Source: https://www.ode.systems/privacy
Timestamp: 2020-02-22 21:33:05
Document Index: 627638845

Matched Legal Cases: ['Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 15', 'Art. 16', 'Art. 20', 'Art. 21', 'Art. 17', 'Art. 18']

Data protection notice ODE.systems GmbH
Data protection information in accordance with the EU Data Protection Basic Regulation ("DSGVO") and the German Federal Data Protection Act ("Bundesdatenschutzgesetz, BDSG 2018") for users of the ODE-App
Thank you for using ODE-Services. Your trust is important to us. We respect your privacy. In this data protection notice, we explain to you how and why we use the personal data that you share with us and that we collect from you. In short, we use the personal information we collect to provide the service - our decision making app ("ODE App") - and its features to registered users. Without your consent, we will not use your personal data and information for any other purpose, nor will we transmit it to third parties.
Personal Information' means any information that can be used to identify you directly or indirectly by reference to an identifier, such as a name, location data or online identifier.
Please read on for detailed information about when we collect personal information, how and why we use it, and for more information about your rights.
1. information on the responsible body
3. processing processes and purposes
4. processing service provider
5. your rights / rights of data subjects
7. storage duration and deletion
The body responsible under Article 4(7) of the DSGVO is:
The responsible body has appointed a data protection officer. The best way to contact our data protection officer is by e-mail: This email address is being protected from spambots. You need JavaScript enabled to view it. or in writing at the above address with the addition "The data protection officer".
Like all users in the ODE community, "moderators" have access to the decision topics published in the community.
"Administrators" are trained experts in accordance with the technical and organisational measures and the catalogue of measures to protect the processed personal data and the user accounts as well as the security of the ODE services. They continuously develop the ODE services and gain access to personal data within the scope of support cases.
"Personal data" means any information relating to an identified or identifiable natural person. This includes, for example, information such as name, postal address, e-mail address or telephone number, but also usage data such as your IP address.
"Special categories of personal Data" means any information that allows a natural person to be identified based on biometric data and any data relating to gender, belief, sexual orientation, health, membership of a political or trade union organization, or criminal conviction or prosecution.
"Decision Topic" is the subject that the user uses the ODE app to process, in part algorithmically, or publishes in the ODE community with its network or in the ODE community, in order to obtain assistance in decision-making.
"Processing" means any operation or set of operations carried out with or without the aid of automated processes relating to (specifial categories of) personal data such as collection, recording, arrangement, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or association, limitation, erasure or destruction.
Hereinafter we would like to inform you which (special categories of) personal data we process and for which purposes we do this. The ODE app allows you to make votes or complex decisions using algorithm-based tools and guidance or by involving users of your community or the ODE community. In order to use the ODE app to make decisions, you must provide personal data when registering - with the exception of trial mode with limited functions - which we process to provide the respective service. In cases additional voluntary/optional information may given or if the possibilities of use are extended, these are marked accordingly as "optional". The decision topics selected by you may also contain (special) personal data at your choice.
3.1 Decision guidance
In connection with assistance with votes / decisions, the following personal data will be processed in accordance with Article 6 (1) b) or for special personal data in accordance with Article 9 (2) a) or e) DSGVO to fulfil our rental / service contract with you and in accordance with Article 6 (1) a) and Article 9 (2) a) or e) DSGVO for optional information:
For the trial mode / test access you do not have to provide any personal information. If you use an ODE app, ODE.systems will automatically process the following information via the functions of the app store in trial mode according to the more detailed regulations of the respective app store with which the user is registered:
Used operating system and end device
Access date / time
Geographical allocation by country
IP address when submitting public user feedback
Content data of your decision topic is not processed by ODE.systems in trial mode. In this case, this data is only stored on your mobile device.
To register to use the ODE services, you must enter the following information:
First and last name, e-mail address and/or mobile phone number ("base data or inventory data") or, in the case of registration using social media identities, account name and the data transmitted by the respective social media service at your request.
Profile picture, if you use an authentic image, work and home address are optional details and are only collected and processed by us if you provide us with this information during registration or at a later date. We currently offer the ODE services as a beta version for free registered use. At the end of the beta phase, we will collect payment information and involve payment service providers.
