Privacy Policy

1. Overview of Data Protection

Introduction

The subsequent content provides a succinct overview of the manner in which your personal data is handled during your visit to this website. Personal data pertains to any data that can be used to personally identify you. For more in-depth information regarding data protection, please refer to our data protection statement situated beneath this text. Additionally, please note that German data protection law is applicable as this website is hosted in Germany.

Data Collection on this Website

Who is Responsible for Data Collection on this Website?

The website operator is responsible for data processing on this website. You can find the contact details of the website operator in the “Information on the responsible party” section of this privacy policy.

How is Your Data Collected?

Your data is collected in two ways: through your active provision, such as entering information into a contact form, and through automated means or with your consent via our IT systems when you access the website. This latter category largely consists of technical data (e.g. internet browser, operating system, or time of page view). This data is collected automatically upon your entry onto this website.

What is Your Data Used For?

Certain data is collected to ensure seamless website functionality, while other data is employed for user behavior analysis.

What Are Your Data Rights?

You have the right to receive, at any time and without cost, information about the origin, recipient, and purpose of your stored personal data. Additionally, you can request corrections or deletions of this data. If you’ve given consent for data processing, you can revoke it anytime. Under specific circumstances, you can also request the limitation of processing your personal data. Moreover, you retain the right to file a complaint with the relevant supervisory authority. Feel free to contact us for any inquiries regarding data protection.

Analysis Tools and Third-Party Tools

While visiting this website, your browsing behavior may be statistically evaluated, primarily through analysis programs. Comprehensive details about these analysis programs can be found in the subsequent data protection declaration.

2.  Website Hosting

This website is hosted externally. Personal data collected here is stored on the servers of the hoster(s). This data may encompass IP addresses, contact inquiries, meta and communication data, contractual data, contact details, names, website traffic, and other data generated by a website. External hosting is carried out to fulfill contracts with potential and existing customers (Art. 6 para. 1 lit. b GDPR) and to ensure a secure, efficient, and prompt provision of our online services by a professional provider (Art. 6 para. 1 lit. f GDPR).

If your consent has been requested, processing is based solely on Art. 6 para. 1 lit. a GDPR and § 25 para. 1 Telemedia Data Protection Act (abbreviated in German to TTDSG), provided the consent includes cookie storage or accessing user device information (e.g. device fingerprinting) according to TTDSG. Consent can be retracted at any time. Our hoster(s) will process your data only to the extent required for fulfilling their service obligations and will adhere to our instructions regarding this data. The following hoster(s) are used: Serverprofis GmbH, Mondstr. 2-4, D-85622 Feldkirchen, Germany

3. General Notices and Mandatory Information

Data Protection

The administrators of these pages are highly committed to safeguarding your personal data. We handle your personal data confidentially and adhere to statutory data protection regulations and this data protection declaration. Whenever you use this website, various personal data is collected. Personal data refers to any information that could identify you personally. This Privacy Policy explains what data we collect, how we use it, and why. It’s important to note that transmitting data over the internet (e.g. via email) may not always be secure, and complete protection against third-party access is unfeasible.

Designated Person for Data Processing

The responsible individual for data processing on this website is:

Dr. Oppermann GmbH
c/o Friederici und Partner
Chilehaus A – Fischertwiete 2
20095 Hamburg
E-Mail: info@karl-oppermann.de
General Manager: Dr. Karl Felix Oppermann
Comercial Register: Amtsgericht Hamburg, HRB 156601
Responsable Person: Dr. Karl Felix Oppermann

The responsible entity is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing
personal data (such as names, email addresses, etc.).

Storage Period

Unless this data protection declaration states otherwise, your personal data will be retained by us until the purpose of data processing no longer applies. If you request the deletion of your data or withdraw your consent for data processing, we will delete your data, unless there are other legitimate reasons to store your personal data (e.g. retention periods under tax or commercial law). In such cases, data will be deleted once the relevant reasons cease to exist.

