Data protection notices

Published in May 2018

We, as the company OEG GmbH, are committed to protecting your privacy and safeguarding your personal information. Therefore, we comply with the obligation to notify our customers according to Article 13 GDPR and would like to inform you about what happens with your data and what your rights are.

  • 1. Who is responsible for the data processing?

    OEG GmbH (hereafter referred to as OEG) is responsible for the processing of your personal data, when you visit the website oeg.net and use offers and services.

    The contact data are as follows:

    OEG GmbH Industriestraße 1 31840 Hessisch Oldendorf

    Phone: 05152 / 699 – 0 Fax: 05152 / 699 - 2000 E-Mail: info(at)oeg.net

    Authorised to represent: Hermann Löffeld

  • 2. Who can you contact if you have questions about the data processing?

    Questions on the processing of your data can be addressed to the data protection officer at any time:

    OEG GmbH
    Data protection officer
    Industriestraße 1
    31840 Hessisch Oldendorf

    E-Mail: Datenschutz(at)oeg.net

  • 3. Which of your data do we process?

    We process your personal data, when you

    • visit the website oeg.net
    • use the service “order online“
    • give us information via a contact form on our website
    • take up contact with us in other ways

    In detail, these could be the following data:

    Data you enter via forms:

    • Data you give with the registration for a customer account (i.a. title, first name, surname, email address, telephone, fax, country, post code, town, street, VAT no., commercial register number).
    • Data you give us, when you order the OEG newsletter (i.a. email address, title, first name, surname).
    • Data required for the purchase and / or the delivery of goods / services acquired on oeg.net (i.a. billing address, delivery address, delivery date, contact partner, mobile phone number, email address).
    • Data you provide to us via web form or in other ways, when you take up contact with our customer service.
    • Data you enter into the form “Contact“ (i.a. title, first name, surname, company, telephone number, email address).
    • Data you enter into the form “Product requests“ (i.a. title, first name, surname, email address)
    • Data you enter into the form “Feedback“ (i.a. first name, surname, email address).
    • Data you enter into the form „Price alarm“ (i.a. first name, surname, email address).
    • Data you enter into the form “Price valuation“ (i.a. desired price, contact data of the primary contact).
    • Data you enter into the form “Callback request“ (i.a. title, first name, surname, telephone number).
    • Data you enter into the form “Ratings and tips“ (i.a. title, name, your opinion on the product, contact data of the selected contact).
    • Data you enter into the form “Questions and answers“ (i.a. contact data of the selected contact, your question).
    • Data you enter when you recommend us.

    Data you generate without entering them into a form:

    • Data about your purchases on oeg.net (i.a. goods and services, prices, discounts, place and time of transaction).
    • Data you generate, when you put products in the shopping cart, on you wish list or add them to your favourites).
    • Data occurring when our website oeg.net is used or with cookies, web beacons, advertising IDs or other unique identifiers (i.a. accessed pages, clicked-on links, services used, time of use).
    • Data about your location (if you allowed the detection of location data in your device adjustments).
    • Data we require for prooving your consent to receive the OEG newsletter (i.a. time stamp of the newsletter order and your click on the link in the confirmation email, given declaration of consent).
    • Data we receive by reading the OEG newsletter or by product recommendations sent by email (opening of the email, clicks on the links contained in the email, data of the used terminal, data on the location based on the IP address, accessibility of the email addess, performing the service “Order online“ or any other action on the website after clicking on an offer).
    • Data we receive, when you take part in a competition organised by us (information about the comptition, answers).
    • Data we generate due to the evaluation of your data (customer segments, presumed product preferences).
    • Data you impart, when you apply for an advertised position or proactively (i.a. personal data, data on education, data on the previous professional career, letter of application, curriculum vitae, portrait photo, certificates).

    The data above are processed only if they really occur, for example when using the service “Order online“ or when you take part in one of our competitions.

  • 4. Is there an obligation to provide the data?

    The provision of your data is not prescribed by law. Some of the data mentioned are, however, required to create a customer account on oeg.net as well as conclude purchase agreements about goods and services on oeg.net. Without the communication of the data required for contract complementation we will not be able to enter a purchase contract about goods and services on oeg.net or allow you to use the services and functions on oeg.net. The communication of other data is voluntary, but might be necessary for the use of certain services and benefits. This, for instance, refers to data on the participation in our competitions. When entering the data, we inform you, when the provision for the respective service, the respective offer or the respective function is required. These data are marked as mandatory fields. If you do not provide the data required, this means that the respective service, the respective offer or the respective function cannot be provided by us. With optional data, this can mean that we will not be able to provide our services, offers and functions in the same way or in the same extent as usual.

