Data protection - orochemie GmbH + Co. KG



Data protection declaration


1. 1. General

This data protection declaration informs you of how orochemie GmbH + Co. KG, Max-Planck-Straße 27, D-70806 Kornwestheim (hereinafter “orochemie”) handles your personal data and in particular serves to explain to you the collection and use of your personal data in connection with visiting the websites offered by orochemie (www.orochemie.de, www.hygienesystem.de, www.hygienewissen.de and shop.orochemie.de) as well as our web presences on Facebook, (www.facebook.com/orochemie), Twitter (twitter.com/orochemie) and Youtube (www.youtube.com/user/orochemie), the use of our app (app.orochemie.de) and the use of the services offered there. “Personal data” refers to individual statements on personal or material relations of an identified (or identifiable) natural person. This means all data which can be related to you as a person, such as your name, address, E-mail address or user behaviour (see “6. Details on data processing” for more on this).

2. 2. Company and contact information of the person responsible for the data processing as well as the in-house data protection officer


orochemie GmbH + Co. KG
Max-Planck-Str. 27
D-70806 Kornwestheim

E-mail: info@orochemie.de
Telephone +49 (0)7154 - 1308 – 0
Fax +49 (0)7154 - 1308 - 40 oder – 42

The in-house data protection officer of orochemie GmbH + Co. KG can be reached at datenschutz@duerrdental.com.

3. Conditions for data processing


We only collect and use your personal data if a legal provision allows us to do so, in particular if it is necessary to establish, create the contents of or end a contractual relationship with you in order to enable you to visit our websites, our web presences and use the app, as well as to make use of the services offered there, if you have granted your consent to the processing of your personal data. Also, your data will only be transferred under the conditions specified, or if a court or official order requires us to transfer the data.

4. Data protection and third-party websites


Our websites, web presences and app may contain links to and from third-party websites. If you follow a link to such a website, please keep in mind that we cannot make any guarantee that the data protection provisions will be complied with in such case. Please inform yourself of the data protection provisions in effect before transmitting personal data to such websites.

5. Data security


We take up-to-date technical measures to ensure data security, in particular to protect your personal data from risks during data transmission as well as to prevent third parties from gaining knowledge of it. These measures will be adapted according to the latest state of the art.
When you visit our website or use our app, we use the widespread SSL procedure (Secure Socket Layer) in conjunction with the highest level of encryption which your browser supports. This generally means 256-bit encryption. If your browser does not support 256-bit encryption, we will use 128-bit v3 technology instead. You can tell whether an individual page of our internet site is being transferred in encrypted form by the address bar of the browser changing from “http://” to “https://”, as well as by the closed lock and key symbol in the lower status bar of your browser.

6. Details on data processing


a) Informational visit to the websites and use of the app


If you visit the websites or use the app for purely informational purposes, i.e. if you do not register or log to make use of individual services, or transfer use any other information, we will not collect any personal data except for the data which your browser transfers in order to enable you to visit the website or use the app. This includes:

- IP address,
- Date and time of the query,
- Time zone difference to Greenwich Mean Time (GMT),,
- Content of the request (specific page),,
- Access status/HTTP status code,
- The respective volume of data being transferred,
- Website which the request comes from,
- Browser,
- Operating system and its interface,
- Language and browser software version.

This information will be temporarily saved in a “log file” without any action on your part and will be saved until it is automatically deleted. We will use this data to ensure smooth connection to our websites or to the app, convenient use thereof and to evaluate the security and stability of the system.
Data processing for these purposes is necessary to protect our legitimate interests in accordance with Art. 6 Para. 1 Clause 1 Letter f of the General Data Protection Regulation (GDPR). We will not use the data collected for the purpose of making conclusions about you as a person under any circumstances.

b) Cookies


In addition, cookies are saved on your receiving device when you use the websites and app. Cookies are small text files which are saved on your receiving device by the browser you use and which are used to direct certain information to the party which sets the cookie (in this case us). Cookies cannot run any programs or transfer viruses to your receiving device. They serve to make the internet offer on the whole more efficient and user-friendly. Our websites and app use cookies to the following extent:
Transient cookies (temporary use) are automatically deleted when you close your browser. Session cookies are a prime example of these. They save what is known as a “session ID,” which is used to allocate the various queries from your browser to a common session. This way, your receiving device can be recognised again when you return to the website. The session cookies are deleted when you log out or close your browser. This information will be stored separately from any other data that may have been specified. In particular, the data from the cookies will not be linked to any of your other data.

