We very much appreciate your interest in our company. Data protection is of a particularly high priority for the management of Gesellschaft für Oeltechnik mbH. The use of the internet pages of Gesellschaft für Oeltechnik mbH is possible without any indication of personal data. However, if a data subject wishes to make use of specific services of our company via our Internet pages, processing of personal data may become necessary. If the processing of personal data is required and there is no legal basis for such processing, we generally seek the consent of the data subject.
As the data controller, Gesellschaft für Oeltechnik mbH has implemented numerous technical and organisational measures to ensure the most complete protection of personal data processed through this website. Nevertheless, Internet-based data transmission is, in principle, subject to security vulnerabilities, so that absolute protection cannot be guaranteed. For this reason, every data subject is free to transmit personal data to us by alternative means, for example by telephone.
Personal data means any information relating to an identified or identifiable natural person (hereinafter referred to as the "data subject"). Identifiable refers to a person who can be identified directly or indirectly, in particular by reference to an identifier, such as a name, identification number, location data, on-line identifier or one or more characteristics specific to the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person.
The data subject is any identified or identifiable natural person whose personal data is processed by the data controller.
Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as the collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, deletion or destruction.
Name and address of the data controller
The data controller within the meaning of the General Data Protection Regulation and other data protection laws in the Member States of the European Union and other provisions of a data protection character is:
Gesellschaft für Oeltechnik mbH
Ph.: +49 (0) 7254 981 0
Contact details for the Data Protection Officer
The contact details for our data protection officer are:
Any data subject can contact our data protection officer directly at any time with any questions or suggestions regarding data protection.
Collection of general data and information
The website of Gesellschaft für Oeltechnik mbH collects a range of general data and information every time a person or an automated system accesses the website. This general data and information are stored in the server's log files. We may record (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system reaches our website (the so-called referrer), (4) the sub-pages which are accessed via an accessing system on our website, (5) the date and time the website was accessed, (6) an Internet Protocol address (IP address), (7) the Internet service provider of the accessing system and (8) other similar data and information used for security purposes in the event of attacks on our IT systems.
When using this general data and information, Gesellschaft für Oeltechnik mbH does not draw any conclusions about the data subject. Rather, this information is required to (1) correctly deliver the contents of our website, (2) optimise the contents of our website and the advertising for it, (3) ensure the permanent functionality of our IT systems and the technology of our website and (4) provide law enforcement authorities with the information necessary for criminal prosecution in the event of a cyber-attack. This anonymously collected data and information is, therefore, evaluated by Gesellschaft für Oeltechnik mbH statistically with the aim of increasing data protection and data security in our company in order to ultimately ensure an optimal level of protection for the personal data processed by us. The anonymous data in the server log files is stored separately from all personal data provided by a data subject.
The processing of the data in accordance with the above-mentioned purposes takes place on the basis of our legitimate interest in accordance with Art. 6 (1)(f) GDPR.
Option to contact us via the website
The website of Gesellschaft für Oeltechnik mbH contains legal information that enables quick electronic contact with our company, as well as direct communication with us, which also includes a general address for so-called electronic mail (e-mail address). If a data subject contacts the data controller by e-mail or via a contact form, the personal data transmitted by the data subject will be stored automatically. Such personal data transmitted on a voluntary basis by a data subject to the data controller will be stored for the purpose of processing or contacting the data subject (pursuant to Art. 6 (1)(a) GDPR, Consent). This data will not be disclosed to third parties.
Routine deletion and blocking of personal data
The data controller shall process and store the personal data of the data subject only for the period necessary to achieve the purpose of storage, or for so long as this is granted by the European issuer of directives and regulations or another legislator in laws or regulations to which the data controller is subject.
If the storage purpose is not applicable, or if a storage period prescribed by the European issuer of directives and regulations or another competent legislator expires, the personal data shall be blocked as a matter of course or deleted in accordance with legal requirements.
The website of Gesellschaft für Oeltechnik mbH does not use any cookies that require your consent. The Gesellschaft für Oeltechnik mbH only sets one cookie for the consent manager. Only when switching to the social media offers of Oeltechnik via the links will social media providers set their own cookies. These are subject to the cookie management of the respective providers.
Detailed information about data processing in connection with the use of our social media offers, options for objection (opt-out) and the assertion of rights to information can be obtained via the data protection declaration of the corresponding platform operator.
Provider: Facebook, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
The data processing takes place on the basis of an agreement on the joint processing of personal data in accordance with Art. 26 GDPR.
