PRIVACY POLICY
With this privacy policy we inform you about the extent to which your personal data (hereinafter „data“) is processed.
1. The controller for data processing under the provisions of the General Data Protection Regulation (GDPR) is:
OMG E-Commerce GmbH, Damenstiftstraße 12, 80331 Munich, Germany
Phone: +49.172.8824075 Mail: mail(at)omg-e-commerce.com
Internet: www.omg-ecom.com
www.omg-e-commerce.com
2. General information on data processing
We process data in the course of operating our business and our website. This also includes disclosure by transfer to third parties and, where applicable, to so-called third countries outside the European Union („EU“) and the European Economic Area („EEA“). Where we transfer data outside the EU or the EEA, we have marked this accordingly below.
3. Data processing / services used
The data concerned in detail, the purposes of processing, the legal bases, the recipients and, where applicable, transfers to third countries are set out in the list below:
a) Log file when visiting the website
We log your visit to the website. In doing so we process:
the name(s) of the page(s) of ours you accessed, the date and time of access, the volume of data transferred, the browser type and version, the operating system you use, the referrer URL (the previously visited website), your IP address, the requesting provider.
The legal basis for the data processing is our overriding legitimate interest in the continuous provision and security of our website pursuant to Article 6(1)(f) GDPR. The log file is deleted after fourteen days unless it is required in order to prove or investigate specific legal violations that became known within the retention period.
b) Hosting
To provide our online presence we use services of web hosting providers, which process the data named above and all data to be processed in connection with the operation of this website (log file when visiting the website) on our behalf. The legal basis for the data processing is our overriding legitimate interest in providing our website pursuant to Article 6(1)(f) GDPR.
c) Contacting us
If you contact us, we process the following data about you for the purpose of handling and processing your enquiry: name, contact details – where provided by you – and your message. The legal basis for the data processing is our obligation to perform the contract and/or to fulfil our pre-contractual obligations pursuant to Article 6(1)(b) GDPR and/or our overriding legitimate interest in processing your enquiry pursuant to Article 6(1)(f) GDPR.
d) Contract processing
Performance of the contract and data management in the course of providing our services
In the course of providing our services and for initiating and processing the existing contractual relationship between you and us, we process various data. If you have commissioned us to provide a service, we process your data (where provided: name, contact details, address) and all information necessary in the course of performing the assignment, exclusively for the purpose of handling and processing the contractual relationship. This includes in particular our appropriate advice and support, correspondence with you, invoicing, and the fulfilment of our accounting and tax obligations. The data is processed accordingly on the basis of Article 6(1)(b) GDPR and to fulfil our legal obligations pursuant to Article 6(1)(c) GDPR. Where necessary for processing the assignment, your data is passed on to third parties. This includes in particular disclosure to supervisory authorities for the purpose of correspondence and for asserting and defending your rights. In doing so we take all appropriate measures to transfer personal data only to the extent necessary for the underlying purpose.
e) Use of cookies
We use so-called cookies on our website. Cookies are small text files that are placed on your respective end device (PC, smartphone, tablet, etc.) and stored by your browser. Information about the specific cookies we use, their providers and purposes can be found in our consent banner. There you give your consent to the respective services, can withdraw it, or adjust your settings later.
Our consent banner
In order to document your choices regarding certain data processing operations and to fulfil our data protection obligations, we use a consent banner from Borlabs Cookie, which sets a technically necessary cookie in order to store your consents.
Borlabs Cookie does not process any personal data.
The borlabs-cookie cookie stores the consents you gave when entering the website. If you wish to withdraw these consents, simply delete the cookie in your browser. When you enter or reload the website again, you will be asked for your cookie consent once more. The data processing takes place to fulfil our legal obligations pursuant to Article 6(1)(c) GDPR.
Borlabs Cookie is a service of Borlabs GmbH, Hamburger Straße 11, 22083 Hamburg.
Multilingualism of the website
For the multilingualism of our website we use the Polylang programme. Polylang is a product of WP SYNTEX, 28, rue Jean Sebastien Bach, 38090 Villefontaine, France. Polylang cookies are set exclusively to recognise and record the language used or selected by the user. These cookies are stored for one year and are then deleted. The legal basis for this is Article 6(1)(f) GDPR.
f) Analysis / Marketing
aa) Google Analytics
We use Google Analytics in order to analyse the use of the website. The data obtained from this is used to optimise our website.
Google Analytics is provided to us by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google processes the website usage data on our behalf and contractually undertakes to take measures to ensure the security and confidentiality of the processed data.
During your visit to the website, the following data, among others, is transmitted to Google:
• pages accessed
• the achievement of „website goals“ (e.g. contact enquiries)
• your behaviour on the pages (time spent, clicks, etc.)
• your approximate location (country and city)
• your internet address (IP address)
• technical information such as browser, internet provider, end device and screen resolution
• the source of your visit (i.e. which website or which advertising medium brought you to us)
• a randomly generated user ID
No personal data such as name, address or contact details is transmitted to Google Analytics.
This data is transferred to Google servers in the USA. We point out that in the USA the same level of data protection as within the EU cannot be guaranteed.
Google Analytics stores cookies in your web browser for a period of two years from your last visit. These cookies contain a randomly generated user ID by which you can be recognised on future visits to the website.
The recorded data is stored together with the randomly generated user ID, which allows the evaluation of pseudonymous user profiles. This user-related data is automatically deleted after 14 months. Other data remains stored in aggregated form for an indefinite period.
The data processing takes place on the basis of our overriding interest in the optimal marketing of our online offering pursuant to Article 6(1)(f) GDPR.
4. Duration of data storage
We store personal data only for as long as is necessary for the purposes for which it is processed or until a consent you have given has been withdrawn by you. Where statutory retention obligations must be observed, the storage period for certain data may be up to 10 years irrespective of the purposes of processing.
5. Your rights as a data subject
a) Information
On request you will receive information free of charge at any time about all personal data we have stored about you.
b) Rectification, erasure, restriction of processing (blocking), objection
Should you no longer agree to the storage of your personal data, or should it have become inaccurate, we will, upon a corresponding instruction, arrange for the erasure or blocking of your data or make the necessary corrections (insofar as this is possible under applicable law). The same applies if we are to process data only in a restricted manner in future. You have a right to object in particular in cases where your data is required for the performance of a task carried out in the public interest, or where the data processing takes place on the basis of our legitimate interest, as well as to profiling based thereon. You likewise have such a right to object in the case of data processing for the purposes of direct marketing.
c) Right of withdrawal for consents, with effect for the future
You can withdraw consents you have given at any time with effect for the future. Your withdrawal does not affect the lawfulness of the processing up to the point of withdrawal.
d) Data portability
If data is processed on the basis of a contract, pre-contractual negotiations, a consent or by means of automated procedures, you have the right to data portability. On request we will provide you with your data in a common, structured and machine-readable format so that you can transfer the data to another controller if you wish.
e) Restriction of processing
Data in respect of which we are unable to identify the data subject, for example where it has been anonymised for analysis purposes, is not covered by the above rights. Information, erasure, blocking, correction or transfer to another company may be possible in relation to this data if you provide us with additional information that allows us to identify you.
f) Exercising your rights as a data subject and right to lodge a complaint
If you have questions about the processing of your personal data, or in relation to information, rectification, blocking, objection or erasure of data, or if you wish your data to be transferred to another company, please contact mail[at]omg-e-commerce.com. You also have the option of lodging a complaint with a supervisory authority regarding your rights as a data subject.
This English version is a convenience translation. In the event of any discrepancy, the German version of this privacy policy prevails.