Most browsers automatically accept cookies. However, you can configure your browser so that no cookies will be saved on your computer, or so that a notice will always appear before a new cookie is created. However, completely deactivating cookies may mean that you will not be able to use all functions of our websites and app.

The use of such cookies for these purposes is necessary to protect our legitimate interests in accordance with Art. 6 Para. 1 Clause 1 Letter f GDPR. We will not use the data collected for the purpose of making conclusions about you as a person under any circumstances.

c) Google Analytics


We also use Google Analytics, a web analysis service from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”). Google Analytics uses cookies which enable the analysis of your visit to the website or the use of the app. The information generated by the cookie about your visit to the website or use of the app is generally stored on a Google server in the USA. Since IP anonymization is activated on the website or the app, your IP address will be abbreviated by Google in member states of the European Union or other states party to the Agreement on the European Economic Area.

Only in exceptional cases will your full IP address be transferred to a Google server in the US and be abbreviated there. On our behalf, Google will use this information to evaluate your visit to the website or use of the app, to compile reports about your website and app activities and to generate further services in connection with the use of the website and app, as well as to render services associated with the internet use for us. The IP address which your browser transfers in Google Analytics will not be associated with any other data of Google.
Sessions and campaigns will end after a certain amount of time has elapsed. By default, session will end after 30 minutes of inactivity and campaigns will end after six months. The time limit for campaigns can be a maximum of two years. More detailed information on conditions of use and data protection can be found at:

https://www.google.com/analytics/terms/de.html

https://policies.google.com/privacy?hl=de


You may prevent the saving of cookies by using the relevant browser software settings. However, please be advised that in this case you might not be able to make full use of all the functions of our website or the app. Furthermore, you can prevent the data generated by the cookie and the data regarding the use of the websites and app (incl. your IP address) from being transferred to Google by installing the browser plug-in available at the following link:

https://tools.google.com/dlpage/gaoptout?hl=de


In addition, opt-out cookies prevent the future recording of your data when visiting these websites or using the app. Click here to set the opt-out cookie.

The tracking measures which Google Analytics carries out are conducted on the basis of Art. 6 Para. 1 Clause 1 Letter f GDPR. By doing so, we on one hand seek to ensure needs-oriented design and continuous optimisation of our websites and app. On the other, this measure serves to statistically record the use of our websites and app and to evaluate it for the purpose of optimising our offer.

d) Google AdWords and Google Conversion Tracking


Our websites and app use Google AdWords. AdWords is an online advertising program from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”). In Google AdWords, we use what is known as “conversion tracking.” When you click on an advertisement placed by Google, a cookie will be set for the conversion tracking. These cookies will cease to be valid after 30 days and do not serve to identify users personally. If the user visits certain pages of this websites or uses the app and the cookie has not yet expired, Google and we can tell that the user has clicked on the advertisement and was forwarded to this page. Each Google AdWords customer receives a different cookie. The cookies cannot by tracked over the websites or app by AdWords customers. The information obtained using conversion cookies serves to create conversion statistics for AdWords customers who have decided for conversion tracking. The customers find out the total number of users who have clicked on their advertisement and have been forwarded to a page with a conversion tracking tag. However, they do not receive any information which can be used to identify users personally.

If you do not wish to take part in the tracking, you may object to this use by simply deactivating the Google conversion tracking cookie with your internet browser under user settings. Then you will not be recorded in the conversion tracking statistics.

Conversion cookies are saved on the basis of Art. 6 Para. 1 Clause 1 Letter f GDPR. We have a legitimate interest in analysing user behaviour in order to optimise our internet offer as well as our advertising.

