Data protection notices

Published in May 2018

We, as the company OEG GmbH, are committed to protecting your privacy and safeguarding your personal information. Therefore, we comply with the obligation to notify our customers according to Article 13 GDPR and would like to inform you about what happens with your data and what your rights are.

  • 1. Who is responsible for the data processing?

    OEG GmbH (hereafter referred to as OEG) is responsible for the processing of your personal data, when you visit the website oeg.net and use offers and services.

    The contact data are as follows:

    OEG GmbH Industriestraße 1 31840 Hessisch Oldendorf

    Phone: 05152 / 699 – 0 Fax: 05152 / 699 - 2000 E-Mail: info(at)oeg.net

    Authorised to represent: Hermann Löffeld

  • 2. Who can you contact if you have questions about the data processing?

    Questions on the processing of your data can be addressed to the data protection officer at any time:

    OEG GmbH
    Data protection officer
    Industriestraße 1
    31840 Hessisch Oldendorf

    E-Mail: Datenschutz(at)oeg.net

  • 3. Which of your data do we process?

    We process your personal data, when you

    • visit the website oeg.net
    • use the service “order online“
    • give us information via a contact form on our website
    • take up contact with us in other ways

    In detail, these could be the following data:

    Data you enter via forms:

    • Data you give with the registration for a customer account (i.a. title, first name, surname, email address, telephone, fax, country, post code, town, street, VAT no., commercial register number).
    • Data you give us, when you order the OEG newsletter (i.a. email address, title, first name, surname).
    • Data required for the purchase and / or the delivery of goods / services acquired on oeg.net (i.a. billing address, delivery address, delivery date, contact partner, mobile phone number, email address).
    • Data you provide to us via web form or in other ways, when you take up contact with our customer service.
    • Data you enter into the form “Contact“ (i.a. title, first name, surname, company, telephone number, email address).
    • Data you enter into the form “Product requests“ (i.a. title, first name, surname, email address)
    • Data you enter into the form “Feedback“ (i.a. first name, surname, email address).
    • Data you enter into the form „Price alarm“ (i.a. first name, surname, email address).
    • Data you enter into the form “Price valuation“ (i.a. desired price, contact data of the primary contact).
    • Data you enter into the form “Callback request“ (i.a. title, first name, surname, telephone number).
    • Data you enter into the form “Ratings and tips“ (i.a. title, name, your opinion on the product, contact data of the selected contact).
    • Data you enter into the form “Questions and answers“ (i.a. contact data of the selected contact, your question).
    • Data you enter when you recommend us.

    Data you generate without entering them into a form:

    • Data about your purchases on oeg.net (i.a. goods and services, prices, discounts, place and time of transaction).
    • Data you generate, when you put products in the shopping cart, on you wish list or add them to your favourites).
    • Data occurring when our website oeg.net is used or with cookies, web beacons, advertising IDs or other unique identifiers (i.a. accessed pages, clicked-on links, services used, time of use).
    • Data about your location (if you allowed the detection of location data in your device adjustments).
    • Data we require for prooving your consent to receive the OEG newsletter (i.a. time stamp of the newsletter order and your click on the link in the confirmation email, given declaration of consent).
    • Data we receive by reading the OEG newsletter or by product recommendations sent by email (opening of the email, clicks on the links contained in the email, data of the used terminal, data on the location based on the IP address, accessibility of the email addess, performing the service “Order online“ or any other action on the website after clicking on an offer).
    • Data we receive, when you take part in a competition organised by us (information about the comptition, answers).
    • Data we generate due to the evaluation of your data (customer segments, presumed product preferences).
    • Data you impart, when you apply for an advertised position or proactively (i.a. personal data, data on education, data on the previous professional career, letter of application, curriculum vitae, portrait photo, certificates).

    The data above are processed only if they really occur, for example when using the service “Order online“ or when you take part in one of our competitions.

  • 4. Is there an obligation to provide the data?

