Data protection information according to articles 13, 14 and 21 GDPR for the ODOSCOPE GmbH website

I. General information

1. Responsible

We, ODOSCOPE GmbH, take the protection of your personal data and the legal obligations serving this protection very seriously. The legal requirements demand comprehensive transparency regarding the processing of personal data. Only if the processing is comprehensible for you as a data subject, you will be sufficiently informed about the purpose, type and scope of the processing.

Our data protection declaration therefore explains in detail which personal data are processed by us when you use our website (https://www.odoscope.com/), all other websites that refer to it and in the other cases that may be explained here (for definitions see I.2.).

Responsible in the sense of the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG) and other data protection regulations is

ODOSCOPE GmbH
Aachener Straße 524-528
50933 Köln
Deutschland
Telefon: + 49 221 1653 97-80
Fax: +49 221 16 5397-85
E-Mail: info[at]odoscope.com

In the following referred to as “responsible person” or “we”.

You can reach the data protection officer at:

ODOSCOPE GmbH
Frau Dr. Judith Nink
Aachener Straße 524-528
50933 Köln
E-Mail: privacy[at]odoscope.com

Please note that links on our website may take you to other websites that are not operated by us but by third parties. Such links are either clearly marked by us or are recognizable by a change in the address line of your browser. We are not responsible for compliance with data protection regulations and safe handling of your personal data on these websites operated by third parties.

2. Definitions

From the GDPR

This data protection declaration uses the terms of the legal text of the GDPR. You can view the definitions (Art. 4 GDPR), for example at https://eur-lex.europa.eu/legal-content/DE/TXT/?uri=CELEX:32016R0679


Cookies and similar technologies

Cookies are text files which are stored on your end device by a website or read out there. They contain combinations of letters and numbers, e.g. in order to recognise the user and his settings when connecting to the cookie-setting website again, to enable the user to remain logged in to a customer account or to statistically analyse a certain usage behaviour.

WebStorage technology enables variables and values to be stored locally in the user’s browser cache. The technology includes both the so-called “sessionStorage” , which remains stored until the browser tab is closed, and the “localStorage”, which is stored in the browser cache until the cache is emptied by the user. The localStorage technology makes it possible, among other things, to recognize the user and his settings when he visits our website.


Categories of data

When we specify the categories of data processed, this refers in particular to the following data: master data (e.g. name, address, dates of birth), contact data (e.g. e-mail addresses, telephone numbers, messenger services), content data (e.g. text entries, photographs, videos, contents of documents/files), contract data (e.g. subject matter of the contract, terms, customer category), payment data (e.g. bank details, payment history, use of other payment service providers), usage data (e.g. history on our website, use of certain content, access times, contact or order history), connection data (e.g. device information, IP addresses, URL referrers).

3. Information on data processing

We process personal data only to the extent permitted by law. Personal data will only be passed on in the cases described below. Personal data is protected by appropriate technical and organisational measures (e.g. pseudonymisation, encryption).

Unless we are required by law to store or disclose personal data to third parties (in particular law enforcement agencies), the decision as to which personal data is processed by us for how long and to what extent we disclose it depends on which functions of the website you use in each individual case.

4. Storage duration

Personal data shall be erased as soon as the purpose of the processing ceases to exist or a prescribed retention period expires, unless there is a need to retain personal data in order to conclude or fulfil a contract. As far as we have to inform you about the storage period of cookies and similar technologies, you will find the relevant information at the end of this privacy policy (under III. ).

Personal data that we process in the context of an application will be stored for a period of six months after the application process is completed.

5. Automated decisions in individual cases including profiling

Automated decisions in individual cases, including profiling, do not take place.

6. Rechte betroffener Personen

As a data subject, you have the right to information in accordance with Art. 15 GDPR, the right to correction in accordance with Art. 16 GDPR, the right to deletion in accordance with Art. 17 GDPR, the right to restriction of processing in accordance with Art. 18 GDPR and the right to data transferability in accordance with Art. 20 GDPR. The right of information and the right of deletion are subject to the restrictions set out in Articles 34 and 35 of the Federal Data Protection Act. You have the right to complain to a data protection supervisory authority (Art. 77 GDPR in conjunction with Art. 19 BDSG).

The data protection supervisory authority responsible for us/ for our head office is: The State Commissioner for Data Protection of North Rhine-Westphalia, Kavalleriestrasse 2-4, 40213 Düsseldorf. However, you are free to complain to any other data protection supervisory authority.