More information on Google AdWords and Google conversion tracking can be found in Google’s data protection provisions:

https://policies.google.com/privacy?hl=de


e) Google reCAPTCHA


We use Google reCAPTCHA on our websites. It is offered by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”). reCAPTCHA is intended to check whether the data entered on our websites (in a contact form, for example) is entered by a person or by an automated program. To do so, reCAPTCHA analyses the behaviour of the website visitor or app user based on various features. This analysis begins automatically as soon as the website visitor accesses the website or the app user uses the app. To conduct the analysis, reCAPTCHA evaluates various information (such as IP address, length of the visitor’s stay at the website or app, or the mouse movements made by the user). The data recorded during the analysis is transferred to Google. The reCAPTCHA analysis run entirely in the background. Website visitors or app users are not notified that an analysis is being conducted.

The data processing is conducted on the basis of Art. 6 Para. 1 Clause 1 Letter f GDPR. The website operator has a legitimate interest in protecting its web offers from spam and from any malicious automated espionage.

Further information on Google reCAPTCHA and Google’s data protection declaration can be found in the following links:

https://policies.google.com/privacy?hl=de


https://www.google.com/recaptcha/intro/v3beta.html

f) Google Web Fonts


This page uses Web Fonts, which is provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”), in order to present fonts in a uniform manner. When a page is accessed, your browser will load the necessary Web Fonts in your browser cache in order to properly display texts and fonts. For this purpose, the browser you use must connect to Google’s servers. This means that Google will know that our website has been accessed via your IP address.

Google Web Fonts is used in the interest of presenting our online offers in a uniform and appealing manner. This constitutes a legitimate interest as defined by Art. 6 Para. 1 Letter f GDPR. If your browser does not support Web Fonts, a standard script will be used by your end device. Further information on Google Web Fonts can be found under:

https://developers.google.com/fonts/faq

g) Google Maps


This page uses the Google Maps service by way of an API. It is offered by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). In order to use Google Maps functions, your IP address will have to be saved. The information is generally transferred to a Google server in the USA and stored there. We have no influence on this data transfer.
Google Maps is used in the interest of presenting our online offers in an appealing manner and to make it easy to find the locations we specify on the websites or app. This constitutes a legitimate interest as defined by Art. 6 Para. 1 Letter f GDPR.

More information on the handling of user data can be found in Google’s data protection declaration:

https://policies.google.com/privacy?hl=de


h) Social links / web presences on Facebook, Twitter and YouTube


Our websites and app also contain integrated links to services such as Facebook, Twitter and YouTube in which we maintain our own web presences. After clicking on the integrated graphic, you will be forwarded to the website of the provider in question, i.e. only then will user information be transferred to the provider in question.

If you click on a link on our websites and app to such services, your browser will establish a direct connection to the servers of the provider in question. When the link is clicked on, the provider will receive the information that your browser has accessed the relevant page of our web presence, even if you do not have your own user account with the provider in question or are logged in there at the time. Your browser will transfer this information directly to a server of the provider in question, where it will be saved.

If you are logged into a provider, the provider can allocate the visit of our website or app directly to your user account. If you interact with certain plug-ins, such as the “LIKE” or “SHARE” button on Facebook, the information in question will also be transmitted directly to the relevant server of the provider, where it will be saved. The information may also be made public on your profile with the provider in question and your contact information may be shown.

The provider in question can then use this information for advertising, market research and demand-oriented design of its service. To do so, the provider corrects usage, interest and relationship profiles, for instance, in order to evaluate your use of our website and app with respect to the advertisements shown to you at the provider, inform other users of your activities on our website and render other services associated with the use of the provider.

If you do not want the provider to allocate the data collected via our website to your user account, you will have to log out from the provider in question before visiting our website.
We use our web presences on the basis of Art. 6 Para. 1 Clause 1 Letter f GDPR in order to promote our company and provide the user with additional information.
Further information on the services which we have integrated into the websites and app can be found under the following points.

