Data Protection Policy
1 Collection of personal data on the website
1.1 General information about visiting our website
Contact details of the Data Protection Officer:
Kenkhauser Straße 125
42929 Wermelskirchen, Germany
Tel.: +49 (0) 2173 399 188 0
Technical and organisational measures are used to protect our electronic data processing (EDP) systems against loss and destruction, as well as against access, modification and distribution of data by unauthorised persons.
When you access our website, the following data (server log files) is collected automatically:
Browser type and version
Operating system used
Host name of the accessing computer
Date and time of the server request
Website content called up
We are both legally and contractually obliged to process this personal data. Data is processed in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest and for the following purposes:
To guarantee that a connection can be established to the website without issue
To ensure that our website functions smoothly
To assess system security and stability
For other administrative tasks.
We do not use your data to identify you personally. The data is deleted once it is no longer required for the purposes of processing. This is generally what happens to data that serves to make the website available, once the respective session has ended. The data may be received by technical service providers who act as data processors for operating and maintaining our website.
1.3 Purpose and legal basis of data processing
We store your data solely in order to respond to your queries, to fulfil and perform contracts, for our own marketing purposes and to protect our property. Data is processed in accordance with current data protection regulations.
We process you personal data whenever you have a query, request a quotation or conclude a contract with us. Depending on the type of contract in question, this data includes your surname, first name, postal address, e-mail address, telephone/fax number, and potentially your date/place of birth, bank account details and VAT ID number. We store and process this data in our customer management system in order to fulfil and perform the contract, as well as for our own marketing purposes. Data is not passed on to unauthorised third parties.
1.4 Registering on our website
When you register to use our personalised services, the following personal data is collected:
Company name, title, surname, first name, username
E-mail address, website
Whether you are an Ortlinghaus customer or Ortlinghaus employee
If you are registered with us, you can access the content and services that we offer exclusively to registered users. If you do not provide us with your personal data, we cannot give you access to the content and services that we offer. Providing your personal data is voluntary. Logged-in users can change or delete the data they entered upon registering at any time. It goes without saying that we will also provide information about what personal data we have stored about you at any time. The data you enter upon registering is processed on the basis of our legitimate interest in giving you to access to the data contained in the login area (Art. 6(1)(f) GDPR). The data may be received by technical service providers who act as data processors for operating and maintaining our website. In this context, data will only be processed if you have given your consent. It will then be deleted, provided that said deletion is not prohibited under the terms of our legal obligations to retain certain information.
1.5 Contact form
The data you enter is stored for the purposes of communicating with you. Providing your personal data is voluntary. We cannot process your query unless you provide us with your e-mail address and the reason for your query. These help us to assign your query to the person who is best placed to answer it. The data that you enter in the contact form is processed on the basis of a legitimate interest (Article 6(1)(f) GDPR). The contact form is designed to give you a straightforward means of contacting us. The information that you provide is stored for the purposes of processing your query and any follow-up questions.
If you contact us to request a quotation, the data that you enter in the contact form is processed for the performance of a contract (Art. 6(1)(b) GDPR). The data may be received by technical service providers who act as data processors for operating and maintaining our website. The data that you provide via the contact form will be deleted no later than six months after your query has been processed. If a contractual relationship exists, we are subject to the statutory retention periods and will delete your data once these periods have ended.
1.6 Use of Matomo
This website uses Matomo (formerly Piwik), an open-source software package for statistical analysis of user access. Matomo is provided by InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand.
Matomo uses "cookies", which are text files that are stored on your computer and make it possible to analyse how you use the website. The Matomo tracking tool can be used to assess users' behaviour on the website and analyse their interests. We create a pseudonymised user profile for this purpose.
The information that the cookie generates about your use of the website is stored on a server in Germany. Your IP address is anonymised beforehand. You can prevent cookies from being installed by changing your browser settings. Bear in mind that you may no longer be able to make full use of all the functions available on this website if you do this.
You can find more information about Matomo software privacy settings at the following link: https://matomo.org/docs/privacy/. The data may be received by technical service providers who act as data processors for operating and maintaining our website. The data is deleted once it is no longer required for our record-keeping purposes, which in our case is after a period of seven months. Providing your personal data is voluntary. If you prevent access, this may restrict the functionality of the website.
1.7 Use of Google Maps
We use Google Maps on our website. Google Maps is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as "Google"). This means that we can show you interactive maps directly on the website and it allows you to use the map function at your convenience.
Google is certified Privacy Shield Framework and therefore undertakes to comply with European data protection law
We use Google Maps in the interests of displaying our online services in an appealing way and to make it easier to discover the locations that we specify on the website. This constitutes a legitimate interest in accordance with Article 6(1)(f) GDPR.
