Data protection
The protection of your personal and non-personal data is very important to us! Please contact us if you have any questions about data protection and data security!
Personal data (hereinafter mostly referred to as “data”) is only processed by us to the extent necessary and for the purpose of providing a functional and user-friendly website, including its content and the services offered there.
According to Art. 4 clause 1 of Regulation (EU) 2016/679, the General Data Protection Regulation (hereinafter referred to as “GDPR”), “processing” means any operation or set of operations carried out with or without the aid of automated procedures in connection with personal data, such as collecting, recording, organizing, structuring, storing, adapting or altering, retrieving, consulting, using, disclosing by transmission, disseminating or otherwise making available, comparing or linking, restricting, erasing or destroying.
With the following data protection declaration, we inform you in particular about the type, scope, purpose, duration and legal basis of the processing of personal data, insofar as we decide either alone or together with others on the purposes and means of processing. We also inform you below about the third-party components we use for optimization purposes and to increase the quality of use, insofar as third parties process data under their own responsibility.
This declaration applies exclusively in German.
Our privacy policy is structured as follows:
- Information about us as the controller
- Rights of users and data subjects
- Information on data processing
I. Information about us as the controller
The responsible provider of this website in terms of data protection law is:
Oyaso GmbH
Charlottenstrasse 16
10117 Berlin
Germany
Phone: +49 (0)30 54908477-0
E-mail: dataprotection@oyaso.com
II. Rights of users and data subjects
With regard to the data processing described in more detail below, users and data subjects have the right
- to confirmation as to whether data concerning them is being processed, to information about the processed data, to further information about the data processing, and to copies of the data (cf. also Art. 15 GDPR);
- to rectification or completion of incorrect or incomplete data (cf. also Art. 16 GDPR);
- to the immediate erasure of the data concerning them (cf. also Art. 17 GDPR) or, alternatively, if further processing is required in accordance with Art. 17 para. 3 GDPR, the restriction of processing in accordance with Art. 18 GDPR;
- to receive the data concerning them and provided by them and to transfer this data to other providers/controllers (cf. also Art. 20 GDPR);
- to lodge a complaint with the supervisory authority if they are of the opinion that the data concerning them is being processed by the provider in breach of data protection regulations (cf. also Art. 77 GDPR).
In addition, the provider is obliged to inform all recipients to whom data has been disclosed by the provider of any rectification or erasure of data or restriction of processing carried out on the basis of Articles 16, 17 para. 1, 18 GDPR. However, this obligation does not apply if this notification is impossible or involves a disproportionate effort. Notwithstanding this, the user has a right to information about these recipients.
Likewise, according to Art. 21 GDPR, users and data subjects have the right to object to the future processing of data concerning them, provided that the data is processed by the provider in accordance with Art. 6 para. 1 lit. f) GDPR. In particular, an objection to data processing for the purpose of direct advertising is permitted.
III. Information on data processing
Your data processed when using our website will be deleted or blocked as soon as the purpose of the storage no longer applies, the deletion of the data does not conflict with any statutory retention obligations and no other information is subsequently provided on individual processing procedures.
Server data
For technical reasons, in particular to ensure a secure and stable Internet presence, data is transmitted to us or to our web space provider by your Internet browser. With these so-called server log files, the type and version of your Internet browser, the operating system, the website from which you have switched to our Internet presence (referrer URL), the website(s) of our Internet presence that you visit, the date and time of the respective access and the IP address of the Internet connection from which our Internet presence is used are collected, among other things.
The data collected in this way is stored temporarily, but not together with other data about you.
This storage takes place on the legal basis of Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the improvement, stability, functionality and security of our website.
The data will be deleted after seven days at the latest, unless further storage is required for evidence purposes. Otherwise, the data is excluded from deletion in whole or in part until an incident has been finally clarified.
We use the Sentry service from Functional Software, Inc. 132 Hawthorne St San Francisco, CA 94107 to store the server data. An adequate level of data protection is guaranteed by the use of standard contractual clauses of the EU Commission within the meaning of Art. 46 para. 2 lit. c) GDPR.
Cookies
a) Session cookies
We use so-called cookies on our website. Cookies are small text files or other storage technologies that are placed and stored on your end device by the Internet browser you use. These cookies are used to process certain information from you, such as your browser or location data or your IP address, on an individual basis.
