Source: https://oeser-orlet.de/1/metanavigation/privacy/
Timestamp: 2019-04-18 13:05:42+00:00

Document:
Data protection and data security for our customers and users are a high priority for us. We observe the data protection regulations, in particular the EU General Data Protection Regulation ("DSGVO"), the Federal Data Protection Act ("BDSG") and the Telemedia Act ("TMG").
I. Who is responsible for data processing?
Data protection law for the processing of personal data and service providers within the meaning of the TMG is the oeser + orlet GmbH, Im Steinfeld 9, 07751 Jena, Germany, Tel: +49 (0) 3641 44 09 55, info@oeser-orlet.de. As far as this data protection information refers to "we" or "us", this refers in each case to the aforementioned company.
II. What principles do we observe?
In compliance with data protection regulations, we process your personal data only if permitted by law or if you have given your consent. This also applies to the processing of personal data for advertising and marketing purposes.
On this website we can also collect information that does not allow us to draw any direct conclusions about you. In certain cases - especially when combined with other data - this information can nonetheless be considered "personal data" in the sense of data protection law. Furthermore, we may also collect on this website such information, which prevents us from identifying you, either directly or indirectly; this is e.g. summarized information about all users of this website.
III. Which data do we process?
You can access our website without directly providing personal information (such as your name, postal address or e-mail address). Again, we need to collect and store certain information in order to provide you with access to our website.
When you visit this website, our web server will automatically save the domain name or IP address of the requesting computer (usually your internet access provider), including the date, time and duration of your visit, the subpages / URLs, the You visit and information about the Application (s) and Devices you use to view our Sites.
We have integrated a social network button Facebook (1601 South California Avenue, Palo Alto, CA 94304, USA - www.facebook.com) on our website. You can recognize the Facebook buttons by the Facebook logo or the "Like-Button" ("Like").
In order to prevent an automatic transmission of information to Facebook when calling our website, we have implemented the so-called "two-click solution": In addition to the Facebook button there is another surface that looks like a switch. Only when you press this button and then click on the Facebook button again will information (such as the address of our website and your user ID) be transmitted to Facebook.
If you would like to receive the newsletter we offer, we need a valid e-mail address from you. In order to be able to check whether you are the owner of the specified e-mail address or whose owner agrees to receive the newsletter, we will send an automated e-mail to the e-mail address provided after the first registration step. Only after confirmation of the newsletter registration via a link in the confirmation e-mail will we include the specified e-mail address in our mailing list. We do not collect any further information beyond the e-mail address and registration confirmation information. Your consent to the storage of the data, the e-mail address and their use for sending the newsletter, you can withdraw at any time with effect for the future.
When registering as a registered user - especially when creating a customer account - we collect personal data resulting from the registration form on our website. We may require you to re-enter data collected during the registration process (especially for your identification) and collect additional personal information if you wish to use certain content on our website or place an order.
In order to ensure communication with our customers and end users, we process all the information you have provided to us when contacting us or which we have requested from you (eg your name, address and other contact details); In addition, we save the reason for contacting.
IV. For what purposes and on what legal basis do we process your data?
1. The processing of the personal data contained in the log files, if necessary, in order to enable you to use our website; this is done on the basis of § 15 para. 1 TMG.
2. The processing of the data collected via cookies (including the web analysis services etracker and Google Analytics) and the pseudonymous user profiles is for purposes of advertising, market research and the needs-based design of our website based on § 15 Abs. 3 TMG.
4. If you place an order through our website or register on our website as a user or for a customer account, we process the data collected in this context for the execution of the contracts concluded with you on the basis of Article 6 paragraph 1 b) GDPR.
5. We may also process the data stored in connection with the use of our website and the data stored for the purpose of customer and consumer communication in order to fulfill the legal obligations to which we are subject; this is done on the basis of Article 6 (1) (c) GDPR.
d) the management and development of our business, including risk management.
V. Am I required to provide data?
The information required for registering for our newsletter, making online orders, ensuring consumer-friendly communication or registering as a user or creating a customer account is marked as mandatory in the relevant area of ??the website (for example, an online form); Without the provision of mandatory information, we can not allow you to use the respective functionality. In order to ensure a consumer-friendly communication, at least your name and your e-mail address are necessary.
In addition, if we collect personal information from you, we will tell you when we collect it whether the provision of that information is required by law or contract or is required to conclude a contract. In doing so, we generally identify those information that is provided voluntarily and is not based on any of the aforementioned obligations or that is not required to conclude a contract.
VI. Who receives my data?
Your personal data is generally processed within our company. Depending on the type of personal information, only certain departments / organizational units have access to your personal information. These include, in particular, the specialist departments involved in the provision of our digital services (such as websites) and our IT department. A role and authorization concept limits access within our organization to those functions and to the extent required for the particular purpose of the processing.
non-public and public entities, to the extent that we are required by law to transmit your personal information.
VII. Is automated decision making used?
In connection with the operation of our website, we generally do not use automated decision-making (including profiling) within the meaning of Art. 22 DSG-VO. If we use such procedures in individual cases, we will inform you separately about this to the legally required extent.
VIII. Are data transmitted to countries outside the EU / EEA?
The processing of your personal data takes place in principle within the EU or the European Economic Area.
Only in connection with the involvement of service providers for the provision of web analysis services may there be a transmission of information to recipients in so-called "third countries". "Third countries" are countries outside the European Union or the Agreement on the European Economic Area in which it is not possible to assume a level of data protection comparable to that in the European Union.
IX. How long will my data be stored?
In principle, we store your personal data as long as we have a legitimate interest in this storage and do not outweigh your interests in the non-continuation of the storage.
Even without a legitimate interest, we can continue to store the data if we are legally obliged to do so (for example to fulfill retention obligations). We delete your personal data even without your intervention, as soon as their knowledge is no longer necessary to fulfill the purpose of the processing or the storage is otherwise legally inadmissible.
the data processed in connection with a user or customer account registration is deleted upon completion of the registration or upon deletion of the customer account. The personal data that we need to store in order to fulfill our retention obligations will be stored until the end of the respective retention obligation. Insofar as we store personal data solely for the purpose of fulfilling retention requirements, these are generally blocked so that they can only be accessed if this is necessary in view of the purpose of the retention obligation.
X. What rights do I have?
to object to the processing of your personal data, Art. 21 GDPR.
To exercise these rights, you may at any time - e.g. via one of the contact ways indicated at the beginning of this data protection information - contact us.
They are also entitled to file a complaint with a competent supervisory authority for data protection, Art. 77 DSGVO.

References: § 15
 § 15

V. 
 Art. 22
 Art. 21
 Art. 77