Introduction and general information
Thank you for your interest in our website. The protection of your personal data is very important to us. Below you will find information on how we handle your data that is collected through your use of our website. The processing of your data is carried out in accordance with legal regulations on data protection.
Responsible under the GDPR
Octoscreen GmbH
Kazmairstraße 60
80339 Munich
Germany
E-Mail: info@octoscreen.de
Contact details of the data protection officer
PROLIANCE GmbH / www.datenschutzexperte.de
Data Protection Officer
Leopoldstr. 21
80802 Munich
Germany
Email: datenschutzbeauftragter@datenschutzexperte.de
Please mention the company related to your inquiry when contacting the Data Protection Officer. Please refrain from attaching sensitive information, such as a copy of an identity card, to your inquiry.
Definitions
Our privacy policy is intended to be simple and understandable for everyone. This privacy policy generally uses the official terms of the General Data Protection Regulation (GDPR). The official definitions of terms are explained in Article 4 of the GDPR.
Access to and storage of information on end devices
By using our website, access to information (e.g. IP address) or storage of information (e.g. cookies) on your end devices may occur. This access or storage may be associated with further processing of personal data within the meaning of the GDPR.
In cases where such access to information or such storage of information is absolutely necessary for the technically flawless provision of our services, this is done on the basis of § 25 Abs. 1 S. 1, Abs. 2 Nr. 2 TTDSG.
In cases where such a process serves other purposes (e.g. the needs-based design of our website), this is only done on the basis of § 25 Abs. 1 TTDSG with your consent according to Art. 6 Abs. 1 lit. a GDPR. The consent can be revoked at any time for the future. The processing of your personal data is subject to the provisions of the GDPR and the Federal Data Protection Act (BDSG).
For more information on the processing of your personal data and the relevant legal bases in this context, you can refer to the following sections regarding the specific processing activities on our website.
Web hosting
This website is hosted by an external service provider, Render Services, Inc. (Host). Personal data collected on this website will be stored on the servers of the host. This may include, in particular, IP addresses, contact requests, meta and communication data, website accesses, and other data generated through a website.
The data listed is collected to ensure a smooth connection to the website and a technically flawless provision of our services. The processing of this data is absolutely necessary to make the website available to you. The legal basis for processing the data is our legitimate interest in a correct presentation and functionality of our website in accordance with Art. 6 para. 1 lit. f GDPR.
We have entered into a data processing agreement with the provider in accordance with the requirements of Art. 28 GDPR, in which we oblige them to protect our customers' data and not to share it with third parties.
Server log files
When you access our website, it is technically necessary for data to be transmitted to our web server via your internet browser. The following data is recorded during an active connection for communication between your internet browser and our web server:
Date and time of the request
Name of the requested file
Page from which the file was requested
Access status
Used web browser and operating system
(Complete) IP address of the requesting computer
Amount of data transmitted
The listed data is collected to ensure a smooth connection establishment of the website and a technically error-free provision of our services. The processing of this data is absolutely necessary to make the website available to you. The log files serve the evaluation of system security and stability as well as administrative purposes. The legal basis for processing the data is our legitimate interest in the protection and functionality of our website according to Art. 6 para. 1 lit. f GDPR.
For reasons of technical security, especially to defend against attempted attacks on our web server, this data is temporarily stored by us. Based on this data, it is not possible for us to draw conclusions about individual persons. After a maximum of seven days, the data is anonymized by shortening the IP address to the domain level, thereby making it impossible to relate it to an individual user.
In anonymized form, the data may also be processed for statistical purposes. Storage of this data together with other personal data of the user, a match with other data sets, or transfer to third parties does not take place at any time.
Cookies
Our website uses so-called "cookies." Cookies are small text files that are either temporarily stored for the duration of a session (session cookies) or permanently (permanent cookies) on your device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or an automatic solution occurs through your web browser.
Cookies have various functions. Numerous cookies are technically necessary, as certain website functions would not work without them (e.g., the shopping cart function or language settings). Other cookies are used to evaluate user behavior or display advertisements.
The processing of data by using absolutely necessary cookies takes place on the basis of a legitimate interest according to Art. 6 para. 1 lit. f GDPR in the technically error-free provision of our services. For details on processing purposes and legitimate interests, please refer to the explanations regarding the specific data processing.
The processing of personal data through the use of other cookies is based on consent according to Art. 6 para. 1 lit. a GDPR. Consent can be revoked at any time for the future. As far as such cookies are used for analysis and optimization purposes, we will inform you separately about this in the context of this privacy policy and obtain consent according to Art. 6 para. 1 lit. a GDPR.
You can configure your browser to
be informed about the setting of cookies,
allow cookies only in individual cases,
exclude the acceptance of cookies for specific cases or generally,
activate the automatic deletion of cookies when closing the browser.
