Privacy Policy

There may be various legal bases for the processing of personal data. If we require your data for the performance of a contract with you or to respond to your queries in relation to a contract, the legal basis for this data processing is Article 6(1) sentence 1 letter b) GDPR. If we obtain your consent for specific data processing activities, the legal basis is Article 6(1) sentence 1 letter a) GDPR. We carry out some data processing on the basis of our legitimate interests, always weighing your interests meriting protection and our legitimate interests. The legal basis for this is Article 6(?) letter f) GDPR. Where the processing is necessary for the purpose of fulfilling a legal obligation to which we are subject, the legal basis is Article 6(1) letter c) GDPR.

Below we explain how we process personal data via our website.

Data processing when accessing the website

If you use our website for purely informational purposes, i.e. if you do not register or otherwise provide us with information (e.g. via a contact form), we collect the following technical information (log file data):

• operating system of the device you use to visit our website
• browser (type, version & language settings)
• the amount of data accessed
• the current IP address of the device you use to visit our website
• date and time of access
• the URL of the previously visited website (referrer)
• the URL of the (sub)page of the website that you access
• the internet service provider of the accessing system

The collection of this data is technically necessary for us to display our website to you and to ensure its stability and security. Generally, we do not know who is behind a particular IP address. We do not collate the data listed above with other data.

The legal basis is Article 6(1) sentence 1 letter f) GDPR. Because the collection of the data for the purpose of providing the website and the storage of the data in log files is absolutely necessary for the operation of the website and to protect against misuse, our legitimate interest in processing the data takes precedence here.

When you contact us by email or via a contact form, the data provided by you (your email address and potentially your name and telephone number) will be stored by us for the purpose of answering your questions and to enable us to process your requests and address your concerns. The legal basis here is Article 6(1) sentence 1 letter f) GDPR. Insofar as we request that you provide us with details via our contact form which are not necessary for establishing contact, the relevant fields will always be marked as optional. This information helps us to clarify your query and to more effectively process your request or address your concern. It is made available on an explicitly voluntary basis and with your consent (Article 6(1) letter a) GDPR). In the case of information concerning communication channels (for example email addresses, telephone numbers), you also consent to us possibly contacting you via those means of communication in order to process your request or address your concern. You can, of course, withdraw this consent at any time with effect going forward.

Your data that we receive as a result of you contacting us will be erased as soon as it is no longer required to achieve the purpose for which it was collected, your request has been fully processed or your concern fully addressed, and no further communication with you is necessary or desired by you.

As the data controller, our company has implemented numerous technical and organisational measures in order to ensure as complete protection as possible of the personal data processed through this website. It is nevertheless always possible for internet-based data transmissions to suffer from security vulnerabilities. Absolute protection cannot be guaranteed. At any rate, the transmission of unencrypted emails is not secure. We therefore ask that you do not send sensitive data by way of an unencrypted email and that you instead either make use of encrypted means of communication (e.g. our contact form) to this end or rely on traditional mail.

We are happy to provide you with information regarding whether and what personal data belonging to you is processed by us and for what purposes (Article 15 GDPR). You are also entitled, subject to the respective statutory conditions, to a right to rectification (Article 16 GDPR), a right to restriction of processing (Article 18 GDPR), a right to erasure (Article 17 GDPR) and a right to data portability (Article 20 GDPR). Subject to the relevant statutory conditions, you have the right to submit an objection to processing (Article 21 GDPR).

In order to exercise the rights listed above, please send an email to info@otara.de or a letter to otara GmbH, Mastholter Str. 168, 59558 Lippstadt. Exercising these rights is free of charge for you. The exercise of your above rights is free of charge. Without prejudice to these rights and the possibility of asserting other administrative or judicial remedies, you have – you have the option at any time to assert your right to lodge a complaint with a supervisory authority, in particular in the Member State of your place of residence, your place of work, or the place of the alleged infringement, if you believe that the processing of personal data concerning you violates data protection regulations (Art. 77 GDPR).

The supervisory authority responsible for us is: State Commissioner for Data Protection and Freedom of Information, North Rhine-Westphalia, P.O. Box 20 04 44, 40102 Düsseldorf.

We have implemented extensive technical and operational safeguards in order to protect your data against accidental or intentional manipulation, loss, destruction or access by unauthorised persons. Our security procedures are regularly reviewed and adjusted in line with technological advances.

You can submit applications to our company electronically, e.g. via email. Please note that emails which are sent in an unencrypted form are not access restricted.

