Privacy Policy
Updated: 8th September 2020
1. Subject matter and scope
We take the protection of your personal data very seriously. With this data protection information, we inform you about which personal data we collect and how and for what purposes it is processed. We always treat your personal data in accordance with the statutory data protection regulations and this data protection declaration.
2. Responsible person and data protection officer
The responsible party in the sense of the DSGVO is Osborn GmbH, Ringstraße 10, 35099 Burgwald, Germany,
phone: +49 6451 588 0
fax: +49 6451 588 206
e-mail: info@osborn.de
You can reach our data protection officer at the e-mail address datenschutz@osborn.de
Everyone concerned can contact our data protection officer directly at any time with questions and suggestions regarding data protection.
3. Visiting the website
Each time you visit our website, our system automatically collects data and information from the computer system of the calling computer. In order for the pages to be displayed in your browser, the IP address of the terminal device you are using must be processed. In addition, there is further information about the browser of your end device.
We are obliged under data protection law to also guarantee the confidentiality and integrity of the personal data processed with our IT systems. The data is also used to correct errors on the website.
For these purposes, the following data is logged:
- IP address of the calling computer
- Operating system of the calling computer
- Browser version of the calling computer
- Name of the retrieved file
- Date and time of the retrieval
- Amount of data transferred
- Referring URL
This data is regularly deleted after a few days.
For the hosting of our website, we use an external service provider as an order processor on the basis of an order processing agreement pursuant to Art. 28 DSGVO.
The legal basis for this data processing is Art. 6 para. 1 lit. f) DSGVO. Our overriding legitimate interest is the operation of this website and the implementation of the protection goals of confidentiality, integrity and availability of the data.
4. Contact and CRM
If you contact us to request information or a quotation, the information you provide will be stored for the purpose of processing the request. If necessary, we need the details requested in a contact form on the website in order to process your enquiry, to address you correctly and to send you a reply.
Enquiries are stored in our CRM system. We may use this data for direct marketing purposes. You can object to such use for direct advertising at any time. Details of your right to object can be found below under "Right to object".
The CRM system is regularly checked to see whether data can be deleted. If data is no longer required in the context of a customer or interested party relationship or if a conflicting interest of the person concerned prevails, we will delete the data concerned, provided that there are no legal obligations to retain the data.
The legal basis for this storage and processing is Art. 6 para. 1 lit. f) DSGVO. Our overriding legitimate interest is the maintenance of communication with our customers, interested parties and suppliers, the maintenance of our customer relationships and the implementation of direct marketing measures. If the contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b) DSGVO.
5. Newsletter
5.1 Registration for the newsletter
On our website, you can register to receive our newsletter by e-mail. The data requested as mandatory fields are required for sending the newsletter. All other information is voluntary. During registration, the data from the input mask, the IP address of the calling computer and the date and time of registration are transmitted to us. Your consent is obtained for the processing of the data during registration and reference is made to this data protection information.
In order to verify that a registration for the sending of a newsletter is made by the actual owner of an e-mail address, we use the so-called "double opt-in" procedure. In this process, after registration of an e-mail address, a confirmation e-mail is sent to the registered e-mail address. Registration for the newsletter is only completed when a confirmation link contained in the confirmation e-mail is activated. The IP address of the calling computer and the date and time of activation of the confirmation link are also transmitted to us.
Registration for the newsletter can be terminated at any time by using the unsubscribe link contained in each newsletter or by contacting us using the contact details provided above.
The legal basis for the processing of data after registration for the newsletter is your consent in accordance with Art. 6 Para. 1 lit. a) DSGVO.
5.2 Newsletter analysis
A statistical analysis of usage data may be carried out for our newsletter. For this purpose, we may record both the opening of the e-mail and the internal clicks and additionally information about the time of opening and the IP address. This information serves the purpose of measuring and optimising the success of our newsletter campaigns by making the newsletter content more relevant to our target group and technically optimising the newsletter in terms of displayability. This information can be assigned to individual newsletter recipients. However, this is merely a technical necessity and it is not our intention to observe and analyse the usage behaviour of individual users. We are only interested in an aggregated statistical analysis.
