Data protection

Privacy policy for using the website www.oas.de

We are pleased about your visit to our website. In the following we would like to inform you about the handling of your data in accordance with Art. 13 of the General Data Protection Regulation (GDPR). Our General Data Protection Notice according to Art. 13 GDPR regarding our data processing can be found here.

Responsible entity

Responsible for the data collection and processing presented below is the entity named in the imprint.

Usage data for statistical purposes

When you visit our web pages, so-called usage data are temporarily evaluated on our web server for statistical purposes as a protocol to improve the quality of our web pages. This data record covers:

The mentioned protocol data are evaluated in an anonymous manner only.

Storage of the IP address for security purposes

In addition, we store the complete IP address transmitted by your web browser strictly for the purpose of detecting, limiting, and eliminating attacks on our websites for a period of seven days. After this period of time we delete or anonymise the IP address. The legal basis is Art. 6 Para. 1 Sentence 1 point (f) GDPR.

Data security

We take technical and organisational measures to protect your data as comprehensively as possible from unwanted access. We use an encryption procedure on our websites. Your data are transmitted from your computer to our server and vice versa via the Internet using TLS encryption. You can usually recognise this by the fact that the lock symbol in the status bar of your browser is closed and the address line begins with https://.

Necessary cookies

We use cookies on our website, which are necessary to use our web pages.

Cookies are small text files which can be stored and read out on your end device. A distinction is made between session cookies, which are deleted as soon as you close your browser, and permanent cookies, which are stored beyond the individual session.

We do not use such necessary cookies for analysis, tracking, or advertising purposes.

Some of these cookies only contain information on particular settings and cannot be related to a person. They may also be necessary to enable user guidance, security, and implementation of the web page.

We use these cookies on the basis of Art. 6 Para. 1 Sentence 1 point (f) GDPR.

You can set your browser to inform you about the placement of cookies. This makes the use of cookies transparent for you. You can also delete cookies at any time using the appropriate browser settings and prevent the setting of new cookies. Please note that our web pages may then not be able to be displayed and some functions may no longer be technically available.

Name Issuer Storage period Purpose and data protection levelType
cookie_optinTypo3Current SessionStores the user's consent status for cookies on the current domain. The transmission takes place on the basis of Art. 6 (1) sentence 1 lit f GDPR.HTTP Cookie



Google Analytics

We use the web analysis tool "Google Analytics" to design our web pages according to your needs. Google Analytics creates usage profiles based on pseudonyms. For this purpose, permanent cookies are stored on your end device and read out by us. In this way we are able to recognise returning visitors and count them as such.

In the context of Google Analytics, we are supported by Google Ireland Limited and Google LLC. (USA) as processors according to Art. 28 GDPR. The data processing may therefore also take place outside the EU or the EEA. With regard to Google LLC, an adequate level of data protection cannot be assumed due to processing in the USA. There is a risk that authorities may access the data for security and monitoring purposes without you being informed or having legal recourse. Please keep this in mind if you decide to give your consent to our use of Google Analytics.

The data processing takes place on the basis of your consent in accordance with Art. 6 Para. 1 Sentence 1 point (a) GDPR, provided that you have given your consent via our banner.

Name Issuer Storage period Purpose and data protection levelType
_gaGoogle LLC (USA)2 yearsThis is a protocol cookie that distinguishes anonymous users. The transmission takes place on the basis of Art. 6 (1) sentence 1 lit f GDPR.HTTP Cookie
_gidGoogle LLC (USA)24 hoursThis is a protocol cookie that distinguishes anonymous users. The transmission takes place on the basis of Art. 6 (1) sentence 1 lit f GDPR.HTTP Cookie
_ga_MLPGK2JDEFGoogle LLC (USA)2 yearsThis is a protocol cookie that distinguishes anonymous users. The transmission takes place on the basis of Art. 6 (1) sentence 1 lit f GDPR.HTTP Cookie



You may revoke your consent at any time. Please follow this link and make the appropriate settings via our banner. (https://tools.google.com/dlpage/gaoptout?hl=en)

Within the scope of Google Analytics, Google supports us as processor according to Art. 28 GDPR. The data processing may also take place outside the EU or EEA. With regard to Google, an adequate level of data protection can be assumed pursuant to Art. 45 Para. 1 GDPR by participating in the Privacy Shield Agreement and pursuant to Art. 46 Para. 2 point (c) GDPR by using EU standard contractual clauses.