Legal Basis for Data Processing on this Website

If you’ve given your consent for data processing, we process your personal data under the authority of Art. 6 (1) lit. a GDPR or Art. 9 (2) lit. a GDPR for the processing of special data categories as per Art. 9 (1) GDPR. Additionally, data processing might occur under the authority of Art. 49 (1) a GDPR when you’ve expressly consented to transferring personal data to third countries. If you’ve agreed to cookie storage or access to your device information (e.g. via device fingerprinting), data processing is also based on § 25 (1) TTDSG. Consent can be retracted at any time. For contractual fulfillment or pre-contractual measures, your data is processed under Art. 6 para. 1 lit. b GDPR. Legal obligations are fulfilled under Art. 6 para. 1 lit. c GDPR. Legitimate interests are pursued according to Art. 6 para. 1 lit. f GDPR. Further details on legal basis for each circumstance can be found in subsequent sections of this data protection declaration.

Transferring Data to the USA and Other Third Countries

Certain tools from entities based in the USA or other third countries, which lack sufficient data protection regulations, are used on this site. Should these tools be active, your personal data may be transferred and processed in these third countries. Note that these countries may not offer data protection comparable to that in the EU. For example, US companies may be obliged to provide personal data to security authorities without allowing data subjects to challenge this action. Thus, the possibility exists that US authorities (e.g. intelligence agencies) process, analyze, and permanently store data on US servers for monitoring purposes. We have no control over these processing activities.

Revocation of Consent for Data Processing

Many data processing actions require your explicit consent. You can revoke consent previously given at any time. Revoke your consent will not affect the legality of processing carried out before the revocation.

Right to Object to Data Collection in Special Cases and Direct Marketing (Art. 21 GDPR)

If the processing of data is based on the stipulations of Article 6(1)(e) or (f) of the General Data Protection Regulation (GDPR), you possess the right to object to the processing of your personal data at any point, grounded in circumstances specific to your situation; this right also extends to any profiling conducted under these provisions. The relevant legal foundation for the processing can be located in this data protection declaration. Should you raise an objection, we will discontinue processing your personal data, unless we can establish compelling legitimate grounds for the processing that supersede your interests, rights, and freedoms, or if the processing serves the purpose of asserting, exercising, or defending legal claims (objection in accordance with Article 21(1) of the GDPR).

In cases where your personal data is processed for the objectives of direct marketing, you retain the right to object to the processing of personal data linked to you for such marketing purposes, and this right is also applicable to any profiling associated with this direct marketing. If you decide to raise an objection, your personal data will subsequently cease to be utilized for the intention of direct advertising (objection as per Article 21(2) of the GDPR).

Right to Lodge a Complaint with the Competent Supervisory Authority

If GDPR breaches occur, individuals have the right to file a complaint with a supervisory authority, particularly in their habitual residence, place of work, or the location of the alleged breach. This right is in addition to other administrative or judicial remedies.

Right to Data Portability

You have the right to receive the data we process automatically, based on your consent or for contractual performance, in a common, machine-readable format. If you request direct transmission of this data to another responsible party, it will be facilitated only if technically feasible.

Information, Correction, and Deletion

In accordance with applicable laws, you can, at any time, request information about your stored personal data, its origin, recipients, purpose of processing, and, where necessary, demand corrections or deletion of this data. Feel free to contact us for these purposes and for any other inquiries about personal data.

Right to Restriction of Processing

You can request restriction of processing for your personal data. Contact us anytime for this purpose. The right to restrict processing is applicable in the following situations:

• During the verification process of the accuracy of your personal data stored by us, you have the right to request processing restriction.
• If your personal data is processed unlawfully, you can request processing restriction instead of deletion.
• If we no longer need your personal data, but you require it for legal claims, you can request restriction instead of deletion.
• If you’ve raised an objection under Art. 21 (1) GDPR, a balance between your interests and ours must be assessed. While this balance is unresolved, you can request restriction of processing. If your personal data’s processing is restricted, it may only be processed (apart from storage) with your consent or for asserting, exercising, or defending legal claims, or for protecting the rights of another individual or legal entity, or for significant public interests of the EU or a Member State.

SSL or TLS Encryption

To ensure security and protect the transmission of confidential content, like orders or inquiries you send to us, this site employs SSL or TLS encryption. You can identify an encrypted connection when the browser’s address line changes from “http://” to “https://” and a lock symbol appears. When SSL or TLS encryption is active, data you send cannot be read by third parties.

