Data protection notices

Published in May 2018

We, as the company OEG GmbH, are committed to protecting your privacy and safeguarding your personal information. Therefore, we comply with the obligation to notify our customers according to Article 13 GDPR and would like to inform you about what happens with your data and what your rights are.

  • 1. Who is responsible for the data processing?

    OEG GmbH (hereafter referred to as OEG) is responsible for the processing of your personal data, when you visit the website oeg.net and use offers and services.

    The contact data are as follows:

    OEG GmbH
    Industriestraße 1
    31840 Hessisch Oldendorf

    Phone: 05152 / 699 – 0
    Fax: 05152 / 699 - 2000
    E-Mail: info(at)oeg.net

    Authorised to represent:
    Hermann Löffeld

  • 2. Who can you contact if you have questions about the data processing?

    Questions on the processing of your data can be addressed to the data protection officer at any time:

    OEG GmbH
    Data protection officer
    Industriestraße 1
    31840 Hessisch Oldendorf

    E-Mail: Datenschutz(at)oeg.net

  • 3. Which of your data do we process?

    We process your personal data, when you

    • visit the website oeg.net
    • use the service “order online“
    • give us information via a contact form on our website
    • take up contact with us in other ways

    In detail, these could be the following data:

    Data you enter via forms:

    • Data you give with the registration for a customer account (i.a. title, first name, surname, email address, telephone, fax, country, post code, town, street, VAT no., commercial register number).
    • Data you give us, when you order the OEG newsletter (i.a. email address, title, first name, surname).
    • Data required for the purchase and / or the delivery of goods / services acquired on oeg.net (i.a. billing address, delivery address, delivery date, contact partner, mobile phone number, email address).
    • Data you provide to us via web form or in other ways, when you take up contact with our customer service.
    • Data you enter into the form “Contact“ (i.a. title, first name, surname, company, telephone number, email address).
    • Data you enter into the form “Product requests“ (i.a. title, first name, surname, email address)
    • Data you enter into the form “Feedback“ (i.a. first name, surname, email address).
    • Data you enter into the form „Price alarm“ (i.a. first name, surname, email address).
    • Data you enter into the form “Price valuation“ (i.a. desired price, contact data of the primary contact).
    • Data you enter into the form “Callback request“ (i.a. title, first name, surname, telephone number).
    • Data you enter into the form “Ratings and tips“ (i.a. title, name, your opinion on the product, contact data of the selected contact).
    • Data you enter into the form “Questions and answers“ (i.a. contact data of the selected contact, your question).
    • Data you enter when you recommend us.

    Data you generate without entering them into a form:

    • Data about your purchases on oeg.net (i.a. goods and services, prices, discounts, place and time of transaction).
    • Data you generate, when you put products in the shopping cart, on you wish list or add them to your favourites).
    • Data occurring when our website oeg.net is used or with cookies, web beacons, advertising IDs or other unique identifiers (i.a. accessed pages, clicked-on links, services used, time of use).
    • Data about your location (if you allowed the detection of location data in your device adjustments).
    • Data we require for prooving your consent to receive the OEG newsletter (i.a. time stamp of the newsletter order and your click on the link in the confirmation email, given declaration of consent).
    • Data we receive by reading the OEG newsletter or by product recommendations sent by email (opening of the email, clicks on the links contained in the email, data of the used terminal, data on the location based on the IP address, accessibility of the email addess, performing the service “Order online“ or any other action on the website after clicking on an offer).
    • Data we receive, when you take part in a competition organised by us (information about the comptition, answers).
    • Data we generate due to the evaluation of your data (customer segments, presumed product preferences).
    • Data you impart, when you apply for an advertised position or proactively (i.a. personal data, data on education, data on the previous professional career, letter of application, curriculum vitae, portrait photo, certificates).

    The data above are processed only if they really occur, for example when using the service “Order online“ or when you take part in one of our competitions.

  • 4. Is there an obligation to provide the data?

