Privacy notice - Ortscheit

Privacy notice

Thank you for visiting www.ortscheit.de and your interest in our company.

The protection of your personal data, such as date of birth, name, telephone number, address etc., is an important concern to us.

The purpose of this Privacy Policy is to inform you about the processing of your personal data that we collect from you when you visit our website. Our data protection practice is in accordance with the legal regulations of the EU General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). The following data protection declaration serves to fulfill the information obligations arising from the GDPR. These can be found, for example, in sections 13 and 14 et seq. GDPR.

Responsible person

The responsible person within the meaning of section 4 paragraph 7 GDPR is the one who alone or jointly with others decides on the purposes and means of processing personal data.

With regard to our website, the responsible is:

Lucien Ortscheit GmbH
Stromstr. 6-8
66115 Saarbrücken, Germany
E-Mail: info@ortscheit.de
Tel.: +49 (0)6 81 – 93 66 90
Fax: +49 (0)6 81 – 93 66 936

Contact details of the data protection officer

Pursuant to section 37 GDPR we have appointed a data protection officer. You can contact our data protection officer at:

Elmar Thome
Am Ordensgut 49
66117 Saarbrücken, Germany
E-Mail: elmar.thome@t-online.de

Provision of the website and creating log files

Every time our website is accessed, our system automatically collects data and information from the computer system of the calling device (e.g. computer, mobile phone, tablet, etc.).

 

What personal data is collected and to what extent is it processed?

(1) Information about the browser type and version used;

(2) The operating system of the device;
(3) The host name of the accessing computer;
(4) The IP address of the device;
(5) Date and time of access;
(6) Websites and resources (pictures, files, or other content) accessed on our website;
(7) Websites from which the user’s system came to our websites (referrer tracking);
(8) Notification whether the retrieval was successful;
(9) Amount of data transferred
 

This data will be stored in the log files of our system. It is not stored together with personal data of a specific user, so that an identification of individual website visitors is not performed.

 

Legal basis for the processing of personal data

Section 6, paragraph 1 (f) GDPR (legitimate interest). Our legitimate interest consists in the achievement of the purpose outlined below.

 

Purpose of data processing

Temporary (automated) storage of the data by the system for the duration of the session is necessary to allow delivery of the website to the user’s computer. The storage and processing of personal data is also carried out to ensure compatibility of our website for all visitors, for combating abuse, and for troubleshooting. For this purpose, it is necessary to log the technical data of the retrieving computer, in order to be able to react as soon as possible to display errors, attacks on our IT systems and/or errors in the functionality of our website. Moreover, the data serves us to optimize the website and ensure the security of our information technology systems in general.

 

Duration of the storage

The deletion of the aforementioned technical data takes place as soon as it is no longer needed to ensure compatibility of the website for all users, but not later than three months after accessing our website.

Revocation and deletion options

You can object to the processing at any time pursuant to section 21 GDPR and request the deletion of data pursuant to section 17 GDPR. You can find the rights you are entitled to and how you can assert them in the lower section of this privacy policy.

Specific features of the website

Our site offers you various functions, with the use of which we collect, process and store personal data. Below, we explain what happens with this data:

 

Contact form(s)

What personal data is collected and to what extent is it processed?

The data you have entered in our contact forms, which you have entered in the input mask of the contact form.

Legal basis for the processing of personal data

Section 6, paragraph 1 (a) GDPR (consent by unambiguous affirmative action or conduct)

Purpose of data processing

Data recorded via our contact form/s will only be used to process the specific contact request received through the contact form. Please be advised that in order to fulfill your contact request, we may also be able to send you e-mails to the specified address. This has the purpose of allowing you to receive a confirmation from us that your request has been correctly forwarded to us. However, sending this confirmation e-mail is not obligatory for us and is only for your information.

Duration of the storage

After processing your request, the collected data will be deleted immediately, insofar as there are no statutory retention periods.

Revocation and deletion options

The revocation and deletion options are based on the general provisions on the right of revocation and the right of erasure described below in this privacy policy.

Necessity of providing personal data

The use of the contact forms is voluntary and is neither contractually nor legally required. You are not obliged to contact us via the contact form, but can also use the other contact options specified on our page. If you would like to use our contact form, you must fill in the fields marked as mandatory. If you do not fill in the necessary details of the contact form, you can either not send the request or we cannot process your request.

 

Login area / registration

Scope of processing of personal data and personal data collected

The registration and login data you have entered with us or the information you have provided.

