Data Protection Statement
Thank you for your interest in our Website www.ondesign.de (hereinafter “Website”).
Telephone: +49 (0) 172 400 27 36
(hereinafter “we” and “us”) as the controller of the Website is responsible for the personal data of users of this Website (hereinafter “you”) for the purposes of the General Data Protection Regulation (hereinafter “GDPR”).
The protection of your privacy is a matter of great importance to us. We collect, process and use your personal data in compliance with the contents of this Data Protection Statement and applicable data protection regulations.
“Personal data” per the GDPR is all information related to an identified or identifiable natural person (hereinafter “data subject”). A natural person is considered identifiable when that person can be directly or indirectly identified, specifically, when that person can be associated with an identifier like a name, identifying number, location data, online identification or with one or more special characteristics expressing the physical, physiological, genetic, psychological, economic, cultural or social identity of said natural person. Put differently, personal data about you is information related to you or that says something personal about you and can be associated with you, either alone or in combination with other information.
In this Data Protection Statement we provide detailed information on the personal data about that we gather, process and use when you visit our Website. We ask that you therefore read this Statement with care.
We process your personal data only to the extent necessary to provide a functional website. Beyond that we process only data that you have provided to us as part of making contact.
1.1 Accessing the Website
Every time you access our Website, your browser automatically sends certain information to the server of our Website, which stores it in a logfile. This information concerns:
The legal basis for the collection and processing of information stored in logfiles is Art. 6 para. 1 lit. f GDPR.
We use this information to ensure the functionality of the Website, especially to identify and eliminate Website faults, determine the capacity utilization of the Website and make adjustments and improvements. This is the purpose for our justified interest in processing the data. This processing is explicitly not for the purpose of gaining information on you as a Website visitor.
The information stored in a logfile is deleted when it is no longer needed for the purpose it was collected for. We delete your IP address when you leave our Website. Storage of your data in logfiles going beyond this is possible. In such cases your IP address will be altered so that it is no longer possible to identify the client that called the Website.
Collection of data for the purpose of providing the Website and storage of the data in logfiles is obligatory for the operation of our Website. Consequently, there is no option of contesting it.
1.2 Contact form and e-mail contact
Our Website has a contact form that can be used to contact us. If you do so, the data you enter in the entry fields is transmitted to and stored by us. In order for us to answer you, we need at least a valid e-mail address. You can voluntarily give all other information.
When you send the information you will be reminded of this Data Protection Statement. By sending the contact form, you consent to our processing of the data in the form.
Alternatively, you can contact us at the e-mail address provided. In this case we store your personal data sent with the e-mail.
No data will be provided to third parties in this context. The data will be used only for processing the conversation.
The legal basis for processing the data with your consent is Art. 6 para. 1 lit. a GDPR.
The legal basis for processing the data sent in connection with the sending of an e-mail is Art. 6 para. 1 lit. f GDPR. If the e-mail contact is made with the intention of making a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR.
We use personal data from the input mask only to process the contact request. If the contact is made by e-mail, there is again a justified interest in processing the data.
Other personal data processed during the sending process serves the purpose of preventing misuse of the contact form and ensuring the safety of our IT systems.
The data is erased when it is no longer needed for the purpose it was collected for. For personal data from the entry mask of the contact form, and for personal data sent by e-mail, this the case when the conversation with you is ended. The conversation is ended when circumstances indicate that the respective issues have been dealt with.
Personal data additionally collected during transmission is erased no later than seven days thereafter.
You have the option at any time of revoking your consent to the processing of personal data. If you contact us by e-mail you can at any time withdraw your consent to the storing of your personal data. In this case, the conversation cannot be completed.
If this is done all personal data stored in the course of making contact will be erased.
We use only “session cookies” (also known as temporary cookies), which are stored only for the duration of your use of one of our internet pages. The purpose of these cookies is to make the use of our Website more convenient. For example, session cookies can identify whether you have already visited individual pages of our Website. These session cookies are automatically erased when you leave our Website.
You can set your browser to not accept cookies at all, or only with your explicit permission. You can easily find out how to do this with your browser’s help function. However, if your browser does not accept cookies, the functionality of our Website may be available only to a limited extent or not at all.
Data processing by cookies for the above purposes to maintain our legitimate interests is justified per Art. 6 para. 1 lit. f GDPR.
Personal data is transferred to third parties when
In other cases, personal data will not transferred to third parties.
Our Website can contain hyperlinks to and from third-party websites. When you follow a hyperlink to one of these websites, please note that we cannot accept any responsibility or make any guarantee concerning third-party content or data protection. Please consult their data protection statements before sending any personal data to such websites.
Where your personal data is processed in connection with your visit to our Website, as a “data subject” per GDPR you have the following rights:
5.1 Right to information
You have the right to obtain confirmation from us as to whether personal data about you is being processed by us. If such is the case, you can obtain information on the following:
You have the right to demand information as to whether the personal data pertaining to you is transferred to a third country or an international organization. In this context you can demand to be informed of such transfer per the appropriate guarantees per Art. 46 GDPR.
5.2 Right to rectification
You have the right to rectification and/or completion by us if the personal data pertaining to you is incorrect or incomplete. We are required to make such changes without delay.
