for specific purposes (e.g. to send you newsletters and mailings), our processing of your personal data for those purposes is permitted. Consent that has been given can be withdrawn at any time. This also applies to withdrawing declarations of consent which may have been given to us before the GDPR became enforceable, i.e. before 25 May 2018. Please note that withdrawing your consent will only affect processing of personal information that would have occurred after the time of the withdrawal. Processing that took place before your withdrawal will remain unaffected by such withdrawal.


Processing is necessary for compliance with a legal obligation (GDPR Art. 6(1)(c))

As a company, we are also subject to various additional legal obligations, i.e. legal requirements. These additional obligations may include, but are not limited to:



What Happens to Your Data

Who may access your data?

Within odoscope, certain departments (e.g. respective executives) may receive the data as needed to fulfill our contractual and legal obligations (e.g. accounting receives invoicing data). In addition, we make use of various service providers and freelancers to fulfill our contractual and legal obligations. We may also transfer your personal data to other recipients outside of odoscope if this is necessary to fulfill any contractual and legal obligations. These other recipients may include, but are not limited to:

Contractors that we use, which include but are not limited to service providers and freelancers, may also receive personal data for these purposes (GDPR Art. 28). Such contractors include companies that provide banking services, accounting services, marketing services, IT services, logistics, printing services, telecommunications, debt collection, consulting, and sales and marketing.


How long do we store personal data?

Any personal data which we collect for the purposes of our contractual relationship will be stored until the end of the legal obligation to retain contract data (6 or 10 years after the end of the calendar year in which the contractual relationship was terminated). After this term, the data will be deleted, unless we can prove that continued retention is necessary for compliance with any obligation in accordance with GDPR Art. 6(1)(c). Such obligations may include, but are not limited to, tax and commercial-legal storage and documentation obligations under the German Commercial Code (HGB), the German Criminal Act (StGB), or the German Revenue Code (AO). Storage terms exceeding 6 or 10 years after the termination of a contract may also apply if agreed to in writing (GDPR Art. 6(1)(a)).


Do we transfer personal data to a third party seated in a non-EU/EEA country?

We transfer personal data to the following companies:

You can request a copy of the agreed EU Standard Contractual Clauses (processors) via email.



Rights of Data Subjects

What rights do you have?

In compliance with the GDPR and applicable EU and German national data protection laws, and to the extent legally permitted, you have the following rights to protect your personal data collected and processed by us:


Information, access, rectification and restriction rights

Upon request, you have the right to receive information about the personal data stored by us about you and information describing how we collect, process, and store your personal data. Further, you have the right to gain access to any of your personal data stored by us. You have the right to request from us the rectification of inaccurate personal data about you that we store. Taking into account the purposes of collecting and processing your data, you have the right to have incomplete personal data completed. You have the right to request restrictions on the processing of your personal data.


Right to data portability

You also have the right (1) to receive in a structured, commonly used, and machine-readable format all personal data about you that you have provided to us, and (2) to transmit that data to another controller.


Right to erasure of your data

You have the right to demand from us the erasure of your personal data, where – inter alia – one of the following grounds applies:

Please note, if data needs to be retained pursuant to the erasure exemptions provided in Article 17(3) of the GDPR, we will restrict the use of the respective data.


Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a supervisory authority in the Member State of your habitual residence, your place of work, or the place of the alleged infringement if you believe that the collection and processing of your personal data infringes the protections provided by the GDPR.


Right to object to the processing of your data

You have the right to object at any time to the collection and processing of your personal data on grounds relating to your particular situation when collection and processing of such data was based on our pursuing legitimate business interests (GDPR Art. 6(1)(f)).


Right to withdraw your consent at any time

You have the right to withdraw your consent at any time, when you have provided us with your consent for the collection and processing of your personal data for one or more specific purposes.


How to exercise your rights

To exercise your rights, please contact us via email (privacy@odoscope.com) or mail to:

odoscope GmbH
Lichtstraße 25
50825 Cologne
Germany


Are you obliged to provide personal data to us?

In connection with our contractual relationship, you are only obligated to provide us with personal data that is necessary for the performance of our contract or in order to take those steps that are necessary for you voluntarily entering into a contract, e.g. contact data, contact person, and bank details.



2. Your right to object

You have the right to object at any time to the collection and processing of your personal data on grounds relating to your particular situation when collection and processing of such data was based on our legitimate business interests (GDPR Art. 6(1)(f)). This also applies to any profiling (GDPR Art. 4) that was based on our legitimate business interests (GDPR Art. 6(1)(f) GDPR). If you object, we will no longer process your personal data, unless (1) we can prove compelling reasons to continue processing your personal data that outweigh your interests, rights, and freedoms; or (2) the processing serves to assert, exercise, or defend legal claims. To object, please contact us via email (privacy@odoscope.com) or mail to:

odoscope GmbH
Lichtstraße 25
50825 Cologne
Germany



3. Subcontractors / processors

odoscope is currently using the following categories of subcontractors in connection with the processing of your personal data. These subcontractors have entered into data processing agreements with us and will only process your personal data under our instructions:

Category of subcontractors Main subject of subcontracted services
Software service provider Customer Relation Management (CRM) tool, office tool for communication and filing, synchronisation between email and CRM, collecting electronic signatures, invoicing, emails, newsletter, marketing and sales software, digital project management tool, internal wiki