Data privacy according to GDPR
Effective date: October, 2023
Data protection information according to articles 13, 14 and 21 GDPR for the ODOSCOPE GmbH website
I. General information
1. Responsible
We, ODOSCOPE GmbH, take the protection of your personal data and the legal obligations serving this protection very seriously. The legal requirements demand comprehensive transparency regarding the processing of personal data. Only if the processing is comprehensible for you as a data subject, you will be sufficiently informed about the purpose, type and scope of the processing.
Our data protection declaration therefore explains in detail which personal data are processed by us when you use our website (https://www.odoscope.com/), all other websites that refer to it and in the other cases that may be explained here (for definitions see I.2.).
Responsible in the sense of the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG) and other data protection regulations is
ODOSCOPE GmbH
Widdersdorfer Straße 403
50933 Köln
Deutschland
Telefon: + 49 221 1653 97-80
Fax: +49 221 16 5397-85
E-Mail: info @ odoscope.com
In the following referred to as “responsible person” or “we”.
You can reach the data protection officer at:
ODOSCOPE GmbH
Dr. Judith Nink
Widdersdorfer Straße 403
50933 Köln
E-Mail: privacy @ odoscope.com
Please note that links on our website may take you to other websites that are not operated by us but by third parties. Such links are either clearly marked by us or are recognizable by a change in the address line of your browser. We are not responsible for compliance with data protection regulations and safe handling of your personal data on these websites operated by third parties.
2. Definitions
From the GDPR
This data protection declaration uses the terms of the legal text of the GDPR. You can view the definitions (Art. 4 GDPR), for example at https://eur-lex.europa.eu/legal-content/DE/TXT/?uri=CELEX:32016R0679
Cookies and similar technologies
Cookies are text files which are stored on your end device by a website or read out there. They contain combinations of letters and numbers, e.g. in order to recognise the user and his settings when connecting to the cookie-setting website again, to enable the user to remain logged in to a customer account or to statistically analyse a certain usage behaviour.
WebStorage technology enables variables and values to be stored locally in the user’s browser cache. The technology includes both the so-called “sessionStorage”, which remains stored until the browser tab is closed, and the “localStorage”, which is stored in the browser cache until the cache is emptied by the user. The localStorage technology makes it possible, among other things, to recognize the user and his settings when he visits our website.
Categories of data
When we specify the categories of data processed, this refers in particular to the following data: master data (e.g. name, address, dates of birth), contact data (e.g. e-mail addresses, telephone numbers, messenger services), content data (e.g. text entries, photographs, videos, contents of documents/files), contract data (e.g. subject matter of the contract, terms, customer category), payment data (e.g. bank details, payment history, use of other payment service providers), usage data (e.g. history on our website, use of certain content, access times, contact or order history), connection data (e.g. device information, IP addresses, URL referrers).
3. Information on data processing
We process personal data only to the extent permitted by law. Personal data will only be passed on in the cases described below. Personal data is protected by appropriate technical and organisational measures (e.g. pseudonymisation, encryption).
Unless we are required by law to store or disclose personal data to third parties (in particular law enforcement agencies), the decision as to which personal data is processed by us for how long and to what extent we disclose it depends on which functions of the website you use in each individual case.
4. Storage duration
Personal data shall be erased as soon as the purpose of the processing ceases to exist or a prescribed retention period expires, unless there is a need to retain personal data in order to conclude or fulfil a contract. As far as we have to inform you about the storage period of cookies and similar technologies, you will find the relevant information at the end of this privacy policy (under III. ).
Personal data that we process in the context of an application will be stored for a period of six months after the application process is completed.
5. Automated decisions in individual cases including profiling
Automated decisions in individual cases, including profiling, do not take place.
6. Rights of data subjects
As a data subject, you have the right to information in accordance with Art. 15 GDPR, the right to correction in accordance with Art. 16 GDPR, the right to deletion in accordance with Art. 17 GDPR, the right to restriction of processing in accordance with Art. 18 GDPR and the right to data transferability in accordance with Art. 20 GDPR. The right of information and the right of deletion are subject to the restrictions set out in Articles 34 and 35 of the Federal Data Protection Act. You have the right to complain to a data protection supervisory authority (Art. 77 GDPR in conjunction with Art. 19 BDSG).