This processing makes our website more user-friendly, effective and secure, as the processing enables, for example, the reproduction of our website in different languages or the offer of a shopping cart function.
The legal basis for this processing is Art. 6 para. 1 lit. b) GDPR, insofar as these cookies process data for contract initiation or contract fulfillment.
If the processing does not serve to initiate or fulfill a contract, our legitimate interest lies in improving the functionality of our website. The legal basis in this case is Art. 6 para. 1 lit. f) GDPR.
These session cookies are deleted when you close your Internet browser.
b) Third-party cookies
Our website may also use cookies from partner companies with whom we work for the purposes of advertising, analysis, or the functionalities of our website.
Please refer to the following information for details, in particular the purposes and legal basis for processing such third-party cookies.
c) Removal option
You can prevent or restrict the installation of cookies by changing the settings in your Internet browser. You can also delete cookies that have already been saved at any time. However, the steps and measures required for this depend on the specific Internet browser you are using. If you have any questions, please use the help function or documentation of your Internet browser or contact its manufacturer or support. In the case of so-called Flash cookies, however, processing cannot be prevented via the browser settings. Instead, you must change the settings of your Flash player. The steps and measures required for this also depend on the specific Flash player you are using. If you have any questions, please also use the help function or documentation of your Flash player or contact the manufacturer or user support.
However, if you prevent or restrict the installation of cookies, this may mean that not all functions of our website can be used to their full extent.
d) Cookie consent
We use the “Real Cookie Banner” consent tool to manage the cookies and similar technologies used (tracking pixels, web beacons, etc.) and related consents. Details on how “Real Cookie Banner” works can be found at https://devowl.io/de/rcb/datenverarbeitung/.
The legal basis for the processing of personal data in this context is Art. 6 para. 1 lit. c GDPR and Art. 6 para. 1 lit. f) GDPR. Our legitimate interest is the management of the cookies and similar technologies used and the related consents.
The provision of personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide the personal data. If you do not provide the personal data, we will not be able to manage your consents.
Contract processing
The data transmitted by you to utilize our range of services is processed by us for the purpose of contract processing and is necessary in this respect. Conclusion and fulfillment of the contract are not possible without the provision of your data.
The legal basis for the processing is Art. 6 para. 1 lit. b) GDPR.
We delete the personal data once the contract has been fully processed, but must observe the retention periods under tax and commercial law.
As part of the contract processing, we pass on your data to the financial service provider if the transfer is necessary for payment purposes.
The legal basis for the transfer of data is then Art. 6 para. 1 lit. b) GDPR.
Non-personal data will be stored by us for evaluation purposes even after the end of the contract.
Customer account / registration function
If you create a customer account with us via our website, we will collect and store the data you enter during registration (e.g. your name, your address or your e-mail address) exclusively for pre-contractual services, for contract fulfillment or for the purpose of customer care (e.g. to provide you with an overview of your previous orders with us or to be able to offer you product-related features). At the same time, we store the IP address and the date and time of your registration. Of course, this data will not be passed on to third parties.
As part of the further registration process, your consent to this processing is obtained and reference is made to this privacy policy. The data collected by us will be used exclusively for the provision of the customer account.
Insofar as you consent to this processing, Art. 6 para. 1 lit. a) GDPR is the legal basis for the processing.
If the opening of the customer account also serves pre-contractual measures or the fulfillment of the contract, the legal basis for this processing is also Art. 6 para. 1 lit. b) GDPR.
You can revoke your consent to the opening and maintenance of the customer account at any time with effect for the future in accordance with Art. 7 para. 3 GDPR. All you have to do is inform us of your cancellation.
The data collected in this respect will be deleted as soon as processing is no longer necessary. However, we must comply with retention periods under tax and commercial law.
Submission of offers by logistics service providers
If you submit transport offers as a logistics service provider via the website, you consent to the processing of the data you provide. To process the transport offers, we store the IP address, e-mail address, date and time of the offer submission and other data if you submit these as part of your offer. The legal basis for data processing is your consent in accordance with Art. 6 para. 1 lit. a) GDPR. You can revoke this at any time (Art. 7 para. 3 GDPR). Your personal data will be deleted if your enquiry has been conclusively answered and the deletion does not conflict with any statutory retention obligations, such as in the case of any subsequent contract processing. Non-personal data will be stored by us for evaluation purposes even after the end of the contract.