Click here to object to the processing of your data by Google Analytics.

Google Tag Manager

For reasons of transparency we point out that we use the Google Tag Manager. This manager does not collect personal data. The Tag Manager makes it much easier for us to integrate and manage our tags. Tags are small code elements that are used, among other things, to measure traffic and visitor behaviour, capture the impact of online advertising and social channels, set up remarketing and targeting, and test and optimise websites. For more information about Google Tag Manager, see https://www.google.com/intl/de/tagmanager/use-policy.html

Contact form

We provide a contact form, which you may use to contact us. To use our contact form, we first need the data marked as mandatory fields.

We use these data on the basis of Art. 6 Para. 1 Sentence 1 point (f) GDPR to respond to your inquiry.

Furthermore, you can decide for yourself whether you wish to provide us with further data. These data are provided voluntarily and they are not absolutely necessary to establish a contact. We process your data provided to us on a voluntary basis, on the basis of your consent pursuant to Art. 6 Para. 1 Sentence 1 point (a) GDPR.

Your data will only be processed to answer your request. We delete your data when they are no longer required and if there are no legal obligations to retain them.

Insofar as your data transmitted via the contact form are processed on the basis of Art. 6 Para. 1 Sentence 1 point (f) GDPR, you can object to the processing at any time. You may also revoke your consent to the processing of voluntary information at any time. For this purpose please contact the e-mail address mentioned in the imprint.

Newsletter registration and dispatch

You can order a newsletter on our website. Please note that we require certain data (at least your e-mail address) for the newsletter registration.

The newsletter will only be sent if you have given us your express consent. After you have placed an order on our websites, you will receive a confirmation e-mail to the e-mail address you have provided (so-called double opt-in). You can revoke your consent at any time. You can easily revoke your consent, for example, by clicking on the unsubscribe link in every newsletter.

Within the scope of the newsletter registration, we store further data in addition to the data already mentioned, insofar as this is necessary for us to be able to prove that you have ordered our newsletter. This may include the storage of the full IP address at the time of the order or the confirmation of the newsletter, as well as a copy of the confirmation email sent by us. The corresponding data processing is carried out on the basis of Art. 6 para. 1 p. 1 lit. f GDPR and is done in the interest of being able to account for the lawfulness of the newsletter dispatch.

ProviderPurpose Adequate level of data protection
Sendinblue GmbHDispatch of the newsletter Processing only within EU/EEA

Embedded videos

On our web pages we embed videos which are not stored on our servers. In order to ensure that accessing our web pages with embedded videos does not automatically result in third-party content being loaded, in a first step we only show locally stored thumbnails of the videos. Through this, the third-party provider does not receive any data.

Only after a click on the button 'external content' in our cookie banner, the content of the third-party provider is loaded. Through this, the third-party provider receives the information that you have accessed our website and gets the usage data technically required in this context. We have no influence on further data processing by the third-party provider. By clicking on the 'external content' button in the cookie banner, you give us your consent to load content from the third-party provider.

Embedding takes place on the basis of your consent in accordance with Art. 6 Para. 1 Sentence 1 point (a) GDPR, provided that you have given your consent by clicking on the thumbnail.

Provider Maximum storage time Adequate level of data protectionWithdrawal of consent
YouTube / Google (USA)-No adequate level of data protection. The transfer takes place on the basis of Art. 49 (1) lit. a GDPR.Once you have clicked on a preview image, the third-party content is immediately loaded. If you do not want such reloading on other pages, please stop clicking on the thumbnails or deselect them in your cookie preferences.

Map services

On our website we embed map services, which are not stored on our servers. Calling up our web pages with embedded map services results in content by the third-party provider who provides the map services being reloaded. Through this, the third party provider receives the information that you have called up our website as well as the usage data technically required in this context.

We have no influence on further data processing by the third-party provider.

The embedding is done on the basis of Art. 6 Para. 1 Sentence 1 point (f) GDPR and in the interest of making our website as attractive and informative as possible.

ProviderAdequate level of data protectionPossibility of objection
Google (USA)Privacy Shield (Art. 45 Para. 1 GDPR)If you wish to object to the processing, please do not use our website anymore.