Legal basis for the processing of personal data

Section 6, paragraph 1 (b) GDPR (implementation of pre-contractual measures)

Purpose of data processing

You have the option of using a separate login area on our website. So that we have your permission to use the protected area or protected documents, you must enter your login data (e-mail or user name and password) in the corresponding form. If required, we can send you your login data or the possibility to have the password reset by e-mail.

Duration of the storage

The data collected will be stored for as long as you maintain a user account with us.

Revocation and deletion options

You can object to the processing at any time pursuant to section 21 GDPR and request the deletion of data pursuant to section 17 GDPR. You can find the rights you are entitled to and how you can assert them in the lower section of this privacy policy.

Necessity of providing personal data

The use of the login area on our site is contractually prescribed for the use of the protected area. The use of the content protected by the login area is not possible without the input of personal data. If you would like to use our login area, you must fill in the fields marked as mandatory (user name and password). Data entry requires the existence of a user account. Registration is not possible if the data you enter is incorrect. If you enter the data incorrectly or not entered, the protected area cannot be used. However, the rest of the website is still usable without login.

 

Integration of external web services and processing of data outside the EU

On our website, we use active content from external providers, so-called web services. By accessing our website, these external providers may receive personal information about your visit to our website. This may involve the processing of data outside the EU. You can prevent this by installing a corresponding browser plug in or deactivating the execution of scripts in your browser. This may result in functional restrictions on websites you visit.

We use the following external web services:

Google Fonts

A web service of Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland (hereinafter: Google Fonts) is uploaded to our website. We use this data to ensure the full functionality of our website. In this context, your browser may transmit personal data to Google Fonts. Legal basis for the processing of personal data is section 6, paragraph 1 (f) GDPR. The legitimate interest consists in an error-free function of the website. The deletion of the data takes place as soon as the purpose of its collection has been fulfilled. Further information on the handling of the transmitted data can be found in the privacy policy of Google Fonts: https://policies.google.com/privacy

You can prevent the collection and processing of your data by Google Fonts by deactivating the execution of script code in your browser or by installing a script blocker in your browser.

Google APIS

A web service of Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland (hereinafter: Google APIS) is uploaded to our website. We use this data to ensure the full functionality of our website. In this context, your browser may transmit personal data to Google APIS. Legal basis for the processing of personal data is section 6, paragraph 1 (f) GDPR. The legitimate interest consists in an error-free function of the website. The deletion of the data takes place as soon as the purpose of its collection has been fulfilled. Further information on the handling of the transmitted data can be found in the privacy policy of Google APIS: https://policies.google.com/privacy

You can prevent the collection and processing of your data by Google APIS by deactivating the execution of script code in your browser or by installing a script blocker in your browser.

Gstatic

A web service of Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland (hereinafter: Gstatic) is uploaded to our website. We use this data to ensure the full functionality of our website. In this context, your browser may transmit personal data to Gstatic. Legal basis for the processing of personal data is section 6, paragraph 1 (f) GDPR. The legitimate interest consists in an error-free function of the website. The deletion of the data takes place as soon as the purpose of its collection has been fulfilled. Further information on the handling of the transmitted data can be found in the privacy policy of Gstatic: https://policies.google.com/privacy

You can prevent the collection and processing of your data by Gstatic by deactivating the execution of script code in your browser or by installing a script blocker in your browser.

DocCheck

A web service of the company DocCheck Community GmbH, Vogelsanger Straße 66, 50823 Köln, Germany (hereinafter: DocCheck) is loaded on our website. We use this data to ensure the full functionality of our website. In this context your browser may transmit personal data to DocCheck. The legal basis for data processing is Art. 6 para. 1 lit. f DSGVO. The legitimate interest lies in the faultless functioning of the website. The data will be deleted as soon as the purpose for which it was collected has been fulfilled. Further information on the handling of the transferred data can be found in DocCheck’s data protection declaration: http://info.doccheck.com/de/privacy/

You can prevent the collection and processing of your data by Font Awesome by deactivating the execution of script code in your browser or by installing a script blocker in your browser.

website-check.de

A web service of Website-Check GmbH, Beethovenstraße 24, 66111 Saarbrücken, Germany (hereinafter: website-check.de) is uploaded to our website. We use this data to ensure the full functionality of our website. In this context, your browser may transmit personal data to website-check.de. Legal basis for the processing of personal data is section 6, paragraph 1 (f) GDPR. The legitimate interest consists in an error-free function of the website. The deletion of the data takes place as soon as the purpose of its collection has been fulfilled. Further information on the handling of the transmitted data can be found in the privacy policy of website-check.de: https://www.website-check.de/datenschutzerklaerung/

You can prevent the collection and processing of your data by website-check.de by deactivating the execution of script code in your browser or by installing a script blocker in your browser.