The data protection supervisory authority responsible for us/ for our head office is: The State Commissioner for Data Protection of North Rhine-Westphalia, Kavalleriestrasse 2-4, 40213 Düsseldorf. However, you are free to complain to any other data protection supervisory authority.
7. Obligation of the responsible person to notify
We will notify all recipients to whom your personal data has been disclosed of any correction or deletion of your personal data or of any restriction on processing in accordance with Art. 16, Art. 17 Para. 1 and Art. 18 GDPR, unless such notification is impossible or involves a disproportionate effort. We will inform you of the recipients if you request.
8. Duty to provide
Unless otherwise explained below in the information on the legal basis, you are not obliged to provide personal data. However, in the cases of Art. 6 para. 1 letter b GDPR, the personal data is required for the performance or conclusion of a contract. If you do not provide the personal data concerned, the performance or conclusion of the contract is not possible. If you do not make the data available in the cases of Art. 6 para. 1 letter a, f GDPR, it is not possible to use the affected parts of our website.
9. Right of objection and withdrawal of consent
You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you which is carried out pursuant to Article 6, paragraph 1, letter e or f of the DPA. Where personal data are processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing.
In accordance with Art. 7 Para. 3 S. 1 GDPR, you have the right to revoke any consent given to us at any time. This does not affect the legality of the processing carried out on the basis of the consent until the revocation. The revocation therefore only applies to the processing planned after the revocation. The revocation is possible informally by post or e-mail. If you submit an objection, we will no longer process your personal data, unless another (legal) basis permits this. If, however, a revocation is made and there is no other legal basis, the personal data must be deleted immediately at your request in accordance with Art. 17 para. 1 letter b GDPR.
Objection and revocation can be made without any formality and should be addressed to:
ODOSCOPE GmbH
Widdersdorfer Straße 403
50933 Köln
Deutschland
Telefon: + 49 221 1653 97-80
Fax: +49 221 16 5397-85
E-Mail: info @ odoscope.com
You can also revoke your consent(s) by deactivating the respective data processing services directly in our Consent Tool. Please note that you must do this on each end device on which you have visited our website and consented to data processing.
II. Data processing in connection with the use of our website
The use of the website and its functions regularly requires the processing of personal data.
1. Informational use of the website
Purpose of processing: Functionality and optimization of the website, as well as ensuring the security of our information technology systems for purely informational use (without the use of additional functions such as contact forms or social media plugins) of our website.
Legal basis: Art. 6 Abs. 1 Buchst. f DSGVO
Categories of data: usage data, connection data
Recipient of the data: None.
Intended third country transfer: None.
Do we store or read personal data on your device based on your consent? No.
2. Functions on our website
Subscription to our newsletter
Purpose of processing: Subscription to our newsletter on our news and offers; proof of your consent; ensuring the security of our information technology systems; personalization of our newsletter based on your usage behavior.
Legal basis: Article 6(1)(a), (f) GDPR
Categories of data: Master data, contact data, usage data, connection data
Recipient of the data: HubSpot European Office, Ground Floor, Two Dockland Central Guild Street, Dublin 1, Ireland
Intended third country transfer: USA (Based on the standard data protection clauses of the EU Commission, Article 46 Para. 2 lit.c GDPR)
Do we store or read personal data on your device based on your consent? Yes, see the overview at the end of this privacy policy.
Request for whitepapers, checklists, e-books
Purpose of processing: Request or download of whitepapers, checklists, e-books etc.; evaluation of your usage behavior.
Legal basis: Article 6(1)(a), (b) GDPR
Categories of data: Master data, contact data, usage data and connection data
Recipient of the data: HubSpot European Office, Ground Floor, Two Dockland Central Guild Street, Dublin 1, Ireland
Intended third country transfer: USA (Based on the standard data protection clauses of the EU Commission, Article 46 Para. 2 lit.c GDPR)
Do we store or read personal data on your device based on your consent? Yes, see the overview at the end of this privacy policy.
