Data protection

Privacy policy

Data protection is important to us. On this page, we explain which personal data we process, the purposes for which we do so, the legal bases that apply and your rights.

This privacy policy applies to the otaris.de website.

Responsibility

OTARIS Interactive Services GmbH
Fahrenheitstr. 7
28359 Bremen
Phone +49-421-685 111 00
E-mail: office@otaris.de

Represented by the managing director Mehmet Kus.

Data Protection Officer

MERENTIS DataSec GmbH
Kurfürstenallee 130
28211 Bremen
Phone: +49-421 238040
E-Mail: datenschutz@otaris.de

Server logs

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. This data is not merged with other data sources. The website operator has a legitimate interest in the storage of this data for the technically error-free and optimized provision of its services.

When you visit our website, data is automatically processed, such as

  • Browser type and browser version
  • Operating system
  • Referrer URL
  • Host name of the accessing computer
  • Date and time of access
  • IP address
Purpose Technical operation of the website, security, error analysis
Legal basis Art. 6 para. 1 lit. f GDPR
Storage duration max. 14 days, except in the case of security incidents

It is not merged with other data.

Cookies & content management

We use cookies on our website. These are small files that the browser stores on your computer in order to provide you with the best possible functionality. Cookies can only store numbers and letters and are therefore not programs that can cause damage. The majority of the cookies we use are "session cookies", which are automatically deleted when you have finished your visit to our website. A small number of cookies remain stored on your computer until you delete them. These are used to recognize your browser on your next visit. If you do not agree to the automatic storage of cookies, you can adjust the settings of your browser and prevent the storage of cookies or only allow them for certain types. However, this may restrict the functionality of our website.

We use the following categories:

  • Technically necessary cookies
    → Operation of the website, security, language settings
  • Statistics & analysis (e.g. Google Analytics, Microsoft Clarity)
    → only with consent
  • Marketing and third-party content (YouTube, reCAPTCHA)
    → only with consent
Cookie settings

Real Cookie Banner

We use "Real Cookie Banner" from devowl.io GmbH. The tool stores consents and revocations in a cookie.

Purpose Obtaining consent
Legal basis
  • Art. 6 para. 1 lit. f GDPR (legitimate interest)
  • Art. 7 GDPR
Storage duration until the consent cookie is deleted

Further information on data protection compliance can be found here: https://support.weglot.com/de/article/312-is-weglot-gdpr-compliant
Details: https://devowl.io/de/wissensdatenbank/real-cookie-banner-datenverarbeitung/

Contact form

If you make inquiries using one of the contact forms, your contact details will be stored by us for the purpose of processing the inquiry or for possible follow-up questions. This data will not be passed on without your consent. If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. We pass this data on to the responsible persons within our company or to the responsible persons within our group of companies. Otherwise, no data will be passed on without your express consent. The data entered in the contact form is therefore processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time. All you need to do is send us an informal email. The legality of the data processing operations carried out until the revocation remains unaffected by the revocation. We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfilling your request). Mandatory statutory provisions - in particular retention periods - remain unaffected.

When you contact us via a form or by e-mail, we process:

  • Name
  • E-mail address
  • Telephone number (if provided)
  • Message text
  • Company data, if applicable

The contact form is also protected by Google reCAPTCHA.

Purpose Contact and communication
Legal basis
  • Art. 6 para. 1 lit. a GDPR (consent in the contact form)
  • Art. 6 para. 1 lit. b GDPR (pre-contractual communication)
Storage duration until final processing + statutory retention periods (max. 3-6 years if interested in preserving evidence)

External services

The following external services are used.

Google Analytics (consent required)

Service provider: Google Ireland Limited

Our website uses "Google Analytics", a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google Analytics enables us to evaluate usage behavior on our website in order to improve our offering. Among other things, the IP address, page views, length of stay, device and browser information as well as interactions on the website are recorded and transmitted to Google. We only use Google Analytics with IP anonymization so that your IP address is truncated within the EU.

Data recorded:

  • IP address (anonymized)
  • Usage behavior (e.g. page views, scrolling, clicks)
  • Technical data (browser, device, screen size)
  • Cookies for recognition
Purpose Statistics and analysis to improve the web presence
Legal basis
  • Art. 6 para. 1 lit. a GDPR (consent)
  • EU Standard Contractual Clauses (SCC)
Storage duration 14 months

Google processes data in the USA.

More info: https://policies.google.com/privacy

Microsoft Clarity (consent required)

Service provider: Microsoft Corporation

We use "Microsoft Clarity" on our website, an analysis and tracking service from Microsoft Corporation (One Microsoft Way, Redmond, WA 98052, USA). Clarity enables us to understand how visitors use our website (e.g. mouse movements, clicks, scrolling behavior) in order to improve user-friendliness. Cookies may be set and various technical data collected, including anonymized IP address, browser information, screen size and pages visited.