    The provision of your data is not prescribed by law. Some of the data mentioned are, however, required to create a customer account on oeg.net as well as conclude purchase agreements about goods and services on oeg.net. Without the communication of the data required for contract complementation we will not be able to enter a purchase contract about goods and services on oeg.net or allow you to use the services and functions on oeg.net. The communication of other data is voluntary, but might be necessary for the use of certain services and benefits. This, for instance, refers to data on the participation in our competitions. When entering the data, we inform you, when the provision for the respective service, the respective offer or the respective function is required. These data are marked as mandatory fields. If you do not provide the data required, this means that the respective service, the respective offer or the respective function cannot be provided by us. With optional data, this can mean that we will not be able to provide our services, offers and functions in the same way or in the same extent as usual.

  • 5. Which purposes do we process your data for and which legal basis is there?

    5.1 Customer account on oeg.net

    If you register as customer with us, we set up a password-protected customer account for you. In your customer account on oeg.net, you can administer your data and access past, open or orders that are in the process of delivery. Your email address together with your password are for the identification in the customer account on oeg.net. The legal basis for the decribed data processing is Art. 6 (1) letter b of the General Data Protection Regulation (precontractual measures and performance of contract).

    5.2 Fraud prevention

    In order to prevent fraud cases, we can verify the correctness and deliverability of address data via shipping providers and restrict the available forms of payment or the conclusion of a purchase contract in case of a typical ordering process (e.g. delivery to an address not used before, simultaneous ordering of a great number of goods and / or services). The legal basis for the described data processing is Art. 6 (1) letter f of the General Data Protection Regulation (balancing of interests based on the interest of OEG to prevent fraud).

    5.3 Product recall

    We process your data (name, email address, transaction data) to ensure the product safety in case of faulty products and to avert personal and / or material damage. Legal basis for the described data processing is Art. 6 (1) letters c and d of the General Data Protection Regulation (fulfillment of a legal obligation OEG is subject to, or the protection of vital interests of the person concerned or any other natural person).

    5.4 Advertising

    In addition to the processing of your data for the execution of the service “order online“, we also use your data for advertising purposes like described in the following. You can object to the processing of your data for advertising purposes at any time. An informal notification to the contact data stated under number 1 is sufficient.

    5.4.1 Newsletter

    On our website you can register for the OEG newsletter. The newsletter informs you about the current OEG offers. If you give us your name, we use it to address you personally. If you impart more data than these, we use them to adapt the contents of the newsletter to you and your individual interests. After dispatching the registration form, you will receive a confirmation email. The registration is only valid, after you have clicked on the link in the confirmation email. You can unsubscribe from the newsletter at any time. Simply use the link for the cancellation at the end of each email. The legal basis for the described data processing is Art. 6 (1) letter a of the General Data Protection Regulation (consent).

    5.4.2 Personalisation of advertising approach

    We want to provide you with advertisements based on your individual interests. For this, we analyse your data and try to select products, services and special offers which might be interesting to you. For this, we evaluate your data to see typical patterns of your clicking or purchasing behaviour, clearly defined target groups and to customize the advertising approach to the respective target group. Calculated purchase probabilities help us to realize your demands better. Moreover, your data allow us to show you services available in your market; to adjust the frequency of advertising approach to your usage habits as well as to address you personally. Legal basis for the described data processing is Art. 6 (1) letters a and f of the General Data Protection Regulation (consent or balancing of interests based on the interest of OEG to offer advertisements oriented towards the individual interests of the recipient).

    5.4.3 Satisfaction survey

    We process your data to invite you to satisfaction surveys, e.g. subsequent to an order. Legal basis for the described data processing is Art. 6 (1) letters a nd f of the General Data Protection Regulation (consent or balancing of interests based on the interest of OEG to determine customer satisfaction with the service “order online“).

    5.4.4 Advertising effectiveness study

    We evaluate the results of our marketing activities to measure the efficiency and relevance of our campaigns. We determine the success of our advertising campaigns to continuously improve our marketing activities on your behalf and to plan new campaigns. Legal basis for the described data processing is Art. 6 (1) letter f of the General Data Protection Regulation (balancing of interests based on the interest of OEG to measure the success of advertising campaigns.

