We are very pleased that you are interested in our company. Data protection is a top priority for the management of OHB Digital Services GmbH. In general, it is possible to use the OHB Digital Services GmbH website without providing any personal data. However, if a data subject wishes to use specific services offered by our company via our website, the processing of personal data may be necessary. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain the consent of the data subject.
The processing of personal data—such as a data subject’s name, address, email address, or phone number—is always carried out in accordance with the General Data Protection Regulation and in compliance with the country-specific data protection regulations applicable to OHB Digital Services GmbH. Through this Privacy Policy, our company aims to inform the public about the nature, scope, and purpose of the personal data we collect, use, and process. Furthermore, this Privacy Policy informs data subjects of their rights.
As the data controller, OHB Digital Services GmbH has implemented numerous technical and organizational measures to ensure the most comprehensive protection possible of the personal data processed via this website. However, internet-based data transmissions may inherently involve security vulnerabilities, meaning that absolute protection cannot be guaranteed. For this reason, data subjects are free to provide us with personal data through alternative means, such as by telephone.
The Privacy Policy of OHB Digital Services GmbH is based on the terminology used by European legislators and regulators when enacting the General Data Protection Regulation (GDPR). Our Privacy Policy is intended to be easy to read and understand for the general public as well as for our customers and business partners. To ensure this, we would like to explain the terminology used in advance.
In this Privacy Policy, we use the following terms, among others:
Personal data refers to any information relating to an identified or identifiable natural person (hereinafter referred to as the “data subject”). A natural person is considered identifiable if they can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
A data subject is any identified or identifiable natural person whose personal data is processed by the controller.
Processing means any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, distribution, or any other form of making available, alignment or combination, restriction, erasure, or destruction.
Profiling means any form of automated processing of personal data consisting of the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.
The controller is the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its designation may be provided for by Union or Member State law.
A processor is a natural or legal person, public authority, agency, or other body that processes personal data on behalf of the controller.
A recipient is a natural or legal person, public authority, agency, or other body to whom personal data is disclosed, regardless of whether or not that entity is a third party. However, public authorities that may receive personal data in the course of a specific investigative mandate under Union law or the law of the Member States are not considered recipients.
A third party is a natural or legal person, public authority, agency, or other body other than the data subject, the controller, the processor, and the persons authorized to process the personal data under the direct responsibility of the controller or the processor.
Consent means any freely given, specific, informed, and unambiguous indication of the data subject’s wishes, expressed by a statement or by a clear affirmative action, by which the data subject signifies agreement to the processing of personal data relating to him or her.
This website is hosted externally. The personal data processed on the OHB Digital Services GmbH website is stored on the host’s servers. This may include, among other things, IP addresses, contact requests, metadata and communication data, contract data, contact information, names, website visits, and other data generated through the website.
External hosting is carried out for the purpose of fulfilling our contractual obligations to our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of ensuring the secure, fast, and efficient provision of our online services by a professional provider (Art. 6(1)(f) GDPR). If consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) of the Telecommunications, Digital Services, and Data Protection Act (TDDDG), insofar as the consent covers the storage of cookies or access to information on the user’s device within the meaning of the TDDDG. Consent may be revoked at any time.
Our host will process your data only to the extent necessary to fulfill its service obligations.
We use the following web hosting provider:
Mittwald CM Service LLC & Co.
4–6 Königsberger Street
32339 Espelkamp
We have entered into a data processing agreement (DPA) for the use of the aforementioned service. This is a contract required under data protection law that ensures the service provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with applicable laws.
The controller within the meaning of the General Data Protection Regulation, other data protection laws applicable in the Member States of the European Union, and other provisions relating to data protection is:
OHB Digital Services GmbH
Konrad-Zuse-Str. 8
28359 Bremen
The data protection officer of the data controller is:
Jochen Zurborg
Manfred-Fuchs-Platz 2-4
D-28359 Bremen
Tel.: +49 (0)421 2020 9720
Email: datenschutz@ohb.de
Any affected individual may contact our Data Protection Officer directly at any time with questions or suggestions regarding data protection.
The OHB Digital Services GmbH website uses cookies. Cookies are text files that are placed and stored on a computer system via a web browser.