You can agree to the use of your location data by ODE.systems during the installation of the ODE app or later via the operating system of your end device (smartphone, tablet, etc.), or revoke this authorization. In principle, your location data will only be processed if you are logged in and the ODE app is open as the active app in the front.
You can optionally grant access to the camera and the microphone of your device via the operating system of your device in order to upload photos, videos or audio data or, if offered, to use voice control and reset the use via the settings of your terminal device.
You can subscribe to news in the ODE app. We then process your data for the transmission of our news. If you no longer wish to receive the news, you can cancel the subscription in the ODE app. If we transmit information on the contract and the ODE app use, this is done within the framework of contract fulfilment.
The processing of this voluntarily provided personal data is based on your consent in accordance with Article 6 (1) a) or Article 9 (2) a) DSGVO. If you no longer wish the data you have optionally provided to be processed, you can revoke your consent by deleting the data from the ODE app.
The app also processes the contents and materials of your decision topic. If you use (special categories of) personal data of third parties as content and material in your decision topic, we process this content on the basis of Article 6 (1) b), 9 (2) a) or e) DSGVO. Information pursuant to Article 14 DSGVO is not reasonable for us, as we neither filter the content for personal data nor have the opportunity to identify and contact third parties. If you use the ODE app as a private individual, the provisions of the DSGVO and the German BDSG do not apply to the processing you carry out, but you must respect the personal rights of the third party.
3.2 Evaluation of the ODE Service
The ODE app allows the user to evaluate the decision making and support process of the ODE app, but also to inform us about problems. This data is processed on the basis of our legitimate interest pursuant to Article 6 (1) f) DSGVO in order to further develop our services and improve quality.
3.3 ODE Newsletter Subscription
You can subscribe to the ODE newsletter in the ODE app or on the ODE.systems website. We collect the personal data which we request using the input mask when ordering the newsletter. Optional data are marked with a *. ODE.systems informs you at regular intervals by means of the newsletter about its own offers or those of ODE.systems partners. The newsletter can only be received by the person concerned if (1) the person concerned has a valid e-mail address and (2) the person concerned registers for the newsletter. For legal reasons, a confirmation e-mail in the double opt-in procedure will be sent to the e-mail address entered for the first time by the person concerned for the purpose of sending the newsletter. This confirmation e-mail is used to check whether the owner of the e-mail address as the person concerned has authorised receipt of the newsletter.
When registering for the newsletter, we also store the IP address assigned by the Internet Service Provider (ISP) to the computer system used by the person concerned at the time of registration as well as the date and time of registration. The collection of this data is necessary in order to be able to track the (possible) misuse of the e-mail address of a data subject at a later point in time and therefore serves the legal protection of ODE.systems as the data controller.
The personal data collected as part of the newsletter service will not be transmitted to third parties. The subscription to our newsletter can be cancelled by the person concerned at any time. The consent to the storage of personal data, which the person concerned has given us for the newsletter dispatch, can be revoked at any time. For the purpose of revoking the consent, there is a corresponding link in each newsletter. It is also possible to unsubscribe from the newsletter at any time directly on the ODE.systems website or in the ODE app.
The ODE newsletters contain so-called tracking pixels. A pixel is a miniature graphic that is embedded in our newsletter emails in HTML format to enable log file recording and log file analysis. This enables a statistical evaluation of the success or failure of online marketing campaigns. Using the embedded pixel-code, ODE.systems can detect if and when an email was opened by a person and which links in the email were accessed by that person.
ODE.systems stores and evaluates such personal data collected via the pixel-code contained in the newsletters in order to optimize the sending of the newsletter and to adapt the content of future newsletters even better to the interests of the recipients. This personal data will not be transmitted on to third parties. Affected persons are entitled at any time to revoke the relevant separate declaration of consent submitted via the double opt-in procedure.