When you visit the website, Google is informed that you have called up the corresponding sub-page of our website. This information is transmitted regardless of whether Google provides a user account via which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account.
1.8 Use of Google Fonts
This website uses Google Fonts (https://fonts.google.com/) to improve how different information is displayed. When the page is called up, the fonts are transferred to your browser's cache so that they can be used for display purposes. If your browser does not support Google Fonts or prevents access, the text is displayed in a standard font.
When the page is called up, no cookies are placed on the website visitor's computer. Data that is transmitted in connection with calling up the page is sent to resource-specific domains such as fonts.googleapis.com and fonts.gstatic.com. It is not linked to data that may have been collected or used in connection with the parallel use of authenticated Google services such as Gmail.
You can configure your browser so that it does not load the fonts from the Google servers (e.g. by installing add-ons such as NoScript or Ghostery for Firefox). If your browser does not support Google Fonts or you prevent access to the Google servers, the text is displayed in a standard system font.
You can find general information about data protection in the Google Privacy Center at: https://policies.google.com/privacy?hl=en-EN
1.9 Protection of applicants' data
We collect and process the personal data of job applicants for the purposes of managing the application process. Their data may be processed digitally as well as manually. This is always the case if an applicant sends us their application in digital format, for example by e-mail or using an online form that we have made available on our website. If we conclude an employment contract with the applicant, the data transmitted for the purposes of establishing the employment relationship is stored in accordance with legal regulations. If an employment contract is not concluded with the applicant, the application is deleted three months after the applicant is notified of rejection, provided deletion does not conflict with other legitimate interests on our part, such as a burden of proof in legal proceedings in accordance with the German General Act on Equal Treatment (AGG).
2 Data storage length
We store your data for as long as is necessary to fulfil the specific purpose for which it is needed. Appropriate deletion schedules are in place and are continually adjusted in line with legal conditions and necessary circumstances.
If certain data (invoice data) that is processed in order to fulfil purchase agreements is subject to a retention period under tax law, this data is stored for six or ten years. Processing of the data is restricted during this time. The legal obligation to retain this data starts at the end of the calendar year in which the quotation was written and/or the agreement was fulfilled.
3 SSL encryption
We use state-of-the-art encryption techniques (e.g. SSL) via HTTPS to guarantee the security of your data during transmission.
4 Automated decision-making
We do not make use of automated decision-making.
5 Limitation of liability
5.1 Liability for content
The content of our pages has been prepared with the utmost care and attention. Nevertheless, we cannot provide any guarantee that the information is up to date, accurate or complete. In accordance with Section 7(1) of the German Telemedia Act (TMG), we, the service provider, are responsible under general law for our own content on these pages. Pursuant to Sections 8 to 10 of the TMG, however, we, the service provider, are not obliged to monitor transmitted or stored information from third-party sources or to search for circumstances that indicate illegal activity. Obligations to remove or block the use of information, as prescribed by general law, remain unaffected by this. Any liability in this regard can, however, only be assumed from the moment that knowledge of a specific violation of law is obtained. Once we become aware of such violations, we will immediately remove this content.
5.2 Liability for links
Our pages may contain links to external websites operated by third parties, the content of which we have no influence over. Consequently, we cannot provide any guarantees for this third-party content. The provider or operator of the respective websites is responsible for the content of the linked pages. The linked pages were checked for possible legal violations at the time the links were set up. No illegal content was identified at the time the links were set up. However, continuous monitoring of the content on linked pages is not deemed reasonable without specific grounds to suspect a legal violation. Once we become aware of such violations, we will immediately remove the links in question.
6 Updates and changes
7 Rights of the data subject
Your rights as the data subject are fully guaranteed by Ortlinghaus. You have the following rights vis-à-vis the controller with regard to the personal data that we store about you:
Right to withdraw consent (Art. 7(3) GDPR)
Right to obtain information about what data we have stored about you and how it is processed (Art. 15 GDPR)
Right to have incorrect personal data rectified (Art. 16 GDPR)
Right to erase the data we have we stored about you (Art. 17 GDPR)
Right to restriction of data processing (Art. 18 GDPR)
Right to object to us processing your data (Art. 21 GDPR)
Right to data portability, provided that you have consented to data processing or concluded a contract with us (Art. 20 GDPR).
You can lodge a complaint with a supervisory authority for data protection at any time:
8 Contact details
Kenkhauser Str. 125
42929 Wermelskirchen, Germany
Tel.: +49 (0) 2196 85 0
Fax: +49 (0) 2196 855 444