    The provision of your data is not prescribed by law. Some of the data mentioned are, however, required to create a customer account on oeg.net as well as conclude purchase agreements about goods and services on oeg.net. Without the communication of the data required for contract complementation we will not be able to enter a purchase contract about goods and services on oeg.net or allow you to use the services and functions on oeg.net. The communication of other data is voluntary, but might be necessary for the use of certain services and benefits. This, for instance, refers to data on the participation in our competitions. When entering the data, we inform you, when the provision for the respective service, the respective offer or the respective function is required. These data are marked as mandatory fields. If you do not provide the data required, this means that the respective service, the respective offer or the respective function cannot be provided by us. With optional data, this can mean that we will not be able to provide our services, offers and functions in the same way or in the same extent as usual.

  • 5. Which purposes do we process your data for and which legal basis is there?

    5.1 Customer account on oeg.net

    If you register as customer with us, we set up a password-protected customer account for you. In your customer account on oeg.net, you can administer your data and access past, open or orders that are in the process of delivery. Your email address together with your password are for the identification in the customer account on oeg.net. The legal basis for the decribed data processing is Art. 6 (1) letter b of the General Data Protection Regulation (precontractual measures and performance of contract).

    5.2 Fraud prevention

    In order to prevent fraud cases, we can verify the correctness and deliverability of address data via shipping providers and restrict the available forms of payment or the conclusion of a purchase contract in case of a typical ordering process (e.g. delivery to an address not used before, simultaneous ordering of a great number of goods and / or services). The legal basis for the described data processing is Art. 6 (1) letter f of the General Data Protection Regulation (balancing of interests based on the interest of OEG to prevent fraud).

    5.3 Product recall

    We process your data (name, email address, transaction data) to ensure the product safety in case of faulty products and to avert personal and / or material damage. Legal basis for the described data processing is Art. 6 (1) letters c and d of the General Data Protection Regulation (fulfillment of a legal obligation OEG is subject to, or the protection of vital interests of the person concerned or any other natural person).

    5.4 Advertising

    In addition to the processing of your data for the execution of the service “order online“, we also use your data for advertising purposes like described in the following. You can object to the processing of your data for advertising purposes at any time. An informal notification to the contact data stated under number 1 is sufficient.

    5.4.1 Newsletter

    On our website you can register for the OEG newsletter. The newsletter informs you about the current OEG offers. If you give us your name, we use it to address you personally. If you impart more data than these, we use them to adapt the contents of the newsletter to you and your individual interests. After dispatching the registration form, you will receive a confirmation email. The registration is only valid, after you have clicked on the link in the confirmation email. You can unsubscribe from the newsletter at any time. Simply use the link for the cancellation at the end of each email. The legal basis for the described data processing is Art. 6 (1) letter a of the General Data Protection Regulation (consent).

    5.4.2 Personalisation of advertising approach

    We want to provide you with advertisements based on your individual interests. For this, we analyse your data and try to select products, services and special offers which might be interesting to you. For this, we evaluate your data to see typical patterns of your clicking or purchasing behaviour, clearly defined target groups and to customize the advertising approach to the respective target group. Calculated purchase probabilities help us to realize your demands better. Moreover, your data allow us to show you services available in your market; to adjust the frequency of advertising approach to your usage habits as well as to address you personally. Legal basis for the described data processing is Art. 6 (1) letters a and f of the General Data Protection Regulation (consent or balancing of interests based on the interest of OEG to offer advertisements oriented towards the individual interests of the recipient).

    5.4.3 Satisfaction survey

    We process your data to invite you to satisfaction surveys, e.g. subsequent to an order. Legal basis for the described data processing is Art. 6 (1) letters a nd f of the General Data Protection Regulation (consent or balancing of interests based on the interest of OEG to determine customer satisfaction with the service “order online“).

    5.4.4 Advertising effectiveness study

    We evaluate the results of our marketing activities to measure the efficiency and relevance of our campaigns. We determine the success of our advertising campaigns to continuously improve our marketing activities on your behalf and to plan new campaigns. Legal basis for the described data processing is Art. 6 (1) letter f of the General Data Protection Regulation (balancing of interests based on the interest of OEG to measure the success of advertising campaigns.