  • 5. Which purposes do we process your data for and which legal basis is there?

    5.1 Customer account on oeg.net

    If you register as customer with us, we set up a password-protected customer account for you. In your customer account on oeg.net, you can administer your data and access past, open or orders that are in the process of delivery. Your email address together with your password are for the identification in the customer account on oeg.net. The legal basis for the decribed data processing is Art. 6 (1) letter b of the General Data Protection Regulation (precontractual measures and performance of contract).

    5.2 Fraud prevention

    In order to prevent fraud cases, we can verify the correctness and deliverability of address data via shipping providers and restrict the available forms of payment or the conclusion of a purchase contract in case of a typical ordering process (e.g. delivery to an address not used before, simultaneous ordering of a great number of goods and / or services). The legal basis for the described data processing is Art. 6 (1) letter f of the General Data Protection Regulation (balancing of interests based on the interest of OEG to prevent fraud).

    5.3 Product recall

    We process your data (name, email address, transaction data) to ensure the product safety in case of faulty products and to avert personal and / or material damage. Legal basis for the described data processing is Art. 6 (1) letters c and d of the General Data Protection Regulation (fulfillment of a legal obligation OEG is subject to, or the protection of vital interests of the person concerned or any other natural person).

    5.4 Advertising

    In addition to the processing of your data for the execution of the service “order online“, we also use your data for advertising purposes like described in the following. You can object to the processing of your data for advertising purposes at any time. An informal notification to the contact data stated under number 1 is sufficient.

    5.4.1 Newsletter

    On our website you can register for the OEG newsletter. The newsletter informs you about the current OEG offers. If you give us your name, we use it to address you personally. If you impart more data than these, we use them to adapt the contents of the newsletter to you and your individual interests. After dispatching the registration form, you will receive a confirmation email. The registration is only valid, after you have clicked on the link in the confirmation email. You can unsubscribe from the newsletter at any time. Simply use the link for the cancellation at the end of each email. The legal basis for the described data processing is Art. 6 (1) letter a of the General Data Protection Regulation (consent).

    5.4.2 Personalisation of advertising approach

    We want to provide you with advertisements based on your individual interests. For this, we analyse your data and try to select products, services and special offers which might be interesting to you. For this, we evaluate your data to see typical patterns of your clicking or purchasing behaviour, clearly defined target groups and to customize the advertising approach to the respective target group. Calculated purchase probabilities help us to realize your demands better. Moreover, your data allow us to show you services available in your market; to adjust the frequency of advertising approach to your usage habits as well as to address you personally. Legal basis for the described data processing is Art. 6 (1) letters a and f of the General Data Protection Regulation (consent or balancing of interests based on the interest of OEG to offer advertisements oriented towards the individual interests of the recipient).

    5.4.3 Satisfaction survey

    We process your data to invite you to satisfaction surveys, e.g. subsequent to an order. Legal basis for the described data processing is Art. 6 (1) letters a nd f of the General Data Protection Regulation (consent or balancing of interests based on the interest of OEG to determine customer satisfaction with the service “order online“).

    5.4.4 Advertising effectiveness study

    We evaluate the results of our marketing activities to measure the efficiency and relevance of our campaigns. We determine the success of our advertising campaigns to continuously improve our marketing activities on your behalf and to plan new campaigns. Legal basis for the described data processing is Art. 6 (1) letter f of the General Data Protection Regulation (balancing of interests based on the interest of OEG to measure the success of advertising campaigns.

    5.5 Competitions

    From time to time, you have the option to take part in competitions on our website. For the execution of a competition, we process your data (name, email address, address and, when needed, more data required for the competition). We process your data for the verification of the right to participate, for determining and notification of the winner, for dispatching the price as well as the potential publication of the winner. Legal basis of the described data processing is Art. 6 (1) letter b of the General Data Protection Regulation (execution of the competition).

