Privacy policy
OPED GmbH attaches great importance to the protection of privacy and observes the statutory data protection regulations. In the following, we explain how we handle your personal data.
Version 1.1, as of September 2023
1. responsible person
OPED GmbH
Medizinpark 1
83626 Valley/Oberlaindern
Phone: +49 (0) 8024 / 60818-210
Fax: +49 (0) 8024 / 60818-299
E-mail: mail@oped.de
You can reach our external data protection officer at
c/o activeMind AG
Management- und Technologieberatung
Potsdamer Straße 3
DE-80802 Munich
E-Mail: datenschutz@oped.de
2. general data processing on our website
a) Collection of general information when visiting our website
Nature and purpose of the processing:
When you access our website, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your internet service provider, your IP address and similar. It is processed in particular for the following purposes:
– Ensuring a smooth connection to the website
– Ensuring the smooth use of our website
– Evaluation of system security and stability
We do not use your data to draw conclusions about your person. However, we reserve the right to check the server log files retrospectively if there are concrete indications of unlawful use.
Legal basis:
Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website as well as ensuring system security and detecting misuse.
Recipient:
Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.
Storage duration:
The data is deleted as soon as it is no longer required for the purpose for which it was collected. This is generally the case for the data used to provide the website when the respective session has ended.
Provision prescribed or required:
The provision of the aforementioned personal data is neither legally nor contractually required. However, without this data, the service and functionality of our website cannot be guaranteed. In addition, individual services may not be available or may be restricted.
Contradiction
Please read the information on your right to object under Art. 21 GDPR below.
b) Contact and contact form
Nature and purpose of the processing:
The data you provide will be stored for the purpose of individual communication with you. For this purpose, it is necessary to provide a valid e-mail address, first name and surname as well as your request. This is used to assign the request and subsequently answer it. The provision of further data is optional.
There is a contact form on our website that can be used to contact us electronically. If you use this option, the data entered in the input mask will be transmitted to us and stored.
The following data is also stored at the time the message is sent:
– Date and time of the request
Alternatively, it is possible to contact us via the e-mail address provided. In this case, the user’s personal data transmitted with the e-mail will be stored. This includes the date and time the e-mail was sent, the e-mail address, IP addresses and information about the servers involved in the e-mail communication.
You can also contact us via the telephone number provided. We collect log data that includes your telephone number and the duration of the call. We do not record conversations.
Regardless of the type of communication you choose, we collect the content of your request.
Legal basis:
The data is processed on the basis of a legitimate interest in accordance with Art. 6 para. 1 lit. f) GDPR in order to enable you to contact us easily. The information you provide will be stored for the purpose of processing your request and for possible follow-up questions.
If you contact us to request a quote, the data provided will be processed to carry out pre-contractual measures in accordance with Art. 6 para. 1 lit. b) GDPR.
Recipient:
Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website. All service providers are contractually obliged to treat your data confidentially.
Storage duration:
Data will be deleted no later than 6 months after the request has been processed.
If there is a contractual relationship, we are subject to the statutory retention periods. These are generally 6 or 10 years for reasons of proper accounting and tax law requirements.
Provision prescribed or required:
The provision of your personal data is voluntary. However, we can only process your request if you provide us with your name and, if applicable, your e-mail address and the reason for the request.
Contradiction
Please read the information on your right to object under Art. 21 GDPR below.
3. data processing for purchases and orders
a) Creation of a user account/registration (order portal)
Nature and purpose of the processing:
In order to use the order portal, users must register by providing personal data. The data is entered into an input mask and transmitted to us and stored. In addition to the data you provide, the following data is collected as part of the registration process:
– Date and time of registration
– The IP address of the user
– Login data (e-mail address, password)
– Access log
– Change log for data changes (journal)
The registration of the user is necessary for the provision of certain services on our website and for the fulfillment of a contract with the user. We also link your purchases to your account so that you can track your orders.
Legal basis:
The processing of data required for the conclusion of the contract (subscription) is based on Art. 6 para. 1 lit. b).
Recipient:
Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website or, for example, when processing your payment to us. All service providers are contractually obliged to treat your data confidentially.
Storage duration:
The data will be deleted as soon as it is no longer required for the purpose for which it was collected. The personal data collected during registration will be stored for the duration of the contractual relationship and deleted after termination.