3.4 Troubleshooting and improvement of functionality
In order to eliminate malfunctions of the ODE-App and to improve the functionalities and to adapt them to the needs of the users, we process the following personal data according to article 6 (1) f) DSGVO as far as necessary due to our legitimate interest:
First and last name, e-mail address, country, mobile phone number, profile picture (optional entry), your continental location data at the time of use (and your location data if you have permitted access), work and home address (optional entry), frequency and duration of use and information about your terminal (Device ID, Ad ID), language and time zone.
Insofar as it is sufficient to fulfil the respective purpose, we work with anonymised data and not with personal data.
3.5 Social Media Appearances
When you access our Facebook page (via a link from our website, from our newsletter or directly), you are taken to the technical platform and services provided by Facebook Ireland Ltd, 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland ("Facebook").
We would like to point out that you use the Facebook page and its functions under your own responsibility. This applies in particular to the use of the interactive functions (e.g. commenting, sharing, rating).
When you visit our Facebook page, ODE.systems only collects personal information when you interact with us through our Facebook page, such as when you comment on something, click a like button or send us a message. The legal basis for the processing of such data by ODE.systems varies depending on how you use the features of our Facebook Page. If, for example, you send us a contract-relevant request, our data processing is based on Art. 6 (1) b) DSGVO. In addition, data processing can also take place on the basis of your consent in accordance with Art. 6 (1) a) DSGVO, for example if you "link" to one of our contributions/posts, comment on it or upload content to our Facebook page yourself. Your consent can be revoked at any time with effect for the future by deleting the comment or the relevant content. A revocation does not affect the legality of the processing that took place on the basis of the consent up to the revocation. In addition, we analyze the views and interactions on our Facebook page. For this purpose, Facebook creates user profiles and provides us exclusively with anonymous data in the form of page insights. Page insights are aggregated data that help us better understand how users interact with our Facebook page. Facebook provides more information about this at the following link: http://de-de.facebook.com/help/pages/insights.
Please note that when you use and access our Facebook page, your personal data is also processed by Facebook in addition to ODE.systems. ODE.systems and Facebook are jointly responsible for processing insights data. The respective responsibilities of ODE.systems and Facebook with regard to the processing of insights data are set out in the page insights supplement, which can be accessed at https://www.facebook.com/legal/terms/page_controller_addendum
Facebook is responsible for how Facebook uses insigts data from visits to Facebook pages for its own purposes, the extent to which activities on the Facebook page are assigned to individual users, how long Facebook stores this data and whether data from a visit to the Facebook page is transmitted to third parties.
With regard to data processing via our Facebook Page, you have the option of asserting your data subject rights (see section 4 "Your rights" below) against ODE.systems as well as Facebook. Further information can be found in Facebook's data usage guidelines at de-de.facebook.com/about/privacy.
In addition to the processing described above, Facebook also processes your data for analysis and advertising purposes or to play out personalized advertising. To the best of our knowledge, Facebook also uses cookies, pixels or other techniques that store your usage behavior (even across different devices). This enables Facebook to play targeted advertising on its own platform and on third-party sites. The data collected about you in this context is also transferred by Facebook to the USA and other countries outside the European Union. Facebook describes in general terms in its data usage guidelines exactly what information Facebook receives and how it is used. You will also find information about how to contact Facebook and how to post advertisements. The data use guidelines are available at the following link: de-de.facebook.com/about/privacy. The complete Facebook data policies can be found here: https://de-de.facebook.com/full_data_use_policy
Facebook also offers Facebook members the opportunity to opt out of certain data processing practices by visiting https://www.facebook.com/settings?tab=ads for information and opt-out options.
3.5.2 Links to social networks Instagram, Twitter, LinkedIn, Vimeo, YouTube
On our website and in our newsletters we also link to our profiles of the other social networks Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA; "Instagram"), LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland "LinkedIn"); Twitter (Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland "Twitter"), Vimeo (Vimeo LLC headquartered at 555 West 18th Street, New York, New York 10011 "Vimeo") and Youtube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Youtube"), each using the appropriate social network logo.
If you follow the links or access content from ODE.systems directly on these platforms, you will be on the websites of the respective social media service providers. The terms and conditions and data processing guidelines of the respective social media service providers will then apply.
