Last Updated/Effective Date: July 25, 2023
The controller according to Art. 4 No. 7 GDPR is:
An der Hasenkaule 10
telephone: +49 2233 619 2072
2. INFORMATION ON DATA PROCESSING
We process your personal data only on the basis of the GDPR. Your personal data will be deleted or blocked as soon as the purpose of the storage no longer applies. Storage may also take place if this has been provided for by the European or national legislator in regulations, laws or other provisions to which the controller is subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.
3. PROVISION OF THE WEBSITE AND CREATION OF LOGFILES
Each time you access our website, our system automatically collects personal data and information from the computer system of the accessing computer (e.g. browser type and browser version, operating system used, referrer URL (previously visited website), host name of the accessing computer, date and time of server request, IP address).
The temporary storage of the IP address by the system is necessary to enable delivery of the website to your computer. For this purpose, your IP address must remain stored for the duration of the session. The storage in log files is done to ensure the functionality of the website. In addition, we use the data for the technical optimization of the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
The legal basis for processing your personal data is our legitimate interest pursuant to Art. 6 (1) (f) GDPR. We have an overriding interest in being able to offer a technically functioning service. The log files are stored for security reasons (e.g., to clarify acts of abuse or fraud) for a maximum of seven (7) days. Data whose further retention is required for evidentiary purposes will be retained until the matter has been finally clarified.
Technically necessary cookies
Technically necessary cookies are absolutely necessary to enable the basic functions of the website, like page navigation. The website will not run as it is intended to without these cookies. Therefore, the technically necessary cookies cannot be blocked.
The legal basis for the use of necessary cookies is § 25 (2) 2 Telecommunications-Telemedia Data Protection Act (« TTDSG« ). The legal basis for subsequent processing of your personal data is our legitimate interest pursuant to Art. 6 (1) (f) GDPR. We have an overriding interest in being able to offer a technically functioning service.
We delete your personal data as soon as they are no longer required to achieve the purpose for which they were collected. Technically necessary cookies are only stored for the respective session. When you leave our website and close your browser, the cookies are deleted.
Most web browsers automatically accept cookies, but you can disable this function so that your browser will not accept cookies. Please be aware that disabling this function may impact your use and enjoyment of this website.
Functional and marketing cookies
ORBIS also uses functional and marketing cookies. These cookies that are not technically necessary. We use them to understand your behavior on our website, to improve our offer, and to measure and track our reach.
We delete your personal data as soon as they are no longer required to achieve the purpose for which they were collected. The storage period of personal data depends on the providers used. The legal basis for subsequent processing and the storage period is indicated in the cookie banner and in the following text. Session cookies will be deleted right after you close your browser window. For more information about the cookies set on this website and how to revoke or give your consent, please click on the “Privacy Settings” button.
5. GOOGLE ANALYTICS
This website uses Google Analytics, a web analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (« Google« ), to collect information about your use of the website. This information includes the URLs of the websites that you visit and your IP address. Google provides us with information and reports about website traffic and your visits to the website (for example, the domain from which you access the Internet, the web address of the website from which you linked to the website, and the date and time of your visit to the websites that you view and click through). We will use this data to improve the website’s structure and content. The data used for this purpose will be deleted after twelve (12) months. Google will only process your data as a processor and in accordance with the EU standard contractual clauses. The legal basis for processing of your personal data is Art. 6 (1) (a) GDPR. For more information about this service, the used cookies, or to give or withdraw your consent, please click on the “Privacy Settings” button.
6. GOOGLE TAG MANAGER
Google Tag Manager is a tag management system provided by Google that we use on our websites. Google Tag Manager allows us to add code snippets, pixels, or similar to our web pages. Google will not combine your IP address with personal information from other sources. Google will only process your IP address as a processor and in accordance with the EU standard contractual clauses. The data used for this purpose will be deleted after fourteen (14) days. The legal basis for processing of your personal data is Art. 6 (1) (a) GDPR. For more information about this service, the used cookies or to give or withdraw your consent, please click on the “Privacy Settings” button.
7. MICROSOFT CLARITY
Microsoft Clarity is a tool which allows us to check the usability of our website and is provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18 D18 P521, Ireland (« Microsoft« ). For this purpose, Microsoft Clarity records selected user sessions that we can evaluate subsequently. The tool provides measured values that indicate any usability problems. Microsoft Clarity collects user data such as access times, IP addresses, and cursor and scroll movements. The data used for this purpose will be deleted after thirteen (13) months. This primary location where processing of the data that Microsoft collects is in the United States of America. Your data will therefore be transferred to the United States of America. Microsoft will only process your personal data as a processor and in accordance with the EU standard contractual clauses. The legal basis for processing of your personal data is Art. 6 (1) (a) GDPR. For more information about this service, the used cookies or to give or withdraw your consent, please click on the “Privacy Settings” button.