Application by e-mail
Purpose of processing: Processing of your application and carrying out of the application procedure; consideration of your application in future application procedures with us, provided you have given your express consent.
Legal basis: Article 88(1) GDPR in conjunction § Article 26 (1) sentence 1 BDSG; for storage for future application procedures Article 6 (1) letter a GDPR in conjunction with Art. 7 GDPR, § 26 Paragraph 2 BDSG
Categories of data: Master data, contact data, content data, connection data; if applicable, special categories of personal data within the meaning of Art. 9 para. 1 GDPR (only the data relating to your application that you provide us with will be stored)
Recipient of the data: None
Intended third country transfer: None
Do we store or read personal data on your device based on your consent? No
Customer account (CRM)
Purpose of processing: Use of a customer account; ensuring data and information security; login to personal area; if necessary, further description by ODOSCOPE.
Legal basis: Article 6(1)(b), (f) GDPR
Categories of data: Master data, contact data, contract data, payment data, usage data, connection data
Recipient of the data: HubSpot European Office, Ground Floor, Two Dockland Central Guild Street, Dublin 1, Ireland
Intended third country transfer: USA (Based on the standard data protection clauses of the EU Commission, Article 46 Para. 2 lit.c GDPR)
Do we store or read personal data on your device based on your consent? No
Contact form
Purpose of processing: Processing of your contact request; evaluation of your communication with us Legal basis: Article 6(1)(a), (f) DPA; Article 6(1)(b) DPA (if the request leads to a later conclusion of a contract or concerns an existing contract)
Legal basis: Contact data, master data, content data, usage data, connection data (depending on the content of your request)
Categories of data: HubSpot European Office, Ground Floor, Two Dockland Central Guild Street, Dublin 1, Ireland
Recipient of the data: USA (Based on the standard data protection clauses of the EU Commission, Article 46 Para. 2 lit.c GDPR)
Intended third country transfer: Yes, see the overview at the end of this privacy policy.
Links to Youtube und LinkedIn
On our website we use buttons for the integration of the social plugins of YouTube and LinkedIn. This solution prevents direct transmission of your data to the social networks and prevents these providers from reading and storing information on your terminal device. When you use our website, therefore, no connection is yet established to the servers of the social networks. This only happens when you click on one of the buttons. If you click on a corresponding button, a new page is opened that is retrieved from the servers of the respective social network. From that time the operator of the social network obtains knowledge that our website was accessed via your IP address. At the same time, the provider may place cookies on your terminal device or read cookies, unless you have prohibited the use of cookies in your browser.
3. Embedded tools and services
HubSpot Marketing Hub
Purpose of processing: E-mail marketing, especially newsletter dispatch; evaluation of the click and usage behaviour for optimisation and demand-oriented design of the website; connection to the HubSpot CRM.
Legal basis: Article 6(1)(a) GDPR
Categories of data: Contact data, if applicable content data, usage data, connection data
Recipient of the data: HubSpot European Office, Ground Floor, Two Dockland Central Guild Street, Dublin 1, Ireland
Intended third country transfer: USA (Based on the standard data protection clauses of the EU Commission, Article 46 Para. 2 lit.c GDPR)
Do we store or read personal data on your device based on your consent? Yes, see the overview at the end of this privacy policy.
LinkedIn Conversion Tracking – LinkedIn Insight Tag
Purpose of processing: measuring the impact of our advertisements and displaying advertising that is in line with our interests.
Legal basis: Art. 6 para. 1 letter a GDPR
Categories of data: usage data, connection data
Recipient of the data: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”)
Intended third country transfer: On a case-by-case basis USA (Based on the standard data protection clauses of the EU Commission, Article 46 Para. 2 lit.c GDPR)
Do we store or read personal data on your device based on your consent? Yes, see the overview at the end of this privacy policy.
Matomo
Purpose of processing: Statistical evaluation, optimization and needs-based design of our website.
