Privacy policy

We are pleased about your interest in our web site. The protection of your privacy is important to us. In the following, we will inform you in detail about how we are handling your data.

Storing of access logs on the server

You can visit our web site without giving out any personal data. We are merely storing access meta data in so-called server logfiles. These are:

• Type and version of browser
• Type of operating system
• Referrer URL
• Requested URL
• Hostname of the requesting computer
• Time of day at request

This information by itself can not be used to identify a particular person. There is also no combination of this information with other sources of data. This data is used, if we have reasons to believe that our services are being misused in an unlawful manner. After four weeks, the collected data is automatically deleted from our servers.

Use of cookies

This web site employs three different categories of so-called cookies; that is, small text files, which will be saved in your browsing device. Some of the employed cookies will automatically be deleted after you close your browser (so-called session cookies). Others remain on your device and enable us to recognise it on your next visit of this web site (so-called persistent cookies). You can configure your browser in a way that you are being alerted about the transmission of cookies, or deny their transmission entirely.

Cookie category 1: CSRF-protection cookie; to protect the web-site and its users from cross-site-request attacks. Does not contain any personal data and can in itself not be used to deduce the identity of the user. This category of a cookie can be suppressed by the user's browser, but is required by the web site to provide its basic functionality. Hence, there is currently no possibility or option to not transmit this category of a cookie.

Cookie category 2: state cookie (persistent); to store temporary state information that needs to be preserved by OOREP, if the user switches between the OOREP application and static HTML pages (e.g., login or register page). Such state includes, for example, the information that the user has confirmed the initial cookie popup (otherwise it would be presented over and over again). Does not contain any personal data and can in itself not be used to deduce the identity of the user. This category of a cookie can be suppressed by the user's browser, but is required by the web site to provide its basic functionality. This cookie will be transmitted upon user consent in the cookie dialog.

Cookie category 3: login cookie (persistent); will only be transmitted after the user has registered with this web site and logged in using his or her personal username and password. This category of a cookie contains the internal user ID, and, assuming access to the internal database, could then in theory be used to deduce the identity of the user. However, there is active protection against this in place in terms of firewalls and other security features. This cookie is irrelevant or rather: will not be transmitted, unless the user logs in using personalised username and password. The basic functionality of the web site is given even without transmission and use of this category of cookie.

Third-party software, tracker, external fonts and advertisements

This web site currently uses no external analytics software (e.g., Google Analytics), so-called trackers, external fonts (e.g., Google Fonts). Furthermore, there are no external advertisements included in this web site. That is, it is not possible that any third-party cookies will be transmitted to the user's browsing device by using this web site.

Automated decision making and profiling

This web site does not employ any automated processes to make decisions on your behalf (including profiling), which are legally binding for you or constrain you in such a manner.

SSL encryption

In order to protect the integrity of your data in transmission, we are using state-of-practice data encryption techniques (e.g., SSL) over HTTPS.

Request stored data, changes to them, and possibilities for contact

Under data protection regulations, you have rights over how your personal information is used by others.

• Right to access: You have the right to access the personal information we hold about you. You also have the right to get access to this information.
• Right to rectification: If the information we hold about you contains errors, you have the right for it to be corrected.
• Right to erasure: You have the right to request we erase the information we hold about you from our records if you think it is no longer required for a certain purpose.
• Right to restriction: If you think your personal information is being used for things it shouldn’t be, you have the right to request we stop using it that way.
• Right to portability: There may be times when you want a particular portion of the information we hold about you to be moved to a third party or made portable. You have the right to request that from us.
• Right to freedom of profiling: You have the right to not be subjected to automated profiling or decision making processes on this web site that would have legally binding consequences for you.
• Right to objection: You have the right to object to us, the web site providers, to the collecting and processing of your personal data on the grounds of being subjected to direct marketing campaigns or for reasons, which originate from your particular situation. Should you want to make use of your right to objection, it is sufficient to write to us an E-Mail to the address given in the impressum of this web site (see link at the bottom of this web site).

In case of breach of conduct in terms of users' privacy rights, affected parties have the rights to contact a corresponding governing body, the so-called Datenschutzbeauftragte. This body is located in the same state as the responsible person of this web site (see Impressum). A list of all such governing bodies can be found at this link: Datenschutzbeauftragte.

If we, the web site provider, processes your personal data based on your given permission, you have the right to recall said permission for now and in the future.

Making use of the aforementioned rights is based on some legal prerequisites. In some cases, the extent to which you may execute a certain right may be restricted due to legal exceptions (e.g., Art. 17/3 and Art. 22/2 DSGVO). Should you have questions in this regard or wish to execute your rights, please contact us, the web site providers, at the given address in the impressum (see link at the bottom of this web site).

Change of our privacy policy

This privacy policy has been put online on January 29, 2021 and is currently valid.

We reserve the right to adjust this privacy policy so that it always satisfies and adheres to current legal requirements or to reflect changes in our service offering. For your renewed visit a then new privacy policy may apply.