Privacy Policy

This privacy policy (“Policy”) describes the information OK.de Services GmbH (“OK.de Services”, “OK.de”, “we”, “us” or “our”) collects and how we use that information and what options you have to view, correct or delete them.

Overview:

Data protection

We look forward to your visit to our website company.ok.de  and your interest in our company and our offers. Despite careful control of the content, we assume no liability for external links to third-party content, as we have not initiated the transmission of this information and have not selected or changed the addressee of the transmitted information and the transmitted information ourselves. The protection of your personal data during the collection, processing and use on the occasion of your visit to our website is important to us and takes place within the framework of the legal regulations. 

In the following we explain to you what information we collect during your visit to our website and how it is used:

1. Collection and storage of personal data as well as the type and purpose of their use.

a) When visiting the website

Every time a customer (or other visitor) accesses our website, information is automatically sent to the server on our website by the internet browser used on your device (computer, laptop, tablet, smartphone, etc.). This information is temporarily stored in a so-called log file.

The following data is recorded without any action on your part and stored until it is automatically deleted:

  • IP address of the requesting computer, as well as device ID or individual device identifier and device type,
  • Name of the file called up and the amount of data transferred, as well as the date and time of the call,
  • Notification of successful retrieval,
  • requesting domain,
  • Description of the type of Internet browser used and, if applicable, the operating system of your device as well as the name of your access provider,
  • Your browsing history data as well as your standard weblog information, location data, including location data from your mobile device. Please note that on most mobile devices you can control or deactivate the use of location services in the settings menu of the mobile device.

Our legitimate interest according to. Art. 6 para. 1 sentence 1 lit. f GDPR for the collection of data is based on the following purposes:

  • Ensuring a smooth connection and convenient use of the website,
  • Evaluation of system security and stability as well as
  • for further administrative purposes.

In no case do we use the collected data for the purpose of drawing conclusions about you personally.

b) When using our contact form

If you have any questions, we offer you the opportunity to contact us using a form provided on the website. At least a valid e-mail address and your name are required so that we know who sent the request and to be able to answer it. Further information can be provided voluntarily.

The data processing for the purpose of contacting us takes place in accordance with. Art. 6 para. 1 sentence 1 lit. a GDPR based on your voluntarily given consent.

The personal data collected by us for the use of the contact form will be automatically deleted after your inquiry has been dealt with.

c) When entering into a contractual relationship

When entering into a contractual relationship on our website (e.g. registration on the website / platform, purchase in our online shop), we ask you to provide the following personal data:

  • Data that personally identify you, such as your name and email address, billing and delivery address / and telephone number,
  • academic title, if applicable,
  • Data that identify your company, such as company, address, communication data (e-mail address, telephone, fax number), possibly VAT ID or tax number,
  • the information about your means of payment,
  • other personal data that we are legally obliged or authorized to collect and process and that we need for your authentication, identification or to check the data we have collected.

The data mentioned are processed to process the contractual relationship and – if necessary – passed on to the transport company commissioned with the delivery. The data are processed on the basis of Art. 6 Paragraph 1 lit. b GDPR. The storage period is limited to the purpose of the contract and, if applicable, statutory and contractual storage obligations.

d) Use of payment service providers

We also work with the following payment service providers to process your order. We pass on your payment data to the commissioned credit institution within the scope of payment processing – earmarked for the payment – if this is necessary for payment processing. You can select the following payment service providers for payment with us. The legal basis for forwarding the data is Art. 6 Para. 1 lit. b GDPR.

List of payment service providers:

e) When registering for our newsletter

If, according to Art. 6 Para. 1 S. 1 lit. a GDPR, we use your email address to send you our newsletter on a regular basis. You can unsubscribe at any time, for example via a link at the end of a newsletter. Alternatively, you can send your unsubscribe request at any time to [email protected] by email (preferably with the subject: “Unsubscribe from newsletter”).