The legal basis for this analysis is your consent in accordance with Art. 6 para. 1 lit. a) DSGVO. You can revoke your consent at any time by contacting us using the contact details provided above.
5.3 Newsletter service provider
We use an external service provider as a processor for sending and analysing our newsletter on the basis of an agreement on order processing pursuant to Art. 28 DSGVO.
6. Cookies
Our website uses cookies. Cookies are pieces of information that are transferred from our web server or third-party web servers to your browser and stored there for later retrieval. Cookies can be small files or other types of information storage. Information is stored in cookies that is related to the specific end device used. Cookies contain a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again. A cookie also contains information about its origin and the storage period. In the context of this data protection information, we also understand cookies to mean other technologies that have a similar functionality to cookies.
On the one hand, we use so-called session cookies, which are only stored for the duration of the respective visit to our website (e.g. to enable the storage of your shopping basket contents). A randomly generated unique identification number, a so-called session ID, is stored in a session cookie. Session cookies are automatically deleted when you leave our website and close the browser.
In addition, we use temporary cookies that are stored by us on your end device for a certain period of time (so-called first party cookies). If you visit our site again, it is automatically recognised that you have already been with us and which entries and settings you have made so that you do not have to enter them again.
We also use cookies for other purposes, such as web analysis, conversion tracking and remarketing. These cookies are also automatically deleted after a defined period of time. This use is explained in more detail below.
You have the option of preventing cookies from being set by making the appropriate settings in your browser. However, we would like to point out that the use of our Internet pages may then only be possible to a limited extent. Cookies do not install or start any programs or other applications on your computer.
You can object to the use of cookies that are used for range measurement and advertising purposes via the deactivation page of the network advertising initiative (http://optout.networkadvertising.org/) and also via the US website (http://www.aboutads.info/choices) or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/).
The legal basis for the processing of personal data using cookies is Art. 6 para. 1 lit. f) DSGVO. Our overriding legitimate interest is the operation, analysis and optimisation of our website and our customer interactions.
7. Google Analytics
We use web analytics services on our website to record how our website is used by users and to improve and optimise the website.
We use the web analysis service Google Analytics with IP anonymisation for this purpose. Google Analytics is a web analytics service provided by Google Ireland Limited ("Google").
Cookies are set within the scope of Google Analytics. You can prevent the storage of cookies by setting your browser accordingly. Furthermore, you can prevent the collection of the data generated by the cookie and related to your use of the online offer to Google as well as the processing of this data by Google by downloading and installing the browser plugin available under the following link, which informs Google Analytics via JavaScript that no data and information on visits to Internet pages may be transmitted to Google Analytics: http://tools.google.com/dlpage/gaoptout?hl=de.
Within the scope of IP anonymisation, the collected IP address of the users of our website is shortened by Google within the European Economic Area before being transmitted to the USA. Only in exceptional cases will the unabbreviated IP address be transmitted to Google in the USA and shortened there. The transmitted IP addresses will not be merged with other Google data.
When using Google Analytics, personal data may be transferred to a third country outside the EU, as described above. We ensure that suitable guarantees are provided for the transfer in accordance with Art. 46 DSGVO. We will be happy to provide you with proof of the appropriate guarantees (e.g. a copy of the EU standard contractual clauses) at any time upon request. To do so, please contact us using the contact details above.
The legal basis for the processing of personal data using Google Analytics is Art. 6 para. 1 lit. f) DSGVO. Our overriding legitimate interest is the operation, analysis and optimisation of our website and our customer interactions.