    5.6 Analysis of the website/ tracking / services

    5.7 Forms

    • Contact form
      You can contact us via our “contact form“. We process your data to respond to your inquiry or for sending the information material you desire. Your data can be transferred to the department reponsible for your inquiry. Legal basis for the described data processing is Art. 6 (1) letters b and f of the General Data Protection Regulation (precontractual measure, performance of contract or balancing of interests based on the interest of OEG to respond to customers’ or other people’s inquiries).

    • Form Product inquiries
      You can contact us via our form “product inquiries“ to inquire about products. We process your data to respond to your inquiry or for sending the information material you desire. Your data can be transferred to the department responsible for your inquiry. Legal basis for the described data processing is Art. 6 (1) letters b and f of the General Data Protection Regulation (precontractual measure, performance of contract or balancing of interests based on the interest of OEG to respond to customers’ or other people’s inquiries).

    • Form Feedback
      You can contact us via our “feedback“ form. We process your data to respond to your inquiry or for sending the information material you desire. Your data can be transferred to the department responsible for your inquiry. Legal basis for the described data processing is Art. 6 (1) letters b and f of the General Data Protection Regulation (precontractual measure, performance of contract or balancing of interests based on the interest of OEG to respond to customers’ or other people’s inquiries).

    • Form Request a return call
      You can contact us via our form “request a return call“. We process your data to respond to your inquiry or for sending the information material you desire. Your data can be transferred to the department responsible for your inquiry. Legal basis for the described data processing is Art. 6 (1) letters b and f of the General Data Protection Regulation (precontractual measure, performance of contract or balancing of interests based on the interest of OEG to respond to customers’ or other people’s inquiries).

    • Form Product reviews and tips
      You can review a product via our form “product reviews and tips“. We process your data to respond to your inquiry or for sending the information material you desire. Your data can be transferred to the department responsible for your inquiry. Legal basis for the described data processing is Art. 6 (1) letters b and f of the General Data Protection Regulation (precontractual measure, performance of contract or balancing of interests based on the interest of OEG to respond to customers’ or other people’s inquiries).

    • Form Product questions and answers
      You can ask us a question about a product via our form “Questions and answers“. We process your data to respond to your inquiry or for sending the information material you desire. Your data can be transferred to the department responsible for your inquiry. Legal basis for the described data processing is Art. 6 (1) letters b and f of the General Data Protection Regulation (precontractual measure, performance of contract or balancing of interests based on the interest of OEG to respond to customers’ or other people’s inquiries).

    • Form Price alert
      Via our form “price alert“, you can notify us about places and websites where you could get the product for a cheaper price. You can also transmit that price or your desired price. We process your data to respond to your inquiry or for sending the information material you desire. Your data can be transferred to the department responsible for your inquiry. Legal basis for the described data processing is Art. 6 (1) letters b and f of the General Data Protection Regulation (precontractual measure, performance of contract or balancing of interests based on the interest of OEG to respond to customers’ or other people’s inquiries).

    • Form Price valuation
      You can valuate our prices via the form “price valuation“, if the price seems “fair“ or “non-marketable“ to you. If you activate the corresponding check box, you will receive a notification, when your desired price has been reached. We process your data to respond to your inquiry or for sending the information material you desire. Your data can be transferred to the department responsible for your inquiry. Legal basis for the described data processing is Art. 6 (1) letters b and f of the General Data Protection Regulation (precontractual measure, performance of contract or balancing of interests based on the interest of OEG to respond to customers’ or other people’s inquiries).

    5.8 Application

    On our website it is possible to apply at OEG for an advertised position or send us an unsolicited application. You data will be received by the personnel department and forwarded to the department responsible for the advertised position or to persons entrusted with handling the application procedure. All participants handle your application documents with reasonable care and confidentially. Legal basis for the described data processing is Art. 6 (1) letter b of the General Data Protection Regulation and § 26 (1) sentence 1 BDSG (decision about an employment relationship).

    5.9 Web server logs

    If you visit our websites, we process the communication data of the computer sending the request, including IP address, websites you visit with us, the date and duration of the visit, the recognition features of the type of browser and operating system used as well as the website where you visit us from in order to ensure the safety of our IT systems. Legal basis for the described data processing is Art. 6 (1) letter f of the General Data Protection Regulation (balancing of interests based on the interest of OEG to ensure the safety of their IT systems).