By using cookies, OHB Digital Services GmbH is able to provide users of this website with more user-friendly services that would not be possible without the use of cookies. If a user disables cookies in their web browser, some features of our website may not be fully accessible.
Cookies are either stored temporarily for the duration of a session (session cookies) and deleted once you leave the website, or stored permanently (persistent cookies) on your device until you delete them yourself or your web browser deletes them automatically. Cookies allow us to optimize the information and offerings on our website to better serve our users. Cookies enable us to recognize users of our website. The purpose of this recognition is to make it easier for users to navigate our website.
Cookies that are necessary for the execution of the electronic communication process, for providing certain functions you have requested, or for optimizing the website (essential cookies) are stored on the basis of Article 6(1)(f) of the GDPR, unless another legal basis is specified. OHB Digital Services GmbH has a legitimate interest in storing necessary cookies to ensure the technically flawless and optimized provision of its services. If consent to the storage of cookies and similar recognition technologies has been requested, processing is carried out exclusively on the basis of this consent (Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG); consent may be revoked at any time.
The user can prevent our website from setting cookies at any time by adjusting the settings of their web browser, thereby permanently opting out of the use of cookies.
You can find out which cookies and services are used on this website in the Privacy Policy.
The OHB Digital Services GmbH website collects a range of general data and information each time a data subject or an automated system accesses the website. This general data and information is stored in the server’s log files. The following may be collected:
When using this general data and information, OHB Digital Services GmbH does not draw any conclusions about the data subject. Rather, this information is needed to
OHB Digital Services GmbH therefore evaluates this anonymously collected data and information for statistical purposes and to enhance data protection and data security within our company, with the ultimate goal of ensuring an optimal level of protection for the personal data we process. The anonymous data from the server log files is stored separately from any personal data provided by a data subject.
For security reasons and to protect the transmission of confidential information, our website uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address bar in your browser changes from “http://” to “https://” and by the padlock icon in your browser’s address bar.
When SSL or TLS encryption is enabled, the data you send to us cannot be intercepted by third parties.
In accordance with legal requirements, the OHB Digital Services GmbH website contains information that enables users to quickly contact our company electronically and communicate directly with us, including a general email address. If a data subject contacts the controller via email or a contact form, the personal data transmitted by the data subject is automatically stored. Such personal data, transmitted voluntarily by a data subject to the controller, is stored for the purpose of processing the request or contacting the data subject. This personal data is not disclosed to third parties.
The data controller processes and stores the data subject’s personal data only for the period necessary to achieve the purpose of storage, or to the extent provided for by the European legislator or another legislator in laws or regulations to which the data controller is subject.
If the purpose of storage no longer applies or if a retention period prescribed by European directives and regulations or by another competent legislative body expires, the personal data will be routinely blocked or deleted in accordance with legal requirements.
Every data subject has the right to request confirmation from the controller as to whether personal data concerning them is being processed. If a data subject wishes to exercise this right to confirmation, they may contact a representative of the controller at any time.
Any individual whose personal data is being processed has the right to obtain, at any time and free of charge, information from the controller regarding the personal data stored about them, as well as a copy of that information.
If a data subject wishes to exercise this right of access, they may contact a representative of the data controller at any time.
Any data subject whose personal data is being processed has the right to request the immediate rectification of inaccurate personal data concerning them. Furthermore, the data subject has the right to request the completion of incomplete personal data—including by means of a supplementary statement—taking into account the purposes of the processing.
If a data subject wishes to exercise this right to rectification, they may contact the Data Protection Officer at any time.
Any individual whose personal data is being processed has the right to request that the controller erase the personal data concerning them without delay, provided that the processing is no longer necessary:
If a data subject wishes to request the deletion of personal data stored by OHB Digital Services GmbH, they may contact the Data Protection Officer at any time. The Data Protection Officer of OHB Digital Services GmbH will ensure that the request for deletion is complied with without delay.
The Data Protection Officer of OHB Digital Services GmbH will take the necessary steps to delete data in individual cases in accordance with Article 17(1) of the GDPR, provided that the processing is no longer necessary.
Any individual whose personal data is being processed has the right to request that the controller restrict the processing if any of the following conditions are met:
The data subject disputes the accuracy of the personal data for a period of time that allows the controller to verify the accuracy of the personal data.