4. Data Collection on this Website

Cookies

Our website uses “cookies,” small data packets that do not harm your device. They can be stored temporarily during a session (session cookies) or permanently (persistent cookies) on your device. Session cookies automatically expire after your visit, while persistent cookies remain until you delete them or they’re removed by your browser. Cookies may originate from us (first-party cookies) or third-party companies (third-party cookies). The latter enables the integration of certain third-party services on websites (e.g. payment processing). Cookies have varied functions; many are technically necessary for vital website functions (e.g. shopping cart, video display), while others assess user behavior or facilitate advertising. Necessary cookies are stored under Art. 6 Para. 1 lit. f GDPR, unless another legal basis is specified. These cookies are necessary for seamless and optimized service provision. If you’ve consented to cookie storage or comparable recognition technologies, processing is solely based on this consent (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG), which can be revoked. Your browser settings can be adjusted to be notified about and allow cookies, accept cookies only in specific cases, reject them in general, or automatically delete them when the browser closes. Deactivating cookies might limit the functionality of this website. Details about cookies and services used on this website are available in this privacy policy.

Contact via Email, Telephone, or Fax

If you reach out via email, telephone, or fax, your inquiry and personal data (name, inquiry) will be stored and processed to address your request. This data will not be shared without your consent. Processing is based on Art. 6 (1) lit. b GDPR for contractual or pre-contractual inquiries, and Art. 6 para. 1 lit. f GDPR for addressing queries. Alternatively, processing could be based on your consent (Art. 6 para. 1 lit. a GDPR), which can be revoked. Data received through contact requests will remain with us until you request deletion, revoke your consent, or the data’s storage purpose is no longer applicable (e.g. after addressing your request). Legal obligations (e.g. retention periods) remain unaffected.

Borlabs Cookie

This website utilizes Borlabs Cookie, a technically necessary cookie (borlabs-cookie) to save your cookie preferences. Borlabs Cookie doesn’t process personal data. The borlabs-cookie records your consent upon entering the website. To revoke these consents, simply delete the cookie in your browser. Upon revisiting the website, you’ll be asked for your cookie consent again. An overview of your set cookies and the option to edit settings are available at the bottom of this page.

5. Plugins and Tools

Google Fonts

This website employs Google Fonts for consistent font display. When you access a page, your browser caches the requisite fonts to correctly render texts. This entails your browser connecting to Google servers, revealing your IP address. The use of Google Fonts is under Art. 6 para. 1 lit. f GDPR, as it aids consistent typeface presentation. If consent includes cookie storage or user device access (e.g. device fingerprinting) according to TTDSG, processing adheres to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. Consent is revocable. In the absence of Google Fonts support, your device uses default fonts. More details about Google Fonts can be found at https://developers.google.com/fonts/faq?hl=en and in Google’s privacy policy: https://policies.google.com/privacy?hl=en

Font Awesome

Font Awesome is utilized for uniform font and symbol display. The provider is Fonticons, Inc., 6 Porter Road Apartment 3R, Cambridge, Massachusetts, USA. Your browser caches required fonts for proper text and symbol rendering when you visit a page. This involves your browser connecting to Font Awesome’s servers, revealing your IP address. Font Awesome use is under Art. 6 para. 1 lit. f GDPR for consistent typeface presentation. If consent includes cookie storage or user device access (e.g. device fingerprinting) according to TTDSG, processing adheres to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. Consent is revocable. Without Font Awesome support, default fonts are used. More details about Font Awesome and its privacy policy are available at: https://fontawesome.com/privacy

Google Analytics

To tailor and optimize our pages and services, we employ Google Analytics, a web analytics service by Google LLC. (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Pseudonymous usage profiles are created, and cookies are used (see point 4). Data generated by the cookie about your website usage (e.g. browser type/version, operating system, referrer URL, host name, time of server request) is sent to a Google server in the USA and stored there. This data evaluates website usage, compiles activity reports, and provides additional services for market research and website design in accordance with needs. Data may also be shared with third parties under legal obligations or as data processors. Your IP address will not be merged with other Google data. IP addresses are anonymized, making assignment impossible (IP masking). You can reject cookies through browser settings, but this might limit website functionality. To prevent cookie-generated data collection and processing (including your IP address) by Google, you can download and install the browser add-on at https://tools.google.com/dlpage/gaoptout?hl=en. As an alternative, you can deactivate Google Analytics at the bottom of this page. An opt-out cookie is set to prevent future data collection during website visits. It only works in this browser for this website and is stored on your device. Deleting cookies will also delete the opt-out cookie, requiring you to set it again. More information about data protection and Google Analytics can be found in the Google Analytics Help (https://support.google.com/analytics/answer/6004245?hl=en).