Legal basis: Art. 6 para. 1 letter a GDPR
Categories of data: usage data, connection data
Recipient of the data: None
Intended third country transfer: None
Do we store or read personal data on your device based on your consent? Yes, see the overview at the end of this privacy policy.
YouTube
Purpose of processing: Integration of videos via the video plugin of YouTube; personalization of our website.
Legal basis: Article 6(1)(a) GDPR
Categories of data: usage data, connection data
Recipient of the data: Google Ireland Ltd, Gordon House, Barrow Street Dublin 4 Ireland
Intended third country transfer: On a case-by-case basis USA (Based on the standard data protection clauses of the EU Commission, Article 46 Para. 2 lit.c GDPR)
Do we store or read personal data on your device based on your consent? Yes, see the overview at the end of this privacy policy.
III. Information on the storage period of consent-based cookies and similar technologies
In the following we inform you about the names and functional duration of the cookies and similar technologies used by the above mentioned plugins and services – in case of your consent – according to the following scheme:
Name of the service: Name of the cookie/similar technology (functional duration).
Access to a cookie/similar technologies is basically only possible from the Internet address from which the cookie is set. This means that we have no access to the cookies of the providers used (above). These have no access to our cookies. Third parties have no access to our cookies or those of the providers used. Access by third parties can only be gained through technical attacks which we cannot control and for which we are not responsible.
Cookie Name Domain Validity
1P_JAR www.google.com 1 day
ANID www.google.com 12 months
IDE www.doubleclick.net 20 days
NID www.google.com 6 months
OGPC www.google.com 30 days
UULE www.google.com 1 day
UserMatchHistory www.linkedin.com 30 days
_cfduid www.hscollectedforms.net 30 days
_cfduid www.hsadspixel.net 30 days
_cfduid www.offers.odoscope.com session
_hssc www.odoscope.com 1 day
_hssrc www.odoscope.com session
_hstc www.odoscope.com 21 days
Hubspotuk www.odoscope.com session
_pk_id.7.e089 www.odoscope.com 13 months
_pk_ses.7.e089 www.odoscope.com 3 weeks
bcookie www.linkedin.com 1 day
lang www.ads.linkedIn.com Session
lang www.linkedin.com 1 day
lissc www.linkedin.com 12 months
pull_language www.odoscope.com 12 months
IV. Notes on external pages ODOSCOPE GmbH
Facebook page
Purpose of processing: We operate a page on our company at https://www.facebook.com/odoscope (“Facebook Page”). When you visit and use our Facebook page, Facebook can evaluate your usage behavior and provide us with information obtained from this (“Insights”). The use of the Page-Insights is for the purpose of economic optimization and demand-oriented design of our Internet presence.
Legal basis: Article 6(1)(f) GDPR
Categories of data: If applicable master data, if applicable contact data, content data, usage data, connection data
Recipient of the data: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland („Facebook“)(as jointly responsible – the substance of the agreement can be found at https://www.facebook.com/legal/terms/page_controller_addendum)
Intended third country transfer: None
Do we store or read personal data on your device based on your consent? No
LinkedIn page
Purpose of processing: We operate a page on our company at https://www.linkedin.com/company/odoscope (“LinkedIn Page”). When you visit and use our LinkedIn site, LinkedIn may evaluate your use of the LinkedIn site and provide us with information obtained from such use. This information is used for the purpose of economic optimisation and demand-oriented design of our website.
Legal basis: Art. 6 para. 1 letter f GDPR
Categories of data: If applicable master data, if applicable contact data, content data, usage data, connection data
Recipient of the data: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (as jointly responsible party – the substance of the agreement can be found at https://legal.linkedin.com/pages-joint-controller-addendum
Intended third country transfer: None
Do we store or read personal data on your device based on your consent? No
Twitter Account
Purpose of processing: We operate a page on our company at https://twitter.com/odoscope (“Twitter Account”). When visiting and using our Twitter account, Twitter can evaluate your usage behavior.