Cookie settings can be managed under the following links for the respective browsers:
You can also individually manage cookies from many companies and functions used for advertising. Use the corresponding user tools available at https://www.aboutads.info/choices/ or http://www.youronlinechoices.com/uk/your-ad-choices.
Most browsers also offer a so-called "Do-Not-Track function." If this function is activated, the respective browser informs advertising networks, websites, and applications that you do not wish to be "tracked" for behavioral advertising and similar purposes.
Information and instructions on how to edit this function can be obtained depending on your browser provider under the following links:
Additionally, you can prevent the loading of so-called scripts by default. "NoScript" allows the execution of JavaScripts, Java, and other plug-ins only on trusted domains of your choice. Information and instructions on how to edit this function can be obtained from your browser provider (e.g., for Mozilla Firefox at: https://addons.mozilla.org/de/firefox/addon/noscript/).
Please note that deactivating cookies may limit the functionality of our website.
Appointment booking
You can book an appointment for a non-binding conversation through our website. For this purpose, we use the service "Pipedrive" from Pipedrive OÜ, Mustamäe tee 3a, 10615 Tallinn, Estonia. We use Pipedrive to enable prospective clients to make automated appointments. Pipedrive uses cookies for this purpose.
In addition to the desired appointment and company name, the following personal data is also processed by Pipedrive:
First and last name
Email address
Phone number (optional)
In this context, there is no transfer of data to third parties. The legal basis for processing the data is our legitimate interest in arranging a non-binding consultation with you as a prospective client in accordance with Art. 6 (1) (f) GDPR as well as, if applicable, Art. 6 (1) (b) GDPR, provided that your inquiry aims at the conclusion of a contract.
The collected personal data for the consultation will be deleted as soon as timely telephone contact with you has taken place or was unsuccessful. Continued processing will only occur if it is necessary in the context of a resulting initiation and execution of a contract or to fulfill resulting contractual purposes. In the event of Art. 6 (1) (f) GDPR, you can object to the processing of your personal data at any time.
You can prevent the collection and processing of your personal data by Pipedrive by disabling the storage of third-party cookies on your computer, using the "Do Not Track" function of a supported browser, disabling the execution of script code in your browser, or installing a script blocker, such as NoScript or Ghostery, in your browser.
For more information on the processing of data by Pipedrive, please visit: https://www.pipedrive.com/en/privacy
Contact form and contact via email
If you send us inquiries via the contact form or email, your information from the inquiry form or your email, including the contact details you have provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. Providing an email address is necessary for contact purposes, while providing your name and telephone number is voluntary. We will not share this data with third parties without your consent. The legal basis for processing the data is our legitimate interest in responding to your request in accordance with Art. 6 (1) lit. f GDPR as well as, if applicable, Art. 6 (1) lit. b GDPR, if your inquiry aims at concluding a contract. Your data will be deleted after the final processing of your inquiry, provided that there are no legal retention obligations to the contrary. You may object to the processing of your personal data at any time in the case of Art. 6 (1) lit. f GDPR.
Submission of applications
If you apply to us by email, we collect personal data. This includes in particular your contact details (such as first name, last name, name suffixes, private address, (mobile) phone number, email address) as well as further information you provide about your career (e.g. resume, qualifications and degrees, professional experience) and about your person (e.g. cover letter, personal interests). This may also include special categories of personal data (e.g. information on severe disabilities). Your personal data will usually be collected directly from you as part of the application process and encrypted during electronic transmission.
The data processing is for the purpose of establishing an employment relationship. The primary legal basis for this is § 26 Abs. 1 BDSG. In addition, consents pursuant to Art. 6 Abs. 1 lit. a, 7 DS-GVO in conjunction with § 26 Abs. 2 BDSG can be used as data protection permissive provisions. If the processing of your data is based on consent, you have the right to revoke your consent at any time with effect for the future.
Within our company, only those individuals and departments (e.g. human resources) that absolutely need access to your personal data for the purpose of conducting the application process or fulfilling our legal obligations will have access. Your applications may be forwarded to the relevant responsible parties for review. In no case will your personal data be disclosed to third parties without authorization.
Your data related to an application for a specific job advertisement will be stored and processed during the ongoing application process with us. After the completion of the application process (e.g. in the form of an approval or rejection), the application process including all personal data will be deleted from the system six months after the completion of the application process. In the case of an approval, we reserve the right to keep your application for a longer period if the start date is more than six months in the future.
External links
Social networks (LinkedIn) are integrated on our website solely as links to the respective services. After clicking the embedded text/image link, you will be redirected to the page of the respective provider. Only after the redirection will user information be transferred to the respective provider. Please refer to the privacy policies of the providers you use for information on how your personal data is handled when using these websites.
