Data Protection Statement

Thank you for your interest in our Website www.ondesign.de (hereinafter “Website”).

Introduction

Olav Jünke
Cremon 11
20457 Hamburg

Telephone: +49 (0) 172 400 27 36
E-Mail: info@ondesign.de

(hereinafter “we” and “us”) as the controller of the Website is responsible for the personal data of users of this Website (hereinafter “you”) for the purposes of the General Data Protection Regulation (hereinafter “GDPR”).

The protection of your privacy is a matter of great importance to us. We collect, process and use your personal data in compliance with the contents of this Data Protection Statement and applicable data protection regulations.

“Personal data” per the GDPR is all information related to an identified or identifiable natural person (hereinafter “data subject”). A natural person is considered identifiable when that person can be directly or indirectly identified, specifically, when that person can be associated with an identifier like a name, identifying number, location data, online identification or with one or more special characteristics expressing the physical, physiological, genetic, psychological, economic, cultural or social identity of said natural person. Put differently, personal data about you is information related to you or that says something personal about you and can be associated with you, either alone or in combination with other information.

In this Data Protection Statement we provide detailed information on the personal data about that we gather, process and use when you visit our Website. We ask that you therefore read this Statement with care.

  1. Collection and purpose of use of personal data

We process your personal data only to the extent necessary to provide a functional website. Beyond that we process only data that you have provided to us as part of making contact.

1.1 Accessing the Website

Every time you access our Website, your browser automatically sends certain information to the server of our Website, which stores it in a logfile. This information concerns:

  • The type and version of browser you use;
  • The operating system of your device (PC, notebook, smartphone etc.);
  • The website from which you came to our Website;
  • The host name (hereinafter “IP address”) of your device;
  • The time when the access occurred;
  • The volume of data transferred and the access status (data transferred, data not found, etc.)

The legal basis for the collection and processing of information stored in logfiles is Art. 6 para. 1 lit. f GDPR.

We use this information to ensure the functionality of the Website, especially to identify and eliminate Website faults, determine the capacity utilization of the Website and make adjustments and improvements. This is the purpose for our justified interest in processing the data. This processing is explicitly not for the purpose of gaining information on you as a Website visitor.

The information stored in a logfile is deleted when it is no longer needed for the purpose it was collected for. We delete your IP address when you leave our Website. Storage of your data in logfiles going beyond this is possible. In such cases your IP address will be altered so that it is no longer possible to identify the client that called the Website.

Collection of data for the purpose of providing the Website and storage of the data in logfiles is obligatory for the operation of our Website. Consequently, there is no option of contesting it.

In addition, we use cookies on our Website. For a detailed explanation see section 2. below.

1.2 Contact form and e-mail contact

Our Website has a contact form that can be used to contact us. If you do so, the data you enter in the entry fields is transmitted to and stored by us. In order for us to answer you, we need at least a valid e-mail address. You can voluntarily give all other information.

When you send the information you will be reminded of this Data Protection Statement. By sending the contact form, you consent to our processing of the data in the form.

Alternatively, you can contact us at the e-mail address provided. In this case we store your personal data sent with the e-mail.

No data will be provided to third parties in this context. The data will be used only for processing the conversation.

The legal basis for processing the data with your consent is Art. 6 para. 1 lit. a GDPR.

The legal basis for processing the data sent in connection with the sending of an e-mail is Art. 6 para. 1 lit. f GDPR. If the e-mail contact is made with the intention of making a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR.

We use personal data from the input mask only to process the contact request. If the contact is made by e-mail, there is again a justified interest in processing the data.

Other personal data processed during the sending process serves the purpose of preventing misuse of the contact form and ensuring the safety of our IT systems.

The data is erased when it is no longer needed for the purpose it was collected for. For personal data from the entry mask of the contact form, and for personal data sent by e-mail, this the case when the conversation with you is ended. The conversation is ended when circumstances indicate that the respective issues have been dealt with.

Personal data additionally collected during transmission is erased no later than seven days thereafter.

You have the option at any time of revoking your consent to the processing of personal data. If you contact us by e-mail you can at any time withdraw your consent to the storing of your personal data. In this case, the conversation cannot be completed.

If this is done all personal data stored in the course of making contact will be erased.

  1. The use of cookies

We use cookies for our Website. Cookies are very small text files used by websites that your browser stores on your device.

We use only “session cookies” (also known as temporary cookies), which are stored only for the duration of your use of one of our internet pages. The purpose of these cookies is to make the use of our Website more convenient. For example, session cookies can identify whether you have already visited individual pages of our Website. These session cookies are automatically erased when you leave our Website.

You can set your browser to not accept cookies at all, or only with your explicit permission. You can easily find out how to do this with your browser’s help function. However, if your browser does not accept cookies, the functionality of our Website may be available only to a limited extent or not at all.

Data processing by cookies for the above purposes to maintain our legitimate interests is justified per Art. 6 para. 1 lit. f GDPR.