8. Google Tag Manager
We use the Google Tag Manager on our website. Through this service, website tags can be managed via an interface. The Google Tool Manager only implements tags. This means that no cookies are used and no personal data is collected. The Google Tool Manager triggers other tags, which in turn may collect data. However, the Google Tag Manager does not access this data. If a deactivation has been made at domain or cookie level, it remains in place for all tracking tags, insofar as these are implemented with the Google Tag Manager.
9. WiredMinds LeadLab
Our website uses the counting pixel technology of WiredMinds GmbH (www.wiredminds.de) to analyse visitor behaviour. In doing so, the IP address of a visitor is processed. The processing takes place exclusively for the purpose of collecting company-relevant information such as the company name. IP addresses of natural persons are excluded from further use (whitelist procedure). The IP address is never stored in LeadLab. When processing the data, it is our particular interest to protect the data protection rights of natural persons. Our interest is based on Art. 6 para. 1 lit. (f) DSGVO. The data we collect does not allow any conclusion to be drawn about an identifiable person at any time.
WiredMinds GmbH uses this information to create anonymous usage profiles relating to visitor behaviour on our website. The data obtained in this way is not used to personally identify visitors to our website.
OPT-OUT Link: Exclude from Tracking
When the opt-out link is activated, a technically necessary cookie is set to permanently exclude you from tracking by WiredMinds LeadLab on this website.
10. YouTube
YouTube videos are embedded on our website. These are provided, via a plugin, by Google Ireland Ltd. in Ireland ("YouTube").
We use the "extended data protection settings" for embedded YouTube videos, i.e. YouTube does not set any cookies.
Nevertheless, when you visit a website with the YouTube plugin, a connection to YouTube is inevitably established and your IP address is transmitted to YouTube in the process.
When using YouTube, personal data is transferred to a third country outside the EU. We ensure that suitable guarantees are provided for the transfer in accordance with Art. 46 DSGVO. We will be happy to provide you with proof of the appropriate guarantees (e.g. a copy of the EU standard contractual clauses) at any time upon request. To do so, please contact us using the contact details above.
Further information on data protection at YouTube can be found in YouTube's Data Protection and Security Centre: https://support.google.com/youtube/topic/2803240?hl=de&ref_topic=6151248.
The legal basis for this data processing when using YouTube is Art. 6 para. 1 lit. f) DSGVO. Our overriding legitimate interest is the integration of videos and the associated optimisation of the interactivity of our website and our customer interactions.
11. Social Media-Buttons
Social media buttons (links) of various social media networks (e.g. Facebook, YouTube and/or LinkedIn) are integrated on our website.
If you click on one of these social media buttons, you will be redirected to our pages on the respective social media network. In this case, the provider of the respective social media network receives the information that your browser has accessed the corresponding page of our website, even if you do not have a profile with the respective social media network or are not logged in there. This information (including your IP address) is transmitted by your browser directly to a server of the respective provider. If you click on a social media button and are either logged in to the respective social media network or then log in to the page of the respective social media network, the transmitted information can be assigned to your account with the social media network.
For information on the purpose and scope of data collection and processing by the providers of the respective social media network, the provider identification, a contact option and your rights and setting options for data protection, please refer to the respective data protection information of the providers of the social media networks.
The legal basis for the integration and use of the social media buttons is Art. 6 para. 1 lit. f) DSGVO. Our overriding legitimate interest is the marketing of our offers and our website.
12. Social Media-Pages
We maintain a publicly accessible profile on various social media networks, e.g. Facebook, YouTube and/or LinkedIn ("social media pages" or "fan pages").
If you visit one of our social media pages and are logged in to the respective social media network, the provider of the respective social media network can analyse your usage behaviour and assign the information collected to your account with the social media network and enrich it there. Even if you are not logged in or if you do not have an account with the respective social media network, personal data may be collected by the provider of the respective social media network, for example your IP address or data collected via a cookie.
The operators of the social media networks can use this data to create user profiles. Based on your user profile, you can then be shown interest-based advertisements both on the websites of the social media network and on other websites.