Your information will be used for the purpose of processing your application and deciding whether to establish an employment relationship. The legal basis for this is Article 26 para. 1 in conjunction with para. 8 sentence 2 of the German Data Protection Act (Bundesdatenschutzgesetz, BDSG). Your personal data may also be processed to the extent that this is necessary to defend against legal claims asserted against us which arise in connection with the application process. The legal basis for this is Article 6(1) sentence 1 letter f) GDPR. The stated purposes constitute a legitimate interest in processing the data.

If an employment relationship between you and us is established, we may further process the personal data we have already received from you for purposes in connection with the employment relationship, in accordance with Article 26(1) BDSG, if this is necessary for the performance or termination of the employment relationship or for the exercise or fulfilment of rights and obligations of the party(/ies) representing employee interests arising from legislation, or a collective bargaining agreement, works agreement or labour agreement (collective agreement).

No processing of your application data will occur over and above the uses described above.

Your personal data will be erased after the application procedure has concluded, no later than after six months, unless other legitimate interests of our company preclude this course of action or you have consented to us storing the data for a longer period of time. Other legitimate interests in this sense may be, for example, an obligation to furnish evidence in proceedings pursuant to the General Act on Equal Opportunities (Allgemeines Gleichbehandlungsgesetz, AGG).

Cookies are files which are placed on your computer by a website that you visit and which enable your browser to be re-assigned. Cookies allow information to be transmitted to the party that installed the cookie. Cookies can store different information, such as your language setting, the duration of your visit to our website or any details you entered there. This means, for example, that you do not have to re-enter required form data each time you use our site. The information stored in the cookies may also be used to recognise preferences and to orient content towards the user’s interests.

There are different types of cookies: Session cookies are quantities of data that are only temporarily stored in working memory and are erased when you close your browser. Permanent or persistent cookies are automatically erased after a set period of time, which may differ depending on the cookie. With this type of cookie, the information may also be stored on your computer in text files. However, these cookies can also be erased at any time via your browser settings.

First-party cookies are installed by the website that you are currently visiting. Only that website is permitted to read information stored in these cookies. Third-party cookies are installed by organisations that do not operate the website you are visiting. These cookies are used, for example, by marketing companies.

The legal bases for potentially processing personal data through the use of cookies and their storage period may vary. Insofar as you have given us your consent, the legal basis is Article 6(1) sentence 1 letter a) GDPR. If the data processing occurs on the basis of our overriding legitimate interests, the legal basis is Article 6(1) sentence 1 letter f) GDPR. In this case, the stated purpose constitutes our legitimate interest.

We use cookies to ensure the proper operation of the website, to provide basic features, to measure reach and – with your consent – to tailor our services to preferred areas of interest. To this end, we make use of both transient cookies and persistent cookies.

You can delete cookies already stored on your device at any time. If you want to prevent cookies from being stored, you can do so via the settings in your internet browser. Instructions for common browsers can be found here: Internet Explorer, Firefox, Google Chrome, Google Chrome mobile, Microsoft Edge, Safari, Safari mobile. Alternatively, you can also install ad blockers. Please note that individual functions of our website may not work if you have disabled the use of cookies.

To disable certain cookies on our site, please click on the fingerprint icon in the bottom right corner.

General information

You can subscribe on our website to a newsletter, which will allow us to inform you about offers, new releases and perks. The legal basis for sending the respective newsletter is your consent pursuant to Article 6(1) sentence 1 letter a) GDPR in conjunction with Article 7(2) No. 3 of the German Unfair Competition Act (Gesetz gegen den unlauteren Wettbewerb, UWG) / statutory permission in accordance with Article 7(3) UWG

Signing up for our newsletter is subject to a double opt-in procedure. This means that after you have signed up we send an email to the email address you specified in which we ask you to confirm that you would like to receive the newsletter. Failure to confirm will result in your information being promptly erased.

After you have confirmed your registration, we will store your email address until further notice for the purpose of sending the newsletter. We will also store your current IP address at the time of signing up, as well as the time of signing up and confirmation for up to three years after you signed up (limitation period). The purpose of this procedure is to enable us to provide proof that you signed up in case of doubt and to clarify possible misuse of your personal data. The legal basis for logging your decision to sign up is our legitimate interest pursuant to Article 6(1) sentence 1 letter f) GDPR in being able to provide proof of previously granted consent; see also Article 7(1) GDPR.

You can withdraw your consent to receive the newsletter at any time and unsubscribe. You can effect your withdrawal by clicking on the link provided in every newsletter email.