2. Transfer of personal data

Your data will not be transmitted to third parties for purposes other than those listed below.

We only pass on your data to third parties if:

  • You have given your express consent to this in accordance with (Art. 6 Para. 1 S. 1 lit. a GDPR),
  • this is necessary for the processing of contractual relationships with you (Art. 6 Para. 1 lit. b GDPR),
  • there is a legal obligation to pass on (Article 6 (1) (c) GDPR),
  • the disclosure is necessary to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data (Art. 6 Para. 1 S. 1 lit.f GDPR).

In these cases, however, the scope of the transmitted data is limited to the necessary minimum.

Our data protection regulations are in accordance with the applicable data protection regulations.

3. Rights regarding your personal data

Upon request, we will be happy to inform you whether and which personal data are stored about you (Art. 15 GDPR), in particular about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the right to rectification, erasure, restriction of processing or objection, the right to lodge a complaint, the origin of your data, if we have not collected it, and the existence of automated decision-making including profiling.

You also have the right to correct any incorrectly collected personal data or to have incompletely collected data completed (Art. 16 GDPR).

You also have the right to demand that we restrict the processing of your data, provided that the legal requirements for this are met (Art. 18 GDPR).

You have the right to receive the personal data concerning you in a structured, common and machine-readable format or to request the transfer to another person responsible (Art. 20 GDPR).

In addition, you have the so-called “right to be forgotten”, i.e. You can ask us to delete your personal data, provided that the legal requirements are met (Art. 17 GDPR).

Irrespective of this, your personal data will be automatically deleted by us if the purpose of the data collection no longer applies or data processing has taken place unlawfully.

According to Art. 7 Para. 3 GDPR, you have the right to revoke your once given consent to us at any time. As a result, we are no longer allowed to continue the data processing based on this consent in the future.

You also have the right to object to the processing of your personal data at any time, provided that a right to object is provided for by law. In the event of an effective revocation, your personal data will also be automatically deleted by us (Art. 21 GDPR).

If you would like to exercise your right of withdrawal or objection, an email to: [email protected] is sufficient

If the data protection regulations are violated, you have Art. 77 GDPR gives you the opportunity to lodge a complaint with the competent supervisory authority of the country in which you live.

4. Duration of data storage

The data collected will be stored by us for as long as this is necessary for the implementation of the contracts entered into with us or for as long as you have not exercised your right to deletion or your right to data transfer to another company.

5. Cookies

We use cookies on our website. These are small text files that your browser automatically creates and that are stored on your device when you visit our website.

Information is stored in the cookie that results in connection with the specific device used. However, this does not mean that we have immediate knowledge of your identity.

The use of cookies initially serves to make the use of our offer more pleasant for you: For example, we use so-called session cookies to recognize that you have already visited individual sub-pages of our website and, if you have registered, will Your password is saved for the duration of your visit to our website and for changing subpages, so that you do not have to re-enter it every time, or goods that you have placed in the shopping cart are saved until you “check out”. These session cookies are automatically deleted when you leave our website. In addition, we also use temporary cookies to optimize user-friendliness, which are stored on your device for a specific period of time. If you visit our site again to use our services, it is automatically recognized that you have already visited us and what inputs and settings you have made so that you do not have to re-enter them.

On the other hand, we use cookies to statistically record and evaluate the use of our website and to optimize our offer for you. These cookies enable us to automatically recognize when you visit our website again that you have already visited us. These cookies are automatically deleted after a defined period of time.

The data processed by cookies are necessary for the purposes mentioned to safeguard our legitimate interests and those of third parties in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR required. Most browsers accept cookies automatically. If you do not want us to recognize information about your computer, please set your internet browser so that it deletes cookies from your computer hard drive, blocks all cookies or warns you before a cookie is saved. You can find out how you can delete or block cookies in the help and support area of your Internet browser. There you will find instructions on how to find the file or directory in which cookies are stored.