We would like to point out that we are not aware of the content and scope of the processing of your data carried out by the respective service provider. Information on the handling of your data by the respective social media service provider can be found in the data protection declarations of these services:
for Instagram at http://instagram.com/about/legal/privacy/
for LinkedIn at https://www.linkedin.com/legal/privacy-policy
for Twitter at: https://twitter.com/de/privacy and https://help.twitter.com/de/rules-and-policies/twitter-cookies
for Vimeo at https://vimeo.com/privacy
for Youtube: https://policies.google.com/privacy?hl=de&gl=de
We process data about our social media profiles to the extent that users of the social media platforms address messages or comments directly to us via our respective profile. Legal basis for the processing of the data is then the consent of the respective user according to Art. 6 (1) a) DSGVO or in the case of contract-relevant inquiries Art. 6 (1) b) DSGVO. We may share your content on our site if this is a function of the social media platform and communicate with you via the social media platform. The legal basis is Art. 6 (1) f) DSGVO. In this case, data processing is carried out on the basis of our legitimate interest in public relations and communication.
4. Processing service providers and processing in countries outside the European Economic Area
Sometimes we use external service providers to process your data (e.g. hosting, troubleshooting, creation of mailings). For this purpose it is necessary for us to transfer your personal data to our external service provider for the intended purpose (limited to the respective purpose) or to make processing possible. Our service providers have been carefully selected and commissioned by us in writing. They are bound by our instructions and we have informed ourselves about their technical and organisational measures for the security of the processing of personal data. Furthermore, we require our service providers to comply with the applicable data protection regulations. We cooperate with service providers from the EU. To this end, we have concluded order processing agreements with our external service providers within the EU in accordance with Article 28 paragraph 3 DSGVO, insofar as this is necessary for the purpose of the agreement.
We store all our data at a cloud service provider within the EU or in IT infrastructures and devices (employees' computers) at our locations within the EU.
We do not sell or give away any personal data to third parties.
However, we reserve the right to disclose information about you if we are required to do so by law or if we are required to do so by authorities or law enforcement agencies (e.g. police or public prosecutors).
If personal data is processed by us, you are the data subject within the meaning of the DSGVO and you have the following rights vis-à-vis ODE.systems:
You can request information about the scope, origin and recipients of the processed data as well as the purpose of the processing at any time and free of charge (Art. 15 DSGVO). You can request that incorrect data be corrected at any time (Art. 16 DSGVO). In addition, you have the option of receiving your personal data in a structured, common and machine-readable format (Art. 20 DSGVO).
You may object to the use of your personal data in the future (Art. 21 DSGVO). You may also request partial or complete deletion (Art. 17 DSGVO), restriction of processing or blocking (Art. 18 DSGVO) of your personal data. We will check this claim and, unless there is another legal basis for further processing, comply with it. We will inform you of the result.
Without prejudice to any other administrative or judicial remedy, you have the right to apply to a data protection supervisory authority such as The State Data Protection Commissioner and the Right of Access to Files of Brandenburg:
Stahnsdorfer Damm 77, 14532 Kleinmachnow, Phone: 033203/356-0, Fax: 033203/356-49
All requests for information, enquiries, revocations of consents, objections and other concerns regarding data processing can also be sent by e-mail to This email address is being protected from spambots. You need JavaScript enabled to view it. or to the address stated in the introduction.
We use appropriate technical and organizational measures to ensure data security, in particular to protect your personal data against unauthorized access by third parties, accidental or intentional alteration, loss or destruction. These are regularly checked and adapted to the current state of the art. The transmission of your personal data from your end device (e.g. smartphone) to us is always encrypted.
7. Storage period and deletion
The data you provide us with will only be stored by us for as long as is necessary to fulfil the purpose for which you have provided us with your data or to comply with legal or official obligations. Personal data is generally anonymized by us after deletion of the account, unless we have a legitimate interest in a longer storage period (e.g. accounting requirements, litigation) of non-anonymized data, e.g. to meet our own archiving and verification obligations.
8. Updating and modification
We reserve the right to change this privacy policy in the future. If we decide to change this privacy statement, we will notify you of those changes in a timely manner and provide you with the opportunity to opt-in or opt-out of the changes.