Newsletter-Tracking

We would like to point out that we evaluate your user behavior when sending the newsletter (evaluation of the opening rate). We use the data obtained in this way to create a user profile in order to tailor the newsletter to your individual interests. In doing so, we record when you read our newsletters, which links you click on in them, and deduce your personal interests from this. We link this data to the actions you take on our website. The legal basis for this data processing is your consent, Art. 6 (1) (a) GDPR..

This tracking is not possible if you have disabled the display of images in your email program by default. In this case, the newsletter will not be displayed in full and you may not be able to use all of its features. If you choose to display the images manually, the above tracking will take place.

The information from tracking is stored for as long as you are subscribed to the newsletter. After unsubscribing, the data is anonymized and used for purely statistical purposes.

The data you provide us with for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted after you unsubscribe. Data stored by us for other purposes remains unaffected by this.

You have the option to register on our website and to set up a customer account. Fields that require the entry of personal data are marked as mandatory in the respective registration form. Any additional information is optional.

For the purposes of registration, we collect and store the following data from you (optional):

• Title
• Name
• Email address
• Telephone no.
• Company name
• VAT ID no.
• Address

Any additional information is optional.

Registration is subject to a double opt-in procedure. This means that your registration is not complete until it has been confirmed by you by clicking on the link contained in a confirmation email sent to you for this purpose. Failure to confirm will result in your registration being automatically erased from our database. Following registration, you will receive personal, password-protected account access and will be able to view and manage the data recorded about you. Registration is voluntary, but it is required to take advantage of particular services offered by us.

We will store your data that are necessary for the performance of the contract and potentially also information regarding the payment method used until you permanently delete access to your account. We will continue to store any additional data provided by you for the duration of your use of the customer account unless you erase these beforehand. You can manage and edit all the information in the secure customer area.

You may delete your customer account at any time. Erasing the account will result in all personal data that are not subject to a statutory retention obligation or Article 17(3) GDPR being erased.

The legal basis for this data processing is Article 6(1) letters a), b) and f) GDPR.

For the purposes of analyzing and optimizing our websites, we use various services, which are described below. We use these services to analyze how many users visit our site, which information is most popular, and how users find our site. We also collect data about which website a user came to our website from (known as the referrer), which subpages of the website were accessed, how often, and how long a subpage was viewed.

This helps us to make our offerings user-friendly, find errors, and improve our offerings—and this is also where our legitimate interest in using these tools lies. The data collected in this process is not used to personally identify individual users.

We take a data-minimizing approach: anonymous or, at most, pseudonymous data is collected. The legal basis for this data processing is Art. 6 (1) (a) GDPR.

As far as you have given your consent, we use Google Analytics, a web analytics service provided by Google LLC. The responsible service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

Google Analytics uses cookies that enable an analysis of your use of our website. The information collected by the cookies about your use of this website is generally transmitted to a Google server in the USA and stored there.

We use the ‘anonymizeIP’ function (so-called IP masking): Due to the activation of IP anonymization on this website, your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.

During your website visit, the following data, among others, is collected:

• the pages you visit, your “click path”
• achievement of “website goals” (conversions, such as newsletter sign-ups, downloads)
• your user behavior (e.g., clicks, time spent, bounce rates)
• your approximate location (region)
• your IP address (in shortened form)
• technical information about your browser and the devices you use (e.g., language setting, screen resolution)
• your internet provider
• the referrer URL (via which website/advertising medium you came to this website)

Purposes of Processing

On behalf of the operator of this website, Google will use this information to evaluate your use of the website and to compile reports on website activity. The reports provided by Google Analytics are used to analyze the performance of our website and the success of our marketing campaigns.

Recipient

The recipient of the data is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland as a processor. For this, we have concluded a data processing agreement with Google.

Storage Duration

The data we send and link with cookies will be automatically deleted after 14 months. Data whose retention period has been reached is automatically deleted once a month.

To prevent Universal Analytics from tracking you across different devices, you must opt out on all systems you use. If you click here, the opt-out cookie will be set: Disable Google Analytics

For more information about Google Analytics' terms of use, please visit https://marketingplatform.google.com/about/analytics/terms/de/
and information about Google's privacy policy at https://policies.google.com/?hl=de.

Legal basis and right of withdrawal

for this data processing is your consent, Art. 6 para. 1 lit. a) GDPR. You may withdraw your consent at any time with future effect by clicking on the fingerprint icon at the bottom right.

We use the Custom Audiences service from Facebook Inc. (1601 S. California Avenue, Palo Alto, CA 94304, USA) for usage-based online advertising.