 

Information on the use of cookies

Scope of processing personal data

On various pages we integrate and use cookies to enable certain functions of our website and to integrate external web services. The so-called “cookies” are small text files that your browser can store on your access device. These text files contain a characteristic character string that uniquely identifies the browser when you return to our website. The process of saving a cookie file is also known as “setting a cookie”. Cookies can be set both by the website itself and by external web services.

Legal basis for the processing of personal data

Art. 6 para. 1 lit. f DSGVO (legitimate interest) or Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR (consent).

The relevant legal basis can be seen from the cookie table listed later in this section.

In general, in the case of cookies that are collected on the basis of a legitimate interest, our legitimate interest is to ensure the functionality of our website and the services integrated into it (technically necessary cookies). It is also possible that the cookies increase their user-friendliness and enable a more individual approach. In this case we have weighed up your interests against ours.

With the help of cookie technology, we can only identify, analyse and track individual website visitors if the website visitor has consented to the use of the cookie in accordance with Art. 6 Para. 1 lit. a GDPR.

Purpose of data processing

The cookies are set by our website or external web services to maintain the full functionality of our website, to improve the user-friendliness or to pursue the purpose stated with your consent. Cookie technology also enables us to recognize individual visitors by means of pseudonyms, e.g. an individual or random ID, so that we can offer more individual services. Details are listed in the following table.

Duration of storage

The cookies listed below are stored in your browser until they are deleted or, in the case of a session cookie, until the session has expired Details are listed in the table below:

Cookie name Server Provider Purpose Legal basis Storage period Type
session-1 www.ortscheit.de Website operator This cookie is only stored until you close your browser. When the browser is closed, this cookie is deleted. Technically necessary Session Session
allowCookie www.ortscheit.de Website operator This cookie stores your information in relation to our cookie banner. Technically necessary about 24 hours Cookie banner
PHPSESSID login.doccheck.com DocCheck This cookie is only stored until you close your browser. When the browser is closed, this cookie is deleted. Technically necessary Session Session
PHPSESSID tls12-login.doccheck.com DocCheck This cookie is only stored until you close your browser. When the browser is closed, this cookie is deleted. Technically necessary Session Session

If we have set cookies on the basis of your express consent, you can revoke your consent at any time within the framework of our cookie banner.
You can adjust your settings here hier.

 

Possibility of objection, revocation of consent and deletion 

You can set your browser according to your wishes so that the setting of cookies is generally prevented. You can then decide on a case-by-case basis whether to accept cookies or to accept cookies in principle. Cookies can be used for various purposes, e.g. to recognize that your access device is already connected to our website (permanent cookies) or to save last viewed offers (session cookies). If you have expressly given us permission to process your personal data, you can revoke this permission at any time. Please note that the legality of the processing carried out on the basis of the consent until revocation is not affected by this.

 

Data safety and protection, communication by e-mail

Your personal data will be protected by technical and organizational measures in the collection, storage and processing so that they are not accessible to third parties. In the case of unencrypted communication by e-mail, we cannot guarantee complete data security on the way to our IT systems, so that we recommend encrypted communication or mail for information with a high need for secrecy.

 

Automatic e-mail archiving

Scope of personal data processing

Please be advised that our mail system has an automated archiving process. All incoming and outgoing e-mails are archived digitally in a revision-proof manner.

Legal basis for the processing of personal data

is section 6, paragraph 1 (c) GDPR (legitimate interest). The legal obligation is to comply with tax and commercial law requirements (e.g. sections 146, 147 AO, sections 238, 257 HGB).

Purpose of data processing

The purpose of archiving is to comply with tax law (e.g. sections 146, 147 AO – obligation to keep e-mails of tax relevance) and commercial law requirements (e.g. sections 238, 257 HGB – obligation to archive business correspondence).

Duration of the storage

The storage of our e-mail communication takes place until the expiry of tax and commercial storage obligations. The storage period can be up to 10 years.

Revocation and deletion options

You can object to the processing at any time pursuant to section 21 GDPR and request the deletion of data pursuant to section 17 GDPR. You can find the rights you are entitled to and how you can assert them in the lower section of this privacy policy.

Handling of application documents

E-mails sent to personal@ortscheit.de or newsletter@ortscheit.de are excluded from archiving. If you have any questions regarding our e-mail archiving system, please contact our data protection officer. Moreover, please be advised that only application documents in PDF format will be taken into account. Zipped files (Winzip, Winrar, 7Zip, etc.) are filtered out by our security systems and not delivered. We will ignore applications submitted as a Word file and other formats and delete them unread. Please note that application documents transmitted unencrypted by e-mail may be deleted. can be opened by third parties before they arrive in our IT systems. We assume that we can also answer unencrypted application mails in unencrypted form. If you do not want this, please give us a note in your application e-mail.

