Privacy policy
1. Controller
OSKAERE GmbH
Gelsenkirchener Str. 12
28199
Deutschland
Phone: +49 421 17839981
Email: info@oskaere.com
Represented by: René Heuer
For any questions about data protection, please contact us at the email address above.
2. Overview
We process personal data only to the extent necessary to operate this website, the dealer, press and agent areas, and to communicate with you. This website uses no analytics or tracking tools, no advertising cookies and no social media plugins, and it does not load fonts or scripts from third-party servers.
3. Hosting and server logs
The website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. When you visit the website, the server processes technically necessary data transmitted by your browser, in particular IP address, date and time, page requested, amount of data transferred, referrer, browser and operating system. This is necessary to deliver the website and to ensure secure and stable operation. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a secure, functioning website). We have concluded a data processing agreement with STRATO under Art. 28 GDPR. STRATO deletes the logs automatically after a short period.
4. Cookies
We only use one technically necessary session cookie (osk_sess). It stores your language choice and – after login – that you are logged in to the dealer, press or agent area.
The cookie is deleted when you close your browser. The legal basis is Section 25(2) no. 2 TDDDG in conjunction with Art. 6(1)(f) GDPR. No consent is required.
5. Contact by email or phone
If you contact us, we process your details (e.g. name, email address, phone number, content of your enquiry) to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract or its preparation, otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries). We delete the data once it is no longer needed, unless statutory retention obligations apply.
6. Dealer registration and dealer area
For dealer registration we process: company, VAT ID, optionally website, contact person and optionally position, phone, email address (also your login), billing and, where applicable, delivery address, email addresses for invoices and order confirmations, selected language and your password (stored only as an encrypted hash). We use this data to review your application, set you up as a customer, give you access to the dealer area and inform you by email about your activation and new documents. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures and performance of a contract).
In the dealer area we log your acceptance of the image terms of use (version, time, IP address), your downloads (file, time, email address, IP address) and the time of your last login. This serves as proof of the agreed rights of use, to prevent misuse and to keep track of which documents our dealers have. The legal basis is Art. 6(1)(f) GDPR.
We store the data for as long as your access exists. Rejected applications and deleted accounts are removed from the dealer directory. Where data becomes part of the business relationship (e.g. customer master data, business correspondence), we retain it in accordance with commercial and tax law (Section 257 HGB, Section 147 AO, generally six or eight years). Log entries are deleted no later than three years after the end of the year in which the account was deleted.
7. Press and agent registration
For access to the press area we process: name, optionally role, publication or newsroom, email address (also your login), optionally phone, publication website and your topic, selected language and your password (stored only as a hash). We use this data to review your request, give you access to press material and inform you about your activation and new press material. The legal basis is the consent you give when registering (Art. 6(1)(a) GDPR), which you can withdraw at any time with effect for the future – a short email is enough and we will delete your account.
As in the dealer area, we log your acceptance of the image terms of use (version, time, IP address), downloads (file, time, email address, IP address) and your last login – as proof of the rights of use granted and to prevent misuse (Art. 6(1)(f) GDPR). We store the data for as long as your access exists; log entries are deleted no later than three years after the end of the year in which the account was deleted.
Agent area: For access to the agent area (sales representatives) we process: name, company or agency, optionally sales territory, email address (also your login), phone, optionally website and your message, selected language and your password (stored only as a hash). Purpose, legal basis, logging of downloads and logins and storage period are the same as for the press area.
8. Protection against misuse of logins
To prevent password guessing, after failed login attempts we briefly store a hash of your IP address and the number of attempts. After several failed attempts, login is blocked for 15 minutes. The entries are deleted after about one hour at the latest. The legal basis is Art. 6(1)(f) GDPR (protecting the accounts).
9. Sending emails via Microsoft 365
We send our emails – including the automatic emails from this website (confirmations, activations, notifications) – via Microsoft 365 provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. This involves processing your email address, your name and the content of the email. We have concluded a data processing agreement with Microsoft under Art. 28 GDPR. Processing in the USA cannot be ruled out; Microsoft Corporation is certified under the EU-US Data Privacy Framework (adequacy decision under Art. 45 GDPR), and EU standard contractual clauses also apply.
10. Image library (www.box.com)
In the dealer and press areas – after you accept the image terms of use – we link to an image library hosted by www.box.com. The library only opens when you click the link; no data is transmitted to the provider before then. When it opens, the provider processes your IP address and technical browser data under its own responsibility. The provider's privacy policy applies.
11. Dealer shop (Shopify)
Our dealer shop is a separate service on the Shopify platform and is only linked from here. When you click the link you leave this website; the privacy policy published in the shop applies there.
12. Job applications
If you apply to us by email, we process your application documents to carry out the application procedure (Section 26 BDSG, Art. 6(1)(b) GDPR). If no employment relationship results, we delete the documents six months after the procedure ends, unless you have consented to longer storage.
13. Recipients
Within OSKAERE GmbH, only the people who need your data for the purposes described have access to it, as well as our processors (STRATO as host, Microsoft for sending emails). Data is only passed on to other third parties where we are legally obliged to do so. We do not sell data and do not make automated decisions within the meaning of Art. 22 GDPR.
14. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to withdraw consent with effect for the future (Art. 7(3)). Simply contact us at info@oskaere.com.
Right to object (Art. 21 GDPR): Where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation.
You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is:
Der Landesbeauftragte für Datenschutz und Informationsfreiheit der Freien Hansestadt Bremen, Georgstraße 122–124, 27570 Bremerhaven, Germany,
www.datenschutz.bremen.de
15. Data security
The website is only accessible via encrypted HTTPS. Passwords are stored only as hashes. Dealer data, logs and files are kept in locked directories that cannot be accessed from outside.