Data privacy

The controller responsible for processing your personal data is the following company:

OEDIV Oetker Daten- und Informationsverarbeitung KG
Bechterdisser Straße 10
33719 Bielefeld/Germany
E-Mail: data-privacy@@oediv..de 

You can contact our Data Protection Officer under the following address:

Oetker Digital GmbH
Datenschutzbeauftragter
Stralauer Allee 11
10245 Berlin / Germany
E-Mail: oediv@corporate-data-protection.com 

Operation of the website / server logging

Whenever you call our website or use our app, we log data from your end-user device (which may also include personal data) in server log files. This applies to the following data:

• The operating system of your end-user device
• The type of browser you used (when you called the website)
• The name of your provider
• Your IP address
• The date and time you called the website
• The pages you visited in our offering, including any search terms
• The websites from which you accessed our website (when you called the website)

Processing of this data is necessary in order to ensure that the website and app run properly, to optimise the content of our website and app and deliver it correctly, and to provide law-enforcement authorities with the information required to prosecute any cyberattacks that occur.

That also constitutes our legitimate interest in processing the data. The legal basis for that is our legitimate interest (Article 6 (1) point (f) GDPR).

We usually erase this data after seven days or, if cases of misuse occur, after the official or judicial proceedings have been completed.

You can subscribe to our e-mail newsletter. We process your data to send you e-mails and, if applicable, analyse which of these e-mails you open. We always need your e-mail address so that you can subscribe to the newsletter. In the subscription form, you can also provide further particulars about yourself and your company. We use these particulars to tailor the content better to you.

The legal basis for that is your consent (Article 6 (1) point (a) GDPR). You can revoke your consent at any time with future effect, for example by clicking on the “Unsubscribe” link in one of our newsletter e-mails.

After you cancel your newsletter subscription, the data is stored solely as proof that we obtained your consent to sending you the newsletter. Your data is then erased from the list of our newsletter recipients or is blocked.

The e-mails are sent through rapidmail GmbH, Wentzingerstraße 21, 79106 Freiburg im Breisgau, Germany (“Rapidmail”). Rapidmail processes your data on our behalf.

You can contact us using a form on this website or by e-mail. We process your data to reply to your inquiry. Your contact data may be passed on to third parties (e.g. partner companies) where that is necessary to handle your request.

The legal basis for that is our legitimate interest (Article 6 (1) point (f) GDPR). The ability to reply to your individual inquiry constitutes our legitimate interest.

Your contact data is erased once your inquiry has been fully dealt with. That is not the case if, in an individual case, statutory retention obligations prevent the data from being erased. In that case, the data is erased when permitted under the statutory retention obligations.

If you are already a customer of OEDIV, we also use your contact data for advertising purposes, unless we need your consent to that (for example for advertising by postal mail or direct advertising for our own similar goods and services as part of existing customer relationships).

The legal basis for that is our legitimate interest (Article 6 (1) point (f) GDPR). Our legitimate interest is to nurture our relationship with customers, as well as to provide information about our products.

Please also note in particular the section “Right of objection”. You can object to processing of your data at any time and free of charge, for example by getting in touch with us under the contact data specified in the section “Name and contact details of the controller”.

We integrate maps from Google Maps on our website. Among other things, that lets you pinpoint your location and calculate the route you need to take to reach us. That also constitutes our legitimate interest in processing the data. The legal basis for that is our legitimate interest (Article 6 (1) point (f) GDPR). By using this service, communication data is exchanged between you and your provider due to technical reasons.

We cannot rule out that your data will be processed by Google for further purposes of its own in this context. In this regard, we cannot issue any binding statement on the purpose for and scope to which your data is processed. We therefore ask you to refer to Google’s Privacy Policy for more information on data processing by Google Maps.

Our website contains links to external social networks such as XING and LinkedIn (“social plug-ins”). The functions of these links, in particular that of transmitting information and user data, are not activated when you visit our website, but only when you click on the links. After you click on these links, the plug-ins of the networks in question are activated and your browser establishes a direct connection to their servers.

If you click on the links while visiting our website, your user data may be transmitted to the network in question and may be processed by the network. If you click on the links while visiting our website and you are logged on to the network using your personal account at the same time, the information that you have visited our website may be passed on to the network and stored there in connection with your account. To prevent the data being assigned to your account with the network in question, you must log out of your account before you click on the link.

Please refer to the privacy policy of the respective network for details of the purpose and scope of data collection by the social networks, how the data is processed and used further there, your related rights and settings you can make to protect your privacy. The respective social network is solely responsible for processing of data carried out when you click on the link.

The departments at OEDIV which need your data for the purposes presented in section 3 are given access to that data. The service providers we use (termed “processors”) may also be given access to your data. We have concluded data processing agreements with the service providers governing their obligations to comply with our instructions, protect data security and ensure confidentiality when handling your data.

If the data processing is based on your consent (Article 6 (1) point (a) GDPR), you have the right to withdraw your consent at any time with future effect. To do that, you can get in touch with us under the contact data specified in the section “Name and contact details of the controller” or use the options described in the context of the processing activity in question.

You have the right to obtain information on whether we process your personal data. If we do, you have a right of access to this personal data and to obtain further information in connection with its processing (Article 15 GDPR).

If personal data concerning you is not or no longer accurate or is incomplete, you have the right to obtain rectification of it or, if applicable, to have incomplete personal data completed (Article 16 GDPR). If the legal requirements are met, you can demand erasure of your data or restriction of its processing and also exercise your right to data portability (Articles 17, 18 and 20 GDPR).

Please contact us if you wish to exercise your rights as a data subject. To do that, please get in touch with us under the contact data specified in the section “Name and contact details of the controller”.

You have the right to object at any time to personal data concerning you being processing pursuant to Article 6 (1) point (e) GDPR and Article 6 (1) point (f) GDPR on grounds relating to your particular situation.

If you object, we will no longer process your personal data, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

Please contact us if you wish to exercise your right to object. To do that, please get in touch with us under the contact data specified in the section “Name and contact details of the controller”.

Automated decision-making and profiling are not used.

Under Article 77 (1) GDPR, data subjects have the right – without prejudice to any other legal remedy – to lodge a complaint with the responsible data protection supervisory authority if they consider that the processing of their personal data by the controller infringes their rights.

Last updated: 29 June 2023