    5.5 Competitions

    From time to time, you have the option to take part in competitions on our website. For the execution of a competition, we process your data (name, email address, address and, when needed, more data required for the competition). We process your data for the verification of the right to participate, for determining and notification of the winner, for dispatching the price as well as the potential publication of the winner. Legal basis of the described data processing is Art. 6 (1) letter b of the General Data Protection Regulation (execution of the competition).

    5.6 Analysis of the website/ tracking / services

    5.7 Forms

    • Contact form
      You can contact us via our “contact form“. We process your data to respond to your inquiry or for sending the information material you desire. Your data can be transferred to the department reponsible for your inquiry. Legal basis for the described data processing is Art. 6 (1) letters b and f of the General Data Protection Regulation (precontractual measure, performance of contract or balancing of interests based on the interest of OEG to respond to customers’ or other people’s inquiries).

    • Form Product inquiries
      You can contact us via our form “product inquiries“ to inquire about products. We process your data to respond to your inquiry or for sending the information material you desire. Your data can be transferred to the department responsible for your inquiry. Legal basis for the described data processing is Art. 6 (1) letters b and f of the General Data Protection Regulation (precontractual measure, performance of contract or balancing of interests based on the interest of OEG to respond to customers’ or other people’s inquiries).

    • Form Feedback
      You can contact us via our “feedback“ form. We process your data to respond to your inquiry or for sending the information material you desire. Your data can be transferred to the department responsible for your inquiry. Legal basis for the described data processing is Art. 6 (1) letters b and f of the General Data Protection Regulation (precontractual measure, performance of contract or balancing of interests based on the interest of OEG to respond to customers’ or other people’s inquiries).

    • Form Request a return call
      You can contact us via our form “request a return call“. We process your data to respond to your inquiry or for sending the information material you desire. Your data can be transferred to the department responsible for your inquiry. Legal basis for the described data processing is Art. 6 (1) letters b and f of the General Data Protection Regulation (precontractual measure, performance of contract or balancing of interests based on the interest of OEG to respond to customers’ or other people’s inquiries).

    • Form Product reviews and tips
      You can review a product via our form “product reviews and tips“. We process your data to respond to your inquiry or for sending the information material you desire. Your data can be transferred to the department responsible for your inquiry. Legal basis for the described data processing is Art. 6 (1) letters b and f of the General Data Protection Regulation (precontractual measure, performance of contract or balancing of interests based on the interest of OEG to respond to customers’ or other people’s inquiries).

    • Form Product questions and answers
      You can ask us a question about a product via our form “Questions and answers“. We process your data to respond to your inquiry or for sending the information material you desire. Your data can be transferred to the department responsible for your inquiry. Legal basis for the described data processing is Art. 6 (1) letters b and f of the General Data Protection Regulation (precontractual measure, performance of contract or balancing of interests based on the interest of OEG to respond to customers’ or other people’s inquiries).

    • Form Price alert
      Via our form “price alert“, you can notify us about places and websites where you could get the product for a cheaper price. You can also transmit that price or your desired price. We process your data to respond to your inquiry or for sending the information material you desire. Your data can be transferred to the department responsible for your inquiry. Legal basis for the described data processing is Art. 6 (1) letters b and f of the General Data Protection Regulation (precontractual measure, performance of contract or balancing of interests based on the interest of OEG to respond to customers’ or other people’s inquiries).

    • Form Price valuation
      You can valuate our prices via the form “price valuation“, if the price seems “fair“ or “non-marketable“ to you. If you activate the corresponding check box, you will receive a notification, when your desired price has been reached. We process your data to respond to your inquiry or for sending the information material you desire. Your data can be transferred to the department responsible for your inquiry. Legal basis for the described data processing is Art. 6 (1) letters b and f of the General Data Protection Regulation (precontractual measure, performance of contract or balancing of interests based on the interest of OEG to respond to customers’ or other people’s inquiries).