  1. Transfer of personal data to third parties

Personal data is transferred to third parties when

  • The data subject expressly agrees to this per Art. 6 para. 1 lit. a GDPR;
  • The transfer per Art. 6 para. 1 lit. f GDPR is required for assertion, exercise or defense of legal claims and there is no reason to assume that the data subject has an overriding interest in being protected from transfer of his or her data;
  • There is a legal, official and/or judicial obligation to transfer per Art. 6 para. 1 lit. c GDPR, and/or
  • Per Art. 6 para. 1 lit. b GDPR it is necessary to meet the contractual obligations towards the data subject.

In other cases, personal data will not transferred to third parties.

  1. Data protection and third-party websites

Our Website can contain hyperlinks to and from third-party websites. When you follow a hyperlink to one of these websites, please note that we cannot accept any responsibility or make any guarantee concerning third-party content or data protection. Please consult their data protection statements before sending any personal data to such websites.

  1. Your rights as data subject and contact

Where your personal data is processed in connection with your visit to our Website, as a “data subject” per GDPR you have the following rights:

5.1 Right to information

You have the right to obtain confirmation from us as to whether personal data about you is being processed by us. If such is the case, you can obtain information on the following:

  • The purposes your personal data is processed for;
  • The categories of personal data processed;
  • The recipients or categories of recipients to whom personal data pertaining to you has been or is being made available;
  • The planned duration of storage of the personal data pertaining to you or, if it is not possible to give specifics on this, the criteria for the duration of storage;
  • The existence of a right to rectification or erasure of personal data pertaining to you, a right to restriction of its use by us, or a right to object to such use;
  • The existence of a right to complain to a supervisory authority;
  • All available information on the origin of the data, if the personal data was not collected from the data subject;
  • The existence of automated individual decision-making including profiling per Art. 22 para. 1 and 4 GDPR and - in these cases at least - meaningful information on the logic involved, and on the consequences and intended effect for the data subject of such processing.

You have the right to demand information as to whether the personal data pertaining to you is transferred to a third country or an international organization. In this context you can demand to be informed of such transfer per the appropriate guarantees per Art. 46 GDPR.

5.2 Right to rectification

You have the right to rectification and/or completion by us if the personal data pertaining to you is incorrect or incomplete. We are required to make such changes without delay.

5.3 Right to restriction of processing

Under the following conditions, you can demand restriction of the use we make of personal data pertaining to you:

  • If you contest the correctness of the personal data pertaining to you for a duration which enables us to check the correctness of such personal data;
  • If the processing is illegal and you reject erasure of the personal data and instead request restriction of the processing of the personal data;
  • If we no longer need the personal data for our purposes, but you need it to assert, exercise or defend legal claims, or
  • If you have contested the use per Art. 21 para. 1 GDPR and it has not yet been determined whether our justifiable reasons outweigh your reasons.

If processing of personal data pertaining to you has been subjected to restrictions, this data - except for its storage - may be used only with your consent or to assert, exercise or defend legal claims or protect the rights of other natural or legal persons, or for reasons of an important public interest of the Union or a Member State.
If the processing of the data has been restricted per the above provisions, you will be informed by us before the restriction is canceled.

5.4 Right to erasure

You can demand that personal data pertaining to you be immediately erased. We are then required to do so without delay, if at least one of the following applies:

  • The personal data pertaining to you is no longer needed for the purposes it was collected or processed for;
  • You revoke your consent to processing based on Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a GDPR and there is no longer a legal basis for the processing;
    Per Art. 21 para. 1 GDPR you object to the processing and there is no higher priority justified reason for said processing, or you contest the use per Art. 21 para. 2 GDPR;
  • The personal data pertaining to you was processed in an illegal manner;
  • Erasure of the personal data pertaining to you is necessary to meet a legal obligation under Union law or law of the Member States having jurisdiction over the responsible party;
  • The personal data pertaining to you was collected in respect of services by the information company per Art. 8 para. 1 GDPR.

A right to erasure does not apply where the processing is required

  • To exercise the right to free speech and information;
  • To comply with a legal obligation to which the processing is subject under Union law or law of the Member States having jurisdiction over the responsible party, or to perform a task that is in the public interest or which is in the exercise of official authority delegated to the responsible party.
  • For reasons of public interest in the area of public health per Art. 9 para. 2 lit. h and i and Art. 9 para. 3 GDPR;
  • For archiving, scientific or historical research purposes that are in the public interest or for statistical purposes per Art. 89 para. 1 GDPR, insofar as the right described under section a would probably render impossible or substantially hinder the accomplishment of the goals of this processing, or
  • For the assertion, exercise or defense of legal claims.

5.5 Right to information

If you have asserted the right to rectification, erasure or restriction of processing to us, we are obligated to inform all recipients of the personal data pertaining to you of this rectification, erasure or restriction of processing, unless this proves impossible or is associated with unreasonable effort.

You have the right to be informed by us of these recipients.