7. Obligation of the responsible person to notify

We will notify all recipients to whom your personal data has been disclosed of any correction or deletion of your personal data or of any restriction on processing in accordance with Art. 16, Art. 17 Para. 1 and Art. 18 GDPR, unless such notification is impossible or involves a disproportionate effort. We will inform you of the recipients if you request.

8. Duty to provide

Unless otherwise explained below in the information on the legal basis, you are not obliged to provide personal data. However, in the cases of Art. 6 para. 1 letter b GDPR, the personal data is required for the performance or conclusion of a contract. If you do not provide the personal data concerned, the performance or conclusion of the contract is not possible. If you do not make the data available in the cases of Art. 6 para. 1 letter a, f GDPR, it is not possible to use the affected parts of our website.

9. Right of objection and withdrawal of consent

You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you which is carried out pursuant to Article 6, paragraph 1, letter e or f of the DPA. Where personal data are processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing.

In accordance with Art. 7 Para. 3 S. 1 GDPR, you have the right to revoke any consent given to us at any time. This does not affect the legality of the processing carried out on the basis of the consent until the revocation. The revocation therefore only applies to the processing planned after the revocation. The revocation is possible informally by post or e-mail. If you submit an objection, we will no longer process your personal data, unless another (legal) basis permits this. If, however, a revocation is made and there is no other legal basis, the personal data must be deleted immediately at your request in accordance with Art. 17 para. 1 letter b GDPR.

Objection and revocation can be made without any formality and should be addressed to:

ODOSCOPE GmbH
Aachener Straße 524-528
50933 Köln
Deutschland
Telefon: + 49 221 1653 97-80
Fax: +49 221 16 5397-85
E-Mail: info[at]odoscope.com


II. Data processing in connection with the use of our website

The use of the website and its functions regularly requires the processing of personal data.

1. Informational use of the website

Purpose of processing: Funktionsfähigkeit und Optimierung der Website, sowie Gewährleistung der Sicherheit unserer informationstechnischen Systeme bei rein informatorischer Nutzung (ohne Verwendung von Zusatzfunktionen wie Kontaktformularen oder Social Media Plugins) unserer Website.

Legal basis: Art. 6 Abs. 1 Buchst. f DSGVO

Categories of data: usage data, connection data

Recipient of the data: Mittwald CM Service GmbH & Co. KG Webhoster

Intended third country transfer: None

Do we store or read personal data on your device based on your consent? No


2. Functions on our website

Subscription to our newsletter

Purpose of processing: Subscription to our newsletter on our news and offers; proof of your consent; ensuring the security of our information technology systems; personalization of our newsletter based on your usage behavior.

Legal basis: Article 6(1)(a), (f) GDPR

Categories of data: Master data, contact data, usage data, connection data

Recipient of the data: HubSpot European Office, Ground Floor, Two Dockland Central Guild Street, Dublin 1, Ireland

Intended third country transfer: USA (in accordance with Decision (EU) 2016/1250 – “EU-US data protection shield”, standard data protection clauses in accordance with Art. 46 Para. 2 lit. c GDPR have also been concluded)

Do we store or read personal data on your device based on your consent? Yes, see the overview at the end of this privacy policy.


Request for whitepapers, checklists, e-books

Purpose of processing: Request or download of whitepapers, checklists, e-books etc.; evaluation of your usage behavior.

Legal basis: Article 6(1)(a), (b) GDPR

Categories of data: Master data, contact data, usage data and connection data

Recipient of the data: HubSpot European Office, Ground Floor, Two Dockland Central Guild Street, Dublin 1, Ireland

Intended third country transfer: USA (in accordance with Decision (EU) 2016/1250 – “EU-US data protection shield”, standard data protection clauses in accordance with Art. 46 Para. 2 lit. c GDPR have also been concluded)

Do we store or read personal data on your device based on your consent? Yes, see the overview at the end of this privacy policy.


Application by e-mail

Purpose of processing: Processing of your application and carrying out of the application procedure; consideration of your application in future application procedures with us, provided you have given your express consent.