The processing is unlawful, the data subject objects to the erasure of the personal data, and instead requests that the use of the personal data be restricted.
The controller no longer needs the personal data for the purposes of processing, but the data subject needs it to establish, exercise, or defend legal claims.
The data subject has objected to the processing pursuant to Article 21(1) of the GDPR, and it has not yet been determined whether the controller’s legitimate grounds override those of the data subject.
If any of the above conditions are met and a data subject wishes to request the restriction of personal data stored by OHB Digital Services GmbH, they may contact the Data Protection Officer at any time. The Data Protection Officer of OHB Digital Services GmbH will arrange for the processing to be restricted.
Any data subject whose personal data is being processed has the right to receive the personal data concerning them, which they have provided to a controller, in a structured, commonly used, and machine-readable format. They also have the right to transmit this data to a third party. To the extent that it is technically feasible and does not infringe upon the rights and freedoms of others, data may be transferred directly to another controller.
To exercise the right to data portability, the data subject may contact the Data Protection Officer at OHB Digital Services GmbH at any time.
Any data subject whose personal data is being processed has the right to object at any time, on grounds relating to their particular situation, to the processing of their personal data carried out pursuant to Article 6(1)(e) or (f) of the GDPR. This also applies to profiling based on these provisions.
In the event of an objection, OHB Digital Services GmbH will no longer process the personal data, unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or the processing is necessary for the establishment, exercise, or defense of legal claims.
If OHB Digital Services GmbH processes personal data for the purpose of direct marketing, the data subject has the right to object at any time to the processing of personal data for such marketing purposes. This also applies to profiling, insofar as it is related to such direct marketing. If the data subject objects to OHB Digital Services GmbH regarding the processing for direct marketing purposes, OHB Digital Services GmbH will no longer process the personal data for these purposes.
In addition, the data subject has the right to object, on grounds relating to their particular situation, to the processing of their personal data carried out by OHB Digital Services GmbH for statistical purposes in accordance with Article 89(1) of the GDPR, unless such processing is necessary for the performance of a task carried out in the public interest.
To exercise the right to object, the data subject may contact the Data Protection Officer at OHB Digital Services GmbH directly.
Every data subject has the right not to be subject to a decision based solely on automated processing—including profiling—that produces legal effects concerning them or similarly significantly affects them.
If the data subject wishes to exercise their rights regarding automated decision-making, they may contact the Data Protection Officer at any time.
If you have given us consent to process your personal data in accordance with § 25(1), sentence 1 of the TDDDG, Article 6(1)(a), or Article 9(2)(a) of the GDPR, you have the right to withdraw this consent at any time. If the data subject wishes to exercise their right to withdraw consent, they may contact the data protection officer at any time.
In the event of a breach of the GDPR, the data subject has the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work, or the place where the alleged breach occurred.
Article 6(1)(a) of the GDPR serves as the legal basis for our company’s processing activities in which we obtain consent for a specific processing purpose.
If the processing of personal data is necessary for the performance of a contract to which the data subject is a party, the processing is based on Article 6(1)(b) of the GDPR. The same applies to processing operations necessary for the implementation of pre-contractual measures, such as inquiries regarding our products or services. If our company is subject to a legal obligation that requires the processing of personal data, such as to fulfill tax or commercial law obligations, the processing is based on Article 6(1)(c) of the GDPR.
In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or another natural person; in such cases, the processing would be based on Article 6(1)(d) of the GDPR.
Ultimately, processing operations may be based on Article 6(1)(f) of the GDPR. This legal basis applies to processing operations not covered by any of the aforementioned legal bases, provided that the processing is necessary to safeguard a legitimate interest of our company or a third party, unless the interests, fundamental rights, and freedoms of the data subject override those interests. We are permitted to carry out such processing operations in particular because they were specifically mentioned by the European legislator. In this regard, the legislator took the view that a legitimate interest could be assumed if the data subject is a customer of the controller (Recital 47, Sentence 2 of the GDPR).
If the processing of personal data is based on Article 6(1)(f) of the GDPR, our legitimate interest is the conduct of our business activities for the benefit of all our employees and shareholders.
We use Google Analytics on our website, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, Ireland, which allows us to analyze how you use our website.