Provision prescribed or required:
The processing of the above-mentioned data is necessary for the fulfillment of our contractual obligations. Without the provision of your personal data, we cannot enter into a contractual relationship with you.
b) Online ordering (provision of chargeable services)
Nature and purpose of the processing:
We process the data provided by you in the context of the order to carry out or process your order. This also includes the return, exchange and complaint of items.
Your personal data will only be used to the extent necessary to process this order and deliver the requested products and services.
In addition, order and payment data collected for the above-mentioned purpose will also be used under certain conditions and restrictions to detect fraud and theft in connection with online sales and to comply with applicable laws (e.g. requirements from tax laws and statutory accounting).
Legal basis:
The processing of data required for the conclusion of the contract or required by law is based on Art. 6 para. 1 lit. b) and c) GDPR.
The processing of your personal data for the detection of fraud and theft is based on our legitimate interest (pursuant to Art. 6 para. 1 lit. f) GDPR).
Recipient:
Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website or, for example, when processing your payment to us. All service providers are contractually obliged to treat your data confidentially.
With regard to the transfer of data to recipients outside our company, it should first be noted that we only pass on necessary personal data in compliance with the applicable data protection regulations.
In order to fulfill the contract, we pass on your name and address to shipping and logistics service providers commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods.
Depending on which payment method you select in the ordering process, we will pass on the payment data collected for this purpose to the credit institution commissioned with the payment and, if applicable, to the payment service provider commissioned by us or to the payment service selected by you in the ordering process in order to process payments.
Other recipients of your personal data are, for example, public bodies and institutions (e.g. tax authorities, law enforcement authorities) in the event of a legal or official obligation, tax consultants, auditors and payroll tax/company auditors (statutory audit mandate).
Storage duration:
We store this data until the statutory retention periods have expired. These are generally 6 or 10 years for reasons of proper accounting and tax law requirements.
Provision prescribed or required:
The provision of your personal data is contractually required in order to process your order. Without the provision of your personal data, we will not be able to process your order.
Contradiction
Please read the information on your right to object under Art. 21 GDPR below.
c) Transaction mails
Nature and purpose of the processing:
Transactional emails are automated emails that are sent as a result of certain visitor actions or after business transactions. These are not newsletters, but emails that are sent automatically based on your actions (e.g. order confirmation, shipping confirmation, registration confirmation, password recovery, etc.).
Legal basis:
The processing of the data required for the conclusion of the contract is based on Art. 6 para. 1 lit. b) GDPR.
Recipient:
Sending via a specialized service provider is necessary here to ensure the delivery of emails to your email account. All service providers are contractually obliged to treat your data confidentially.
Storage duration:
The data for sending e-mails is only stored for the duration of sending. The storage period is therefore limited in time. Data content is not stored.
Provision prescribed or required:
The provision of your data is necessary for the fulfillment of the contract. Without the sending of transactional e-mails, we cannot offer you various services.
4. reach measurement
Nature and purpose of the processing:
We use analysis tools to evaluate user behavior.
You can find a more detailed description of the tools in the “Tracking and analysis tools used” section of this privacy policy.
Legal basis:
The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest. The measurement of reach and the resulting information are suitable for adapting the website.
Recipient:
We use technical service providers for the operation and maintenance of our website who act as our processors. All service providers are contractually obliged to treat your data confidentially.
Storage duration:
An anonymized survey is carried out.
Provision prescribed or required:
The provision of data is neither legally nor contractually required. However, without this information we cannot improve and optimize our services.
Contradiction
Please read the information on your right to object under Art. 21 GDPR below.
5. use of cookies
a) Fundamentals
A cookie is a small data record that is created when a website is visited and stored temporarily on the website user’s system. If the server of this website is called up again by the user of the website, the browser of the user of the website sends the previously received cookie back to the server. The server can evaluate the information received through this process. In particular, cookies can make it easier to navigate a website.
Detailed information about cookies and which cookies are used on this website can be found in the cookie settings, which you can access at any time by clicking on the icon at the bottom left of the screen.
Delete cookies:
You can reject every cookie category, with the exception of technically necessary cookies. To do this, click on the icon at the bottom left of your web browser and make the desired settings in the cookie settings.