If you visit one of our social media pages, we are jointly responsible with the provider of the social media network for the collection and processing of your personal data that takes place there. For information on the collection and processing of your personal data that takes place there, we refer you to the data protection information of the respective social media network. We do not have any further information on this.
You can assert your data subject rights in accordance with Chapter III of the GDPR (right to information, correction, deletion, restriction of processing, data portability, etc.) both against us and against the provider of the respective social media network. In this context, we would like to point out that we can only influence the processing of personal data and the implementation of data subject rights within the framework of our social media pages within the scope of the possibilities made available to us by the respective provider.
The legal basis for our use of social media pages is Art. 6 para. 1 lit. f) DSGVO. Our overriding legitimate interest is the presence and marketing of our products and services on the Internet.
13. Video surveillance
Some of our premises are under video surveillance. This surveillance is clearly indicated by information signs. The legal basis for this storage and processing is Art. 6 Para. 1 lit. f) DSGVO. The purpose of the video surveillance and our legitimate interest is the protection of our house rights, the protection of our employees from dangerous situations, the protection of our property, namely our premises including equipment and the preservation of evidence after criminal offences. Only the data protection officer, in cooperation with a member of the works council, has access to the recordings. In individual cases, the records may be passed on to law enforcement authorities, depending on the purpose. The system deletes the data after 3 working days, provided that there are no incidents in the sense of our legitimate interest that make longer storage necessary.
14. Job applications
We collect and process the personal data transmitted to us by an applicant for the purpose of carrying out the application procedure. The data requested as mandatory fields are required for the application process. All other information is voluntary. Applicant data is only made accessible to those persons and positions in our company who prepare the hiring decision or are involved in it.
If we conclude an employment contract with an applicant, the data provided will be processed for the purpose of implementing the employment relationship in compliance with the statutory provisions.
If an employment relationship is established, we store the applicant data for as long as it is required for the employment relationship and to the extent that legal regulations justify an obligation to store it.
If no employment contract is concluded with an applicant, we store the applicant data for a maximum of three months on the basis of our overriding legitimate interest in enabling the defence against claims or a function of preserving evidence in accordance with the General Equal Treatment Act (AGG). After expiry of this period, the application documents are deleted unless the applicant has expressly consented to longer storage.
The legal basis for the processing of application documents is Art. 6 para. 1 lit. b) DSGVO, in Germany in conjunction with Section 26 para. 1 BDSG.
If the applicant has given us separate consent, we will store the data submitted as part of the application in our applicant pool for a further 2 years after the end of the application process in order to identify future positions of potential interest to the applicant and, if necessary, contact the applicant in this regard. After this period, the data will be deleted.
Such consent to the storage of application data in our applicant pool can be revoked at any time for the future. To do so, please send us an email to the contact details provided above.
The legal basis for the storage of application documents in our applicant pool is, if applicable, the applicant's consent pursuant to Art. 6b para. 1 lit. a DSGVO.
15. Age restriction
This website is not intended or designed for use by children under the age of 16. We do not knowingly collect personal data from or about persons under the age of 16.
16. Recipients of data
Within our company, those internal departments or organisational units receive your data that need them to fulfil their tasks, if necessary to fulfil contracts with you, to process data with your consent or to protect our overriding legitimate interests.
Data will only be passed on to third parties within the framework of legal requirements. We only pass on your data to third parties if this is necessary, e.g. on the basis of Art. 6 (1) b) DSGVO for contractual purposes or to protect our overriding legitimate interest in accordance with Art. 6 (1) f) DSGVO in the effective performance of our business operations.
Insofar as we use service providers or third-party providers in the context of providing the website and/or our services, we take appropriate legal precautions as well as corresponding technical and organisational measures to ensure the protection of your personal data.