By default, when you visit the website, Google Analytics sets cookies, which are small text files stored on your device and used to collect certain information. Through a specific setting, Google truncates and anonymizes the IP address of the data subject’s internet connection if access to our website occurs from a member state of the European Union or from another signatory state to the Agreement on the European Economic Area.
Your personal data may be transferred within Google Ireland to the parent company Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The European Commission has recognized the level of data protection for certain U.S. companies in an adequacy decision (the so-called EU-U.S. Data Privacy Framework). Google LLC has self-certified under this framework and has thereby committed to compliance. Through this self-certification, the transfer of personal data to the U.S. is permitted on the basis of the so-called EU-U.S. Data Privacy Framework.
Google uses the information collected on our behalf to analyze your use of the website, compile reports on website activity for us, and provide other services related to website and internet usage. The IP address transmitted by your browser as part of Google Analytics and truncated will not be merged with other data held by Google.
All of the processing activities described above, in particular the placement of cookies on the device you are using, will only take place if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR.
Without your consent, Google Analytics will not be used during your visit to the site. You may revoke your consent at any time with future effect. To exercise your right to revoke consent, please disable this service using the “Cookie Consent Tool” provided on the website.
We have entered into a data processing agreement with Google that ensures the protection of our website visitors' data and prohibits its unauthorized disclosure to third parties.
Further information and Google’s applicable privacy policies can be found atwww.google.de/intl/de/
policies/privacy/ and at www.google.com/analytics/
terms/de.html.
Google Analytics is explained in more detail at this link:www.google.com/intl/de_de/
analytics/.
We use Google Analytics on our website, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, Ireland, which allows us to analyze how you use our website.
By default, when you visit the website, Google Analytics sets cookies, which are small text files stored on your device and used to collect certain information. Through a specific setting, Google truncates and anonymizes the IP address of the data subject’s internet connection if access to our website occurs from a member state of the European Union or from another signatory state to the Agreement on the European Economic Area.
Your personal data may be transferred within Google Ireland to the parent company Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The European Commission has recognized the level of data protection for certain U.S. companies in an adequacy decision (the so-called EU-U.S. Data Privacy Framework). Google LLC has self-certified under this framework and has thereby committed to compliance. Through this self-certification, the transfer of personal data to the U.S. is permitted on the basis of the so-called EU-U.S. Data Privacy Framework.
Google uses the information collected on our behalf to analyze your use of the website, compile reports on website activity for us, and provide other services related to website and internet usage. The IP address transmitted by your browser as part of Google Analytics and truncated will not be merged with other data held by Google.
All of the processing activities described above, in particular the placement of cookies on the device you are using, will only take place if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR.
Without your consent, Google Analytics will not be used during your visit to the site. You may revoke your consent at any time with future effect. To exercise your right to revoke consent, please disable this service using the “Cookie Consent Tool” provided on the website.
We have entered into a data processing agreement with Google that ensures the protection of our website visitors' data and prohibits its unauthorized disclosure to third parties.
Further information and Google's current privacy policy can be found atwww.google.de/intl/de/policies/privacy/ and www.google.com/analytics/terms/de.html.
Google Analytics is explained in more detail at this link: www.google.com/intl/de_de/analytics/.
We use Google Tag Manager on our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is a tool that allows us to integrate tracking or analytics tools and other technologies into our website. Google Tag Manager itself does not create user profiles, store cookies, or perform independent analyses. It serves solely to manage and deliver the tools integrated through it. However, Google Tag Manager records your IP address, which may also be transferred to Google’s parent company in the United States. The use of Google Tag Manager is based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in the quick and straightforward integration and management of various tools on its website. If consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent may be revoked at any time.
We have entered into a data processing agreement with the service provider in accordance with Article 28 of the GDPR.
This website uses LinkedIn's "Insight Tag." The provider of this service is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
We use the LinkedIn Insight Tag to gather information about visitors to our website. If a website visitor is registered on LinkedIn, we can analyze key professional data about them, among other things, and thus better tailor our site to specific target audiences. In addition, we can use the LinkedIn Insight Tag to track whether users take a specific action (conversion tracking). Conversion tracking can also be performed across devices (e.g., from PC to tablet).
The LinkedIn Insight Tag also offers a retargeting feature that allows us to display targeted ads to visitors of our website outside of the site; however, according to LinkedIn, this does not involve the identification of the ad recipient.