8. LINKEDIN INSIGHT TAG
The LinkedIn Insight Tag reports to LinkedIn what actions you have taken on our site as well as data by which you may be identified. LinkedIn can see that you have visited our website, what you have clicked on and whether you clicked on a link on LinkedIn that connects you to our website. This allows LinkedIn to show you individual interest-based content. LinkedIn may link this data to your user account and use it for its own purposes. For information about how LinkedIn processes your data, please check https://www.linkedin.com/legal/privacy-policy.
We do not receive any data about you or other LinkedIn users, but only statistics that show us, aggregated for all users for a certain time period, how they used our offers and ads on other platforms of LinkedIn. This helps us to determine which of our ads were successful and which ones were not.
We and LinkedIn act as joint controller according to Art. 26 GDPR. We have therefore concluded a separate agreement that can be found here https://legal.linkedin.com/pages-joint-controller-addendum . If you wish to exercise your rights to information, deletion, etc. (see section « Your Rights »), LinkedIn is responsible for the fulfillment of your rights as part of our joint controllership.
For more information about this service, the used cookies or to give or withdraw your consent, please click on the “Privacy Settings” button.
9. GOOGLE ADS
On our website we use the marketing and remarketing service Google Ads provided by Google. We use Google Ads to draw attention to our offers with the help of advertisements. If you access our website via an ad by Google, Google Ads will store a cookie in your terminal device if you have consented to this. The legal basis for the processing of your data is Art. 6 (1) (a) GDPR.
For this purpose, we use so-called ad server cookies, through which certain parameters for measuring success, such as display of the ads or clicks by users, can be measured. Through the Google Ads cookies, we can obtain information about the success of our advertising campaigns. These cookies are not intended to identify you personally. However, the following data may be collected: Server logs, including the web request; IP address; browser type; browser language; date and time of the request; and one or more cookies that may uniquely identify your browser. Log data and IP address will be deleted after nine (9) months and cookie information will be deleted after eighteen (18) months.
The cookies set by Google allow Google to recognize your internet browser. Provided that you visit our website and the cookie stored on your computer has not yet expired, we and Google can recognize that you clicked on the advertisement and you were redirected to this website. Through the integration of Google Ads, Google receives the information that you have visited the relevant part of our website or clicked on one of our ads. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that Google processes and stores your IP address.
We also use Google Ads for remarketing purposes, which allows Google to track your usage patterns and show you personalized ads on other websites that match those patterns.
We and Google act as joint controller according to Art. 26 GDPR. We have agreed with Google that we will assume primary responsibility under the GDPR for the processing of the data and will comply with all obligations under the GDPR with respect to the processing of the data.
Further information on data protection at Google can be found at http://www.google.com/policies/privacy. For more information about this service, the used cookies or to give or withdraw your consent, please click on the “Privacy Settings” button.
10. MICROSOFT ADVERTISING
This website uses Microsoft Advertising from Microsoft for marketing and advertising purposes.
The use of Microsoft Advertising allows us to deliver targeted advertisements about our products and services and to measure the effectiveness of our advertising. We may receive information about the number of users who clicked on one of our ads and were directed to a website that has a conversion tracking tag. Microsoft Advertising uses technologies such as cookies and tracking pixels to analyze your use of the site. When you click on an ad served by Microsoft Advertising, a conversion tracking cookie is placed on your computer. This cookie has a limited lifetime and is not used to personally identify you. If you visit certain pages on our website and the cookie has not yet expired, we and Microsoft can recognize that you clicked on the ad and were directed to that page. In addition, we use Microsoft Advertising for remarketing purposes, which allows Microsoft to track your usage patterns and show you personalized ads on other websites or in other applications.
The following information may be collected: IP address, tags assigned by Microsoft, information about your browser and device, referrer URL (the website from which you came to our website). The legal basis for the processing of your data is Art. 6 (1) (a) GDPR.
We use the Salesforce Sales Cloud provided by Salesforce, Inc., Salesforce Tower, 415 Mission Street, 3rd Floor, San Francisco, California 94105 (« Salesforce ») as our Customer Relationship Management System (« CRM System »).
The data you provide through our website’s contact form, via contact by email or telephone may be stored on servers of Salesforce. The data may be used by us to contact you and to determine which of our company’s services are of interest to you. We also use this data to optimize our marketing. The legal basis for the processing of this data is our legitimate interest in accordance with Art. 6 (1) (f) GDPR. If processing is necessary for the performance of a contract or in order to take steps at your request prior to entering into a contract, the additional legal basis for the processing is Art. 6 (1) (b) GDPR.
Salesforce will only process your data as a processor. The transfer of personal data is subject to both the EU standard contractual clauses and so-called Binding Corporate Rules (BCR). Details can be found here www.salesforce.com/de/blog/2020/07/die-binding-corporaterules-
von-salesforce-erfuellen-hoechste-da. Further information on data processing by Salesforce can be found at https://www.salesforce.com/de/company/privacy/.
Through our website you can contact us by email, via contact form or telephone. If you use the contact form, we process your personal data (e.g. name, email address, address, date and time of the inquiry, IP address and other personal data that you provide to us while contacting us). If applicable, the same applies to contact by other means.