Legal basis: Article 6(1)(f) GDPR
Categories of data: If applicable master data, if applicable contact data, content data, usage data, connection data
Recipient of the data: Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, Ireland
Intended third country transfer: None
Do we store or read personal data on your device based on your consent? No
Xing page
Purpose of processing: We operate a page on our company (“Xing page”) at https://www.xing.com/companies/odoscopegmbh When you visit and use our Xing site, New Work SE (“Xing”) can evaluate your usage behaviour and provide us with information obtained from this. This information is used for the purposes of economic optimisation and demand-oriented design of our website.
Legal basis: Article 6(1)(f) GDPR
Categories of data: Master data, contact data, content data, usage data, connection data
Recipient of the data: New Work SE, Dammtorstrasse 30, 20354 Hamburg
Intended third country transfer: None
Do we store or read personal data on your device based on your consent? No
YouTube channel
Purpose of processing: We operate a page on our company at https://www.youtube.com/channel/UCQkGJ7acUiHAHTJJR5WRr-Q (“YouTube Channel”). When you visit and use our YouTube Channel, Google can evaluate your usage behaviour and provide us with information obtained from this. This information is used for the purpose of economic optimization and demand-oriented design of our Internet presence.
Legal basis: Art. 6 para. 1 letter f GDPR
Categories of data: Master data, contact data, content data, usage data, connection data
Recipient of the data: Google Ireland Ltd, Gordon House, Barrow Street Dublin 4 Ireland
Intended third country transfer: None
Do we store or read personal data on your device based on your consent? No
Cookie Consent
Purpose of processing: When you visit our website, certain information is stored on or read from your terminal device if this is absolutely necessary for the operation of our website. This includes information processed by the “Cookie Consent” service to ensure that only those cookies are set or read that are technically absolutely necessary to operate our website or to which you have consented. We have selected the operator according to data protection-friendly and technical criteria.
Legal basis: Art. 6 para. 1 lit. c, f GDPR
Data categories: Usage data, connection data
Recipients of the data: CookieYes Limited, 3 Warren Yard Warren Park, Wolverton Mill, Milton Keynes, MK12 5NW, United Kingdom.
Intended third country transfer: UK (adequacy decision).
Do we store or read personal data on your end device based on your consent? No
Google Ads Conversion Tracking
Purpose of processing: measuring the success of our Google Ads advertising campaigns.
Legal basis: Art. 6 para. 1 letter a GDPR
Data categories: Usage data, connection data
Recipients of the data: Google Ireland Ltd, Gordon House, Barrow Street Dublin 4 Ireland.
Intended third country transfer: In individual cases, USA (based on the standard data protection clauses of the EU Commission, Art. 46 para. 2 lit. c DSGVO).
Do we store or read out personal data on your end device based on your consent? Yes
Google Fonts
Purpose of processing: more personalized design of our website.
Legal basis: Art. 6 para. 1 lit. a DSGVO.
Data categories: Connection data
Recipients of the data: Google Ireland Ltd, Gordon House, Barrow Street Dublin 4 Ireland.
Intended third country transfer: In individual cases, USA.
Do we store or read out personal data on your end device based on your consent? No
Google CDN
Purpose of processing: Outsourcing of content to additional domains for website optimization.
Legal basis: Art. 6 para. 1 letter f DSGVO.
Data categories: Connection data, usage data
Recipients of the data: Google Ireland Ltd, Gordon House, Barrow Street Dublin 4 Ireland.
Intended third country transfer: In individual cases, USA
Do we store or read out personal data on your end device based on your consent? No
Google Double Click
Purpose of processing: marketing of advertising
Legal basis: Art. 6 para. 1 lit. A DSGVO
Data categories: Connection data, usage data
Recipients of the data: Google Ireland Ltd, Gordon House, Barrow Street Dublin 4 Ireland.
Intended third country transfer: In individual cases, USA
Do we store or read out personal data on your end device based on your consent? No
Google Tag Manager
We use the Google Tag Manager to integrate third-party content. This is a technical solution that does not itself store or read any cookies or similar technologies that require consent, but merely controls the conditions under which the other programs used on our website and described below are activated.
Status: October 2023