LinkedIn also collects so-called log files (URL, referrer URL, IP address, device and browser characteristics, and time of access). IP addresses are truncated or (if used to reach LinkedIn members across devices) hashed (pseudonymized).
LinkedIn deletes the direct identifiers of its members after seven days. The remaining pseudonymized data is then deleted within 180 days.
As the website operator, we are unable to link the data collected by LinkedIn to specific individuals. LinkedIn will store the personal data collected from website visitors on its servers in the United States and use it for its own advertising purposes. For more details, please refer to LinkedIn’s Privacy Policy athttps://www.linkedin.com
/legal/privacy-policy#choices-oblig.
The use of LinkedIn Insight is based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in effective advertising measures, including social media.
If consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG, provided that the consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent may be withdrawn at any time.
Data transfers to the United States are based on the European Commission’s Standard Contractual Clauses. For more details, please visit: www.linkedin.com/legal/l/dpa andhttps://www.linkedin.com/
legal/l/eu-sccs.
To opt out of LinkedIn’s analysis of your usage behavior and targeted advertising, click the following links:
https://www.linkedin.com/
psettings/guest-controls/retargeting-opt-out.
In addition, LinkedIn members can control the use of their personal data for advertising purposes in their account settings. To prevent LinkedIn from linking data collected on our website to your LinkedIn account, you must log out of your LinkedIn account before visiting our website.
This website uses LinkedIn's "Insight Tag." The provider of this service is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
We use the LinkedIn Insight Tag to gather information about visitors to our website. If a website visitor is registered on LinkedIn, we can analyze key professional data about them, among other things, and thus better tailor our site to specific target audiences. In addition, we can use the LinkedIn Insight Tag to track whether users take a specific action (conversion tracking). Conversion tracking can also be performed across devices (e.g., from PC to tablet).
The LinkedIn Insight Tag also offers a retargeting feature that allows us to display targeted ads to visitors of our website outside of the site; however, according to LinkedIn, this does not involve the identification of the ad recipient.
LinkedIn also collects so-called log files (URL, referrer URL, IP address, device and browser characteristics, and time of access). IP addresses are truncated or (if used to reach LinkedIn members across devices) hashed (pseudonymized).
LinkedIn deletes the direct identifiers of its members after seven days. The remaining pseudonymized data is then deleted within 180 days.
As the website operator, we are unable to link the data collected by LinkedIn to specific individuals. LinkedIn will store the personal data collected from website visitors on its servers in the United States and use it for its own advertising purposes. For more details, please refer to LinkedIn’s Privacy Policy athttps://www.linkedin.com/legal/privacy-policy#choices-oblig.
The use of LinkedIn Insight is based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in effective advertising measures, including social media.
If consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG, provided that the consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent may be withdrawn at any time.
Data transfers to the United States are based on the European Commission’s Standard Contractual Clauses. For more details, please visit: www.linkedin.com/legal/l/dpa andhttps://www.linkedin.com/legal/l/eu-sccs.
Object to LinkedIn's analysis of your usage behavior and targeted advertising via the following link:
https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
In addition, LinkedIn members can control the use of their personal data for advertising purposes in their account settings. To prevent LinkedIn from linking data collected on our website to your LinkedIn account, you must log out of your LinkedIn account before visiting our website.
The criterion for determining how long personal data is stored is the applicable statutory retention period. Once this period has expired, the relevant data is routinely deleted, provided it is no longer necessary for the performance or initiation of a contract.
We would like to inform you that the provision of personal data is in some cases required by law (e.g., tax or commercial law regulations) or may also arise from contractual provisions (e.g., information about the contracting party). In some cases, it may be necessary for a data subject to provide us with personal data in order to conclude a contract, which we must then process. Before providing personal data, the data subject must contact one of our employees. Our employee will inform the data subject on a case-by-case basis whether the provision of personal data is required by law or contract, or is necessary for the conclusion of the contract; whether there is an obligation to provide the personal data; and what consequences failure to provide the personal data would entail.
As a responsible company, we do not use automated decision-making or profiling.
We are very pleased that you have shown interest in our company. Data protection is a top priority for the management of OHB Digital Services GmbH. You can use the OHB Digital Services GmbH website without providing any personal data. However, if you wish to use specific services offered by our company via our website, it may be necessary to process personal data. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain the consent of the data subject.