    5.5 Competitions

    From time to time, you have the option to take part in competitions on our website. For the execution of a competition, we process your data (name, email address, address and, when needed, more data required for the competition). We process your data for the verification of the right to participate, for determining and notification of the winner, for dispatching the price as well as the potential publication of the winner. Legal basis of the described data processing is Art. 6 (1) letter b of the General Data Protection Regulation (execution of the competition).

    5.6 Analysis of the website/ tracking / services

    For the needs-based design of our internet presence, we create pseudonymous usage profiles by means of Google Analytics. The mentioned website analytical tool uses cookies. These allow for an analysis of the usage of our websites. Your IP address is only processed in an anonymised form. The website analytical tool evaluates the usage of our websites for us and compiles reports about your website activities. At any time, you can object to the pseudonymous usage profiling.

    Google Analytics:
    One option to object to the web analysis by google analytics is to set an opt-out cookie which instructs google not to process your data for web analytical purposes. Please note that with this solution the web analysis will not be made as long as the opt-out cookie is stored by your browser. If you want to set the opt-out cookie now, click here. Depending on the browser you use, there is the option to install a browser plug-in which prevents tracking. For this, click here and install the browser plug-in, which is retrievable there.

    econda Analytics:
    For the needs-based design and the optimisation of this website, solutions and technologies of econda GmbH record and store anonymised data as well as create usage profiles from these data by using pseudonyms.For this purpose, cookies can be applied which allow the recognition of an internet browser. Usage profiles, however, are not collated with data about the carrier of the pseudonym without the express consent of the visitor. Particularly, IP addresses are disguised directly after their entry, which makes it impossible to assign usage profiles to IP addresses. The usage of pseudonymised data is based on the regulations of § 15 (3) TMG. Visitors of our website can object to this data collection and storage for the future at any time here.

    The Use of Hotjar:
    This website uses Hotjar, an analytics software of Hotjar Ltd. (“Hotjar“) (http://www.hotjar.com, 3 Lyons Range, 20 Bisazza Street, Sliema SLM 1640, Malta, Europe). By using Hotjar, it is possible to record and evaluate the user behaviour (clicks, mouse movements, scrolling behaviour, usw.) on our website. The information generated by the tracking code and cookies about your visit on our website are transferred to the Hotjar servers in Ireland and are stored there.

    The following information can be recorded by your device and your browser:

    • The IP address of your device (collected and stored in an anonymised format)
    • Your email address including your first and family name if you have provided them to us via our website
    • The screen size of your device
    • The device type and browser information
    • Geographic position (country only)
    • The preferred language to view our website
    • Log data

    The following data are automatically created by our servers when using Hotjar:

    • Current domain
    • Visited sites
    • Geographic position (country only)
    • The preferred language to view our website
    • Date and time when accessing the website

    Hotjar will use this information to evaluate your visit to our website, generate reports about the use and to analyse other services relating to the use of the website and internet evaluation of the website.
    For providing this service, Hotjar also uses services from third-party companies, like for example Google Analytics and Optimizely. These third-party companies can store the information that your browser transmits while you visit the website, like for instance cookies or IP inquiries. For more detailed information on how Google Analytics and Optimizely store and use data, please observe their respective privacy statements.
    The cookies Hotjar uses have different „life spans“. Some are deleted after 365 days, others remain valid only during your current visit.
    You can prevent the data capture through Hotjar by clicking on the following link and following the instructions there: https://www.hotjar.com/opt-out.

    Legal basis for the described data processing is Art. 6 (1) letter f of the General data Protection (balancing of interests based on the interest of OEG to measure and to analyse the usage of their website).

    5.7 Usage-based online advertising (remarketing / retargeting / targeting)

    Our website or the website from which you have been linked to our website, processes your usage behaviour. It works like this: When you visit our website, it is possible that the operator of an advertising website network retrieves recognition features for your browser or your terminal (e.g. creates a so-called browser fingerprint), evaluates your IP address or stores a recognition feature in the form of a small text file on your terminal (e.g. third-party cookie). It is also possible that the advertising network operator links and stores your visit to our website with one or several of these recognition features to show you our advertising on other internet pages.

