OSARTIS GmbH takes the protection of your personal data very seriously and adheres to the statutory provisions and in particular also the regulations of data protection law.
OSARTIS GmbH (hereinafter referred to as “OSARTIS”) is the controller within the meaning of Art. 4 no. 7 EU General Data Protection Regulation (GDPR). You can find more detailed information about us in our legal notice. You can reach our data protection officer at datenschutz@osartis.de.
The following statement gives you an overview about which type of personal data are collected for which purpose and on which legal basis they are collected. Personal data are all data which relate to you personally, e.g. name, address, email addresses, user conduct. We also inform you on your rights with regard to us as the controller.
By merely using this website for information purposes, OSARTIS will automatically collect and store information in the server log files your browser transmits to us. These data are technically necessary in order for us to display this website to you and assure stability and security (the legal basis is Art. 6 (1) lit. f GDPR):
OSARTIS will not attribute these data to specific persons, and these data will not be combined with other data sources. These data will be stored exclusively on servers in the EU. Once the data have been used for the above-mentioned purposes, OSARTIS will delete the data after seven days.
When you address enquiries to us, we will ask for your name, your contact details as well as other information we need from you. We use the data provided by you to answer enquiries. The legal basis is Art. 6 (1) lit. b and f GDPR.
We only forward your data to third parties if you have given your express consent, to the extent this is necessary to fulfil the tasks you have given us or to the extent there is a legal obligation to do so. If we have your data processed by processors, such processors are bound by contracts pursuant to Art. 28 GDPR.
6.1 General
Furthermore, cookies will be stored on your computer when you use our website. Cookies are small text files which are stored on your hard drive and attributed to the browser you use, and with which the controller setting the cookie (i.e. in this case us) receives certain information. Cookies cannot execute any programmes or transmit viruses to your computer. They serve to render the internet services more user-friendly and more effective as a whole. The legal basis for the use of cookies on our website is Art. 6 (1) lit. f GDPR.
We use session cookies to operate our website. These cookies store a so-called session-ID with which various enquiries of your browser can be attributed to the joint session. This allows for your computer to be recognized when you return to the website. The session cookies will be deleted when you close the browser.
You may also prevent the use of cookies by adjusting the settings in your browser software accordingly. We would like to point out that if you prevent the use of cookies, you might not be able to fully use this website.
6.2 Services of the third party provider Google
Cookies are also used in connection with the use of Google Analytics and Google Tag Manager. You will find more detailed information on this under the following paragraphs 7. and 8.
Third party information: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.
The user conditions are available at http://www.google.com/analytics/terms/de.html, the data protection overview at http://www.google.com/intl/de/analytics/learn/privacy.html and the data protection declaration at http://www.google.de/intl/de/policies/privacy. There you will also find further information on your rights and settings to protect your privacy: http://www.google.de/intl/de/policies/privacy.
Google also processes your personal data in the USA and has committed itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. Since the EU-US Privacy Shield has been declared invalid by the European Court of Justice, Google bases the processing of your personal data in the USA on EU standard contractual clauses as appropriate safeguards for the protection of your personal data within the meaning of Art. 46 (2) lit. c GDPR.
The legal basis for the use of these cookies on our website is Art. 6 (1) lit. a GDPR.
Please note, that your consent also includes that your data may be processed in the USA. For this reason, we would like to inform you in accordance with Art. 49 (1) lit. a GDPR, that the USA is considered by the European Court of Justice to be a country with no adequate level of data protection according to EU standards. In particular, there is a risk that your data may be processed by US authorities for surveillance and investigation purposes, possibly without the opportunity for legal remedies.
Your consent can be revoked at any time with effect for the future by changing your cookie settings.
In addition, you can prevent the collection of data generated by cookies and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
We use Google Analytics. Google Analytics is a web analysis service of Google Inc. ("Google").
On our behalf, Google will use this information to evaluate your use of the website and to compile reports on website activity. For this purpose we have concluded a data processing agreement with Google.