5.3 Right to restriction of processing
Under the following conditions, you can demand restriction of the use we make of personal data pertaining to you:
If processing of personal data pertaining to you has been subjected to restrictions, this data - except for its storage - may be used only with your consent or to assert, exercise or defend legal claims or protect the rights of other natural or legal persons, or for reasons of an important public interest of the Union or a Member State.
If the processing of the data has been restricted per the above provisions, you will be informed by us before the restriction is canceled.
5.4 Right to erasure
You can demand that personal data pertaining to you be immediately erased. We are then required to do so without delay, if at least one of the following applies:
A right to erasure does not apply where the processing is required
5.5 Right to information
If you have asserted the right to rectification, erasure or restriction of processing to us, we are obligated to inform all recipients of the personal data pertaining to you of this rectification, erasure or restriction of processing, unless this proves impossible or is associated with unreasonable effort.
You have the right to be informed by us of these recipients.
5.6 Right to data portability
You have the right to receive the personal data pertaining to you that you have provided to us in a structured, common, and machine-readable form. Furthermore, you have the right to transfer this data to another responsible party without hindrance by us, to whom the personal data was provided, insofar as
In exercising this right you further have the right to have us transfer the personal data pertaining to you directly to another responsible party, where this is technically feasible. This must not infringe on the freedoms and rights of other persons.
The right to data portability does not apply to the processing of personal data to perform a task that is in the public interest or which is in the exercise of official authority delegated to the responsible party.
5.7 Right to object
You have the right to object to the processing of personal data pertaining to you per Art. 6 para. 1 lit. e or f GDPR at any time for reasons based on your circumstances; this includes profiling based on these provisions.
We will then no longer process the personal data pertaining to you, unless we can prove compelling reasons worthy of protection for such processing, or the processing serves the assertion, exercise or defense of legal claims.
In connection with the use of services of the information company - irrespective of Directive 2002/58/EG - you can exercise your right to object by means of automatic processes in which technical specifications are used.
5.8 Right to revocation of declaration of consent under data protection law
You have the right to revoke your declaration of consent under data protection law. Revoking your consent does not affect the legality of the processing of data by your consent prior to revocation.
5.9 Automated individual decision making, including profiling
You have the right to not be subjected to a decision based exclusively on automated processing - including profiling - that has legal consequences for you or otherwise substantially disadvantages you. This does not apply when the decision
However, these decisions cannot be based on special categories of personal data per Art. 9 para. 1 DSGVO, unless Art. 9 para. 2 lit. a or g DSGVO applies and appropriate measures are taken to protect your rights, freedoms and justified interests.
With regard to the first and last-named cases, we take appropriate measures to protect your rights, freedoms and justified interests, including at least the right to procure the intervention of a person by us upon presentation of the own standpoint and upon contesting of the decision.
5.9.1 Right to file complaint to a supervisory authority
Regardless of other administrative or legal remedies, you have the right to file a complaint to a supervisory authority, especially in your Member State of residence, workplace or location of the presumed breach, if you are of the opinion that use of the personal data pertaining to you is in breach of the GDPR.
The supervisory authority where the complaint is filed will report to the complainant on the status and outcome of the complaint including the possibility of remedy at law per Art. 78 GDPR.
If you wish to assert one of your rights and/or would like more information, contact us at the following postal or e-mail address:
20457 Hamburg, Hamburg
We may ask you to prove your identity before addressing your concern. This is in order to protect your data from manipulation or erasure by third parties.
This website uses functions of Google Analytics. Google Analytics is a web analysis service of Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA.
Storage of Google Analytics cookies is based on Art. 6 Abs. 1 lit. f GDPR. The website operator has a legitimate interest in the analysis of user behaviour, in order to improve his website as well as his advertising.
We have activated IP anonymization on this website. This means that your IP address will first be abbreviated by Google within a European Union member state or other signatory state of the European economic area agreement before being transferred to the US. Only in exceptional cases will the full IP address go to a Google server in the US before being abbreviated there. On behalf of the operator of this website, Google will use the information to evaluate your use of the site, in order to compile reports on website activity and provide further services to the website operator relating to website use and the internet use of linked services. The IP address of your browser sent by Google Analytics will not be linked to other data by Google.
You can prevent the storage of cookies on your computer by setting your browser accordingly; however, be aware that if you do this you may not be able to make full use of all functions of this website. In addition, you can prevent the capture and use by Google of cookie-generated data related to your use of the website (including your IP address) by downloading and installing a browser plugin from this link: https://tools.google.com/dlpage/gaoptout?hl=de.
Objection to data capture
You can prevent capture of your data by Google Analytics by clicking on the following link. This will set an opt-out cookie that prevents capture of your data on future visits to this website: Deactivate Google Analytics.
For more information on the use of user data by Google Analytics, see Google’s Data protection declaration: https://support.google.com/analytics/answer/6004245?hl=de.
Order data processing
We have a contract with Google concerning order data processing. We apply to the full extent the strict guidelines of German data protection authorities concerning the use of Google Analytics.
This Data Protection Statement is in the status of 25 May 2018. We retain the right to update this Data Protection Statement as appropriate in order to improve data protection and/or reflect changed official practice or laws.