    The above described recognition features have been designed as pseudonyms and can be used by the advertising network operator to recognize your terminal on other websites. If you, for instance, visit a website that takes part in the advertising network of the operator (shows advertising on behalf of the advertising network operator), the operator can recognize your terminal and your browser by means of the above mentioned features.

    We can also equip our websites with so-called remarketing tags. This means that we include keywords in our website which contain statements about the content of the displayed website (like product or service categories). The keywords we use exhibit neither personal nor sensitive information. The advertising network operator receives and stores these keywords under the above mentioned recognition features. This means, if you visit a website which we have keyworded with a certain product category, the advertising network operator saves this keyword and assigns it to your recognition features.

    By doing this, we can comission advertising on other websites that complies with the sites visited before. If you visit another website, which takes part in the advertising network of the operator, the operator can recognize if and maybe which of our advertisements should be shown to you by means of the recognition features and the keywords stored under these features.

    If you register with an advertising network operator by using your own registration data (e.g. google), it can link the recognition features of different browers and terminals. If the advertising network operator has created an own recognition feature for the destop PC or notebook, smartphone or tablet you have used, these recognition features can be assigned to each other, as soon as you use or have used a service of the advertising network operator. Thus, the advertising network operator can play our advertising campaigns beyond terminals target-oriented. The advertising network operator will do this only if you agreed to this data processing with him in the past.

    In order to provide advertising by means of your usage behaviour, we work together with different providers. We have collected them in the following overview. You can object to this kind of advertising at any time. For this, follow each link given here to opt out.

    Google Remarketing
    Data protection notices: https://policies.google.com/privacy?hl=en
    Objection (Opt-out): https://adssettings.google.com/

    Google Adwords/ Conversion Tracking
    Data protection notices: https://support.google.com/adwords/answer/2549063?hl=en
    Objection (Opt-out): http://optout.networkadvertising.org/?c=1#!/

    Facebook
    Data protection notices: https://de-de.facebook.com/policy.php
    Objection (Opt-out): https://www.facebook.com/login.php?next=https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen

    Bing Ads
    Data protection notices: https://advertise.bingads.microsoft.com/de-de/ressourcen/richtlinien/richtlinien-zur-datensicherheit-und-datnschutzerklaerung
    Objection (Opt-out): https://advertise.bingads.microsoft.com/de-de/ressourcen/richtlinien/optout-optimization

    Opt out directly via data protection notice site

    On the website www.youronlinechoices.com/ you will receive more information about usage-based online advertising and the individual suppliers. There, you also have the option to object to the usage-based online advertising by single or all suppliers.

    Legal basis for the described data processing is Art. 6 (1) letter f of the General Data Protection Regulation (balancing of interests, based on the interest of OEG and the advertising network operator to present advertisements based upon the individual interests of the recipient).

    5.8 Live chat

    At certain times, users of oeg.net can communicate via a live chat directly with OEG employees. For using the chat, we transfer the language selected in the shop as well as the customer number (if you are logged in). In general, no other personal data are required. If you give personal data, we will process them to perform an existing contract or for initiating one on the basis of Art. 6 (1) page 1b in the GDPR. We also record the IP address, the chat itself and your customer number if you are logged in. We will delete these data unless they are required with a view to the exercise or defence of legal claims or mandatory statutory directives – particularly retention periods – or do not contradict to their deletion. For the chat, oeg.net uses the services of the company SnapEngage (SnapEngage, LLC, at 1722 14th St., Suite 105, Boulder, CO 80302, USA). When using the live chat, data are transmitted to the servers of SnapEngage. We have a contractual agreement with the provider SnapEngage. Also, SnapEngage has submitted to the “Privacy Shield“ agreement existing between EU and the USA https://www.privacyshield.gov/ Find more information on data protection by SnapEngage under https://snapengage.com/privacy-policy/