Please note in any case that the complete deactivation of cookies may mean that you cannot use all functions of our website. 

If you leave our website via a link or by clicking on any banner advertising and thus arrive at third-party sites, cookies may also be set by the addressee of the target page you clicked on. We are not legally responsible for the cookies. For the use of such cookies and the information stored on them by our advertising partners, please compare their data protection declarations.

Java applets and Java script are used to provide our website. If you do not want to use these auxiliary programs or active content for security reasons, you should deactivate the corresponding setting in your browser.

6. Online-Marketing / Analyze-Tools

The tracking measures listed below and used by us are based on Art. 6 Para. 1 S. 1 lit. f GDPR, Section 15 Paragraph 3 TMG. With the tracking measures used, we want to ensure a needs-based design and continuous optimization of our website. On the other hand, we use tracking measures to statistically record the use of our website and to evaluate it for you in order to optimize our offer. These interests are to be regarded as legitimate within the meaning of the aforementioned regulation.

a) Google Tag Manager

Google Tag Manager is a tool with which we can manage so-called website tags via an interface (and thus, for example, integrate Google Analytics and other marketing services into our online offer). The Tag Manager itself does not process any personal data from users. Usage guidelines: https://www.google.com/intl/de/tagmanager/use-policy.html.

b) Google Analytics

We use Google Analytics, a web analysis service provided by Google Inc., for the needs-based design and continuous optimization of our website.Inc. (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Hereinafter „Google“).

In this context, pseudonymised usage profiles are created and cookies (see also above) are set. The information generated by the cookie about your use of this website, such as browser type / version, operating system used, referrer URL (the previously visited page), host name of the accessing computer (IP address) and the time of the server request are sent to a Google servers in the EU (under certain circumstances also in the USA) and stored there. The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage for the purposes of market research and needs-based design of these websites. Our legitimate interest in data processing also lies in these purposes. The legal basis for the use of Google Analytics is Art. 6 Para. 1 lit. f GDPR.

This information may also be transferred to third parties if this is required by law or if third parties process this data on behalf of us. Under no circumstances will your IP address be merged with other Google data. The IP addresses are anonymized so that an assignment is not possible (so-called IP masking).

The data sent by us and linked to cookies, user IDs (e.g. user ID) or advertising IDs are automatically deleted after 14 months. The deletion of data whose retention period has expired takes place automatically once a month.

For more information on the terms of use and data protection of Google Analytics, see http://www.google.com/analytics/terms/de.html or http://www.google.com/intl/de/analytics/privacyoverview.html.

You can prevent the installation and storage of cookies by setting your browser software accordingly; however, we point out that in this case you may not be able to use all functions of this website to their full extent.

You can also prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

Please note in any case that the complete deactivation of cookies may mean that you cannot use all functions of our website.

As an alternative to the browser add-on, especially for browsers on mobile devices, you can enable anonymization of the data you have collected. An opt-out cookie is set which anonymizes the future collection of your data when you visit this website.

The anonymized web tracking on this page using Google Analytics is [[GTM-OPTOUT-GA]]

The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you will have to set the opt-out cookie again.

c) Google Adwords / Conversion Tracking

We also use the online advertising program “Google AdWords” as part of Google AdWords conversion tracking. Google Conversion Tracking is an analysis service provided by Google Inc.

If you click on an ad placed by Google, a conversion tracking cookie will be placed on your device. These cookies lose their validity after 30 days, contain no personal data and are therefore not used for personal identification.

If you visit certain Internet pages on our website and the cookie has not yet expired, we and Google can tell that you clicked on the ad and were forwarded to this page. Every Google AdWords customer receives a different cookie. This means that there is no way that cookies can be tracked via the websites of AdWords customers.

The information that is obtained using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. Here, customers find out the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information with which users can be personally identified. Our legitimate interest in data processing also lies in these purposes. The legal basis for the use of Google Adwords / Conversion Tracking is § 15 Abs. 3 TMG in connection with Art. 6 Abs. 1 lit. f GDPR.