    5.8 Application

    On our website it is possible to apply at OEG for an advertised position or send us an unsolicited application. You data will be received by the personnel department and forwarded to the department responsible for the advertised position or to persons entrusted with handling the application procedure. All participants handle your application documents with reasonable care and confidentially. Legal basis for the described data processing is Art. 6 (1) letter b of the General Data Protection Regulation and § 26 (1) sentence 1 BDSG (decision about an employment relationship).

    5.9 Web server logs

    If you visit our websites, we process the communication data of the computer sending the request, including IP address, websites you visit with us, the date and duration of the visit, the recognition features of the type of browser and operating system used as well as the website where you visit us from in order to ensure the safety of our IT systems. Legal basis for the described data processing is Art. 6 (1) letter f of the General Data Protection Regulation (balancing of interests based on the interest of OEG to ensure the safety of their IT systems).

    5.10 Contacting for feedback reminder

    Feedback reminder by eKomi:
    If you have given your express agreement for this during or after your order according to Art. 6 (1) letter a of GDPR, we will transmit your email address to the ratings platform eKomi Ltd., Markgrafenstraße 11, 10969 Berlin, , (www.ekomi.de), so that it emails you a feedback reminder. You can revoke your agreement at any time by notifying the person responsible for the data processing or towards the ratings platform.

  • 6. Is there an automated processing for a profiling?

    We will not use any automated decision making or profilings when processing your data.

  • 7. Who can access your data and why?

    Within OEG, only persons who need your data for accomplishing their given tasks, are allowed to access them. Beyond OEG, only service providers supporting us to accomplish our tasks can get access to your data. That are service providers of the following categories:

    • Hosting providers for the operation of our servers
    • Development service providers for programming, development, maintenance and support of software applications
    • Email delivery providers for sending emails in conjunction with an order / reservation on oeg.net
    • Call centre providers for customer service
    • Email marketing providers for mailing newsletters
    • Print service providers for printing and sending newsletters
    • Service providers for the provision of survey tools
    • Payment service providers for processing payments
    • Advertising network operators for advertising campaigns and display of online advertisements (remarketing and retargeting)
    • Service providers for the delivery and performance measurement of online advertising
    • Analysis service providers for analysing data and for the analysis of using electronic media (website, bonus card programme)
    • Operators of social media for the provision of social plug-ins

    Payment service providers:

    • PayPal

      When paying via PayPal, credit card via PayPal, debit via PayPal or – if available – “Purchase on account“ or “Instalment“ via PayPal we forward your payment data as part pf the payment process to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg ("PayPal" hereafter). The forwarding is performed according to Art. 6 (1) letter b of GDPR and only as far as this is required for processing the payment.

      PayPal reserves the right to perform a credit check for the payment methods “credit card“ via PayPal, “debit“ via PayPal or –if available – “Purchase on account“ or “Instalment“ via PayPal. For this purpose, your payment data might be transmitted to credit agencies in accordance with Art. 6 (1) letter f of GDPR, based on the legitimate interest of PayPal in the securing your solvency. The result of the credit check with regard to the statistical default probability is used by PayPal to decide on the provision of the respective payment method. The credit check might contain probability values (so-called score values). If score values are part of the result of the credit check, they are based upon a scientifically proven mathematical-statistical process. For the calculation of the score values, address data are also used, but not exclusively. Further information in terms of data protection, also about the credit agencies involved, can be found in the data protection delaration by PayPal: https://www.paypal.com/de/webapps/mpp/ua/privacy-full You can object to the processing of your date at any time by sending a message to PayPal. However, PayPal might remain authorized to process your personal data if this is required for the contractual payment process.

    • SOFORT GmbH

      If you select the payment method “SOFORT“, the payment process is carried out via the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 München, Deutschland (“SOFORT“ hereafter), to whom we forward your information given during the ordering process and the information about your order in accordance with Art. 6 (1) letter b of GDPR. The SOFORT GmbH is part of the Klarna Group (Klarna Bank AB (publ.), Sveavägen 46, 11134 Stockholm, Sweden). The disclosure of your data takes place exclusively for the purpose of payment processing with the payment service provider SOFORT and only as far as it is required. You will find more information about the data protection regulations of SOFORT under the following internet address: https://www.klarna.com/sofort/datenschutz

    • Mollie B.V.