You can also delete individual cookies or the entire cookie inventory via your browser settings. You will also receive information and instructions on how to delete these cookies or block their storage in advance. Depending on your browser provider, you will find the necessary information under the following links:
– Mozilla Firefox: https://support.mozilla.org/kb/clear-cookies-and-site-data-firefox
– Internet Explorer: https://support.microsoft.com/help/17442/windows-internet-explorer-delete-manage-cookies
– Google Chrome: https://support.google.com/accounts/answer/61416
– Opera: http://www.opera.com/help
– Safari: https://support.apple.com/guide/safari/sfri11471/mac
You can also prevent scripts from loading by default. NoScript only allows JavaScript, Java and other plugins to be executed on trusted domains of your choice. Information and instructions on how to edit this function can be obtained from the provider of your browser (e.g. for Mozilla Firefox: https://addons.mozilla.org/de/firefox/addon/noscript/).
b) Use of technically necessary cookies
Nature and purpose of the processing:
We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can be identified even after a page change.
The following data is stored and transmitted in the cookies:
– Consent management
The cookie is used to store the user’s consent status for cookies on the current domain. Our website cannot be offered without the use of these cookies.
Legal basis and legitimate interest:
In this respect, data processing is carried out solely on the basis of our legitimate interest in a user-friendly design of our website and in the documentation of consent in accordance with Art. 6 para. 1 lit. f) GDPR in conjunction with a balancing of interests in accordance with § 25 para. 2 TTDSG.
Recipient:
We use technical service providers for the operation and maintenance of our website who act as our processors. All service providers are contractually obliged to treat your data confidentially.
Storage duration:
You can find details on the storage duration of cookies in our cookie consent tool, which you can access by clicking on the icon at the bottom left of the screen.
Provision prescribed or required:
The provision of the aforementioned personal data is neither legally nor contractually required. Without this data, however, the service and functionality of our website cannot be guaranteed.
Contradiction:
Please read the information on your right to object under Art. 21 GDPR below.
c) Use of technically unnecessary cookies
Nature and purpose of the processing:
We also use cookies on the website that enable an analysis of the user’s surfing behavior. These cookies are used to make the use of the website more efficient and attractive. We use web analysis technologies from the following providers:
– Google Analytics
– Matomo
– eTracker
– YouTube
– Vimeo
Legal basis:
The legal basis for this processing is your consent, Art. 6 para. 1 lit. a) GDPR.
Recipient:
We use technical service providers for the operation and maintenance of our website who act as our processors. All service providers are contractually obliged to treat your data confidentially.
Further recipients and details about the technical functioning of the cookies used and how you can prevent the transmission of data can be found in our cookie consent tool, which you can access by clicking on the icon at the bottom left of the screen.
You will also find information on the technical functioning of the tools and information used in the information on the “Tracking and analysis tools used” further below in this section.
Third country transfers:
Information on the transfer to third countries can be found in the information on the “Tracking and analysis tools used”.
Storage duration:
Details on the storage duration of cookies and the technologies used in the context of these tracking tools can be found in our cookie consent tool, which you can access by clicking on the icon at the bottom left of the screen.
Provision prescribed or required:
The provision of your data is voluntary, solely on the basis of your consent. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.
Withdrawal of consent:
You can withdraw your consent at any time. To do this, click on the icon at the bottom left of the screen and make the desired settings in the cookie consent banner that opens.
Profiling:
Web analysis tools can be used to evaluate the behavior of visitors to the website and analyze their interests. We create a pseudonymous user profile for this purpose.
6. tracking and analysis tools used
a) etracker
We use the services of the German company etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg.
without cookies
By default, etracker does not use cookies for tracking on a website, as this has been implemented in the so-called cookie-less mode by privacy-by-design.
In cookieless mode, there is neither “storage of information” nor “access to information that is already stored in the end device of a subscriber or user”. Only the website data of web servers is used, as well as certain information that the web browser transmits to the web server to access websites. This information makes it possible to link individual page views to related sessions. The link to a time stamp prevents page views beyond a 24-hour time window from being linked to customer journeys or user profiles.
This is therefore not device fingerprinting in accordance with “Opinion 9/2014 on the application of Directive 2002/58/EC to the use of virtual fingerprints”, but an aggregated statistical evaluation of website usage.
When using etracker in cookieless mode, the legal basis is the legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. Our legitimate interest is based on the optimization of our online offer and our website. We receive analysis reports on how you use our website in order to better adapt our offer to your wishes.
The data generated with etracker is processed and stored by etracker on our behalf exclusively in Germany. It is not used for any other purpose, merged with other data or passed on to third parties.
You can object to reach measurement by etracker at any time by deactivating the following slider. This sets an opt-out cookie that is valid for two years. As a result, etracker will not register your further visits. Please note, however, that the opt-out cookie will be deleted if you delete all cookies.