If you do not want to participate in tracking, you can object to this use by preventing the installation of cookies from the domain “googleadservices.com” by setting your browser software accordingly. You will then not be included in the conversion tracking statistics. Further information and the data protection declaration of Google Inc. can be found at: https://www.google.com/policies/technologies/ads/ , https://www.google.de/policies/privacy/.

d) Google Remarketing

This website uses Google Remarketing, an advertising service from Google Inc. (“Google”). Third-party providers, including Google, place advertisements on websites on the Internet. Third-party providers, including Google, use cookies to place advertisements on the basis of a user’s previous visits to this website. Users can deactivate the use of cookies by Google by calling up the page for deactivating Google advertising: https://www.google.com/privacy_ads.html.

Alternatively, users can deactivate the use of cookies by third parties by calling up the deactivation page of the network advertising initiative: http://www.networkadvertising.org/managing/opt_out.asp.

7. Affiliate-programs

Within our online offer, we use our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer) in accordance with. Art. 6 para. 1 lit. f GDPR, use customary tracking measures to the extent that these are necessary for the operation of the affiliate system. In the following we explain the technical background to the users.

The services offered by our contractual partners can also be advertised and linked on other websites (so-called affiliate links or after-buy systems, e.g. if links or third-party services are offered after a contract has been concluded). The operators of the respective websites receive a commission if users follow the affiliate links and then take advantage of the offers.

In summary, it is necessary for our online offer that we can track whether users who are interested in affiliate links and / or the offers available from us then take advantage of the offers at the instigation of the affiliate links or our online platform. For this purpose, the affiliate links and our offers are supplemented by certain values that are part of the link or otherwise, e.g. in a cookie. The values include, in particular, the starting website (referrer), time, an online identifier for the operator of the website on which the affiliate link was located, an online identifier for the respective offer, an online identifier for the user, and tracking specific values such as Advertising material ID, partner ID and categorizations.

The online user IDs we use are pseudonymous values. I.e. the online IDs themselves do not contain any personal data such as names or e-mail addresses. They only help us to determine whether the same user who clicked on an affiliate link or was interested in an offer via our online offer took up the offer, i.e. e.g. has concluded a contract with the provider. However, the online ID is personal to the extent that the partner company and we have the online ID together with other user data. This is the only way for the partner company to inform us whether the user has taken advantage of the offer and whether we are e.g. can withdraw the bonus.

8. Newsletter

If, according to Art. 6 Para. 1 S. 1 lit. a GDPR, we use your email address to send you our newsletter on a regular basis.

Content: We send newsletters, e-mails and other electronic notifications with advertising information (hereinafter “newsletter”) only with the consent of the recipient or with legal permission.

Double opt-in and logging: Registration for our newsletter takes place in a so-called double opt-in process. This means that after registration you will receive an email in which you will be asked to confirm your registration for the newsletter. This confirmation is necessary so that no one can register with us with third-party email addresses. The registrations for the newsletter are logged in order to be able to prove the registration process in accordance with the legal requirements. This includes the storage of the IP address and the time of registration and confirmation. Changes to your data stored by our shipping service provider are also logged.

Registration data: To register for the newsletter, it is sufficient to provide your email address. Optionally, we ask you to provide a name for the purpose of addressing you personally in the newsletter.

The dispatch of the newsletter and the associated performance measurement are based on the consent of the recipient in accordance with. Art. 6 para. 1 lit. a, Art. 7 GDPR or, if consent is not required, based on our legitimate interests in direct marketing acc. Art. 6 para. 1 according to f. GDPR.