Right to information and requests for correction – Deletion & restriction of data – Revocation of consent – right of objection

Right to information

You have the right to request confirmation as to whether we process personal data about you. If this is the case, you have a right to information about the in section 15, paragraph 1 GDPR named information, unless the rights and freedoms of other persons are impaired (see section 15, paragraph 4 GDPR). We are also happy to provide you with a copy of the data.

Right to correction

Pursuant to section 16 GDPR, you have the right to apply to us if necessary. to have personal data stored incorrectly (such as address, name, etc.) corrected at any time. You can also request completion of the data stored by us at any time. A corresponding adjustment shall be made without delay.

Right to deletion

Pursuant to section 17, paragraph 1 GDPR, you have the right to have the personal data collected about you deleted if:

  • the data is either no longer needed;
  • the legal basis for the processing has lapsed without replacement on the basis of the withdrawal of your consent;
  • you have lodged an objection to the processing and there are no legitimate grounds for the processing;
  • if your data is being processed unlawfully;
  • a legal obligation requires this or a collection in accordance with section 8, paragraph 1 GDPR has taken place.

According to section 17, paragraph 3 GDPR, the right does not exist if:

  • the processing is necessary to exercise the right to freedom of expression and information;
  • your data has been collected on the basis of a legal obligation;
  • the processing is necessary for reasons of public interest;
  • the data are necessary for the establishment, exercise or defense of legal claims.

Right to restriction of processing

Pursuant to section 18, paragraph 1 of the GDPR, you have the right in individual cases to request the restriction of the processing of your personal data.

This applies if

  • the accuracy of the personal data is disputed by you;
  • the processing is unlawful and you do not consent to deletion;
  • the data is no longer needed for the purpose of processing, but the data collected is used to assert, exercise or defend legal claims;
  • an objection to the processing pursuant to section 21, paragraph 1 GDPR has been filed and it is still unclear which interests prevail.

Right to revocation

If you have given us an explicit consent to the processing of your personal data (section 6, paragraph 1 (a) GDPR or section 9, paragraph 2 (a) GDPR), you can revoke this at any time. Please be advised that this does not affect the legality of the processing carried out on the basis of the consent until the revocation.

Right to objection

Pursuant to section 21 GDPR, you have the right to object at any time to the processing of personal data concerning you, which is based on section 6, paragraph 1 (f) (in the context of a legitimate interest) to appeal. You are only entitled to the right if there are special circumstances against the storage and processing.

How do I exercise my rights?

You can exercise your rights at any time by contacting the contact details below.

Lucien Ortscheit GmbH
Stromstr. 6-8
66115 Saarbrücken
E-Mail: info@ortscheit.de
Tel.: 0681936690
Fax: 06819366936

Right to data transferability

Pursuant to section 20 GDPR, you have the right to receive the personal data concerning you. The data is provided by us in a structured, common and machine-readable format. The data can be sent either to you or to a person designated by you.

Upon request, we provide you with the following data pursuant to section 20, paragraph 1 GDPR:

  • Data collected on the basis of an express consent pursuant to section 6, paragraph 1 (a) GDPR or section 9, paragraph 2 (a) GDPR;
  • Data that we have received from you pursuant to section 6, paragraph 1 (b) GDPR within the framework of existing contracts;
  • Data that has been processed as part of an automated process.

We will transfer the personal data directly to a controller you require, insofar as this is technically feasible. Please be advised that we may not transfer data interfering with the freedoms and rights of other persons in accordance with section 20, paragraph 4 GDPR.

Right to lodge a complaint with the supervisory authority pursuant to section 77, paragraph 1 GDPR

If you have the suspicion that your data is processed unlawfully on our website, you can of course bring about a judicial clarification of the problem at any time. Of course, you have the right to take any other legal option. Apart from that, you have the opportunity to contact a supervisory authority in accordance with section 77, paragraph 1 GDPR. The right of appeal pursuant to section 77 GDPR is available to you in the EU member state of your place of residence, your place of work and/or the place of the alleged infringement, which means that you can choose the supervisory authority to which you apply from the above mentioned places. The supervisory authority with which the complaint was submitted will then inform you about the status and the results of your submission, including the possibility of a judicial remedy pursuant to section 78 GDPR.

Prepared by:

© IT-Recht-Kanzlei DURY – www.dury.de

© Website-Check GmbH – www.website-check.de