If no slider is displayed at this point, the range measurement is already blocked by other measures.
with cookies
With the help of etracker, cookies are used that enable a statistical range analysis of this website, a measurement of the success of our online marketing measures, e.g. to test and optimize different versions of our online offer or its components. We use etracker to improve the quality of our website and our offer.
When using etracker with analysis and optimization cookies, the legal basis for this processing is your consent, Art. 6 para. 1 lit. a GDPR.
The data generated with etracker is processed and stored by etracker on our behalf exclusively in Germany. It is not used for any other purpose, merged with other data or passed on to third parties. In addition, the data is anonymized immediately after collection.
You can withdraw your consent at any time. To do this, click on the icon at the bottom left of the screen and make the desired settings in the cookie consent banner that opens.
b) Matomo
This website uses Matomo (formerly Piwik), an open source software for the statistical analysis of visitor access. The provider of the Matomo software is InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand.
on the basis of log files
We use the locally installed analysis tool Matomo to evaluate user behavior locally on the server. Matomo does not collect the data itself, but accesses the web server’s database.
The web server truncates every IP address requested before storing it in the log file. This means that the database is sufficiently anonymized and no conclusions can be drawn about individual persons.
on the basis of cookies
Matomo uses cookies that enable your use of the website to be analyzed. The information generated by the cookie about your use of the website is stored on a server in Germany. We have configured Matomo so that no profiling takes place.
The IP address is anonymized immediately after processing and before it is stored by truncating the last 2 bytes. You have the option of preventing the installation of cookies by changing the settings of your browser software. We would like to point out that if you do so, you may no longer be able to use all the functions of this website.
You can find more information on the privacy settings of the Matomo software at the following link: https://matomo.org/docs/privacy/.
The data is deleted as soon as it is no longer required for our recording purposes. In our case, this is done automatically after 6 months.
You can object to the processing of data by Matomo in three different ways: Firstly, you can completely prevent the storage of cookies in your browser. However, this may mean that you will no longer be able to use some functions of our website that require identification. On the other hand, you can activate the “Do-not-track” setting in your browser. We have configured Matomo to respect this setting. You can also click below to create an opt-out cookie that is valid for two years. As a result, Matomo will not register your further visits. Please note, however, that the opt-out cookie will be deleted if you delete all cookies.
c) Use of Google Analytics 4:
If you have given your consent, this website uses Google Analytics 4, a web analysis service of Google Ireland Limited (Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland).
Google Analytics uses cookies to help the website analyze how users use the site. The information collected is usually transferred to a Google server in the USA and stored there.
OPTIONAL: We use Google Signals: Google Signals are session data from websites and apps. With their help, we can collect additional information about website visitors who are logged into their Google account and have activated personalized advertising. By linking data, cross-device remarketing campaigns can be delivered to these users.
With Google Analytics 4, automatic anonymization of IP addresses is activated by default. Due to the activation of IP anonymization on these websites, your IP address will be shortened by Google within member states of the EU or EEA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. According to the information provided by Google, the IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
During your visit to our website, your user behavior is recorded in the form of so-called events, such as
– Page views
– Start of a session
– Dwell time
– User engagement
– First visit to a website
– Scrolls (when a visitor scrolls 90% to the bottom of the page)
– Clicks on external links
– Viewed or clicked ads
– Internal searches
– Interaction with video content
– Downloads
– Language settings
The following information is also recorded:
– Your approximate location (region)
– Your IP address (in abbreviated form)
– Technical information such as browser, internet provider, end device and screen resolution
– Source of origin (referrer URL) of your visit (i.e. via which website or advertising medium you came to us)
Further information on terms of use and data protection can be found at https://www.google.com/analytics/terms/de.html and at https://policies.google.com/?hl=de.
Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.
The data sent by us and linked to cookies, user identifiers (e.g. user ID) or advertising IDs are automatically deleted after 14 months. Data that has reached the end of its retention period is automatically deleted once a month.
As Google is headquartered in the USA, it cannot be ruled out that the data will be processed on Google servers in the USA. As a result, there is a risk that your data may be processed by US authorities for control and monitoring purposes without you having any legal recourse. To ensure an appropriate level of data protection, we have concluded EU standard contractual clauses with Google, which can be viewed here: https://business.safety.google/adscontrollerterms/sccs/eu-c2c/
The recorded data is stored together with the randomly generated user ID to enable the evaluation of pseudonymous user profiles. This user-related data is automatically deleted after 10 months. Other data remains stored in aggregated form indefinitely.