Legal basis: Article 88(1) GDPR in conjunction § Article 26 (1) sentence 1 BDSG; for storage for future application procedures Article 6 (1) letter a GDPR in conjunction with Art. 7 GDPR, § 26 Paragraph 2 BDSG

Categories of data: Master data, contact data, content data, connection data; if applicable, special categories of personal data within the meaning of Art. 9 para. 1 GDPR (only the data relating to your application that you provide us with will be stored)

Recipient of the data: None

Intended third country transfer: None

Do we store or read personal data on your device based on your consent? No


Customer account (CRM)

Purpose of processing: Use of a customer account; ensuring data and information security; login to personal area; if necessary, further description by ODOSCOPE.

Legal basis: Article 6(1)(b), (f) GDPR

Categories of data: Master data, contact data, contract data, payment data, usage data, connection data

Recipient of the data: HubSpot European Office, Ground Floor, Two Dockland Central Guild Street, Dublin 1, Ireland

Intended third country transfer: USA (in accordance with Decision (EU) 2016/1250 – “EU-US data protection shield”, standard data protection clauses in accordance with Art. 46 para. 2 lit. c GDPR have also been concluded)

Do we store or read personal data on your device based on your consent? No


Contact form

Purpose of processing: Processing of your contact request; evaluation of your communication with us Legal basis: Article 6(1)(a), (f) DPA; Article 6(1)(b) DPA (if the request leads to a later conclusion of a contract or concerns an existing contract)

Legal basis: Contact data, master data, content data, usage data, connection data (depending on the content of your request)

Categories of data: HubSpot European Office, Ground Floor, Two Dockland Central Guild Street, Dublin 1, Ireland

Recipient of the data: USA (in accordance with Decision (EU) 2016/1250 – “EU-US data protection shield”, standard data protection clauses have also been concluded in accordance with Art. 46 Para. 2 lit. c GDPR)

Intended third country transfer: Yes, see the overview at the end of this privacy policy.


3. Embedded tools and services

HubSpot Marketing Hub

Purpose of processing: E-mail marketing, especially newsletter dispatch; evaluation of the click and usage behaviour for optimisation and demand-oriented design of the website; connection to the HubSpot CRM.

Legal basis: Article 6(1)(a) GDPR

Categories of data: Contact data, if applicable content data, usage data, connection data

Recipient of the data: HubSpot European Office, Ground Floor, Two Dockland Central Guild Street, Dublin 1, Ireland

Intended third country transfer: USA (in accordance with Decision (EU) 2016/1250 – “EU-US data protection shield”, standard data protection clauses in accordance with Art. 46 Para. 2 lit. c GDPR have also been concluded)

Do we store or read personal data on your device based on your consent? Yes, see the overview at the end of this privacy policy.


LinkedIn Conversion Tracking – LinkedIn Insight Tag

Purpose of processing: measuring the impact of our advertisements and displaying advertising that is in line with our interests.

Legal basis: Art. 6 para. 1 letter a GDPR

Categories of data: usage data, connection data

Recipient of the data: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”)

Intended third country transfer: On a case-by-case basis USA (according to decision (EU) 2016/1250 – “EU-US data protection shield”).

Do we store or read personal data on your device based on your consent? Yes, see the overview at the end of this privacy policy.


Matomo

Purpose of processing: Statistical evaluation, optimization and needs-based design of our website.

Legal basis: Art. 6 para. 1 letter a GDPR

Categories of data: usage data, connection data

Recipient of the data: None

Intended third country transfer: None

Do we store or read personal data on your device based on your consent? Yes, see the overview at the end of this privacy policy.


YouTube

Purpose of processing: Integration of videos via the video plugin of YouTube; personalization of our website.

Legal basis: Article 6(1)(a) GDPR

Categories of data: usage data, connection data

Recipient of the data: Google Ireland Ltd, Gordon House, Barrow Street Dublin 4 Ireland

Intended third country transfer: In individual cases USA (according to resolution (EU) 2016/1250 – “EU-US data protection shield”)

Do we store or read personal data on your device based on your consent? Yes, see the overview at the end of this privacy policy.


III. Information on the storage period of consent-based cookies and similar technologies

In the following we inform you about the names and functional duration of the cookies and similar technologies used by the above mentioned plugins and services – in case of your consent – according to the following scheme:

Name des Dienstes: Name des Cookies/der ähnlichen Technologie (Funktionsdauer).

