Legal bases for our data processing
Below we explain how we process personal data via our website.
Data processing when you access our website
– operating system of the device you use to visit our website
– browser (type, version & language settings)
– the amount of data accessed
– the current IP address of the device you use to visit our website
– date and time of access
– the URL of the previously visited website (referrer)
– the URL of the (sub)page of the website that you access
– the internet service provider of the accessing system
The collection of this data is technically necessary for us to display our website to you and to ensure its stability and security. Generally, we do not know who is behind a particular IP address. We do not collate the data listed above with other data.
The legal basis is Article 6(1) sentence 1 letter f) GDPR. Because the collection of the data for the purpose of providing the website and the storage of the data in log files is absolutely necessary for the operation of the website and to protect against misuse, our legitimate interest in processing the data takes precedence here.
Click on a subject:
Your data that we receive as a result of you contacting us will be erased as soon as it is no longer required to achieve the purpose for which it was collected, your request has been fully processed or your concern fully addressed, and no further communication with you is necessary or desired by you.
As the data controller, our company has implemented numerous technical and organisational measures in order to ensure as complete protection as possible of the personal data processed through this website. It is nevertheless always possible for internet-based data transmissions to suffer from security vulnerabilities. Absolute protection cannot be guaranteed. At any rate, the transmission of unencrypted emails is not secure. We therefore ask that you do not send sensitive data by way of an unencrypted email and that you instead either make use of encrypted means of communication (e.g. our contact form) to this end or rely on traditional mail.
Subject to the relevant statutory conditions, you have the right to submit an objection to processing (Article 21 GDPR).
In order to exercise the rights listed above, please send an email to firstname.lastname@example.org or a letter to otara GmbH, Mastholter Str. 168, 59558 Lippstadt. Exercising these rights is free of charge for you.
Without prejudice to said rights and the possibility of some other administrative or judicial remedy, you have the right to at any time lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence or your place of work or of the place where the alleged infringement occurred, if you consider that the processing of your personal data infringes provisions of data protection legislation (Article 77 GDPR). The supervisory authority under whose jurisdiction we fall: Landesbeauftragte für Datenschutz und Informationsfreiheit [State Commissioner for Data Protection and Freedom of Information], North Rhine-Westphalia, PO box 20 04 44, 40102 Düsseldorf.
Your information will be used for the purpose of processing your application and deciding whether to establish an employment relationship. The legal basis for this is Article 26 para. 1 in conjunction with para. 8 sentence 2 of the German Data Protection Act (Bundesdatenschutzgesetz, BDSG). Your personal data may also be processed to the extent that this is necessary to defend against legal claims asserted against us which arise in connection with the application process. The legal basis for this is Article 6(1) sentence 1 letter f) GDPR. The stated purposes constitute a legitimate interest in processing the data.
If an employment relationship between you and us is established, we may further process the personal data we have already received from you for purposes in connection with the employment relationship, in accordance with Article 26(1) BDSG, if this is necessary for the performance or termination of the employment relationship or for the exercise or fulfilment of rights and obligations of the party(/ies) representing employee interests arising from legislation, or a collective bargaining agreement, works agreement or labour agreement (collective agreement).
No processing of your application data will occur over and above the uses described above.
Your personal data will be erased after the application procedure has concluded, no later than after six months, unless other legitimate interests of our company preclude this course of action or you have consented to us storing the data for a longer period of time. Other legitimate interests in this sense may be, for example, an obligation to furnish evidence in proceedings pursuant to the General Act on Equal Opportunities (Allgemeines Gleichbehandlungsgesetz, AGG).
What are cookies?
There are different types of cookies: Session cookies are quantities of data that are only temporarily stored in working memory and are erased when you close your browser. Permanent or persistent cookies are automatically erased after a set period of time, which may differ depending on the cookie. With this type of cookie, the information may also be stored on your computer in text files. However, these cookies can also be erased at any time via your browser settings.
First-party cookies are installed by the website that you are currently visiting. Only that website is permitted to read information stored in these cookies. Third-party cookies are installed by organisations that do not operate the website you are visiting. These cookies are used, for example, by marketing companies.
To disable certain cookies on our site, please click here.
You can subscribe on our website to a newsletter, which will allow us to inform you about offers, new releases and perks. The legal basis for sending the respective newsletter is your consent pursuant to Article 6(1) sentence 1 letter a) GDPR in conjunction with Article 7(2) No. 3 of the German Unfair Competition Act (Gesetz gegen den unlauteren Wettbewerb, UWG) / statutory permission in accordance with Article 7(3) UWG.
Signing up for our newsletter is subject to a double opt-in procedure. This means that after you have signed up we send an email to the email address you specified in which we ask you to confirm that you would like to receive the newsletter. Failure to confirm will result in your information being promptly erased.
After you have confirmed your registration, we will store your email address until further notice for the purpose of sending the newsletter. We will also store your current IP address at the time of signing up, as well as the time of signing up and confirmation for up to three years after you signed up (limitation period). The purpose of this procedure is to enable us to provide proof that you signed up in case of doubt and to clarify possible misuse of your personal data. The legal basis for logging your decision to sign up is our legitimate interest pursuant to Article 6(1) sentence 1 letter f) GDPR in being able to provide proof of previously granted consent; see also Article 7(1) GDPR.