    5.9 Social media

    On our website you will find links to the social media services of facebook, twitter, google+ and YouTube. You can identify links to the websites of social media services by the respective company logo. If you follow this link, you will reach the corporate identity of OEG with the respective social media service. By clicking on a link to a social media service, a connection to the servers of the social media service is created. Hereby, it is transmitted to the servers of the social media service that you have visited our website. Moreover, other data are also transmitted to the provider of the social media service. They are as follows, e.g.:

    • Website address where the activated link is located
    • Date and time of visiting the website or link activation
    • Information on the browser and operating system used
    • IP address

    If you are already logged in the respective social media service at the time of the link activation, the provider of the service is able to detect your user name and maybe your real name from the transmitted data, and assign this information to your personal user account with the social media service. You can exclude the possibility of assignment to your personal user account by logging out of your user account beforehand.

    The servers of the social media services are located in the USA and other countries than the European Union. The data can therefore also be processed through the provider of the social network service in countries outside the European Union. Please note that companies in these countries are amenable to a data protection law that might not protect general personal data in the same degree like it is the case in the member states of the European Union.

    Please note that we cannot influence the extent, the nature and purpose of the data processing by the provider of the socal network service. More information on the use of your data by the social media services integrated in our website can be found in the data protetion notice of the respective social media service.

    5.10 Forms

    • Contact form
      You can contact us via our “contact form“. We process your data to respond to your inquiry or for sending the information material you desire. Your data can be transferred to the department reponsible for your inquiry. Legal basis for the described data processing is Art. 6 (1) letters b and f of the General Data Protection Regulation (precontractual measure, performance of contract or balancing of interests based on the interest of OEG to respond to customers’ or other people’s inquiries).

    • Form Product inquiries
      You can contact us via our form “product inquiries“ to inquire about products. We process your data to respond to your inquiry or for sending the information material you desire. Your data can be transferred to the department responsible for your inquiry. Legal basis for the described data processing is Art. 6 (1) letters b and f of the General Data Protection Regulation (precontractual measure, performance of contract or balancing of interests based on the interest of OEG to respond to customers’ or other people’s inquiries).

    • Form Feedback
      You can contact us via our “feedback“ form. We process your data to respond to your inquiry or for sending the information material you desire. Your data can be transferred to the department responsible for your inquiry. Legal basis for the described data processing is Art. 6 (1) letters b and f of the General Data Protection Regulation (precontractual measure, performance of contract or balancing of interests based on the interest of OEG to respond to customers’ or other people’s inquiries).

    • Form Request a return call
      You can contact us via our form “request a return call“. We process your data to respond to your inquiry or for sending the information material you desire. Your data can be transferred to the department responsible for your inquiry. Legal basis for the described data processing is Art. 6 (1) letters b and f of the General Data Protection Regulation (precontractual measure, performance of contract or balancing of interests based on the interest of OEG to respond to customers’ or other people’s inquiries).

    • Form Product reviews and tips
      You can review a product via our form “product reviews and tips“. We process your data to respond to your inquiry or for sending the information material you desire. Your data can be transferred to the department responsible for your inquiry. Legal basis for the described data processing is Art. 6 (1) letters b and f of the General Data Protection Regulation (precontractual measure, performance of contract or balancing of interests based on the interest of OEG to respond to customers’ or other people’s inquiries).

    • Form Product questions and answers
      You can ask us a question about a product via our form “Questions and answers“. We process your data to respond to your inquiry or for sending the information material you desire. Your data can be transferred to the department responsible for your inquiry. Legal basis for the described data processing is Art. 6 (1) letters b and f of the General Data Protection Regulation (precontractual measure, performance of contract or balancing of interests based on the interest of OEG to respond to customers’ or other people’s inquiries).