Access to a cookie/similar technologies is basically only possible from the Internet address from which the cookie is set. This means that we have no access to the cookies of the providers used (above). These have no access to our cookies. Third parties have no access to our cookies or those of the providers used. Access by third parties can only be gained through technical attacks which we cannot control and for which we are not responsible.

Cookie Name Domain Validity
1P_JAR www.google.com 1 day
ANID www.google.com 12 months
IDE www.doubleclick.net 20 days
NID www.google.com 6 months
OGPC www.google.com 30 days
UULE www.google.com 1 day
UserMatchHistory www.linkedin.com 30 days
_cfduid www.offers.odoscope.com 30 days
_cfduid www.hscollectedforms.net 30 days
_cfduid www.hsadspixel.net 30 days
_cfduid www.offers.odoscope.com Session
_hssc www.odoscope.com 1 day
_hssrc www.odoscope.com Session
_hstc www.odoscope.com 21 days
_pk_id.7.e089 www.odoscope.com 13 months
_pk_ses.7.e089 www.odoscope.com 3 weeks
bcookie www.linkedin.com 1 day
hubspotutk www.odoscope.com Session
lang www.ads.linkedin.com Session
lang www.linkedin.com 1 day
lissc www.linkedin.com 12 months
pll_language www.odoscope.com 12 months

IV. Notes on external pages ODOSCOPE GmbH

Facebook page

Purpose of processing: We operate a page on our company at https://www.facebook.com/odoscope (“Facebook Page”). When you visit and use our Facebook page, Facebook can evaluate your usage behavior and provide us with information obtained from this (“Insights”). The use of the Page-Insights is for the purpose of economic optimization and demand-oriented design of our Internet presence.

Legal basis: Article 6(1)(f) GDPR

Categories of data: If applicable master data, if applicable contact data, content data, usage data, connection data

Recipient of the data: Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (as jointly responsible – the substance of the agreement can be found at https://www.facebook.com/legal/terms/page_controller_addendum

Intended third country transfer: None

Do we store or read personal data on your device based on your consent? No


LinkedIn page

Purpose of processing: We operate a page on our company at https://www.linkedin.com/company/odoscope (“LinkedIn Page”). When you visit and use our LinkedIn site, LinkedIn may evaluate your use of the LinkedIn site and provide us with information obtained from such use. This information is used for the purpose of economic optimisation and demand-oriented design of our website.

Legal basis: Art. 6 para. 1 letter f GDPR

Categories of data: If applicable master data, if applicable contact data, content data, usage data, connection data

Recipient of the data: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (as jointly responsible party – the substance of the agreement can be found at https://legal.linkedin.com/pages-joint-controller-addendum

Intended third country transfer: None

Do we store or read personal data on your device based on your consent? No


Twitter Account

Purpose of processing: We operate a page on our company at https://twitter.com/odoscope (“Twitter Account”). When visiting and using our Twitter account, Twitter can evaluate your usage behavior.

Legal basis: Article 6(1)(f) GDPR

Categories of data: If applicable master data, if applicable contact data, content data, usage data, connection data

Recipient of the data: Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, Ireland

Intended third country transfer: None

Do we store or read personal data on your device based on your consent? No


Xing page

Purpose of processing: We operate a page on our company (“Xing page”) at https://www.xing.com/companies/odoscopegmbh When you visit and use our Xing site, New Work SE (“Xing”) can evaluate your usage behaviour and provide us with information obtained from this. This information is used for the purposes of economic optimisation and demand-oriented design of our website.

Legal basis: Article 6(1)(f) GDPR

Categories of data: Master data, contact data, content data, usage data, connection data

Recipient of the data: New Work SE, Dammtorstrasse 30, 20354 Hamburg

Intended third country transfer: None

Do we store or read personal data on your device based on your consent? No


YouTube Kanal

Purpose of processing: We operate a page on our company at https://www.youtube.com/channel/UCQkGJ7acUiHAHTJJR5WRr-Q (“YouTube Channel”). When you visit and use our YouTube Channel, Google can evaluate your usage behaviour and provide us with information obtained from this. This information is used for the purpose of economic optimization and demand-oriented design of our Internet presence.

Legal basis: Art. 6 para. 1 letter f GDPR

Categories of data: Master data, contact data, content data, usage data, connection data

Recipient of the data: Google Ireland Ltd, Gordon House, Barrow Street Dublin 4 Ireland

Intended third country transfer: None

Do we store or read personal data on your device based on your consent? No

Status: April 2020

Contact form