Captcha

To protect our web forms from automated requests, we use a so-called Captcha by a third-party provider. As part of the Captcha function, all user input and mouse movements that you make on our website are automatically recorded (regardless of whether you access pages that contain web forms or not). The data collected in this way are used to assess whether the input is human or from an automated routine.

Since the function is provided by a third-party provider, displaying the Captcha causes third-party content to be loaded. Through this, the third-party provider receives the information that you have accessed our website and gets the usage data technically required in this context. In this respect, the third-party provider also receives your IP address, which is technically required to retrieve the content. We have no influence at all on further data processing by the third-party provider.

Data processing takes place on the basis of your consent in accordance with Art. 6 Para. 1 Sentence 1 point (a) GDPR, provided that you have given your consent via our banner.

Provider Maximum storage time Adequate level of data protectionWithdrawal of consent
Google (USA)7 daysPrivacy Shield (Art. 45 Para. 1 GDPR)If you wish to revoke your consent, please click here and make the appropriate setting in our banner. However, you will then no longer be able to use our web forms.

Events

.

You can register for events such as webinars and seminars on our website using our registration form. For your registration, we need the contact details of a contact person from your company with the following information: Company, first name, last name and e-mail address. It is not obligatory to provide the postcode and town as well as a telephone number, but this will make it easier for us to process your registration, e.g. if we need to contact you in case of queries. We also need the first name, surname and e-mail address of the participants from your company. Before you provide us with the participants' data, please ask the persons concerned whether you are allowed to provide us with the data for the purpose of registration.

We use the data on the basis of Art. 6 para. 1 lit. b GDPR for the fulfilment of the contract, in order to be able to make your registration and to be able to make the events you have booked available to you.

Application

You get the opportunity to apply for the positions advertised by us via the e-mail address provided.

To be able to consider your application, at least the following data are required:

We process your data exclusively for the purpose of selecting applicants in accordance with § 26 Para. 1 BDSG (German Federal Data Protection Act). Data processing for other purposes does not take place.

In addition, you may decide for yourself whether you would like to provide us with additional data, such as your telephone number, your leisure interests, a picture, so that we may better evaluate your application or to simplify communication. These data are provided voluntarily and they are not absolutely necessary for the application. If you include voluntary information in your application, you declare your consent that we process this data exclusively for the purpose of selecting applicants. You may revoke your consent at any time with effect for the future. Please send your revocation to the office named in the imprint.

Your data will be treated strictly confidential. If your application is unsuccessful, your documents will be deleted at the latest three months after sending the notice of rejection. The legal basis for this processing is Art. 6 Para. 1 Sentence 1 point (f) GDPR in the legitimate interest to ward off possible legal claims.

In the event that your application should also be considered for other or future job advertisements, this will only be done on the basis of your prior consent. We then process your data on the basis of Art. 6 Para. 1 Sentence 1 point (a) GDPR and will delete your application after two years. You may revoke your consent at any time with effect for the future. Please send your revocation to the office named in the imprint.

Duration of storage

Unless we have already informed you in detail about the storage period, we delete personal data as soon as they are no longer required for the aforementioned processing purposes and if no legal obligations to preserve the data prevent deletion.

Other processors

As part of an order processing in accordance with Art. 28 GDPR, we pass on your data to service providers who support us in the operation of our web pages and related processes. These are, for example, hosting service providers. Our service providers are strictly bound by instructions and liable under a corresponding contract.

In the following, we name the processors with whom we work, if we have not already done so in the preceding text of the privacy policy. If data is transferred outside the EU or EEA in this context, we provide information on the appropriate level of data protection.

Provider Purpose Adequate level of data protection
construktiv GmbH (Deutschland)Website developmentProcessing only within EU/EEA
Ewerk GmbH (Deutschland)Technical supportProcessing only within EU/EEA

Use of SalesViewer® technology:

This website uses SalesViewer® technology from SalesViewer® GmbH on the basis of the website operator’s legitimate interests (Section 6 paragraph 1 lit.f GDPR) in order to collect and save data on marketing, market research and optimisation purposes.

In order to do this, a javascript based code, which serves to capture company-related data and according website usage. The data captured using this technology are encrypted in a non-retrievable one-way function (so-called hashing). The data is immediately pseudonymised and is not used to identify website visitors personally.