Google Tag Manager
This website uses the Google Tag Manager of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). This service allows website tags to be managed through an interface. The Google Tag Manager only implements tags. This means: No cookies are used, and only the user's IP address is transmitted to Google for connection establishment. The Google Tag Manager triggers other tags that can collect data. However, the Google Tag Manager does not access this data. If a deactivation has taken place at the domain or cookie level, it remains in effect for all tracking tags, as long as they are implemented with the Google Tag Manager.
We use the Google Tag Manager based on your consent according to Art. 6 Para. 1 lit. a GDPR.
Since the transmission of the IP address to Google occurs in the USA, additional protective mechanisms are required to ensure the level of data protection of the GDPR. To ensure this, we have agreed with the provider on standard contractual clauses in accordance with Art. 46 Para. 2 lit. c GDPR. These obligate the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured even by this contractual extension, we strive for further agreements and commitments from the recipient in the USA.
Google Analytics
Our website uses Google Analytics, a web analytics service from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses so-called cookies.
On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activities, and provide further services related to website use and internet use to the website operator. The IP address transmitted by your browser within the framework of Google Analytics will not be merged with other data from Google.
We only use Google Analytics with IP anonymization enabled. This means that the users' IP address will be shortened.
The processing of Google Analytics is carried out in accordance with Art. 6 para. 1 lit. a GDPR on the basis of the consent you have provided. We have concluded a processing contract with the service provider, in which we obligate them to protect our customers' data and not to disclose it to third parties.
Since a transfer of personal data to the USA takes place, further protective measures are necessary to ensure that the level of data protection of the GDPR is maintained. To ensure this, we have agreed with the provider on standard data protection clauses in accordance with Art. 46 para. 2 lit. c GDPR. These obligate the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured even by this contractual extension, we endeavor to establish further regulations and assurances from the recipient in the USA.
The terms of use for Google Analytics and information about data protection can be accessed via the following links: https://marketingplatform.google.com/about/analytics/terms/de/ as well as at https://www.google.de/intl/de/policies/.
The data will be deleted as soon as they are no longer necessary for the purpose for which they were collected. Deletion of data at the user and event level, which is linked to cookies, user IDs (e.g., User-ID), and advertising IDs, will take place no later than 14 months after collection.
You can prevent the storage of cookies by adjusting your browser software settings, but we would like to point out that you may not be able to use all the features of this website in full. Furthermore, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the URL https://tools.google.com/dlpage/gaoptout?hl=de.
Information on the handling of user data in Google Analytics can be found in Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de
LinkedIn Insight Tag
Our website uses the conversion tool "LinkedIn Insight Tag" from LinkedIn Ireland Unlimited Company. This tool creates a cookie in your web browser, which allows the collection of data such as: IP address, device and browser attributes, and page events (e.g., page views). This data is encrypted, anonymized within seven days, and the anonymized data is deleted within 90 days. LinkedIn does not share any personal data with Octoscreen, but provides anonymized reports on the website audience and ad performance. Additionally, LinkedIn offers retargeting options through the Insight Tag. Octoscreen can display targeted advertising outside of its website using this data, without identifying you as a website visitor. For more information on LinkedIn's data protection, you can refer to LinkedIn's privacy notices.
Members of LinkedIn can control the use of their personal data for advertising purposes in their account settings. To deactivate the Insight Tag on our website ('Opt-out'), click here.
Intercom
We use Intercom on our website, a messaging and communication platform provider that is the American company Intercom Inc. 55 2nd Street, 4th Floor, San Francisco, CA 94105, USA
Intercom processes data from you, among other things, also in the USA. We would like to point out that according to the opinion of the European Court of Justice, there is currently no adequate level of protection for data transfer to the USA. This may involve various risks for the legality and security of data processing.
As the basis for data processing at recipients located in third countries (outside the European Union, Iceland, Liechtenstein, Norway, thus particularly in the USA) or data transfer there, Intercom uses so-called Standard Contractual Clauses (= Art. 46 para. 2 and 3 GDPR). Standard Contractual Clauses (SCC) are templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even when transferred to third countries (such as the USA) and stored there. Through these clauses, Intercom commits to adhering to the European level of data protection when processing your relevant data, even if the data is stored, processed, and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding Standard Contractual Clauses here, among others: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de
The Intercom Data Protection Agreement, which corresponds to the Standard Contractual Clauses, can be found at https://www.intercom.com/de/legal/data-processing-agreement.
Learn more about the data processed through the use of Intercom in the Privacy Policy at https://www.intercom.com/legal/privacy.