    • Form Price alert
      Via our form “price alert“, you can notify us about places and websites where you could get the product for a cheaper price. You can also transmit that price or your desired price. We process your data to respond to your inquiry or for sending the information material you desire. Your data can be transferred to the department responsible for your inquiry. Legal basis for the described data processing is Art. 6 (1) letters b and f of the General Data Protection Regulation (precontractual measure, performance of contract or balancing of interests based on the interest of OEG to respond to customers’ or other people’s inquiries).

    • Form Price valuation
      You can valuate our prices via the form “price valuation“, if the price seems “fair“ or “non-marketable“ to you. If you activate the corresponding check box, you will receive a notification, when your desired price has been reached. We process your data to respond to your inquiry or for sending the information material you desire. Your data can be transferred to the department responsible for your inquiry. Legal basis for the described data processing is Art. 6 (1) letters b and f of the General Data Protection Regulation (precontractual measure, performance of contract or balancing of interests based on the interest of OEG to respond to customers’ or other people’s inquiries).

    5.11 Application

    On our website it is possible to apply at OEG for an advertised position or send us an unsolicited application. You data will be received by the personnel department and forwarded to the department responsible for the advertised position or to persons entrusted with handling the application procedure. All participants handle your application documents with reasonable care and confidentially. Legal basis for the described data processing is Art. 6 (1) letter b of the General Data Protection Regulation and § 26 (1) sentence 1 BDSG (decision about an employment relationship).

    5.12 Web server logs

    If you visit our websites, we process the communication data of the computer sending the request, including IP address, websites you visit with us, the date and duration of the visit, the recognition features of the type of browser and operating system used as well as the website where you visit us from in order to ensure the safety of our IT systems. Legal basis for the described data processing is Art. 6 (1) letter f of the General Data Protection Regulation (balancing of interests based on the interest of OEG to ensure the safety of their IT systems).

    5.13 Cookies

    In some areas of our website we use cookies, e.g. to recognize preferences of visitors and to optimise the website accordingly. This allows for the facilitation of navigation and a high degree of user friendliness. Cookies also help us with the identification of particularly popular areas of our internet services.

    Cookies are small text files on the hard disk of your terminal. They allow to provide information for a certain time and to identify your terminal. For a better user guidance and individual service creation, we use permanent cookies.We also use so-called session cookies, which are automatically deleted, when you close your browser. You can set up your browser so that it informs you about the placement of cookies. Thus, the use of cookies is transparent to you. Important: If you completely exclude the use of cookies, some functions of our website might not be accessible to you.

    On our website, we use the following categories of cookies:

    • Absolutely necessary cookies
    • Performance cookies
    • Functionality / personalisation cookies
    • Targeting cookies

    Absolutely necessary cookies:
    These cookies are necessary so that you can move on the website and use its functions, like for access to password-protected areas. Without these cookies, we cannot provide you with certain services required. We use absolutely necessary cookies to uniquely identify registrated visitors so that they will be recognized during their visit or subsequent visits of the website.

    Performance Cookies:
    These cookies detect information about how visitors use a website, for example, which sites they visit most frequently and whether they receive error messages from websites. The data collected by these cookies are important to improve the functionality and the service of the website and to see how efffective our advertising campaigns are.

    Functionality / personalisation cookies:
    These cookies allow websites to remember previous information about a visitor (e.g. user name or language) to provide visitor-tailored functionalities. These cookies are also used to keep settings that you make on the website (e.g. font or font size and other options adjustable by the user). They are also used for the supply of requested services (e.g. playing a video). These cookies are not able to follow your browser activities on other websites. They do not gather information about you which could be used for advertising purposes, and they cannot retrace where you have been on the internet beyond our website. We apply functionality / personalisation cookies to recognize you, when you visit our website, to personalise contents and to save your settings.

    Targeting cookies:
    These cookies are applied to focus our advertising on you and your interests. They are also used to limit the frequency of presenting an advertisement to you, to measure the effectiveness of an advertising campaign and to understand the behaviour of people after looking at an ad. Targeting cookies are usually placed by advertising networks on the sites of the website operator and with his agreement only. They recognize that the user has visited a website and transfer this information to other advertising companies. They are often linked with a website functionality supplied by this company. We apply targeting cookies to custom-tailor advertising on other websites for you and to provide advertising networks used by us with information about your visit. It is our aim to later display exactly the advertisements you are potentially interested in on the basis of your surfing behaviour.