ha) Facebook Plugins


Plug-ins from the social network Facebook, provided by Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA (“Facebook”) are integrated into our websites and app. You can tell the Facebook plug-ins by the Facebook logo or the “Like button” on our page. You can find an overview of the Facebook plug-ins here:

https://developers.facebook.com/docs/plugins/

If you visit our websites or use the app, the plug-in will establish a direct connection between your browser and the Facebook server. This way, Facebook receives the information that you have visited our page with your IP address. If you click on the Facebook “Like button” while you are logged into your Facebook profile, you can link the contents of our pages on your Facebook profile. That way, Facebook can allocate the visit to our pages to your user account. We hereby inform you that, as provider of the pages, we have no knowledge of the contents of the data transferred and the use thereof by Facebook. Other information on this can be found in Facebook’s data protection policy under:

https://facebook.com/policy.php


If you do not want Facebook to be able to allocate the visit to our websites or app to your Facebook user account, please log off from your Facebook account.

hb) Twitter Plugin

Functions of the Twitter service are integrated into our websites or app. These functions are offered by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA (“Twitter”). The use of this service and the “re-tweet” function will link the websites you have visited to your Twitter account and will be disclosed to other users. In the process, data are also transferred to Twitter. We hereby inform you that, as provider of the pages, we have no knowledge of the contents of the data transferred and the use thereof by Twitter. Other information on this can be found in Twitter’s data protection policy under:

https://twitter.com/privacy


You can change your data privacy protection settings on Twitter in your account settings at

https://twitter.com/account/settings


hc) YouTube Plugins


Our websites and app use plug-ins of the service YouTube. This service is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (“YouTube”). If you visit one of our websites with a YouTube plug-in or use the app, a connection to YouTube’s servers will be established. In the process, the YouTube server will be informed which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to allocate your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.
YouTube is used in the interest of presenting our online offers in an appealing manner. This constitutes a legitimate interest as defined by Art. 6 Para. 1 Letter f GDPR.
More information on the handling of user data can be found in YouTube’s data protection declaration:

https://policies.google.com/privacy?hl=de

i) Contact request / Technical query / Consultant search / Product order form / Order newsletter / Monthly hygiene tip / Sign-up and invitations to events (hygiene days) / Online hygiene training


For the purposes of processing your enquiries, sending ordered newsletters and registering sign-ups for events (hygiene days) via our websites and app, we may collect personal data such as:

- Name of contact person,
- Name of company / institution / praxis and industry,
- Contact person’s position,
- Customer number,
- Address,
- Telephone number,
- Fax number,
- E-mail address,
- Bank details,
- Your location (postal code),
- Image material on the disinfection situation on-site,

This data will be deleted immediately upon completing the processing of your query or upon holding the event, unless you want further information. Data which was saved with us for other purposes (such as E-mail address for the member area) will not be affected by this. Which specific personal data will be transmitted to us depends on the respective entry mask.

Data processing for the purposes of requesting contact, placing technical queries, searching for consultants, ordering the newsletter, monthly hygiene tips and sending invitations to events is based on your consent (Art. 6 Para. 1 Clause 1 Letter a GDPR).

Data processing for the purpose of ordering products and signing up to events is necessary to fulfil contractual obligations or to conduct pre-contractual measures which are conducted at your request (Art. 6 Para. 1 Clause 1 Letter b GDPR).

We use Rapidmail to send newsletters. It is provided by rapidmail GmbH, Augustinerplatz 2, 79098 Freiburg i.Br., Germany (“Rapidmail”). Rapidmail is a service which can be used to organise and analyse the sending of newsletters, among other things. The data entered for the purpose of receiving the newsletter will be saved on Rapidmail’s servers in Germany. If you do not want analysis to be carried out by Rapidmail, you will have to unsubscribe from the newsletter. We provide a link for this purpose in every newsletter message. You can also unsubscribe from the newsletter directly on the website.