The data stored by Salesviewer® will be deleted as soon as they are no longer required for their intended purpose and there are no legal obligations to retain them.

The data recording and storage can be repealed at any time with immediate effect for the future, by clicking on https://www.salesviewer.com/opt-out in order to prevent SalesViewer® from recording your data. In this case, an opt-out cookie for this website is saved on your device. If you delete the cookies in the browser, you will need to click on this link again.

Your rights as a data subject

When processing your personal data, the GDPR grants you as a website user certain rights:

Right to obtain confirmation (Art. 15 GDPR):

You have the right to obtain confirmation as to whether personal data concerning you are being processed; if this is the case, you have the right to be informed about the corresponding personal data and to receive the information specified in Art. 15 GDPR.

Right to rectification (Art. 16 GDPR):

You have the right to request without delay the rectification of inaccurate personal data concerning you and, if necessary, the completion of incomplete data.

Right to erasure (Art. 17 GDPR):

You have the right to demand that personal data concerning you be deleted immediately if one of the reasons listed in Art. 17 GDPR applies.

Right to restriction of processing (Art. 18 GDPR):

You have the right to request the restriction of the processing if one of the conditions listed in Art. 18 GDPR is met, e.g. if you have lodged an objection to the processing, for the duration of the examination by the controller.

Right to data portability (Art. 20 GDPR):

In certain cases, which are listed in detail in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, commonly used, and machine-readable format or to request the transmission of such data to a third party.

Right to object (Art. 21 GDPR):

If data are collected on the basis of Art. 6 Para. 1 Sentence 1 point (f) GDPR (data processing to protect vital interests) or on the basis of Art. 6 Para. 1 Sentence 1 point (e) GDPR (data processing to protect the public interest or in the exercise of official authority), you have the right to object to the processing at any time for reasons arising from your particular situation. We will then no longer process the personal data unless there are demonstrably compelling reasons for processing which are worthy of protection and outweigh your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.

Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

Under Art. 77 GDPR, you have the right to appeal to a supervisory authority if you believe that the processing of data concerning you is in breach of data protection regulations. The right of appeal may in particular be lodged with a supervisory authority in the Member State of your habitual residence, place of employment, or place of the suspected infringement.

Privacy Policy for Our Social Media Pages

When you visit our social media pages, data relating to you is processed. We would therefore like to inform you below, in accordance with Article 13 of the General Data Protection Regulation (GDPR), about how we handle your data and the rights you have as a result.

Responsibility

We, OAS AG, operate the following social media pages:

LinkedInhttps://www.linkedin.com/company/oas-ag/
YouTubehttps://www.youtube.com/@OASAG
XINGhttps://www.xing.com/pages/oasag



You can find our contact details in the Legal Notice.

Data Processing by Us

Public Relations

The data you provide on our social media pages – such as usernames, comments, videos, images, likes, public messages etc. – is published by the social media platform and is never processed by us for other purposes. We reserve the right to delete content if necessary. We may share your content on our page if this is a function provided by the social media platform, and we may communicate with you via the platform.

If you send us an enquiry on the social media platform, we may refer you to other secure communication channels depending on the content, in order to guarantee confidentiality. For example, you can always send your enquiries to the address or e-mail address provided in the Legal Notice. Choosing the appropriate communication channel is your own responsibility.

The legal basis for the processing of your data as described above is Article 6(1)(f) GDPR. This data processing is carried out in the legitimate interest of conducting public relations for our company and being able to communicate with you.

Joint Responsibility for Data Processing

For some processing activities, we are jointly responsible with the respective social media platform operator.

Accordingly, we have concluded the necessary agreement pursuant to Article 26 GDPR, provided the platform operator offers this option.

LinkedInhttps://www.linkedin.com/static?key=privacy_policy
https://legal.linkedin.com/pages-joint-controller-addendum

The main elements of the joint responsibility are outlined in the following section.

Statistics (Insights)

The social media platforms we use regularly compile statistics (Insights) based on usage data, which contain information about your interaction with our social media page. We cannot influence or prevent the creation and provision of these statistics.

We process this information (statistics) in accordance with Article 6(1)(f) GDPR based on our legitimate interest in evaluating how our social media pages are used and improving our content in a targeted manner.