      One or more online payment methods from the following provider are available on this website: Mollie B.V, Keizersgracht 313, 1016 EE Amsterdam, Netherlands. If you select a payment method from the provider that requires you to pay in advance (such as credit card payment), your payment details provided during the ordering process will be transferred to them (including Name, Address, Bank- and payment card information, currency and transaction number) as well as information about the contents of your order according to Art. 6 Abs. 1 letter b GDPR are passed on. In this case, your data will be passed on exclusively for the purpose of processing payments with the provider and only to the extent that it is necessary for this purpose. You can find more information about Mollies privacy policy at the following internet address: https://www.mollie.com/privacy

    Service providers used by us have to fulfill special confidentiality agreements. They only gain access to your data to the extent and for the duration required for accomplishing the tasks.

    In case an offence is suspected, we are supposed to disclose your data to the prosecution authorities (police, prosecution).

  • 8. Are data processed outside the European Union?

    For the processing of your data, we also apply service providers, who are located in third countries outside the European Union. Countries outside the European Union handle the protection of personal data differently than countries in the European Union. Currently, there is no decision on behalf of the EU commission that these third countries in general provide an appropriate protection level. Therefore, we have taken special measures to ensure that your data are processed as securely in third countries as in countries of the European Union. We conclude the data protection contract with service providers in third countries, provided by the commission of the European Union for the processing of personal data in third countries (standard privacy clause). It provides suitable guarantees for the protection of your data with service providers in third countries.

  • 9. How long do we store the data?

    In principle, we store your data only as long as we need them for the respective processing purposes. If the data are not required any more for the fulfillment of the processing purposes mentioned in these data protection notices, they will be deleted unless their storage is still necessary for the fulfillment of commercial- and tax- reporting retention requirements. Generally, we delete your data after these periods or determine the deletion deadline according to these criteria:

    • Data for the OEG customer account after the termination of the contractual relationship
    • Data for the OEG newsletter after the revocation of the agreement within one month
    • Date for the OEG newsletter automatic deletion of unconfirmed recipients after 3 months
    • Data about purchases made when ordering on oeg.net up to 10 years after the purchase
    • Data about the participation in a competition two months after finishing the competition
    • Data for a request to the customer service three moths after the termination of the process
    • Data for an application for an advertised job six months after the termination of the application procedure
  • 10. What kind of rights do you have?

    10.1 Information

    You may demand information about the personal data processed by us.

    10.2 Correction

    If your data should not be correct (any more), you can demand the correction of your data. If your data are incomplete, you can demand a completion.

    10.3 Deletion

    You have the right to demand the deletion of your data. Please note that a claim for deletion depends on a legitimate reason to do so. There must be no regulations which oblige us to store your data.

    10.4 Limitation of processing

    You have the right to demand the limitation of the processing of your data. Please note that your claim to limit the processing depends on a legitimate reason to do so.

    10.5 Contradiction

    You have the right to appeal against processing your data for reasons arising from your special situation. In the case of a justified contradiction, we will not process your data any more.

    10.6 Contradiction against the processing of your data for the purpose of direct advertising

    You have the right to appeal against the processing of your data for the purpose of direct advertising at any time. This also applies to the profiling related to a direct advertising. Your contradiction can be sent to us informally, preferably to the contact data mentioned above by stating the keyword “Contradiction against the processing of my personal data for advertising purposes“.

    10.7 Right of appeal

    You are allowed to lodge a complaint with a data protection supervisory authority if you do not agree with the processing of your data.

    10.8 Data portability

    You have the right to receive any personal data you provided to us in an electronic format.

    10.9 Revocation of your consent

    You have the right to revoke the agreement to process your data at any time. This also applies to the revocation of any declarations of consent you gave us before the data protection regulation became valid, i.e. before 25th May, 2018. The easiest way to revoke a given consent is to apply to the above mentioned contact data via email. The revocation of your consent does not apply to the legality of the data processing performed until the revocation.