Privacy statement: https://www.facebook.com/about/privacy/
Provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
Privacy statement: https://www.linkedin.com/legal/privacy-policy
Provider: XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany)
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Privacy statement: https://policies.google.com/privacy
Provider: Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA
Privacy statement: http://instagram.com/about/legal/privacy
Cookies are text files that are placed and stored on a computer system via an Internet browser. Cookies can be used for a range of tasks:
Temporary cookies, or "session cookies" or "transient cookies", are cookies which are deleted after a user leaves an on-line offering and closes their browser. Such a cookie may, for example, store the contents of a shopping cart in an on-line store or a login status, your language settings, etc. These are usually essential cookies that are essential for the functioning of the website or functional cookies (shopping cart).
Cookies are referred to as "permanent" or "persistent" if they remain stored even after the browser has been closed at least for a set period of time. For example, this allows the login status for a shop to be saved if users visit the site again after several days. Similarly, users' interests may be stored in a cookie of this nature and used for measuring reach or for marketing purposes. This usually includes essential cookies, which are necessary for the functioning of the website, but also functional cookies (the reach measurement in this instance).
"Third-party cookies" are cookies that are offered by providers other than the data controller responsible for operating the on-line offer. These can be providers such as Google Analytics or Facebook. They are often also referred to as so-called advertising cookies.
Use of social media
With our social media offer we would like to offer the opportunity to provide new and further information across a range of channels and to create contact possibilities. The information described below is referred to and linked to in the respective social media offers of Oeltechnik. On the website of Oeltechnik there are only links, no active plug-ins, to the social media offers of Oeltechnik.
As a user of our offer, we only process the information that you provide to us through an inquiry: surname, first name, contact address, company affiliation. Furthermore, we may receive further information via a profile you may have created with the social media provider that you have posted there yourself. Further information, such as traffic data, surfing behaviour, etc. is not collected or processed about you by us.
The legal basis for this is our legitimate interest in opening up new contacts with new business partners, customers or applicants (Art. 6 (1)(f) GDPR).
We are represented in the social network Facebook, Facebook Inc., 1601 S. California Avenue, Palo Alto, CA 94304, USA (henceforth "Facebook") by operating a so-called fan page. Via this page you have the opportunity to contact us directly and to receive information about current events in oil technology.
Through this page, we, as the operator, receive data from Facebook, which also includes personal data. We use or process these so-called "Facebook Insights" – as described below – on the basis of our legitimate interests in accordance with Article 6 (1)(f) GDPR. We may retrieve statistical data from Facebook in different categories, such as:
number of page views
origin in terms of country and city
number of times accessed
We use this data to optimise our own contributions. For example, we learn which types of contributions are not successful in the desired target groups and can omit them in the future. In addition, we use the evaluation of "likes" in relation to posts to invite the respective persons to our page (a "like" for the fan page as a whole).
In addition, the aforementioned information provides us with information about which type of posts cause the most frequent interactions at what time of day and on which day of the week. On the basis of this information, we optimise the times at which we place our contributions.
Article 26 GDPR regulates the joint responsibility that exists – in this case between Facebook and us – in relation to the protection of your personal data. Facebook has published a corresponding contract that regulates the shared responsibility described. The company calls this contract the "Page Controller Addendum". You can read the exact content here: https://www.facebook.com/legal/terms/page_controller_addendum
When using Facebook products – including when visiting the Instagram page of Oeltechnik – Facebook Ireland Ltd. processes (personal) data, including from persons who are not logged in to any of the Facebook services. Facebook describes which (personal) data this is in detail, how it is processed, for what purposes and on what legal basis, in its data policy (https://help.instagram.com/519522125107875?helpref=page_content), which applies to all Facebook products. There you will also find information about contact options for Facebook, as well as for setting options for advertisements, cookies, etc. The data may be transferred to countries outside the European Union.
When you visit the Instagram page of Oeltechnik, Facebook collects, among other things, your IP address. Together with other information that Facebook receives through cookies, Facebook provides us, as the operator of the Instagram page, with statistical information about the use of this Instagram page (so-called page insights). This is aggregated data that shows how users interact with the site. These page insights may be based on personal data collected by Facebook in connection with a visit to or interaction with the Instagram page of Rothaus Brauerei and its content by users. Facebook provides further information on this here: https://www.facebook.com/about/privacy.