For this purpose, we use Facebook Ads Manager to define target groups of users based on specific characteristics, who will then see advertisements within the Facebook network. Facebook selects users based on the profile information they have provided and other data provided through their use of Facebook.

If you click on an advertisement and are then redirected to our website, Facebook receives information via the Facebook pixel integrated on our website that you have clicked on the advertising banner. In principle, a non-reversible and non-personal checksum (hash value) is generated from your usage data and transmitted to Facebook for analysis and marketing purposes . A Facebook cookie is set for this purpose. This cookie collects information about your activities on our website (e.g., surfing behavior, subpages visited, etc.). Your IP address is also stored and used for the geographical targeting of advertising.

We do not use Facebook Custom Audiences via the customer list or the “advanced matching” function.

Further information about the purpose and scope of data collection and the further processing and use of data by Facebook , as well as your settings options for protecting your privacy, can be found in Facebook's privacy policy: www.facebook.com/about/privacy

You can adjust the settings for which advertisements are displayed to you on Facebook at this link and in your Facebook account settings.

The transfer of data to the USA is permitted under Article 45 of the GDPR, as Facebook is Privacy Shield certified and therefore complies with Commission Implementing Decision (EU) 2016/1250 (https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32016D1250&from=DE) .

The certification can be viewed at https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active .

For more information about Facebook's Custom Audiences service, please visit: https://de-de.facebook.com/business/help/449542958510885

Further information on data processing and storage duration can be obtained from the provider or at https://www.facebook.com/about/privacy

The legal basis for this is Art. 6 (1) (f) GDPR. The legitimate interest of the controller lies in analyzing the use of the website.

Logged-in users can deactivate the “Facebook Custom Audiences” function at https://www.facebook.com/settings/?tab=ads# .

You can also prevent cookies from being stored altogether by adjusting your browser software settings accordingly. However, we would like to point out that in this case you may not be able to use all the functions of our website to their full extent.

You can find further options for deactivating cookies from third-party providers at www.networkadvertising.org/managing/opt_out.asp or on the Digital Advertising Alliance Opt-Out Platform at http://optout.aboutads.info/?c=2&lang=en

If you have given your consent, we use services from YouTube, a video content provider owned by Google LLC. The responsible service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

This serves to improve our online offering.

When you visit a page that contains a YouTube video, your browser establishes a direct connection to Google's servers. The following data is processed:

• Device information
• Videos viewed
• IP address

The information collected about your use of this website is usually processed within the European Union. The data is deleted as soon as it is no longer needed for processing purposes.

You can find more information on the handling of user data at the following links:

• Google's privacy policy
• Information about cookies at Google
• Privacy settings at Google

Legal basis and right of revocation:
Data processing is based on your consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time with future effect by clicking on “Cookie settings” at the bottom of our website.

Your data will not be passed on to third parties unless we are legally obliged to do so, the transfer of data is necessary for the execution of the contractual relationship, or you have expressly consented to the transfer of your data in advance.

External service providers and partner companies, such as online payment providers or the shipping company responsible for delivery, will only receive your data to the extent necessary to process your order. In these cases, however, the scope of the data transmitted is limited to the minimum required.

Insofar as our service providers come into contact with your personal data and process it on our behalf in accordance with our instructions, we ensure within the framework of order processing in accordance with Art. 28 GDPR that they comply with the provisions of data protection laws in the same way.

Please also note the respective data protection information of the providers. The respective service provider is responsible for the content of third-party services. We check compliance with legal requirements within the scope of what is reasonable.

Mollie

We transfer your data to our payment service partner Mollie (Mollie B.V., Keizersgracht 126, 1015CW Amsterdam, Netherlands) for the purpose of payment processing. The legal basis for this data processing is Art. 6 (1) lit. b) GDPR. Please also note the detailed information on data protection at Mollie at https://www.mollie.com/de/privacy .

PayPal

We may also transfer your data to our payment service partner PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, for the purpose of payment processing. If you choose PayPal as your payment method, the data required for the payment process will be automatically transmitted to PayPal. The legal basis for this data processing is Art. 6 (1) lit. b) GDPR.

As a rule, your data will not be transmitted to third parties unless we are legally obliged to do so or disclosing the data is necessary for the performance of the contractual relationship or you have previously explicitly consented to the disclosure of your data..

Personal data that we collect will be erased if the purpose for processing ceases to apply or within the statutory retention periods.

When you use our website, you are not subject to any statutory or contractual obligations to provide data.

No automated decision-making including profiling occurs in accordance with Article 22 GDPR.