Microsoft Teams
Offered services: Video conferences, chats, voice conferences
Service provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA
Website: https://www.microsoft.com/de-de/microsoft-365/microsoft-teams/group-chat-software
Privacy statement: https://privacy.microsoft.com/de-de/privacystatement
Data sharing and recipients
Your personal data will not be transmitted to third parties, unless
if we have explicitly pointed this out in the description of the respective data processing,
if you have given explicit consent according to Art. 6 (1) sentence 1 lit. a GDPR,
if the transfer is necessary according to Art. 6 (1) sentence 1 lit. f GDPR to assert, exercise, or defend legal claims, and there is no reason to believe that you have a predominant legitimate interest in not disclosing your data,
in the event that there is a legal obligation for transfer according to Art. 6 (1) sentence 1 lit. c GDPR, and
as far as this is necessary according to Art. 6 (1) sentence 1 lit. b GDPR for the processing of contractual relationships with you.
Furthermore, we use external service providers for the processing of our services, whom we have carefully selected, commissioned in writing, and with whom we have concluded, if necessary, data processing agreements in accordance with Art. 28 GDPR. They are bound by our instructions and are regularly monitored by us. These include, among others, service providers for hosting, sending emails, as well as maintenance and support of our IT systems, etc. The service providers will not disclose this data to third parties.
Data security
We meet in accordance with Article 32 of the GDPR, taking into account the current state of technology, implementation costs, and the nature, scope, circumstances, and purposes of processing, as well as the varying likelihood and severity of the risks to the rights and freedoms of natural persons, appropriate technical and organizational measures to ensure a level of protection appropriate to the risk. This website uses SSL encryption for security reasons and to protect the transmission of confidential content.
Duration of the storage of personal data
The duration of storage of personal data is determined by the relevant statutory retention periods (e.g., from commercial and tax law). After the respective period has expired, the corresponding data will be routinely deleted. If data is required for contract fulfillment or contract initiation, or if we have a legitimate interest in further storage, the data will be deleted when they are no longer necessary for these purposes or if you have exercised your right to revoke or object.
Your rights
Below you will find information on which rights of the data subjects are granted to you under the applicable data protection law against the controller regarding the processing of your personal data:
The right to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage duration, the existence of a right to rectification, deletion, restriction of processing, or objection, the existence of a right to lodge a complaint, the source of your data, if not collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about those details.
The right to request the rectification of inaccurate or completion of your personal data stored with us without delay in accordance with Art. 16 GDPR.
The right to request the deletion of your personal data stored with us according to Art. 17 GDPR, provided that the processing is not necessary for the exercise of the right to freedom of expression and information, for the fulfillment of a legal obligation, for reasons of public interest, or for the assertion, exercise, or defense of legal claims.
The right to request the restriction of processing of your personal data according to Art. 18 GDPR, provided that the accuracy of the data is contested by you, the processing is unlawful, but you reject the deletion of them and we no longer need the data, however, you need them for the assertion, exercise, or defense of legal claims or you have lodged an objection against the processing in accordance with Art. 21 GDPR.
The right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format or to request the transfer to another controller in accordance with Art. 20 GDPR.
The right to lodge a complaint with a supervisory authority according to Art. 77 GDPR. Generally, you can contact the supervisory authority of the federal state of our above-mentioned registered office or, if necessary, that of your usual residence or place of work for this purpose.
The right to withdraw granted consents in accordance with Art. 7 (3) GDPR: You have the right to withdraw your consent to the processing of data at any time with effect for the future. In the event of withdrawal, we will delete the affected data without delay, unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of consent until the withdrawal.
Right of objection
If your personal data is processed by us based on legitimate interests in accordance with Art. 6 Par. 1 Sentence 1 lit. f GDPR, you have the right under Art. 21 GDPR to object to the processing of your personal data, insofar as this is based on reasons arising from your particular situation. If the objection is directed against the processing of personal data for the purpose of direct advertising, you have a general right of objection without the need to provide a specific situation.
If you wish to exercise your right of withdrawal or objection, simply send an email to info@octoscreen.de
Legal obligations
The provision of personal data for the decision regarding the conclusion of a contract, the fulfillment of the contract, or for the implementation of pre-contractual measures is voluntary. However, we can only make a decision within the framework of contractual measures if you provide such personal data that is necessary for the conclusion of the contract, the fulfillment of the contract, or pre-contractual measures.
Automated decision-making
Automated decision-making or profiling as per Article 22 of the GDPR does not take place.
reservation of changes
We reserve the right to adapt or update this privacy policy as necessary while observing the applicable data protection regulations. In this way, we can align it with the current legal requirements and take into account changes to our services, e.g., with the introduction of new services. The current version applies to your visit.
As of this privacy policy: 15.11.2022