The logging of the registration process is based on our legitimate interests in accordance with. Art. 6 para. 1 lit. f GDPR. Our interest is directed towards the use of a user-friendly and secure newsletter system that serves both our business interests and the expectations of users and also allows us to prove consent.
Unsubscribing / revocation – You can unsubscribe from our newsletter at any time, i.e. revoke your consent. You will find a link to unsubscribe from the newsletter at the end of each newsletter. In order to be able to prove a previously given consent, we save the deleted e-mail addresses for up to three years on the basis of our legitimate interests before we delete them. The processing of this data is limited to the purpose of a possible defense against claims. An individual request for deletion is possible at any time, provided that the previous existence of consent is confirmed at the same time.

a) Mailchimp

The newsletter is sent via the mailing service provider “MailChimp”, a newsletter dispatch platform of the US provider Rocket Science Group LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, Georgia 30308, USA. You can view the data protection provisions of the shipping service provider here: https://mailchimp.com/legal/privacy/. The Rocket Science Group LLC d / b / a MailChimp is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with the European level of data protection (https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active).

The shipping service provider is based on our legitimate interests in accordance with. Art. 6 para. 1 lit. f GDPR and an order processing contract acc. Art. 28 para. 3 sentence 1 GDPR used.

The shipping service provider can use the recipient’s data in pseudonymous form, i.e. without assignment to a user, to optimize or improve their own services, e.g. for the technical optimization of the dispatch and the presentation of the newsletter or for statistical purposes. However, the shipping service provider does not use the data of our newsletter recipients to write to them itself or to pass the data on to third parties.

b) Newsletter – success measurement

The newsletters contain a so-called “web beacon”, i.e. A pixel-sized file that is retrieved from our server when the newsletter is opened or, if we use a shipping service provider, from their server. As part of this retrieval, technical information, such as information about the browser and your system, as well as your IP address and the time of retrieval, are initially collected.

This information is used for the technical improvement of the services based on the technical data or the target groups and their reading behavior based on their retrieval locations (which can be determined using the IP address) or the access times. The statistical surveys also include determining whether the newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to the individual newsletter recipients. However, it is neither our aim nor, if used, that of the shipping service provider to observe individual users. The evaluations serve us much more to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.

A separate revocation of the success measurement is unfortunately not possible, in this case the entire newsletter subscription must be canceled.

9. Integration of services and content from third parties

We use content or service offers from third-party providers within our online offer on the basis of our legitimate interests (ie interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 Para. 1 lit. Services such as Embed videos or fonts (hereinafter referred to as “content”).

This always presupposes that the third-party providers of this content perceive the IP address of the users, since they would not be able to send the content to their browser without the IP address. The IP address is therefore required to display this content. We strive to only use content whose respective providers only use the IP address to deliver the content. Third-party providers can also use so-called pixel tags (invisible graphics, also known as “web beacons”) for statistical or marketing purposes. The “pixel tags” can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information can also be stored in cookies on the user’s device and contain, among other things, technical information about the browser and operating system, referring websites, visiting time and other information about the use of our online offer, as well as being linked to information from other sources.

10. Data security

We endeavor to take all necessary technical and organizational security measures to store your personal data in such a way that they are neither accessible to third parties nor to the public. If you want to contact us by e-mail, we would like to point out that with this communication channel, the confidentiality of the information transmitted cannot be fully guaranteed. We therefore recommend that you only send us confidential information by post.

11. Current status and changes to this data protection declaration

Applicable law and our business practices change from time to time. When we renew our privacy policy, we will post the changes on our site. If we significantly change the way in which we process your personal data, we will inform you beforehand. To the extent required by law, we will obtain your consent before such changes are implemented. We urgently recommend that you read our privacy policy and keep yourself informed about our approach. This privacy policy was last changed in May 2018.

12. German-speaking controle

Non-German translations of this guideline are for the sake of clarity only. In the event of ambiguities or conflicts between translations, the German version is authoritative and controlled.

13. Name and contact details of the person responsible for processing

This data protection information applies to all content at company.ok.de. This also includes, for example, newsletters or competitions for which you register.

Responsible:

OK.de Services GmbH
Uhlandsr. 165 
10717 Berlin