We process your data to respond to your inquiry and other matters arising from it (including to send you promotional communications that you request). The data beyond this which is processed during the submission process is used to prevent misuse of the contact form and to ensure the security of our information technology systems. In this context, the data will not be passed on to third parties. The data is used exclusively for the processing of the conversation.
The legal basis for the processing of this data is our legitimate interest in responding to your request in accordance with Art. 6 (1) (f) GDPR. If your contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 (1) (b) GDPR.
We delete your personal data as soon as they are no longer required to achieve the purpose for which they were collected. In the context of contact inquiries, this is usually the case when it is clear from the circumstances that the specific matter has been conclusively processed.
On our website, you have the opportunity to register to regularly receive marketing related promotional communications by e-mail. After registering for our newsletter via our website, we will send you an email asking you to confirm your subscription to the newsletter (« Double-Opt-In-Mail« ). After confirming your subscription through the Double-Opt-In-Mail, you will be added to our newsletter database. This confirmation email is used to verify that you, as the owner of the email address, have authorized the receipt of the newsletter. The registration for the newsletter will be logged. You have the opportunity to cancel the receipt of promotional communications from us at any time. For this purpose, there is an opt-out link at the end of every newsletter. To discontinue your receipt of promotional communications, click on the « unsubscribe » link in the body of the email. In addition, you also have the option of unsubscribing from the newsletter mailing at any time on our website or informing us of this in another way. When you select the unsubscribe option in our newsletters, we automatically interpret this as your withdrawal of consent or your objection to the processing.
We process your personal data for the following purposes:
• Newsletter mailing: sending you promotional communication
• Double opt-in procedure: fulfillment of our legal obligations to provide proof of consent.
The legal basis for the processing of your personal data in the context of the newsletter subscription is your consent pursuant to Art. 6 (1) (a) GDPR, in the context of the double-opt-in procedure is our legal obligation according to Art. 6 (1) (c) GDPR, newsletter mailing to existing customers is our overriding interest Art. 6 (1) (f) GDPR.
We delete your personal data as soon as they are no longer required to achieve the purpose for which they were collected. In the context of the newsletter mailing, this is generally the case when you withdraw your consent or you object to the processing.
We limit access to personally identifiable information about you to our employees and third-party agents who need to have access to your information to provide you with the information or services you request from ORBIS.
This website has security measures in place to help protect against the loss, misuse and alteration of the information under our control. While we cannot guarantee that loss, misuse or alteration to data will not occur, ORBIS uses industry standards, such as Secure Socket Layers (« SSL« ) technology, to help safeguard against such occurrences. In certain areas, the information passed between your browser and our system is encrypted with SSL technology to create a protected connection between you and our website to ensure confidentiality. In the event that a breach into our security systems occurs and there is a possibility that an unauthorized person acquires your personal information, ORBIS will notify you of a breach under applicable law.
15. RECIPIENTS OF PERSONAL DATA
In addition to the recipients of personal data mentioned above, we also use other companies to process personal data on our behalf, for example for hosting, technical support of this website or for analysis and advertising purposes. Such service providers only process the data on our behalf as so-called processors (Art. 28 GDPR).
Furthermore, we transmit personal data to third parties if this is required by law, if this is necessary for the exercise and defense of legal claims or if third parties provide certain services for us (e.g., lawyers, tax consultants).
16. TRANSFER TO THIRD COUNTRIES
17. WITHDRAWAL OF YOUR CONSENT
If you have given your consent to the processing of your personal data by means of a corresponding declaration, you have the right to withdraw this consent at any time for the future. The withdrawal of your consent does not affect the lawfulness of processing based on consent before your withdrawal. You can withdraw your consent by clicking on the “Privacy Settings” button or emailing
18. YOUR RIGHTS
You have the right to obtain from the controller confirmation as to whether or not personal data concerning you is being processed, and, where that is the case, access to the personal data according to Article 15 GDPR, the right to rectification under Article 16 GDPR, the right to erasure under Article 17 GDPR, the right to restriction of processing under Article 18 GDPR, the right to notification under Article 19 GDPR and the right to data portability under Article 20 GDPR.
Insofar as the processing of your personal data is carried out for the protection of legitimate interests pursuant to Art. 6 (1) (f) GDPR, you have the right to object to the processing of this data at any time for reasons arising from your particular situation pursuant to Art. 21 GDPR. We will then no longer process this personal data unless we can demonstrate compelling legitimate grounds for the processing. These must override your interests, rights and freedoms, or the processing must serve the assertion, exercise or defense of legal claims.
In addition, you have the right to lodge a complaint with a data protection supervisory authority pursuant to Art. 77 GDPR if you are of the opinion that the processing of your personal data is not lawful. The right of appeal is without prejudice to any other administrative or judicial remedy.
The responsible supervisory authority for ORBIS is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
PO Box: 20 04 44
To protect your rights, you can contact our data protection officer at the contact details provided above.