Contact enquiries / contact option
If you contact us via contact form or e-mail, the data you provide will be used to process your enquiry. The provision of the data is necessary for processing and answering your enquiry – without it we cannot answer your enquiry or can only answer it to a limited extent.
The legal basis for this processing is Art. 6 para. 1 lit. b) GDPR.
Your data will be deleted if your enquiry has been conclusively answered and the deletion does not conflict with any statutory retention obligations, such as in the case of any subsequent contract processing.
Newsletter
If you register for our free newsletter, the data requested from you for this purpose, i.e. your e-mail address and your name, will be transmitted to us. At the same time, we store the IP address of the Internet connection from which you access our website as well as the date and time of your registration. As part of the further registration process, we will obtain your consent to send you the newsletter, describe the content in detail and refer you to this privacy policy. We use the data collected in this process exclusively for sending the newsletter – it will therefore not be passed on to third parties.
The legal basis for this is Art. 6 para. 1 lit. a) GDPR.
You can revoke your consent to receive the newsletter at any time with effect for the future in accordance with Art. 7 para. 3 GDPR. All you have to do is inform us of your cancellation or click on the unsubscribe link contained in every newsletter.
Linking social media via graphic or text link
We also advertise presence on the social networks listed below on our website. The integration takes place via a linked graphic of the respective network. The use of this linked graphic prevents a connection from being automatically established to the respective social network server when a website with a social media advertisement is called up in order to display a graphic of the respective network itself. Only by clicking on the corresponding graphic is the user forwarded to the service of the respective social network.
Once the user has been forwarded, the respective network collects information about the user. It cannot be ruled out that the data collected in this way will be processed in the USA.
This is initially data such as IP address, date, time and page visited. If the user is logged into their user account on the respective network during this time, the network operator may be able to assign the information collected about the user’s specific visit to the user’s personal account. If the user interacts via a “Share” button of the respective network, this information can be stored in the user’s personal user account and potentially published. If the user wishes to prevent the information collected from being directly assigned to their user account, they must log out before clicking on the graphic. It is also possible to configure the respective user account accordingly.
An adequate level of data protection is guaranteed by the use of standard contractual clauses of the EU Commission within the meaning of Art. 46 para. 2 lit. c) GDPR.
The following social networks are integrated into our website through links:
Meta Platforms Ireland Limited
4 Grand Canal Square
Grand Canal Harbour
Dublin 2, Ireland
Privacy Policy: https://www.facebook.com/policy.php
Twitter International Unlimited Company
Attn: Data Protection Officer
One Cumberland Place, Fenian Street
Dublin 2, D02 AX07, IRELAND
Privacy Policy: https://twitter.com/privacy
LinkedIn Ireland Unlimited Company
Attn: Legal Dept. (Privacy Policy and User Agreement)
Wilton Plaza
Wilton Place, Dublin 2
Ireland
Privacy Policy: https://www.linkedin.com/legal/privacy-policy
New Work SE
Am Strandkai 1
20457 Hamburg
Germany
Privacy policy: https://privacy.xing.com/de/datenschutzerklaerung
Google Analytics
We use Google Analytics on our website. This is a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as “Google”.
An appropriate level of data protection is guaranteed by Google’s certification under the EU-U.S. Data Privacy Framework.
The Google Analytics service is used to analyze the usage behavior of our website. The legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the analysis, optimization and economic operation of our website.
Usage and user-related information, such as IP address, location, time or frequency of visits to our website, is transmitted to a Google server in the USA and stored there. However, we use Google Analytics with the so-called anonymization function. This function allows Google to truncate the IP address within the EU or EEA.
The data collected in this way is in turn used by Google to provide us with an analysis of the visit to our website and the usage activities there. This data can also be used to provide other services related to the use of our website and the use of the Internet.
Google states that it will not associate your IP address with any other data. In addition, Google provides (at
https://www.google.com/intl/de/policies/privacy/partners)
further legal information on data protection, including, for example, the options for preventing the use of data.