    5.10 Contacting for feedback reminder

    Feedback reminder by eKomi:
    If you have given your express agreement for this during or after your order according to Art. 6 (1) letter a of GDPR, we will transmit your email address to the ratings platform eKomi Ltd., Markgrafenstraße 11, 10969 Berlin, , (www.ekomi.de), so that it emails you a feedback reminder. You can revoke your agreement at any time by notifying the person responsible for the data processing or towards the ratings platform.

  • 6. Is there an automated processing for a profiling?

    We will not use any automated decision making or profilings when processing your data.

  • 7. chi ha accesso ai vostri dati e per quale motivo?

    All'interno di OEG, avranno accesso ai vostri dati solo le persone che ne hanno bisogno per adempiere ai compiti assegnati. Al di fuori di OEG, possono avere accesso ai vostri dati i fornitori di servizi che ci supportano nell'adempimento dei nostri compiti. Si tratta di fornitori di servizi appartenenti alle seguenti categorie:

    • Fornitori di servizi di hosting per il funzionamento dei nostri server
    • .
    • Fornitori di servizi di sviluppo per la programmazione, lo sviluppo, la manutenzione e il supporto di applicazioni software
    • .
    • Fornitore di servizi di spedizione e-mail per l'invio di e-mail in relazione a un ordine/prenotazione su oeg.net
    • Fornitore di servizi di call center per l'assistenza ai clienti
    • Fornitore di servizi di email marketing per l'invio di newsletter
    • Fornitore di servizi di stampa per la stampa e l'invio di lettere promozionali
    • Fornitore di servizi per la fornitura di strumenti di sondaggio
    • Fornitore di servizi di pagamento per l'elaborazione di pagamenti
    • .
    • Gestori di reti pubblicitarie per campagne pubblicitarie e visualizzazione di pubblicità online (remarketing e retargeting)
    • Fornitore di servizi per l'erogazione e la misurazione delle prestazioni della pubblicità online
    • Fornitore di servizi analitici per la valutazione dei dati e l'analisi dell'utilizzo dei media elettronici (sito web, programma di carte fedeltà)
    • Operatori di social media per la fornitura di social plugin

    Prestatore di servizi di pagamento:

    • PayPal

      In caso di pagamento tramite PayPal, carta di credito tramite PayPal, addebito diretto tramite PayPal o - se offerto - "acquisto su conto" o "pagamento rateale" tramite PayPal, trasmettiamo i dati di pagamento dell'utente a PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Lussemburgo (di seguito "PayPal"), come parte dell'elaborazione del pagamento. I dati vengono trasmessi ai sensi dell'art. 6 comma 1 lettera b del GDPR e solo nella misura in cui ciò è necessario per l'elaborazione del pagamento.

      PayPal si riserva il diritto di effettuare una verifica del credito per i metodi di pagamento carta di credito tramite PayPal, addebito diretto tramite PayPal o - se offerto - "acquisto su conto" o "pagamento rateale" tramite PayPal. A tal fine, i dati di pagamento dell'utente possono essere trasmessi ad agenzie di credito ai sensi dell'art. 6 comma 1 lettera f del GDPR sulla base del legittimo interesse di PayPal a determinare la solvibilità dell'utente. PayPal utilizza il risultato della verifica del credito in relazione alla probabilità statistica di mancato pagamento al fine di decidere la fornitura del rispettivo metodo di pagamento. Il rapporto di credito può contenere valori di probabilità (i cosiddetti valori di punteggio). Se i valori di punteggio sono inclusi nel risultato del rapporto di credito, essi si basano su una procedura matematico-statistica scientificamente riconosciuta. Il calcolo dei valori di punteggio include, ma non solo, i dati relativi all'indirizzo. Ulteriori informazioni sulla protezione dei dati, comprese le informazioni sulle agenzie di credito utilizzate, sono disponibili nell'informativa sulla privacy di PayPal: https://www.paypal.com/de/webapps/mpp/ua/privacy-full È possibile opporsi a questo trattamento dei dati in qualsiasi momento inviando un messaggio a PayPal. Tuttavia, PayPal può ancora essere autorizzata a trattare i dati personali dell'utente se ciò è necessario per l'elaborazione dei pagamenti contrattuali.

    • Mollie B.V.