With the help of page insights, Oeltechnik can carry out an anonymous evaluation of the reach, page views, length of stay for video contributions and actions (likes, comments, sharing of posts), including by age, gender and location (as specified by the users in their respective Instagram profiles). Settings can be made for the evaluation of the range or corresponding filters can be set with regard to the selection of a period, the consideration of a specific contribution and the demographic groupings (e.g. female, 20–30 years old). This data is anonymised, aggregated and abstracted. These settings, therefore, do not allow the Rothaus Brauerei to draw any conclusions about individuals. The evaluation helps us to optimally design the offer on our Instagram page for the purpose of advertising.
The legal basis for this data processing is Art. 6 (1)(f) GDPR, our legitimate interest in the external presentation and advertising for us and our products.
Gesellschaft für Oeltechnik as the provider of the information service does not collect or process any data from the use of the Instagram page.
Article 26 GDPR regulates the joint responsibility that exists – in this case between Facebook/Instagram and us – in relation to the protection of your personal data. Facebook has published a corresponding contract that regulates the shared responsibility described. The company calls this contract the "Page Controller Addendum". You can read the exact content here: https://www.facebook.com/legal/terms/page_controller_addendum There is currently no separate contract for Instagram.
For video presentations from our company, we use the offer of YouTube, part of Google Inc., based in San Bruno/California, USA.
As part of the use of our presence on YouTube, YouTube receives information that the data subject is logged in to YouTube at the same time that the data subject is accessing it. This information is collected by YouTube and assigned by YouTube to the respective YouTube account of the user concerned.
You can prevent this potential for assignment if you log out of your account beforehand. For more information on YouTube's collection and use of your data, please see YouTube's information on data protection at www.youtube.com.
This website contains at least one plug-in from YouTube, belonging to Google Inc., based in San Bruno/California, USA. We have enabled the extended privacy mode on the YouTube page when embedding our YouTube videos. In this case, YouTube will not store any information about the visitors to our website unless the visitors watch the video. This can be recognised by fact that the link for the embed code "www.youtube.com" becomes "www.youtube-nocookie.com". Otherwise, accessing the pages may lead to a connection with YouTube and the Double-Click network (tracking cookies). We have no influence on the further processing of the data when clicking on the video, but we are aware that we as a provider have a joint responsibility. Therefore, you can send us your inquiries about this, if necessary.
For more information on YouTube's collection and use of your data, please see YouTube's information on data protection at www.youtube.com.
As part of your use of our LinkedIn presence, LinkedIn becomes aware that you are logged in to LinkedIn at the same time that you are accessing it. This information is collected by LinkedIn and assigned by LinkedIn to the data subject's respective LinkedIn account.
If you do not wish LinkedIn to use this information in this way, you can prevent this use by logging out of your LinkedIn account before viewing our LinkedIn presence.
LinkedIn offers the ability to unsubscribe from e-mail messages, SMS messages and targeted ads, as well as manage ad settings, at https://www.linkedin.com/psettings/guest-controls.
We use the offer from XING. The provider is New York SE, Dammtorstraße 30, 20354 Hamburg, Germany, Ph.: +49 40 419 131-0, Fax: +49 40 419 131-11, E-mail: email@example.com.
As part of your use of our offer at XING, the operator of XING will be informed that you are logged in to XING at the same time that you are accessing it. This information is collected by XING and assigned to your XING account.
If you would like to prevent the connection to your XING account, you can prevent this use by logging out of your XING account before visiting our XING website.
XING also processes your data for its own purposes. Among other things, so-called tracking takes place. Data from users and other visitors is collected via cookies, pixels and other tracking technologies. The tracking allows XING to ensure security, the provision of the service and the measurement and optimisation of advertising. As a user, it is possible to prevent certain tracking mechanisms via so-called cookie consent, or give consent to this. Data provided, such as address or list uploads and participation in events (offered via XING), is also stored. You can find out how XING processes your data in detail here: Data protection at XING.
Rights of the data subject
The EU General Data Protection Regulation grants you as a data subject various rights that you can claim from us as the data controller
Right to information
Any data subject whose personal data is processed shall have the right granted by the European issuer of directives and regulations to obtain, at any time, information from the data controller free of charge concerning the stored personal data relating to them and a copy of that information. Furthermore, the European regulator has granted the data subject the following information:
the purpose of the processing
the categories of personal data being processed
the recipients or categories of recipients, to whom the personal data has been or will be disclosed, in particular recipients in third countries or international organisations
if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this storage period
the existence of a right to correct or delete the personal data concerning you or restrict its processing by the data controller or object to this processing
the existence of a right of appeal to a supervisory authority (https://www.baden-wuerttemberg.datenschutz.de/)
if the personal data has not been obtained directly from the data subject: all available information on the origin of the data
the existence of automated decision-making, including profiling, referred to in Article 22 (1) and (4) GDPR and – at least in those cases – meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for the data subject.
