PRIVACY POLICY: 

​

General Introduction:

We take the protection of your personal data very seriously and want you to feel secure when visiting our website. Our data protection practice follows in particular the requirements of the EU General Data Protection Regulation, the German Federal Data Protection Act (BDSG) and the Telecommunications and Telemedia Data Protection Act (TTDSG). At this point we would like to inform you about the nature, scope and purpose of the processing of your personal data. We would like to point out in advance that this data protection declaration only refers to our websites and does not apply to third-party websites to which we refer in the form of links.

 

Subject of protection:

The object of protection is personal data. This is any information relating to an identified or identifiable natural person (hereinafter "data subject"). This includes, in particular, information that allows conclusions to be drawn about your identity (e.g. information such as IP address, name, e-mail address and telephone number).

 

Technical requirements:

For you to connect to our website, your browser transmits certain data to our website's web server. This is a technical necessity so that the information you have called up can be made available by the website. To make this possible, among other things, your IP address, the date and time of your request and the type of operating system you are using are stored and used for a maximum of 7 days. We reserve the right to store this data for a limited time to protect our legitimate interests, to initiate a derivation to personal data in the event of unauthorized access or an attempt to intentionally harm us via this route (Art. 6 para. 1 f GDPR). The data will only be stored or forwarded by us for these purposes and for no other purpose, without us informing you in advance and asking for permission.

 

Cookies:

Cookies are small text files that are stored on your computer or mobile device via your browser, e.g. to recognize whether you repeatedly visit websites from the same device or browser. In general, we use cookies to improve the user-friendliness of our website. In principle, however, you can also visit our website without cookies.

Cookies can usually be disabled or removed with the help of tools that are available in most commercial browsers. The settings must be defined separately for each browser you use and set individually. For this purpose, the different browsers offer different functions and options.

In order to be able to use our website fully and comfortably, you should accept those cookies that enable the use of certain functions or make the use more comfortable. For which purpose the cookies used by us are used and for how long they are stored, you can see under the following overview:

​

Cookie list at www.oschatz.com:

XSRF-TOKEN: Used for security reasons. Storage period: Until the end of the session.

hs: Used for security reasons. Storage period: Until the end of the session.

svSession: Used in conjunction with the user login. Storage period: 12 months

ssr-caching: Used to indicate the system from which the website was rendered. Storage period: 1 minute

fedops.logger.defaultOverrides: Used for measuring system effectiveness. Storage period: 12 months  

​

The above cookies are exclusively technical cookies necessary for the website, which are mandatory to provide you with our service (§ 25 TTDSG). Consent according to Art. 6 para. 1 a GDPR is therefore not required.

 

Use of contact forms / electronic input of data:

On our website there is a contact form that can be used to contact us electronically. To ensure a secure transmission of your data, we use a state-of-the-art encrypted connection with SSL certificate during transmission. By activating the "Submit" button, you transmit the data entered in the form to us. We store your name and e-mail address and, if applicable, other information provided by you to be able to contact you and answer your inquiry in the best possible way. On the one hand, this allows us to offer you the service you expect from us, and on the other hand, it gives us the opportunity to continuously improve (Art. 6 para. 1 f GDPR).

 

More general information:

​

Changes to this privacy policy:

We review the data privacy statement at regular intervals to ensure that it complies with statutory provisions, case law, the statements of the supervisory authorities, and to align it with emerging trends and the development of technical standards. In this respect, we reserve the right to make changes to the data protection declaration to adapt it to new legal provisions on data protection and other changes in the factual or legal situation. Therefore, please always inform yourself at the beginning of the use of our web offer about the data protection declaration valid at that time.