For the purpose of the analysis, the E-mails sent via Rapidmail contain a “tracking pixel” which connects to the servers of Rapidmail when the E-mail is opened. This way, it can be determined whether a newsletter message was opened. Rapidmail also enables us to determine whether and which links in the newsletter message are clicked on. All links in the E-mail are tracking links with which your clicks can be counted. More detailed information on Rapidmail’s analysis functions can be found under the following link:

https://de.rapidmail.wiki/kategorien/statistiken/

We save the data which you leave with us for the purpose of receiving the newsletter until you unsubscribe from the newsletter. After unsubscribing from the newsletter, it will be deleted from our servers as well as from Rapidmail’s servers.

j) E-shop (ordering products) / Hygiene knowledge training module / Disinfection and cleaning plans module / Checklists for hygiene inspections / Creation of illustrated flyers

If you, as a customer of our E-shop, would like to use the hygienewissen.de training module, the hygienesystem.de training module for disinfection and cleaning plans, hygiene inspection or for creating illustrated flyers, you will have to register with your information (see above) and will receive a user name sent by E-mail and be issued a password. Which personal data will be transmitted to us depends on the respective entry mask which is used for the registration. We use the data saved for your account exclusively for the purposes of processing your order and/or rendering the services you have requested. In order to optimise our offer, our consultants (see orochemie contact information under Service & Support) have access to your personal data as well as to the plans you have created, and will be their to assist you should you have any questions.

This data processing is conducted on the basis of Art. 6 Para. 1 Clause 1 Letter b GDPR.

As a registered user, you will also receive information via E-mail from us on changes to the training and product offer as well as relevant changes in the law, if you grant your consent to this (Art. 6 Para. 1 Clause 1 Letter a GDPR).
Registered customers have the option of changing the personal data entered upon registration at any time or of having it completely deleted from our database, as long as no statutory retention periods oppose stand in the way of doing so.
If you are a dealer or a freelance hygiene consultant/officer, you may also create plans for your end customers under your account. In this case, please make sure to obtain your end customer’s consent to do so in advance and to fulfil all other obligations to your end customer under data protection law. If your end customer revokes consent granted to you, you must delete the relevant data in your account without delay.

7. Rights of persons affected

  • You have the right to: request information on your personal data which we process in accordance with Art. 15 GDPR. In particular, you may request information on the purposes of processing, the category of recipients whom your data will be or have been disclosed to, the planned duration of saving, the existence of a right to correction, deletion, limitation of processing or objection, the existence of a right to appeal, the origin of your data (if not collected by us), as well as the existence of automated decision-making including profiling, and any meaningful information on the details thereof (if applicable);
  • request the correction of incorrect or completion of incomplete personal data saved by us without delay in accordance with Art. 16 GDPR;
  • request the deletion of your data saved by us in accordance with Art. 17 GDPR, unless their processing is required to exercise the right to free expression and information, to fulfil a legal duty, for reasons of public interest or to assert, exercise or defend legal claims;
  • request limitation of the processing of your personal data in accordance with Art. 18 GDPR if you dispute the correctness of the data, if the processing is unlawful, but you refuse the deletion of the data and we no longer require the data, but you need the data to assert, exercise or defend legal claims or you have raised an objection to the processing in accordance with Art. 21 GDPR;
  • request to obtain the data you have provided us with in a structured, conventional and machine-readable format or to request transfer to another responsible party in accordance with Art. 20 GDPR;
  • revoke your consent granted us at any time in accordance with Art. 7 Para. 3 GDPR; an E-mail to info@orochemie.de will suffice to do so. This means that we will no longer be allowed to continue the data processing which this consent was based on;
  • file a complaint to a supervisory authority in accordance with Art. 77 GDPR. In general, you may consult the supervisory authority of your usual place of residence, workplace or our company’s registered office to do so.
8. Right of objection

If your personal data are being processed on the basis of legitimate interests in accordance with Art. 6 Para. 1 Clause 1 Letter f GDPR, you have the right to file an objection to the processing of your personal data in accordance with Art. 21 GDPR if there are reasons to do so based on your specific situation or the objection is aimed against direct advertising. In the latter case, you have a general right to objection, which we will implement without you having to state a specific situation. If you would like to assert your right to objection, it will suffice to send an E-mail to that effect to info@orochemie.de.

9. Updating the data protection declaration


This data protection declaration is currently in effect.

Further development of the offers on our websites, web presences and app or changes in legal or official requirements may make it necessary to amend this data protection declaration. We will not explicitly announce necessary updates to the data protection declaration. For that reason, we recommend you to review the data protection declaration at regular intervals.

You can access and print out the current data protection declaration on our websites, web presences and app at any time.

Status as of: May 2018