The processing of personal data, such as a data subject’s name, address, email address, or telephone number, shall always comply with the General Data Protection Regulation (GDPR) and with the country-specific data protection regulations applicable to OHB Digital Services GmbH. Through this privacy policy, our company would like to inform the public about the type, scope, and purpose of the personal data we collect, use, and process. Furthermore, data subjects are informed of the rights to which they are entitled through this privacy policy.
As the data controller, OHB Digital Services GmbH has implemented numerous technical and organizational measures to ensure the highest level of protection for personal data processed through this website. Nevertheless, internet-based data transmissions generally involve security risks, so absolute protection cannot be guaranteed. For this reason, data subjects are free to provide us with personal data by alternative means, such as by telephone.
The privacy policy of OHB Digital Services GmbH is based on the terminology used by the European legislator in adopting the General Data Protection Regulation (GDPR). Our privacy policy is designed to be easy to read and understand for the general public as well as for our customers and business partners. To ensure this, we would like to explain the terminology used in advance.
We use the following terms, among others, in this privacy policy
Personal data means any information relating to an identified or identifiable natural person (hereinafter “data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
A data subject is any identified or identifiable natural person whose personal data is processed by the controller responsible for the processing.
Processing means any operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
Profiling means any form of automated processing of personal data that involves the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person’s work performance, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.
The controller or the controller responsible for the processing is the natural or legal person, public authority, agency, or other body that, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its designation may be provided for by Union or Member State law.
A processor is a natural or legal person, public authority, agency, or other body that processes personal data on behalf of the controller.
A recipient is a natural or legal person, public authority, agency, or other body to which personal data are disclosed, whether or not it is a third party. However, public authorities that may receive personal data in the course of a specific inquiry in accordance with Union or Member State law shall not be considered recipients.
A third party is a natural or legal person, public authority, agency, or body other than the data subject, the controller, the processor, and persons who, under the direct authority of the controller or processor, are authorized to process personal data.
Consent is any freely given, specific, informed, and unambiguous indication of the data subject’s wishes by which he or she, through a statement or a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
This website is hosted externally. The personal data processed on the OHB Digital Services GmbH website is stored on the host’s servers. This may include IP addresses, contact requests, metadata and communication data, contract data, contact information, names, website visits, and other data generated through the website.
External hosting is provided for the purpose of fulfilling the contract with our potential and existing customers (Art. 6(1)(b) GDPR) and to ensure the secure, fast, and efficient delivery of our online services by a professional provider (Art. 6(1)(f) GDPR). If consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) of the Telecommunications Digital Services Data Protection Act (TDDDG), insofar as the consent includes the storage of cookies or access to information on the user’s terminal device within the meaning of the TDDDG. Consent may be revoked at any time.
Our host will only process your data in accordance with your instructions to the extent necessary to fulfill its performance obligations.
We use the following host:
Mittwald CM Service LLC & Co.
4–6 Königsberger Street
32339 Espelkamp
We have entered into a data processing agreement (DPA) for the use of the aforementioned service. This is a contract required under data protection law, which ensures that the service provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the law.
The controller within the meaning of the General Data Protection Regulation, other data protection laws applicable in the Member States of the European Union, and other data protection provisions is
OHB Digital Services GmbH
Konrad-Zuse-Str. 8
28359 Bremen
The data protection officer of the controller is
Jochen Zurborg
Manfred-Fuchs-Platz 2-4
D-28359 Bremen
Phone: +49 (0)421 2020 9720
Email: datenschutz@ohb.de
Any data subject may contact our data protection officer directly at any time with questions or suggestions regarding data protection.
The website of OHB Digital Services GmbH uses cookies. Cookies are text files that are placed and stored on a computer system via a web browser.
By using cookies, OHB Digital Services GmbH is able to provide users of this website with more user-friendly services that would not be possible without cookies. If the user disables cookies in their web browser, not all features of our website may be fully functional.
Cookies are either stored temporarily for the duration of a session (session cookies) and deleted at the end of your visit to a website, or permanently (persistent cookies) on your device until you delete them yourself or they are automatically deleted by your web browser. Cookies can be used to optimize the information and offers on our website for the benefit of the user. Cookies enable us to recognize the users of our website. The purpose of this recognition is to make it easier for users to use our website.