Targeted Advertising

We also use the aforementioned social media platforms to deliver targeted advertising.

For this purpose, we use audience definitions provided by the social media platform operator. We only use anonymous audience definitions – i.e. we define criteria based on general demographic information, behaviour, interests and connections. The social media platform operator then uses this information to display adverts to its users. The legal basis for this is the consent obtained by the platform operator from its users.

If you wish to withdraw this consent, please use the withdrawal options provided by the social media platform, as the platform operator is responsible for this processing.

We and/or the social media platform operator may also use publicly available data to define target groups. The legal basis for this processing is then Article 6(1)(f) GDPR. Our legitimate interest lies in defining the most appropriate target group. We never use sensitive categories of personal data, as defined in Articles 9 and 10 GDPR (e.g. political opinions, sexual orientation), for target group definition.

Data Processing by the Social Media Platform Operator

The social media platform operator uses web tracking methods, which may take place regardless of whether or not you are logged in or registered with the platform.

Please note that we cannot rule out the possibility that the platform operator uses and evaluates your profile and behavioural data for its own purposes. We have no influence over how your data is processed by the platform operator. Please bear this in mind when using the social media platform.

Further information on how the platform operator processes your data, privacy settings and additional objection options can be found in the operator’s privacy policy.

Retention Period

We delete your personal data when it is no longer necessary for the purposes mentioned above and no legal retention obligations prevent its deletion.

Your Rights as a User

As a user, you have the right to assert the following rights both against us and the platform operator, provided the relevant conditions are met:

Right of Access (Art. 15 GDPR)
You have the right to request confirmation as to whether personal data concerning you is being processed; if so, you have the right to access that data and the information detailed in Article 15 GDPR.

Right to Rectification and Erasure (Art. 16 and 17 GDPR)
You have the right to request the immediate rectification of inaccurate personal data concerning you, and, if applicable, to have incomplete personal data completed. You also have the right to request the immediate deletion of personal data concerning you, where one of the grounds outlined in Article 17 GDPR applies, e.g. if the data is no longer required for the purposes pursued.

Right to Restriction of Processing (Art. 18 GDPR)
You have the right to request the restriction of processing if one of the conditions outlined in Article 18 GDPR is met, for example if you have objected to the processing, pending verification.

Right to Data Portability (Art. 20 GDPR)
In certain circumstances, as outlined in Article 20 GDPR, you have the right to receive personal data concerning you in a structured, commonly used and machine-readable format, or to request the transfer of that data to a third party.

Right to Object (Art. 21 GDPR)
If data is processed on the basis of our legitimate interests under Article 6(1)(f) GDPR, you have the right to object to the processing at any time on grounds relating to your particular situation. We will then stop processing your personal data, unless compelling legitimate grounds for the processing can be demonstrated which override your interests, rights and freedoms, or the processing is for the establishment, exercise or defence of legal claims. If the data is processed for direct marketing purposes on the basis of our legitimate interest, you have the right to object at any time without giving reasons. Once exercised, this objection will result in the cessation of processing for direct marketing purposes.

Right to Withdraw Consent (Art. 7 GDPR)
If the processing of your data is based on your consent, you have the right under Article 7(3) GDPR to withdraw your consent to the use of your personal data at any time. Please note that the withdrawal only takes effect for the future. Processing carried out before the withdrawal is not affected.

Right to Lodge a Complaint with a Supervisory Authority
In accordance with Article 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of personal data concerning you infringes data protection regulations. You can exercise this right in particular with a supervisory authority in the Member State of your habitual residence, place of work or the place of the alleged infringement.

Contact Details of Our Data Protection Officer

Our external data protection officer will be happy to answer any questions regarding data protection at the following contact details:

datenschutz nord GmbH, Konsul-Smidt-Straße 88, 28217 Bremen
Web: https://www.dsn-group.de
Email: office@datenschutz-nord.de

If you contact our data protection officer, please also specify the responsible body named in the Legal Notice.

Your contact to OAS AG

Are you interested in more information about OAS AG? Do you want to ask for a quotation? Do you have questions about one of our business segments? Or do you need support on your hardware, software, or infrastructure? Please do not hesitate to contact us. We will be pleased to help you!

Contact