You can revoke your consent for the future at any time in the cookie consent banner. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: Browser Add On to deactivate Google Analytics.
d) Embedded YouTube videos
We embed YouTube videos on our website. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA (hereinafter referred to as “YouTube”). YouTube, LLC is a subsidiary of Google LLC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043, USA (hereinafter “Google”). When you visit a page on our website that has a YouTube video embedded, a connection to the YouTube or Google servers is automatically established. Depending on the settings, various data is transmitted (e.g. your IP address). If a YouTube video is started, the provider sets cookies that store your IP address and URL, for example.
If you are logged into your Google or YouTube account, YouTube can assign your surfing behavior to you personally. If you are not logged into a Google or YouTube account, less data will be stored. Nevertheless, Google stores data with a unique identifier that is linked to your device, browser or app.
Further information on the purpose and scope of data collection and its processing by YouTube can be found in the provider’s privacy policy. There you will also find further information on your rights in this regard and setting options to protect your privacy (https://policies.google.com/privacy).
As Google is headquartered in the USA, it cannot be ruled out that the data will be processed on Google servers in the USA. As a result, there is a risk that your data may be processed by US authorities for control and monitoring purposes without you having any legal recourse. To establish an appropriate level of data protection, we have concluded EU standard contractual clauses with Google, which can be viewed here: https://business.safety.google/adscontrollerterms/sccs/eu-c2c/.
The provision of your personal data is voluntary, solely on the basis of your consent. You will not suffer any disadvantages.
You can withdraw your consent at any time. To do this, click on the button at the bottom left of the screen to make the desired settings in the cookie consent banner that opens.
e) Vimeo
We also use videos from Vimeo on our website. The video portal is operated by Vimeo LLC, 555 West 18th Street, New York 10011, USA. With the help of a plug-in, we can show you interesting video material directly on our website. Certain data will be transferred from you to Vimeo.
The legal basis for this processing is your consent in each case, Art. 6 para. 1 lit. a GDPR (EU General Data Protection Regulation).
If you call up a subpage on our website that has a Vimeo video embedded, your browser connects to the Vimeo servers after obtaining your consent. This results in a data transfer. This data is collected, stored and processed on the Vimeo servers.
Regardless of whether you have a Vimeo account or not, Vimeo collects data about you. This includes your IP address, technical information about your browser type, your operating system or very basic device information. In addition, Vimeo stores information about which website you use the Vimeo service and what activities you carry out on our website – this includes, for example, session duration, bounce rate, etc.. Vimeo can track these actions with the help of cookies and similar technologies.
If you are logged in to Vimeo as a registered member, your actions on our website will be linked directly to your Vimeo account. To prevent this, you must log out of Vimeo while “surfing” on our website.
The data will only be stored by us for as long as the intended purpose and your consent are given.
Please note that, according to Vimeo’s privacy policy, personal data is also processed in the USA or other third countries. For this reason, we have concluded the standard contractual clauses of the EU Commission with Vimeo: https://vimeo.com/enterpriseterms/dpa.
The provision of your personal data is voluntary, solely on the basis of your consent. You will not suffer any disadvantages.
You can withdraw your consent at any time. To do this, click on the button at the bottom left of the screen to make the desired settings in the cookie consent banner that opens.
For more information on Vimeo’s data processing, please refer to Vimeo’s privacy policy: https://vimeo.com/cookie_policy?tid=331690450138
7. processing of personal data when visiting our social media sites
a) Facebook and Instagram
OPED GmbH is represented on the social networks Facebook and Instagram. These platforms are provided by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. We maintain these Facebook/Instagram pages in order to inform users, interested parties and customers about our services.
We cannot rule out the possibility that a transfer to a third country, e.g. to servers located in the USA, may take place when our company pages are accessed on these social networks. We would also like to point out that, as the operator of a Facebook/Instagram fan page, we are jointly responsible with Facebook for processing the personal data of visitors to the page (Art. 26 GDPR). We have concluded corresponding contracts with Facebook for this purpose.
Facebook recognizes the shared responsibility for the Insights data with the operators of the pages and assumes primary responsibility, see: https://www.facebook.com/legal/terms/page_controller_addendum
If you wish to assert requests for information or your user rights, you can assert these rights against us or Facebook.
If you have a Facebook/Instagram profile and are logged in, Facebook can, for example, analyze your usage behavior and create a usage profile corresponding to your usage behavior. This user data is regularly processed for market research and (personalized) advertising purposes.