Furthermore, the data subject has a right to information as to whether personal data has been transferred to a third country or to an international organisation. If this is the case, the data subject, in addition, has the right to obtain information about the appropriate guarantees in connection with the transfer.
If a data subject wishes to exercise this right of access, they may, at any time, contact the contact addresses mentioned in points 2 and 3 or an employee of the controller.
Right to correction
Each data subject whose personal data is processed shall have the right granted by the European issuer of regulations and directives to request the immediate correction of inaccurate personal data concerning them. Furthermore, taking into account the purposes of the processing, data subjects have the right to request that incomplete personal data be completed – including by means of a supplementary declaration.
If a data subject wishes to exercise this right of access, they may, at any time, contact the contact addresses mentioned in points 2 and 3 or an employee of the controller.
Right to deletion (Right to be forgotten)
Each data subject whose personal data is processed shall have the right granted by the European issuer of directives and regulations to demand from the data controller the deletion of personal data concerning them immediately where one of the following grounds applies and so long as processing is not necessary:
The personal data is no longer needed for the purposes for which it was collected or is otherwise processed
The data subject withdraws the consent on which the processing is based according to point Article 6 (1)(a) GDPR, Article 9 (2)(a) GDPR and where there is no other legal ground for the processing.
The data subject objects to the processing pursuant to Article 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21 (2) GDPR.
The personal data has been unlawfully processed.
The personal data must be deleted in compliance with the obligations under European Union or Member State law to which the data controller is subject
The personal data was collected in relation to the offer of information society services referred to in Article 8 (1) GDPR.
If one of the aforementioned reasons applies, and a data subject wishes to arrange for the deletion of personal data stored by Gesellschaft für Oeltechnik mbH, they may, at any time, contact any employee of the data controller. An employee of Gesellschaft für Oeltechnik mbH shall promptly ensure that the erasure request is complied with immediately.
If the personal data has been made public by Gesellschaft für Oeltechnik mbH and our company, as the responsible party, must delete the personal data pursuant to Art. 17 (1) GDPR, Gesellschaft für Oeltechnik mbH shall, taking into account the available technology and the cost of implementation, implement reasonable measures, including technical measures, to inform other data controllers which process the published personal data, that the data subject has requested from those other data controllers that they erase all links to or copies or replications of the personal data, unless the processing is necessary. An employees of Gesellschaft für Oeltechnik mbH shall arrange the necessary measures in individual cases.
Right to restriction of processing
Any data subject affected by the processing of personal data has the right granted by the European issuer of directives and regulations to request the data controller to restrict the processing if one of the following conditions is met:
The accuracy of the personal data is contested by the data subject for a period enabling the data controller to verify the accuracy of the personal data
The processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of the use of the personal data instead.
The data controller no longer needs the personal data for the purposes of processing, but the data subject still needs it to remain on file in order to establish, exercise or defend legal claims
The data subject has objected to processing pursuant to Article 21 (1) GDPR pending the verification of whether the legitimate grounds of the controller override those of the data subject.
If any one of the above mentioned conditions is fulfilled and a data subject wishes to request the restriction of personal data stored by Gesellschaft für Oeltechnik mbH, they can contact an employee of the data controller at any time. The employee of Gesellschaft für Oeltechnik mbH shall arrange the restriction of the processing.
Right to data portability
Each data subject whose personal data is processed shall have the right granted by the European issuer of directives and regulations to receive personal data relating to them that was provided by the data subject to a data controller in a structured, current and machine-readable format. They also have the right to transfer such data to another data controller without interference from the data controller to whom the personal data has been disclosed, provided that the processing is based on the consent pursuant to Article 6 (1)(a) GDPR or Article 9 (2)(a) GDPR or under a contract pursuant to Article 6 (1)(b) GDPR and that the processing is carried out by means of automated procedures, where such processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller.
Furthermore, in exercising their right to data portability pursuant to Art. 20 (1) GDPR, the data subject shall have the right to have personal data transmitted directly from one data controller to another, where this is technically feasible and when doing so does not adversely affect the rights and freedoms of others.