You can withdraw your consent to receive the newsletter at any time and unsubscribe. You can effect your withdrawal by clicking on the link provided in every newsletter email.
Please be advised that when we send the newsletter we analyse your user behaviour (analysis of the opening rate). We use the data that we obtain in this manner to create a user profile so that we can tailor the newsletter to your particular interests. We record the time when you read our newsletters and the links you click on within them, and on this basis we infer your personal interests. We link this data to actions performed by you on our website. The legal basis for this data processing is your consent pursuant to Article 6(1) sentence 1 letter a) GDPR. This kind of tracking is not possible if you have deactivated images from being displayed in your email client by default, in which case the newsletter will not be displayed to you in full and you may not be able to make use of all the features. If you manually allow the images to be displayed, the tracking described above will occur.
The information gathered from tracking will be stored for as long as you are subscribed to the newsletter. After unsubscribing, the data will be anonymised and used for purely statistical purposes.
The data that we record about you for the purposes of the newsletter subscription will be stored by us until you unsubscribe and then erased after the newsletter is cancelled. This does not affect data that are stored by us for other purposes.
For the purposes of registration, we collect and store the following data from you (optional):
- Email address
- Telephone no.
- Company name
- VAT ID no.
Any additional information is optional.
Registration is subject to a double opt-in procedure. This means that your registration is not complete until it has been confirmed by you by clicking on the link contained in a confirmation email sent to you for this purpose. Failure to confirm will result in your registration being automatically erased from our database. Following registration, you will receive personal, password-protected account access and will be able to view and manage the data recorded about you. Registration is voluntary, but it is required to take advantage of particular services offered by us.
We will store your data that are necessary for the performance of the contract and potentially also information regarding the payment method used until you permanently delete access to your account. We will continue to store any additional data provided by you for the duration of your use of the customer account unless you erase these beforehand. You can manage and edit all the information in the secure customer area.
You may delete your customer account at any time. Erasing the account will result in all personal data that are not subject to a statutory retention obligation or Article 17(3) GDPR being erased.
The legal basis for this data processing is Article 6(1) letters a), b) and f) GDPR.
The personal data are transmitted to the USA under the EU-US Privacy Shield on the basis of the adequacy decision adopted by the European Commission. You can access the certificate here:
The IP address provided by your browser within the framework of Google Analytics will not be collated with any other Google data. On behalf of the operator of this website, Google will use this information to evaluate your use of the website in order to prepare reports on website activity and to provide the website operator with other services associated with the use of the website and internet use. These purposes constitute our legitimate interest in processing data via Google Analytics.
The data sent by us and associated with cookies or usernames (e.g. user IDs) are automatically erased after 14 months. The erasure of data whose retention period has lapsed occurs automatically once per month.
To ensure data is processed legally, we process your data using Google Analytics only on the basis of your consent, Article 6(1) letter a) GDPR. You can, of course, withdraw your consent at any time.
You can also prevent the cookies from being stored by adjusting your browser settings accordingly. Please note, however, that if you do so you may not be able to make full use of all the features of this website. You can also prevent Google from recording the data generated by the cookie that relate to your use of the website (including your IP address) and prevent Google from processing the data by downloading and installing:
Opt-out cookies prevent your data from being recorded when you visit this website going forward. In order to block recording by Universal Analytics across different devices, you must opt out on all the systems you use. By clicking here, the opt-out cookie will be installed: Deactivate Google Analytics.
Facebook Custom Audiences (Facebook Pixel)
The transmission of data to the USA is permitted under Article 45 GDPR, as Facebook is Privacy Shield certified, meaning that there is an adequate level of data protection according to Commission Implementing Decision 2016/1250 (https://eur-lex.Europe.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32016D1250&from=DE). You can access the certification at https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.
Further information regarding Facebook’s Custom Audiences service is available at:
Further information on data processing and the storage period is available from the provider or at
The legal basis for this is Article 6(1) letter f) GDPR. The legitimate interest of the controller is analysing website usage.
Users who are logged in can deactivate the Facebook Custom Audiences feature at
You can also block cookies from being stored entirely by adjusting your browser settings accordingly. Please note, however, that if you do so you may not be able to make full use of all the features of our website. You can find additional options for deactivating cookies through third-party providers at
www.networkadvertising.org/managing/opt_out.asp or on the Digital Advertising Alliance opt-out platform at http://optout.aboutads.info/?c=2&lang=en.
Data transmission and recipients or categories of recipients
We may also transmit your data as part of the payment process to our payment service partner PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg. If you select PayPal as your payment method, the data required from you to complete the payment process will be automatically transmitted to PayPal. The legal basis for this data processing is Article 6(1) letter b) GDPR.
Data transmission and planned data transmission to a third country or an international organisation
Information regarding the data subject’s obligations to provide data
Existence of automated decision-making including profiling
Bestehen einer automatisierten Entscheidungsfindung einschließlich Profiling
The data controller within the meaning of the General Data Protection Regulation (GDPR) is:
Mastholter Str. 168
+49 2941 256 05 0
Our external data protection officer will be happy to respond to your queries.
Personal / confidential
Mr Maximilian Mertin
c/o intersoft consulting services AG
Beim Strohhause 17