Data recorded:

  • IP address (anonymized)
  • Usage behavior (e.g. page views, scrolling, clicks)
  • Technical data (browser, device, screen size)
  • Cookies for recognition
Purpose Statistics and analysis to improve the web presence
Legal basis
  • Art. 6 para. 1 lit. a GDPR (consent)
  • EU Standard Contractual Clauses (SCC)
Storage duration up to 12 months

Microsoft processes data in the USA.

More info: https://www.microsoft.com/de-de/privacy/privacystatement

Google reCAPTCHA (consent required)

Service provider: Google Ireland Limited

Google reCAPTCHA prevents spam and abuse. Google analyzes user interactions (e.g. mouse movements, clicks, technical parameters).

Purpose Protection from bots
Legal basis
  • Art. 6 para. 1 lit. a GDPR (consent)
  • EU Standard Contractual Clauses (SCC)

Google processes data in the USA.

More info: https://policies.google.com/privacy

YouTube (consent required)

Service provider: Google Ireland Limited

We have occasionally integrated YouTube videos on our website. These videos are stored on "www.youtube.com" and can be played directly from our website. We have integrated all videos in the so-called "extended data protection mode". This means that no data about you as a user is transferred to YouTube if you do not play the videos. We do not process the data concerned. Only when you play the videos, i.e. click on them, will YouTube cookies be stored on your computer and data transmitted to Google, Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, as the YouTube operator. Data is transferred regardless of whether you have a user account with Google. If you have a user account and are logged in, this data is assigned directly to your account. If you do not wish to be associated with your profile, you must log out before activating the button. YouTube or Google, Inc. creates user profiles from this data and uses them for the purposes of advertising, market research and/or the needs-based design of its website. These evaluations are carried out in particular (even for users who are not logged in) to provide needs-based advertising. You have the right to object to the creation of these user profiles. However, you must address this right of objection directly to Google Inc. as the operator of YouTube.

When a video is started, data is transferred, including

  • IP address
  • Cookie IDs
  • Assignment to Google accounts, if applicable
  • Technical browser data
Purpose Video playback
Legal basis
  • Art. 6 para. 1 lit. a GDPR (consent)
  • EU Standard Contractual Clauses (SCC)

Google processes data in the USA.

More info: https://policies.google.com/privacy

Weglot

Service provider: Weglot SAS, Paris

Weglot is used to provide the multilingual website. The tool sets technically necessary cookies to save the selected language and deliver it correctly. Only technically necessary data is transmitted.

Purpose Language switching and provision of multilingual content
Legal basis Art. 6 para. 1 lit. f GDPR (legitimate interest)
Storage duration up to 12 months

More info: https://support.weglot.com/de/article/312-is-weglot-gdpr-compliant

Google Fonts

Service provider: Google Ireland Limited

On our website, we use fonts from Google Fonts, which we host exclusively locally on our server. As a result, no connection to Google servers is established when our pages are accessed and no personal data is transferred to Google. The use of the fonts is in our legitimate interest in a uniform and appealing presentation of our website (Art. 6 para. 1 lit. f GDPR).

Purpose Display of fonts
Legal basis Art. 6 para. 1 lit. f GDPR (legitimate interest)

Order processing

For services such as:

  • Hosting
  • Maintenance service provider, if applicable

there are contracts for order processing (Art. 28 GDPR).

Storage duration

Unless otherwise stated in this declaration:

  • Data is deleted as soon as it is no longer required for the purpose for which it was collected.
  • Statutory retention periods have priority.

Your rights

You have the following rights:

  • Information in accordance with Art. 15 GDPR
  • Rectification in accordance with Art. 16 GDPR
  • Deletion according to Art. 17 GDPR
  • Restriction of processing in accordance with Art. 18 GDPR
  • Data portability in accordance with Art. 20 GDPR
  • Objection pursuant to Art. 21 GDPR
  • Withdrawal of consent pursuant to Art. 7 para. 3 GDPR
  • Right to lodge a complaint with any EU data protection authority - in particular:
    State Commissioner for Data Protection and Freedom of Information of the Free Hanseatic City of Bremen
    Georgstraße 122-124
    27570 Bremerhaven
    Website: https://www.datenschutz.bremen.de/

Changes to this privacy policy

We reserve the right to adapt the privacy policy if technical or legal developments make this necessary.

German law applies to offers on this website and the place of jurisdiction is the registered office of OTARIS Interactive Services GmbH.