​

Who is responsible for data processing? (Art. 13 para. 1 a, b DSGV0)

Responsible for the data processing on our website is Oschatz Power GmbH. You can find the contact details in the imprint: https://www.oschatz.com/impressum/

You can reach our data protection officer at the address:

Oschatz Power GmbH

To the Data Protection Officer

Limbecker Platz 1

D - 45127 Essen

Email: DataProtection.DE@oschatz.com

Tel.: +49 (0) 201 1802 0

​

Who receives your personal data? (Art. 13 para. 1 e, f GDPR)

We treat your personal data confidentially and do not pass it on to third parties unless you have given your consent, or the provision is based on a legal or contractual obligation. In isolated cases, we commission processors with the processing of your personal data.  This is done in accordance with Art. 28 GDPR and on the basis of a commissioned data processing contract.

​

How long will the data be stored? (Art. 13 para. 2 a GDPR)

The legislator has enacted a wide range of retention obligations and periods.

Basically, we store your data only as long as it is required by law.

After expiry of these periods, the corresponding data is routinely deleted if it is no longer required for the fulfillment of the contract. Data that we process on the basis of your consent, we store until revoked or as long as the data is needed. Data that we process on the basis of a legitimate interest, we store as long as the legitimate interest exists.

Commercial or financial data from a completed fiscal year will be deleted in accordance with legal requirements after a further ten years unless longer retention periods are prescribed or required for legitimate reasons. Unless data is subject to specific retention periods, it will be deleted when the purposes for which it was processed cease to apply.

 

For what purposes and on what legal basis do we process your personal data? (Art. 13 para. 1 c, d GDPR)

We have already explained the purposes and legal bases of data processing. In addition, the following generally applies: If necessary, we process your data to safeguard the legitimate interests of us or third parties pursuant to Art. 6 (1f) GDPR, for example, for the assertion of legal claims and defense in legal disputes or to ensure IT operations and security.

If we have a legitimate interest or have received written consent from you to process your personal data, we will process your data for external communication and marketing purposes based on Art. 6 (1) a or f GDPR. You have the right to revoke your consent at any time.

For the fulfillment of legal requirements, we may or must, if necessary, process your data and pass them on to third parties (according to Art. 6 para.1c). We do not use your data in any way for automated decision making or profiling.

We also use cookies to provide you with an improved service when using our website and to make it easier for you to use this website (Art. 6 para. 1 f GDPR).

​

What are your rights and obligations? (Art. 13 para. 2 b, c, d, e GDPR)

Each data subject has the following rights:

 

• According to Art. 15 GDPR you have the right to information. This means that you can request confirmation from us as to whether personal data relating to you is being processed by us. If we process personal data of you, you also have the right to receive this data according to Art. 15 GDPR.

• According to Art. 16 GDPR you have the right to rectification. This means that you can demand that we correct any inaccurate personal data concerning you.

• According to Art. 17 GDPR, you have the right to erasure ("right to be forgotten"). This means that you can demand that we delete personal data relating to you without delay - unless we cannot delete your data because, for example, we have to comply with statutory retention obligations.

• According to Art. 18 GDPR you have the right to restriction of processing. This means that we are practically no longer allowed to process your personal data - apart from storing it.

• According to Art. 20 GDPR you have the right to data portability. This means that you have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format and to transfer this data to another controller.

• According to Art. 7 para.3 GDPR you have the right to revoke your consent for the future at any time.

• According to Art. 77 GDPR, you have a right of appeal to the competent supervisory authority. 

​

In addition, you have a right of objection, which we explain in more detail at the end of this data protection information.

If you wish to exercise your rights, please contact the data protection officer (see above for contact details).

​

Competent supervisory authority:

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia

Address: Kavalleriestr. 2-4, 40213 Düsseldorf, Germany

Postal address: P.O. Box 200444, 40102 Düsseldorf, Germany

Tel.: +49 (0) 211 38424 -0

E-mail address: poststelle@ldi.nrw.de

 

Information about your right to object according to Art. 21 of the General Data Protection Regulation (GDPR):

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(f) of the GDPR (processing of data on the basis of a balance of interests); this also applies to any profiling based on this provision within the meaning of Article 4(4) of the GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims.

Please address your objection in writing (by e-mail or by post) to our data protection officer (see above for contact details).