    5.14 Google Tag Manager

    Google Tag Manager:
    This website uses Google Tag Manager. This service allows for website tags to be organised via a surface. Google Tag Manager only implements tags. This means: No cookies are used and no personal data are collected. Google Tag Manager dissolves other tags, which might collect data. Google Tag Manager does not, however, access these data. If a deactivation on domain or cookie level has been made, it remains for all tracking tags provided these have been implemeted by Google Tag Manager.

    5.15 Contacting for feedback reminder

    Feedback reminder by eKomi:
    If you have given your express agreement for this during or after your order according to Art. 6 (1) letter a of GDPR, we will transmit your email address to the ratings platform eKomi Ltd., Markgrafenstraße 11, 10969 Berlin, , (www.ekomi.de), so that it emails you a feedback reminder. You can revoke your agreement at any time by notifying the person responsible for the data processing or towards the ratings platform.

  • 6. Is there an automated processing for a profiling?

    We will not use any automated decision making or profilings when processing your data.

  • 7. Who can access your data and why?

    Within OEG, only persons who need your data for accomplishing their given tasks, are allowed to access them. Beyond OEG, only service providers supporting us to accomplish our tasks can get access to your data. That are service providers of the following categories:

    • Hosting providers for the operation of our servers
    • Development service providers for programming, development, maintenance and support of software applications
    • Email delivery providers for sending emails in conjunction with an order / reservation on oeg.net
    • Call centre providers for customer service
    • Email marketing providers for mailing newsletters
    • Print service providers for printing and sending newsletters
    • Service providers for the provision of survey tools
    • Payment service providers for processing payments
    • Advertising network operators for advertising campaigns and display of online advertisements (remarketing and retargeting)
    • Service providers for the delivery and performance measurement of online advertising
    • Analysis service providers for analysing data and for the analysis of using electronic media (website, bonus card programme)
    • Operators of social media for the provision of social plug-ins

    Payment service providers:

    • PayPal

      When paying via PayPal, credit card via PayPal, debit via PayPal or – if available – “Purchase on account“ or “Instalment“ via PayPal we forward your payment data as part pf the payment process to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg ("PayPal" hereafter). The forwarding is performed according to Art. 6 (1) letter b of GDPR and only as far as this is required for processing the payment.

      PayPal reserves the right to perform a credit check for the payment methods “credit card“ via PayPal, “debit“ via PayPal or –if available – “Purchase on account“ or “Instalment“ via PayPal. For this purpose, your payment data might be transmitted to credit agencies in accordance with Art. 6 (1) letter f of GDPR, based on the legitimate interest of PayPal in the securing your solvency. The result of the credit check with regard to the statistical default probability is used by PayPal to decide on the provision of the respective payment method. The credit check might contain probability values (so-called score values). If score values are part of the result of the credit check, they are based upon a scientifically proven mathematical-statistical process. For the calculation of the score values, address data are also used, but not exclusively. Further information in terms of data protection, also about the credit agencies involved, can be found in the data protection delaration by PayPal: https://www.paypal.com/de/webapps/mpp/ua/privacy-full You can object to the processing of your date at any time by sending a message to PayPal. However, PayPal might remain authorized to process your personal data if this is required for the contractual payment process.