If, in the course of providing the website and/or our services, we use content or tools from service providers or third-party providers whose registered office is in a third country, data is regularly transferred to a third country. Third countries are countries in which the GDPR is not directly applicable law, i.e. countries outside the EU or the European Economic Area. The transfer of data to third countries only takes place if either an adequate level of data protection, consent or other legal permission, in particular an appropriate guarantee in accordance with Art. 46 DSGVO, exists.
It is possible that we acquire or sell the company or parts of the company or individual assets. In connection with such a sale, merger, reorganisation or similar event, personal data may be transferred. In this case, your personal data will of course continue to be processed in accordance with this data protection information. The legal basis for such transfer is our overriding legitimate interest pursuant to Art. 6 (1) f) DSGVO in the effective performance and further development of our business operations.
17. Your rights
You have the right to free information about your stored personal data, its origin and recipient and the purpose of the data processing and a right to correction, blocking or deletion of this data. You also have the right to restrict processing and to object to processing.
You also have the right to have your data that we process automatically handed over to you or to a third party in a common, machine-readable format.
To exercise your rights, please contact us using the contact details provided for the controller above.
You also have the right to lodge a complaint with the data protection supervisory authority responsible for you.
18. Revocation of consent
Some data processing operations are only possible with your express consent. You can revoke consent you have already given at any time. An informal communication by e-mail to us is sufficient for this purpose. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
19. RIGHT OF OBJECTION
INSOFAR AS YOUR DATA IS PROCESSED TO PROTECT OUR OVERRIDING LEGITIMATE INTERESTS, AS EXPLAINED IN THIS DATA PROTECTION INFORMATION, YOU MAY OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE. TO DO SO, PLEASE CONTACT US USING THE CONTACT DETAILS PROVIDED ABOVE.
IN PRINCIPLE, YOU ONLY HAVE THIS RIGHT OF OBJECTION IF THERE ARE GROUNDS ARISING FROM YOUR PARTICULAR SITUATION (ART. 21 PARA. 1 DSGVO). AFTER EXERCISING YOUR RIGHT TO OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE PROCESSED FOR THESE PURPOSES UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR IF THE PROCESSING IS FOR THE PURPOSE OF ASSERTING, EXERCISING OR DEFENDING LEGAL CLAIMS.
IF THE PROCESSING IS FOR THE PURPOSES OF DIRECT MARKETING, YOU MAY EXERCISE YOUR RIGHT TO OBJECT AT ANY TIME (ARTICLE 21(2) DSGVO) AND YOUR PERSONAL DATA WILL THEN NO LONGER BE PROCESSED FOR THE PURPOSES OF DIRECT MARKETING, REGARDLESS OF THE GROUNDS FOR THE OBJECTION.
20. Obligation to provide data
The provision of personal data is not required by law or contract, nor are you obliged to provide personal data, however, the provision of personal information is necessary for the conclusion and performance of a contract to the extent that certain information is mandatory in order to conclude and perform a contract.
21. Automated decision taking
We do not use automated decision making including profiling.
22. Retention and deletion
We adhere to the principles of data avoidance and data economy. We therefore only store your personal data for as long as is necessary to achieve the purposes stated here or as stipulated by the storage periods provided for by law.
If the purpose of storage ceases to apply or if a storage period provided for by law expires, the personal data will be routinely blocked or deleted in accordance with the statutory regulations.
23. Technical and organisational data security
We take organisational, contractual and technical security measures in accordance with the state of the art to ensure that the provisions of the data protection laws are complied with and thus to protect the data processed by us against accidental or intentional manipulation, loss, destruction or against access by unauthorised persons.
Our website uses SSL encryption for security reasons and to protect the transmission of confidential content, such as orders, enquiries or payment data that you send to us.
24. Modification of this data protection information
We reserve the right to amend this data protection declaration from time to time so that it always complies with the current legal requirements or in order to implement changes to our services in the data protection declaration, e.g. when introducing new services. The new data protection declaration will then apply to your next visit.