Further information regarding the collection and use of data as well as your rights and protection options can be found at https://facebook.com/about/privacy and https://instagram.com/about/legal/privacy/.
b) YouTube
OPED GmbH is also represented on YouTube. YouTube is a service provided by Google Inc (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”)).
We cannot rule out the possibility that a transfer to a third country, e.g. to servers located in the USA, may take place when you access our YouTube channel. Your visit to our website may therefore be tracked by YouTube.
By using YouTube, your personal data is collected, transmitted, stored, disclosed and used by Google. Google analyzes your user behavior and creates a corresponding usage profile, regardless of whether you have a Google account. This data can be used to tailor content or advertising to you.
Further information regarding the collection and use of data as well as your rights and protection options can be found at https://policies.google.com/technologies/product-privacy?hl=de and https://policies.google.com/privacy?hl=de&gl=de.
c) LinkedIn
OPED GmbH maintains a corporate presence on LinkedIn. This is located on a platform operated by LinkedIn Unlimited Company, Wilton Place, Dublin 2, Ireland.
We provide information on our website and offer users the opportunity to communicate. The company website is used for applications and information/PR.
When you visit our LinkedIn company page, follow our page or engage with our page, LinkedIn processes personal data to provide us with statistics and insights in anonymized form. This gives us insights into the types of actions that visitors take on our site (so-called page insights). In particular, LinkedIn processes data that you have already provided to LinkedIn via the information in your profile. In addition, LinkedIn will process information about how you interact with our LinkedIn company page, e.g. whether you are a follower of our LinkedIn company page. Personal data is not transmitted to us by LinkedIn. It is also not possible for us to draw conclusions about individual members using the information from the page insights.
This processing of personal data in the context of Page Insights is carried out by LinkedIn and us as joint controllers. We have entered into an agreement with LinkedIn on processing as joint controllers, which sets out the distribution of data protection obligations between us and LinkedIn. The agreement is available at the following link: https://legal.linkedin.com/pages-joint-controller-addendum. Under this agreement, LinkedIn is responsible for responding to requests from data subjects. To do this, you can contact LinkedIn online or reach LinkedIn using the contact details in the privacy policy: https://www.linkedin.com/help/linkedin/ask/PPQ?lang=de.
You can find more information on data processing by LinkedIn in LinkedIn’s privacy policy: https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv.
8. rights of data subjects
You can exercise the following rights at any time using the contact details provided:
– Information about your data stored by us and its processing (Art. 15 GDPR)
– Correction of incorrect personal data (Art. 16 GDPR)
– Deletion of your data stored by us (Art. 17 GDPR)
– Restriction of data processing if we are not yet allowed to delete your data due to legal obligations (Art. 18 GDPR)
– Objection to the processing of your data by us (Art. 21 GDPR)
– Data portability, provided that you have consented to the data processing or have concluded a contract with us (Art. 20 GDPR).
If you have given us your consent, you can revoke it at any time with effect for the future.
You can contact a supervisory authority at any time with a complaint, e.g. the competent supervisory authority of the federal state of your residence or the authority responsible for us as the responsible body.
A list of supervisory authorities (for the non-public sector) with addresses can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
9. data security
We only handle personal data to the extent that this is possible in accordance with data protection regulations. We also take all necessary technical and organizational security measures to adequately protect your personal data from unauthorized access and misuse at all times.
Your data will only be passed on to service providers (processors) if it is necessary for the fulfillment of our contractual tasks. All service providers are obliged to treat your data confidentially on the basis of an order processing contract.
Insofar as we store or process personal data, this takes place within a secure data center. To protect the security of your data during transmission, we use encryption methods (e.g. SSL) via HTTPS. Our servers are protected by firewalls and virus protection. Back-up and recovery procedures as well as role and authorization concepts are a matter of course for us.
Our employees are obliged to comply with the provisions of the GDPR and the BDSG when handling data.
10. right to object pursuant to Art. 21 GDPR
Individual right of objection
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (f) of Article 6(1) GDPR (data processing on the basis of a balancing of interests); this also applies to profiling based on this provision within the meaning of Article 4(4) GDPR.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.
Recipient of an objection
The objection can be made informally with the subject “Objection”, stating your name, address and date of birth, and should be addressed to:
OPED GmbH
Medizinpark 1
83626 Valley/Oberlaindern
E-Mail: widerspruch@oped.de