    • SOFORT GmbH

      If you select the payment method “SOFORT“, the payment process is carried out via the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 München, Deutschland (“SOFORT“ hereafter), to whom we forward your information given during the ordering process and the information about your order in accordance with Art. 6 (1) letter b of GDPR. The SOFORT GmbH is part of the Klarna Group (Klarna Bank AB (publ.), Sveavägen 46, 11134 Stockholm, Sweden). The disclosure of your data takes place exclusively for the purpose of payment processing with the payment service provider SOFORT and only as far as it is required. You will find more information about the data protection regulations of SOFORT under the following internet address: https://www.klarna.com/sofort/datenschutz

    • heidelpay GmbH

      If you select the payment method “credit card“, the payment process is carried out via the payment service provider heidelpay GmbH, Vangerowstraße 18, 69115 Heidelberg, Germany (“heidelpay“ hereafter), to whom we forward your information given during the ordering process and the information about your order in accordance with Art. 6 (1) letter b of GDPR. The disclosure of your data takes place exclusively for the purpose of payment processing with the payment service provider heidelpay and only as far as it is required. You will find more information about the data protection regulations of heidelpay under the following internet address: https://www.heidelpay.com/de/datenschutz/

    Service providers used by us have to fulfill special confidentiality agreements. They only gain access to your data to the extent and for the duration required for accomplishing the tasks.

    In case an offence is suspected, we are supposed to disclose your data to the prosecution authorities (police, prosecution).

  • 8. Are data processed outside the European Union?

    For the processing of your data, we also apply service providers, who are located in third countries outside the European Union. Countries outside the European Union handle the protection of personal data differently than countries in the European Union. Currently, there is no decision on behalf of the EU commission that these third countries in general provide an appropriate protection level. Therefore, we have taken special measures to ensure that your data are processed as securely in third countries as in countries of the European Union. We conclude the data protection contract with service providers in third countries, provided by the commission of the European Union for the processing of personal data in third countries (standard privacy clause). It provides suitable guarantees for the protection of your data with service providers in third countries.

  • 9. How long do we store the data?

    In principle, we store your data only as long as we need them for the respective processing purposes. If the data are not required any more for the fulfillment of the processing purposes mentioned in these data protection notices, they will be deleted unless their storage is still necessary for the fulfillment of commercial- and tax- reporting retention requirements. Generally, we delete your data after these periods or determine the deletion deadline according to these criteria:

    • Data for the OEG customer account after the termination of the contractual relationship
    • Data for the OEG newsletter after the revocation of the agreement within one month
    • Date for the OEG newsletter automatic deletion of unconfirmed recipients after 3 months
    • Data about purchases made when ordering on oeg.net up to 10 years after the purchase
    • Data about the participation in a competition two months after finishing the competition
    • Data for a request to the customer service three moths after the termination of the process
    • Data for an application for an advertised job six months after the termination of the application procedure
  • 10. What kind of rights do you have?

    10.1 Information

    You may demand information about the personal data processed by us.

    10.2 Correction

    If your data should not be correct (any more), you can demand the correction of your data. If your data are incomplete, you can demand a completion.

    10.3 Deletion

    You have the right to demand the deletion of your data. Please note that a claim for deletion depends on a legitimate reason to do so. There must be no regulations which oblige us to store your data.

    10.4 Limitation of processing

    You have the right to demand the limitation of the processing of your data. Please note that your claim to limit the processing depends on a legitimate reason to do so.

    10.5 Contradiction

    You have the right to appeal against processing your data for reasons arising from your special situation. In the case of a justified contradiction, we will not process your data any more.

    10.6 Contradiction against the processing of your data for the purpose of direct advertising

    You have the right to appeal against the processing of your data for the purpose of direct advertising at any time. This also applies to the profiling related to a direct advertising. Your contradiction can be sent to us informally, preferably to the contact data mentioned above by stating the keyword “Contradiction against the processing of my personal data for advertising purposes“.

    10.7 Right of appeal

    You are allowed to lodge a complaint with a data protection supervisory authority if you do not agree with the processing of your data.

    10.8 Data portability

    You have the right to receive any personal data you provided to us in an electronic format.

    10.9 Revocation of your consent

    You have the right to revoke the agreement to process your data at any time. This also applies to the revocation of any declarations of consent you gave us before the data protection regulation became valid, i.e. before 25th May, 2018. The easiest way to revoke a given consent is to apply to the above mentioned contact data via email. The revocation of your consent does not apply to the legality of the data processing performed until the revocation.