In order to assert the right to data portability, the data subject may at any time contact the contact addresses mentioned in points 2 and 3 or an employee of the data controller.
Right to object
Each data subject shall have the right granted pursuant to the General Data Protection Regulation to object, on grounds relating to their particular situation, at any time, to processing of personal data concerning them, which is based on Article 6 (1)(e) or (f) GDPR (legal bases for processing). This applies to profiling (any type of automated processing of personal data consisting of the use of this personal data to evaluate, analyse or predict certain personal aspects relating to a natural person (e.g. personal preferences, interest), or on the basis of an active consent given by the person concerned to processing (e.g. the storage of applicant data beyond the application process) to recruit more suitable candidates at a later date).
Gesellschaft für Oeltechnik mbH shall no longer process personal data in the event of an objection, unless we can prove compelling reasons worthy of protection for the processing, which outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.
If Gesellschaft für Oeltechnik mbH processes personal data for direct marketing purposes (e.g. e-mail newsletter), the data subject shall have the right to object at any time to processing of personal data concerning them for such marketing. This also applies to any profiling connected with such direct advertising. If the data subject objects to Gesellschaft für Oeltechnik mbH processing for direct advertising purposes, Gesellschaft für Oeltechnik mbH shall no longer process the personal data for these purposes.
In general, Gesellschaft für Oeltechnik mbH shall restrict or terminate the processing of personal data insofar as there are legal requirements for storage and evidence obligations. If this is not the case, the data will be deleted.
In order to exercise the right to object, the data subject may contact Gesellschaft für Oeltechnik directly at the aforementioned contact details (including the data protection officer), as well as any employee of Gesellschaft für Oeltechnik mbH.
Automated decision-making in individual cases, including profiling
Every data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them. An example is an automated selection process for job applicant candidates. There is a restriction if this happens on the basis of an existing contract or the express consent of the person concerned.
If the data subject wishes to exercise the rights concerning automated decisions, they may, at any time, contact the contact addresses mentioned in points 2 and 3 or an employee of the data controller.
Currently, no decision, for example in a selection process for applicants, is based purely on automated decision-making.
Right of complaint
You have the right, if you believe that the processing of your personal data is contrary to the provisions of the General Data Protection Regulation, to contact your respective supervisory authority responsible for data protection. In the case of Baden-Württemberg, this is:
The State Officer for Data Protection and Freedom of Information
Physical address: Königstrasse 10 a, 70173 Stuttgart
Postal address: PO Box 10 29 32, 70025 Stuttgart
Ph.: 0711/615541-0, FAX: 0711/615541-15,
Legal basis for the processing
We process your data within the scope of this website offer under the following legal bases:
Implementation of pre-contractual measures, such as contacting you by e-mail, fulfilling contracts, customer service, delivering goods or providing other services or consideration, the processing is based on Art. 6 (1)(b) GDPR.
For the first contact: e.g. by handing over a business card, storing the data for subsequent contact in the sense of initiating a business or if you wish to send a newsletter by mail (consent with subsequent confirmation e-mail, this can be revoked at any time in the newsletter) due to Art. 6 (1)(a) GDPR.
Establishing contact in the sense of initiating business, sending newsletters to existing customers who are being looked after in accordance with Art. 6 (1)(f) GDPR, as the company has an interest in offering products of Gesellschaft für Oeltechnik to customers who have already been contacted for the first time, or in informing them about new developments and the company via info newsletters, in addition to other sales support in order to maintain the customer relationship.
Processing of application documents sent to us, storage of documents requiring proof and retention of documents from the business relationship for contract processing are carried out on the basis of legal requirements (applicants e.g. on the basis of § 26 German Federal
Data Protection Act (BDSG)) in accordance with Art. 6 (1)(b) GDPR.
Duration for which the personal data will be stored
The criterion used to determine the period of storage of personal data is the respective statutory retention period. After the expiry of the deadline, the corresponding data will be routinely deleted if it is no longer required to fulfil a contract or for initiating a contract.
Existence of automated decision-making
As a responsible company, we do not use automatic decision-making or profiling.
Obligation to provide information
Further information on the processing of your data in our company in other areas:
Obligation to provide information on applicant data
Our obligation to provide information with regard to applicant data can be downloaded here as a PDF document: Obligation to provide information on applicant data
Obligation to provide information on customer and supplier data
Our duty to provide information with regard to customer and supplier data can be downloaded here as a PDF document: Obligation to provide information on customer and supplier data