      Su questo sito sono disponibili uno o più metodi di pagamento online del seguente fornitore: Mollie B.V., Keizersgracht 313, 1016 EE Amsterdam, Paesi Bassi
      Se si seleziona un metodo di pagamento del fornitore per il quale si effettua un pagamento anticipato (come ad esempio il pagamento con carta di credito), i dati di pagamento (tra cui nome, indirizzo, dati bancari e della carta di pagamento, valuta e numero di transazione) forniti durante il processo di ordinazione, nonché le informazioni sul contenuto dell'ordine saranno trasmessi al fornitore in conformità con l'art. 6 par. 1 lit. b GDPR. In questo caso, i vostri dati saranno trasmessi solo ai fini dell'elaborazione del pagamento con il fornitore e solo nella misura in cui ciò sia necessario a tale scopo. È possibile trovare ulteriori informazioni sulla politica sulla privacy di Mollie al seguente indirizzo Internet: https://www.mollie.com/de/privacy

    I fornitori di servizi da noi utilizzati devono soddisfare particolari requisiti di riservatezza. L'accesso ai vostri dati è consentito solo nella misura e per il periodo di tempo necessari all'espletamento delle loro mansioni.

    Se si tratta di un reato penale o di un'infrazione, il vostro trattamento non è consentito.

    Se si sospetta un reato, possiamo trasmettere i vostri dati alle autorità preposte all'applicazione della legge (polizia, procura)

    .
  • 8. Are data processed outside the European Union?

    For the processing of your data, we also apply service providers, who are located in third countries outside the European Union. Countries outside the European Union handle the protection of personal data differently than countries in the European Union. Currently, there is no decision on behalf of the EU commission that these third countries in general provide an appropriate protection level. Therefore, we have taken special measures to ensure that your data are processed as securely in third countries as in countries of the European Union. We conclude the data protection contract with service providers in third countries, provided by the commission of the European Union for the processing of personal data in third countries (standard privacy clause). It provides suitable guarantees for the protection of your data with service providers in third countries.

  • 9. How long do we store the data?

    In principle, we store your data only as long as we need them for the respective processing purposes. If the data are not required any more for the fulfillment of the processing purposes mentioned in these data protection notices, they will be deleted unless their storage is still necessary for the fulfillment of commercial- and tax- reporting retention requirements. Generally, we delete your data after these periods or determine the deletion deadline according to these criteria:

    • Data for the OEG customer account after the termination of the contractual relationship
    • Data for the OEG newsletter after the revocation of the agreement within one month
    • Date for the OEG newsletter automatic deletion of unconfirmed recipients after 3 months
    • Data about purchases made when ordering on oeg.net up to 10 years after the purchase
    • Data about the participation in a competition two months after finishing the competition
    • Data for a request to the customer service three moths after the termination of the process
    • Data for an application for an advertised job six months after the termination of the application procedure
  • 10. What kind of rights do you have?

    10.1 Information

    You may demand information about the personal data processed by us.

    10.2 Correction

    If your data should not be correct (any more), you can demand the correction of your data. If your data are incomplete, you can demand a completion.

    10.3 Deletion

    You have the right to demand the deletion of your data. Please note that a claim for deletion depends on a legitimate reason to do so. There must be no regulations which oblige us to store your data.

    10.4 Limitation of processing

    You have the right to demand the limitation of the processing of your data. Please note that your claim to limit the processing depends on a legitimate reason to do so.

    10.5 Contradiction

    You have the right to appeal against processing your data for reasons arising from your special situation. In the case of a justified contradiction, we will not process your data any more.

    10.6 Contradiction against the processing of your data for the purpose of direct advertising

    You have the right to appeal against the processing of your data for the purpose of direct advertising at any time. This also applies to the profiling related to a direct advertising. Your contradiction can be sent to us informally, preferably to the contact data mentioned above by stating the keyword “Contradiction against the processing of my personal data for advertising purposes“.

    10.7 Right of appeal

    You are allowed to lodge a complaint with a data protection supervisory authority if you do not agree with the processing of your data.

    10.8 Data portability

    You have the right to receive any personal data you provided to us in an electronic format.

    10.9 Revocation of your consent

    You have the right to revoke the agreement to process your data at any time. This also applies to the revocation of any declarations of consent you gave us before the data protection regulation became valid, i.e. before 25th May, 2018. The easiest way to revoke a given consent is to apply to the above mentioned contact data via email. The revocation of your consent does not apply to the legality of the data processing performed until the revocation.