When you visit our website, the following data, among others, can be recorded:
Moreover, we use Google Analytics for a multi-device analysis of the flow of visitors which is carried out via a user ID. You can deactivate the multi-device analysis of your use in your user account (https://myaccount.google.com) under “My Data”, “Personal Data”.
The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. Google LLC, headquartered in California, USA, and possibly US authorities can thus access the data stored by Google.
We use Google Analytics with the extension "_anonymizeIp()". However, in the event that IP anonymization is activated on this website, your IP address will be shortened by Google within member states of the European Union or in other states which are parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there.
We use Google Tag Manager. Google Tag Manager is a solution with which marketers can manage website tags via a surface. The Tool Tag Manager itself (which implements the tags) is a domain not using cookies and does not collect any personal data. The tool provides for other tags to be triggered which, in turn, might collect data, as the case may be. Google Tag Manager does not access these data. If tags have been deactivated on domain or cookie level, such deactivation will remain in place for all tracking tags that are implemented with Google Tag Manager. The use policy for Google Tag Manager can be retrieved under http://www.google.de/tagmanager/use-policy.html.
Please click here to be excluded from the collection via Google Tag Manager.
We use the Google Maps service on this website. This enables us to directly display to you interactive maps on the website and make it possible for you to comfortably use the map function.
When visiting the website, Google receives the information that you have called up a corresponding page on our website. The data referred to in lit. 3 of this statement are also transmitted. This occurs irrespective of whether Google has been provided with a user account through which you have logged in or whether there is no user account. If you are logged in to Google, your data will be attributed directly to your account. If you do not want any attribution to your profile at Google, you must log out of your Google account prior to calling up the map on Google Maps. Google stores your data as a use profile and uses the data for purposes of advertising, market research and/or a demand-based design of its website. Such an analysis is made especially (even for users who are not logged in) to provide advertising based on demand and to inform other users of the social network about your activities on our website. You have a right to object to the production of this user profile, however, you must contact Google in order to exercise this right.
The data are processed and stored as long as necessary to achieve the purpose of storage. The data are subsequently erased as soon as legally permissible.
With regard to the processing of your personal data by OSARTIS you are entitled to the following rights:
11.1 Right to Information – Art. 15 GDPR
You have the fundamental right to receive information on the points mentioned in Art. 15 GDPR. In addition, you have the right to request a copy of your personal data in accordance with Art. 15 (3) GDPR.
11.2 Right to Rectification or Erasure – Art. 16 and 17 GDPR
You have the right to have incorrect personal data concerning you corrected. In addition, you have the right to request the deletion of your personal data if further processing is no longer necessary, if the processing is unlawful or if you have revoked your consent.
11.3 Right to Restriction of Processing – Art. 18 GDPR
If the conditions in Art. 18 GDPR are met, you have the right to have the processing of your personal data restricted, i.e. to prevent further processing for the time being.
11.4 Right to Notification
If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller shall be obliged to communicate such rectification or erasure of personal data or restriction of processing to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. You have the right to request from the controller to be informed about those recipients.
11.5 Right to Object to the Processing – Art. 21 GDPR
If the processing of your personal data is based on Art. 6 (1) lit. e or f GDPR, you have the right to object to the processing if the other conditions of Art. 21 GDPR are met.
11.6 Right to Data Portability – Art. 20 GDPR
Within the limits of Art. 20 GDRP, you have the right to receive your personal data in a machine-readable format in order to pass it on or have it passed on to another controller.
11.7 Right to withdraw the Declaration of Consent
You have the right to revoke your data protection declaration of consent at any time. The revocation of consent does not affect the legality of the processing that has taken place on the basis of the consent until the revocation.
To assert your rights you can contact us at the following address: datenschutz@osartis.de
The exercise of your rights is basically free of charge for you.
In addition, you are entitled to submit a complaint about the handling of your personal data to the competent supervisory authority. The competent supervisory authority for us is:
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Postfach 3163
65021 Wiesbaden
Telefon: +49 611 1408 – 0
Telefax: +49 611 1408 – 611
E-Mail (Kontaktformular): https://datenschutz.hessen.de/über-uns/kontakt.
Effective: September 2020
