Source: http://www.onlevel.com/Service/GDPR-Notice
Timestamp: 2019-04-23 18:54:36+00:00

Document:
In line with the data protection regulations, we would like to point out the following with respect to your personal data being handled by us and at the same time inform you about your rights arising thereof.
1. Who is responsible for data processing and who is your point of contact?
and are responsible for the personal data of the website users (hereinafter referred to as “they”).
2. Which kind of personal data do we process and how is this data obtained?
We process personal data. Personal data refers to all the information which can be associated with you. This is mainly the case for contact information, such as your name, phone number, address and e-mail. This is not the case for usage data which we collect, for instance, when you visit our website and which cannot be directly associated with your person. Usage data include, for example, the time of calling our websites, your IP address, the website you come from, the pages you click on, and the date and duration of your visit, calling our newsletter, our websites or entries you clicked on. Your usage data is recorded while you visit and use our websites.
In this context, no user profiles are created which can be associated with a specific person. In addition, the data is not transferred to third parties. Only anonymised usage data is collected, aggregated, saved and transferred into usage profiles with pseudonyms.
3. For which purpose do we process your personal data (processing purpose) and on which legal foundation?
Your personal data is saved for customer information purposes. We use your data to inform you about new products or marketing campaigns, and provide non-binding recommendations which might be of interest to you. This is independent of whether you have subscribed to our newsletter or not. You can partially or completely object to the saving and usage of your personal data for advertising purposes at any time. Therefore, please send us an e-mail to info@onlevel.com indicating your first and last names and e-mail address.
If you make use of our contact form for route planning or for ordering the newsletter, your data provided in the form including the indicated contact data is saved by us for the purpose of handling your request and for answering any follow-up questions. We will not pass on these data without your consent. If you would like to order the newsletter, we need an e-mail address from you, as well as information which will enable us to verify whether you are the owner of the indicated e-mail address and agree to receive the newsletter. We will not collect any further data. We will use these data exclusively for sending the requested information and will not pass them on to third parties. You can revoke your consent for saving your data, e-mail address and for their use for sending the newsletters at any time, for instance via the “unsubscribe” link in the respective e-mails.
We will create a password protected direct access for each duly registered customer to its inventory data (customer account) saved by us. Here you can view your data with respect to your concluded, open and recently sent orders and manage your address data, bank account and newsletter settings.
orders (Art. 6 para. 1 letter b GDPR) or in line with the provisions of § 15, para. 3 German Telemedia Act (TMG).
If you have granted your consent to the processing of personal data for specific purposes, this processing is deemed legal based on your consent. Consent can be revoked at any time.
This also applies to the revocation of declarations of consent which have been granted to us before the GDPR came into effect, i.e. 25 May, 2018. Please be aware that this revocation will only be effective in future. The lawfulness of the data processing based on your consent and conducted before its revocation therefore remains unaffected by the revocation.
Your usage data is recorded by so-called cookies. Cookies are small text files which are sent to your PC by the web server and are saved on your hard drive. They serve for increasing safety and user convenience and are deleted automatically from your PC upon expiry. If required, you can deactivate the saving of cookies in the respective “Third Party Cookies” settings of your web browser. According to § 15 TMG you are entitled to revoke the saving of your registration and usage data at any time.
The personal data collected for the purpose mentioned under No. 3 are processed on our server and are only accessed by those parties who need the respective data for performing the requested services. Also processors (Art. 28 GDPR) commissioned by us can be granted access to data for the mentioned purposes. They are companies in the categories of IT services, telecommunications, and sales and marketing. If we forward data to external recipients, we are aware that we are only entitled to pass on information about you if this is required by statutory provisions, if you have given your consent or if we are entitled to such data transfer.
is generally transferred to a Google server in the USA and stored there.
The IP address sent by your browser within the scope of Google Analytics is not associated with other data in Google. A transfer of these data by Google to third parties only takes place based on statutory regulations or in line with contract data processing. Google will not associate your data with other data collected by Google. By using these websites you agree to the processing of the data collected about you by Google, the data processing procedures described above, and the mentioned purpose. You can prevent the installation of cookies by changing the corresponding settings of your browser software accordingly. You can moreover prevent the collection of the data (including your IP address) generated by the cookie and related to your use of these websites and the processing of these data by Google by downloading and installing the browser plugin available under the following link.
5. Which buttons do we use for integration with social networks?
So-called sharing buttons are available on our website which enable you to integrate specific contents from our website.
Facebook We use the “Recommend button” of the Facebook social network on our website. This button is only a link and not a so-called “social plugin”. If you do not use this button, no information will be sent to Facebook and no Facebook cookie will be installed on your computer.
As soon as you click on the “Recommend button” without being logged in to Facebook, a new window opens displaying the Facebook login screen. At the same time, Facebook will place a cookie on your hard drive. If you click on the button as already logged in Facebook user, the information that you would like to recommend this article is sent to Facebook. Visitors of your Facebook page can then see – depending on your privacy settings on Facebook – that you recommend this article.
Twitter We use the “social bookmark” of the Twitter social network on our website. This is only a link and not a so-called “social plugin”. If you do not use this button, no information will be sent to Twitter and no Twitter cookie will be placed on your computer. As soon as you click on the button without being logged in to Twitter, a new window opens displaying the Twitter login screen. At the same time, Twitter will install a cookie on your hard drive. If you click on the button as already logged in Twitter user, Twitter associates this visit to your Twitter account.
Pages within Twitter are exclusively operated by Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA (Twitter). Which data Twitter collects on these pages is beyond our knowledge and control.
For general information, please visit http://twitter.com/privacy. You can change your Twitter data privacy settings in the account settings under http://twitter.com/account/settings.
Beyond that, insofar as links to websites of other providers exist, this data privacy statement does not apply to their contents. Which data the operators of these websites may collect is beyond our knowledge and control. For further information, please refer to the data privacy notice of the respective page.
7. Are data transferred to a third country or an international organisation?
Data is only transferred to third countries (countries outside the European Economic Area (EEA)), if this is required for the provision of the requested service, prescribed by law or if you have given us your corresponding consent. If statutorily required, we will separately inform you about the details.
8. How long will your personal data be saved?
If required, we process and save your personal data for the duration of the requested service, as long as the earmarked service is offered or until revocation of consent. Insofar as the legal obligations to retain data set out a longer storage period, the corresponding data will be saved for the required duration.
9. What are your data privacy rights?
of rectification according to Art. 16 GDPR, the right of deletion according to Art. 17 GDPR, the right of limitation according to Art. 18 GDPR, and the right of portability according to Art. 20 GDPR.
As for the rights of access and deletion, the restrictions as per Art. 34 and 35 of the German Federal Data Protection Act (BDSG) shall apply. You moreover have a right of appeal to a data protection supervisory authority (Art. 77 GDPR in conjunction with § 19 BDSG).
10. Are you obliged to disclose your personal data?
Within the scope of the requestable services offered on our websites, you are only required to disclose those personal data which are necessary for performing the service. We will generally not be able to perform the service without these data.
11. Will there be an automated decision-making on a case-by-case basis?
We basically do not use automated decision-making procedures as per Art. 22 GDPR.
You are entitled to object at all times to the processing of personal data concerning you for advertising purposes. If you object to the processing for advertising purposes, we will no longer use your personal data for these purposes.

References: § 15
 § 15
 Art. 16
 Art. 17
 Art. 18
 Art. 20
 Art. 34
 § 19
 Art. 22