Google also offers (at
https://tools.google.com/dlpage/gaoptout?hl=de)
a so-called deactivation add-on along with further information about it. This add-on can be installed with the most common Internet browsers and offers you further control over the data that Google collects when you visit our website. The add-on informs the JavaScript (ga.js) of Google Analytics that information about your visit to our website should not be transmitted to Google Analytics. However, this does not prevent information from being transmitted to us or to other web analysis services. You can of course also find out whether and which other web analysis services we use in this privacy policy.
Google reCAPTCHA
We use Google reCAPTCHA on our website to check and prevent interactions on our website through automated access, e.g. by so-called bots. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as “Google”.
An adequate level of data protection is guaranteed by the use of standard contractual clauses of the EU Commission within the meaning of Art. 46 para. 2 lit. c) GDPR.
This service enables Google to determine from which website a request is sent and from which IP address you are using the so-called reCAPTCHA input box. In addition to your IP address, Google may also collect other information that is necessary for the provision and safeguarding of this service.
The legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the security of our website and in the defense against unwanted, automated access in the form of spam or similar.
Google offers further information on the general handling of your user data at https://policies.google.com/privacy.
Google remarketing or “similar target groups” component of Google
We use the remarketing or “similar target groups” function on our website. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as “Google”.
An adequate level of data protection is guaranteed by the use of standard contractual clauses of the EU Commission within the meaning of Art. 46 para. 2 lit. c) GDPR.
We use this function to place interest-based, personalized advertising on third-party websites that also participate in the Google advertising network.
The legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the analysis, optimization and economic operation of our website.
To enable this advertising service, Google stores a cookie with a sequence of numbers on your end device via your Internet browser during your visit to our website. This cookie records both your visit and the use of our website in anonymized form. However, no personal data is transmitted in the process. If you subsequently visit the website of a third party that also uses the Google advertising network, advertisements may appear that are related to our website or our offers there.
To permanently deactivate this function, Google offers a browser plug-in for the most common Internet browsers via
https://www.google.com/settings/ads/plugin.
The use of cookies from certain providers can also be deactivated, for example via
http://www.youronlinechoices.com/uk/your-ad-choices
or
http://www.networkadvertising.org/choices/
by opting out.
LinkedIn conversion tracking and retargeting function
We use LinkedIn Conversion Tracking and the Insight Tag of LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA on our website. This enables us to obtain information about the use of our website and to show you personalized advertising when you visit LinkedIn or other websites. For this purpose, a tracking tag is set on this website, which establishes a direct connection to LinkedIn. This makes it possible to recognize users of this website when they visit LinkedIn and other websites. The data is also used to create anonymous reports on the performance of advertisements and interaction with our website.
LinkedIn Conversion Tracking and the retargeting function can be deactivated using the following opt-out link. LinkedIn members click “Reject on LinkedIn”. Non-members click “Reject”. https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
LinkedIn provides further information on data protection at https://www.linkedin.com/legal/privacy-policy
HubSpot
We use the online marketing software HubSpot on our website. HubSpot is a software company from the USA with a branch in Ireland. Contact: HubSpot, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland, Phone: +353 1 5187500.
This is an integrated software solution that we use to cover various aspects of our online marketing. These include, among others: Email marketing (newsletters as well as automated mailings, e.g. to provide downloads), social media publishing and reporting, reporting (e.g. traffic sources, hits, etc.), contact management (e.g. user segmentation and CRM), landing pages and contact forms.
Visitors to this website are able to download content and provide their contact information. This information is stored on HubSpot servers. It can be used by us to get in touch with visitors to our website and to determine which of our company’s services are of interest to them. We use the HubSpot service to optimize our marketing measures. The legal basis is Art. 6 para. 1 lit. f) GDPR.
An adequate level of data protection is guaranteed by the use of standard contractual clauses of the EU Commission within the meaning of Art. 46 para. 2 lit. c) GDPR. In addition, Hubspot Inc. is certified under the EU-US Data Privacy Framework (DPF) and is therefore subject to the adequacy decision of the EU Commission.
More information about HubSpot’s privacy policy »
More information from HubSpot regarding EU data protection regulations »
You can find more information about the cookies used by HubSpot here and here »
If you generally do not want HubSpot to collect data, you can prevent the storage of cookies at any time by changing your browser settings or by using the following opt-out link: Link