5.6 Right to data portability

You have the right to receive the personal data pertaining to you that you have provided to us in a structured, common, and machine-readable form. Furthermore, you have the right to transfer this data to another responsible party without hindrance by us, to whom the personal data was provided, insofar as

  • The processing is based on permission per Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a DSGVO or on a contract per Art. 6 para. 1 lit. b GDPR, and
  • Processing is by automated processes.

In exercising this right you further have the right to have us transfer the personal data pertaining to you directly to another responsible party, where this is technically feasible. This must not infringe on the freedoms and rights of other persons.

The right to data portability does not apply to the processing of personal data to perform a task that is in the public interest or which is in the exercise of official authority delegated to the responsible party.

5.7 Right to object

You have the right to object to the processing of personal data pertaining to you per Art. 6 para. 1 lit. e or f GDPR at any time for reasons based on your circumstances; this includes profiling based on these provisions.

We will then no longer process the personal data pertaining to you, unless we can prove compelling reasons worthy of protection for such processing, or the processing serves the assertion, exercise or defense of legal claims.

In connection with the use of services of the information company - irrespective of Directive 2002/58/EG - you can exercise your right to object by means of automatic processes in which technical specifications are used.

5.8 Right to revocation of declaration of consent under data protection law

You have the right to revoke your declaration of consent under data protection law. Revoking your consent does not affect the legality of the processing of data by your consent prior to revocation.

5.9 Automated individual decision making, including profiling

You have the right to not be subjected to a decision based exclusively on automated processing - including profiling - that has legal consequences for you or otherwise substantially disadvantages you. This does not apply when the decision

  • Is necessary for the closing or fulfilment of a contract between you and the responsible party;
  • Is admissible by the laws of the Union or Member States to which the responsible party is subject and these laws contain reasonable provisions for the protection of your rights and your justified interests, or,
  • Is made with your explicit consent.

However, these decisions cannot be based on special categories of personal data per Art. 9 para. 1 DSGVO, unless Art. 9 para. 2 lit. a or g DSGVO applies and appropriate measures are taken to protect your rights, freedoms and justified interests.

With regard to the first and last-named cases, we take appropriate measures to protect your rights, freedoms and justified interests, including at least the right to procure the intervention of a person by us upon presentation of the own standpoint and upon contesting of the decision.

5.9.1 Right to file complaint to a supervisory authority

Regardless of other administrative or legal remedies, you have the right to file a complaint to a supervisory authority, especially in your Member State of residence, workplace or location of the presumed breach, if you are of the opinion that use of the personal data pertaining to you is in breach of the GDPR. 
The supervisory authority where the complaint is filed will report to the complainant on the status and outcome of the complaint including the possibility of remedy at law per Art. 78 GDPR.

5.9.2 Contact

If you wish to assert one of your rights and/or would like more information, contact us at the following postal or e-mail address:

Olav Jünke
Cremon 11
20457 Hamburg, Hamburg

E-Mail: info@ondesign.de

We may ask you to prove your identity before addressing your concern. This is in order to protect your data from manipulation or erasure by third parties.

  1. Analysis tools and advertising

Google Analytics

This website uses functions of Google Analytics. Google Analytics is a web analysis service of Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses cookies. These are text files that are stored on your computer and enable analysis of your use of the website. Information generated by cookies about the use of this website is normally sent to a Google server in the US and stored there.

Storage of Google Analytics cookies is based on Art. 6 Abs. 1 lit. f GDPR. The website operator has a legitimate interest in the analysis of user behaviour, in order to improve his website as well as his advertising.

IP anonymization

We have activated IP anonymization on this website. This means that your IP address will first be abbreviated by Google within a European Union member state or other signatory state of the European economic area agreement before being transferred to the US. Only in exceptional cases will the full IP address go to a Google server in the US before being abbreviated there. On behalf of the operator of this website, Google will use the information to evaluate your use of the site, in order to compile reports on website activity and provide further services to the website operator relating to website use and the internet use of linked services. The IP address of your browser sent by Google Analytics will not be linked to other data by Google.

Browser plugin

You can prevent the storage of cookies on your computer by setting your browser accordingly; however, be aware that if you do this you may not be able to make full use of all functions of this website. In addition, you can prevent the capture and use by Google of cookie-generated data related to your use of the website (including your IP address) by downloading and installing a browser plugin from this link: https://tools.google.com/dlpage/gaoptout?hl=de.

Objection to data capture

You can prevent capture of your data by Google Analytics by clicking on the following link. This will set an opt-out cookie that prevents capture of your data on future visits to this website: Deactivate Google Analytics.

For more information on the use of user data by Google Analytics, see Google’s Data protection declaration: https://support.google.com/analytics/answer/6004245?hl=de.

Order data processing

We have a contract with Google concerning order data processing. We apply to the full extent the strict guidelines of German data protection authorities concerning the use of Google Analytics.

 

  1. Status and updates of this Data Protection Declaration

This Data Protection Statement is in the status of 25 May 2018. We retain the right to update this Data Protection Statement as appropriate in order to improve data protection and/or reflect changed official practice or laws.