Information on how we process your personal data and your information rights in accordance with Articles 13, 14, and 21 of the General Data Protection Regulation (“GDPR”).
We hereby inform you about the processing of your personal data by us and the claims and rights to which you are entitled under the data protection regulations.
The legal person responsible for the collection, processing and / or use of personal data in connection with our websites and products (“Controller”) is:
Sollten Sie Fragen oder Anregungen zum Datenschutz haben, können Sie sich gerne auch an unsere Datenschutzbeauftragte wenden.
Dr. Judith Nink
Data you provided to us directly or indirectly through business cards; emails; professional social networks; our company website, or similar.
Categories of Personal Data
Contact data, contact person, communication data, bank details
This data is collected and processed:
The personal data will be processed if required for (i) entering into a contract, (ii) the appropriate processing of our contract, or (iii) for the mutual fulfilment of obligations arising from the contract in accordance with Article 6(1)(b) of the GDPR.
If necessary, we process your data beyond the actual scope of performance of our contract to protect our legitimate interests and those of third parties, e.g. odoscope newsletters (information about our products) or odoscope news sent by our service providers.
By giving us your consent to process personal data for specific purposes (e.g. to send you newsletters and mailings), our processing of your personal data for those purposes is permitted. Consent that has been given can be withdrawn at any time. This also applies to withdrawing declarations of consent which may have been given to us before the GDPR became enforceable, i.e. before 25 May 2018. Please note that withdrawing your consent will only affect processing of personal information that would have occurred after the time of the withdrawal. Processing that took place before your withdrawal will remain unaffected by such withdrawal.
As a company, we are also subject to various additional legal obligations, i.e. legal requirements. These additional obligations may include, but are not limited to:
Within odoscope, certain departments (e.g. respective executives) may receive the data as needed to fulfill our contractual and legal obligations (e.g. accounting receives invoicing data). In addition, we make use of various service providers and freelancers to fulfill our contractual and legal obligations. We may also transfer your personal data to other recipients outside of odoscope if this is necessary to fulfill any contractual and legal obligations. These other recipients may include, but are not limited to:
Contractors that we use, which include but are not limited to service providers and freelancers, may also receive personal data for these purposes (GDPR Art. 28). Such contractors include companies that provide banking services, accounting services, marketing services, IT services, logistics, printing services, telecommunications, debt collection, consulting, and sales and marketing.
Any personal data which we collect for the purposes of our contractual relationship will be stored until the end of the legal obligation to retain contract data (6 or 10 years after the end of the calendar year in which the contractual relationship was terminated). After this term, the data will be deleted, unless we can prove that continued retention is necessary for compliance with any obligation in accordance with GDPR Art. 6(1)(c). Such obligations may include, but are not limited to, tax and commercial-legal storage and documentation obligations under the German Commercial Code (HGB), the German Criminal Act (StGB), or the German Revenue Code (AO). Storage terms exceeding 6 or 10 years after the termination of a contract may also apply if agreed to in writing (GDPR Art. 6(1)(a)).
We transfer personal data to the following companies:
You can request a copy of the agreed EU Standard Contractual Clauses (processors) via email.
In compliance with the GDPR and applicable EU and German national data protection laws, and to the extent legally permitted, you have the following rights to protect your personal data collected and processed by us:
Upon request, you have the right to receive information about the personal data stored by us about you and information describing how we collect, process, and store your personal data. Further, you have the right to gain access to any of your personal data stored by us. You have the right to request from us the rectification of inaccurate personal data about you that we store. Taking into account the purposes of collecting and processing your data, you have the right to have incomplete personal data completed. You have the right to request restrictions on the processing of your personal data.
You also have the right (1) to receive in a structured, commonly used, and machine-readable format all personal data about you that you have provided to us, and (2) to transmit that data to another controller.
You have the right to demand from us the erasure of your personal data, where – inter alia – one of the following grounds applies:
Please note, if data needs to be retained pursuant to the erasure exemptions provided in Article 17(3) of the GDPR, we will restrict the use of the respective data.
You have the right to lodge a complaint with a supervisory authority in the Member State of your habitual residence, your place of work, or the place of the alleged infringement if you believe that the collection and processing of your personal data infringes the protections provided by the GDPR.
You have the right to object at any time to the collection and processing of your personal data on grounds relating to your particular situation when collection and processing of such data was based on our pursuing legitimate business interests (GDPR Art. 6(1)(f)).
You have the right to withdraw your consent at any time, when you have provided us with your consent for the collection and processing of your personal data for one or more specific purposes.
To exercise your rights, please contact us via email (firstname.lastname@example.org) or mail to:
In connection with our contractual relationship, you are only obligated to provide us with personal data that is necessary for the performance of our contract or in order to take those steps that are necessary for you voluntarily entering into a contract, e.g. contact data, contact person, and bank details.
You have the right to object at any time to the collection and processing of your personal data on grounds relating to your particular situation when collection and processing of such data was based on our legitimate business interests (GDPR Art. 6(1)(f)). This also applies to any profiling (GDPR Art. 4) that was based on our legitimate business interests (GDPR Art. 6(1)(f) GDPR). If you object, we will no longer process your personal data, unless (1) we can prove compelling reasons to continue processing your personal data that outweigh your interests, rights, and freedoms; or (2) the processing serves to assert, exercise, or defend legal claims. To object, please contact us via email (email@example.com) or mail to:
odoscope is currently using the following categories of subcontractors in connection with the processing of your personal data. These subcontractors have entered into data processing agreements with us and will only process your personal data under our instructions:
|Category of subcontractors||Main subject of subcontracted services|
|Software service provider||Customer Relation Management (CRM) tool, office tool for communication and filing, synchronisation between email and CRM, collecting electronic signatures, invoicing, emails, newsletter, marketing and sales software, digital project management tool, internal wiki|