Cookies that are required to facilitate the electronic communication process, to provide certain functions you have requested, or to optimize the website (necessary cookies) are stored pursuant to Article 6(1)(f) of the GDPR, unless another legal basis is specified. OHB Digital Services GmbH has a legitimate interest in storing necessary cookies to ensure the technically error-free and optimized provision of its services. If consent to the storage of cookies and comparable tracking technologies has been requested, the processing is carried out exclusively on the basis of this consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG); consent may be revoked at any time.
The data subject may prevent our website from setting cookies at any time by adjusting the settings of the web browser being used, thereby permanently objecting to the use of cookies.
The cookies and services used on this website are listed in the privacy policy.
The website of OHB Digital Services GmbH collects a range of general data and information whenever a user or automated system accesses the website. This general data and information is stored in the server log files. The following may be recorded:
When using this general data and information, OHB Digital Services GmbH does not draw any conclusions about the data subject. Rather, this information is required in order to
Therefore, OHB Digital Services GmbH analyzes anonymously collected data and information statistically, with the aim of enhancing data protection and data security within our company and ensuring an optimal level of protection for the personal data we process. The anonymous data from the server log files is stored separately from all personal data provided by data subjects.
Our website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential information. You can tell that the connection is encrypted because the address bar in your browser changes from “http://” to “https://” and because a padlock icon appears in the address bar.
If SSL or TLS encryption is enabled, the data you send to us cannot be read by third parties.
The website of OHB Digital Services GmbH contains information that enables quick electronic contact with our company, as well as direct communication with us, including a general email address. If a data subject contacts the controller via email or a contact form, the personal data transmitted by the data subject is automatically stored. Such personal data, transmitted voluntarily by a data subject to the controller, is stored for the purposes of processing or contacting the data subject. This personal data is not disclosed to third parties.
The controller shall process and store the data subject’s personal data only for as long as is necessary to achieve the purpose of storage, or to the extent permitted by the European legislator or other legislators in laws or regulations to which the controller is subject.
If the purpose of storage no longer applies or if a retention period prescribed by the European legislator or another competent legislator expires, the personal data is routinely blocked or erased in accordance with the statutory provisions.
Every data subject has the right, granted by the European legislator, to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed. If a data subject wishes to exercise this right to confirmation, he or she may contact any employee of the controller at any time.
Any person whose personal data is being processed has the right to receive, at any time and free of charge, information from the controller regarding the personal data stored about them, as well as a copy of that information.
If a data subject wishes to exercise this right of access, he or she may contact an employee of the controller at any time.
Any person affected by the processing of personal data has the right to request the immediate correction of inaccurate personal data concerning them. Taking into account the purposes of the processing, the data subject shall also have the right to have incomplete personal data completed, including by providing a supplementary statement.
If a data subject wishes to exercise this right to rectification, they may contact the data protection officer at any time.
Any person affected by the processing of personal data has the right to request that the controller erase the personal data concerning them without undue delay, provided that the processing is no longer necessary:
If a data subject wishes to request the erasure of personal data stored by OHB Digital Services GmbH, he or she may contact the Data Protection Officer at any time. The Data Protection Officer of OHB Digital Services GmbH shall promptly ensure that the erasure request is complied with immediately.
The Data Protection Officer of OHB Digital Services GmbH will arrange for the deletion of data in individual cases in accordance with Article 17(1) of the GDPR, provided that processing is no longer necessary.
Any person affected by the processing of personal data has the right to obtain from the controller restriction of processing where one of the following applies:
The data subject disputes the accuracy of the personal data for a period sufficient to allow the controller to verify the accuracy of the personal data.
The processing is unlawful, and the data subject objects to the erasure of the personal data and requests that its use be restricted instead.
The controller no longer needs the personal data for the purposes of the processing, but the data subject requires it for the establishment, exercise, or defense of legal claims.
The data subject has objected to the processing pursuant to Article 21(1) of the GDPR pending verification of whether the controller’s legitimate grounds override those of the data subject.
If any of the aforementioned conditions are met, and a data subject wishes to request the restriction of the processing of personal data stored by OHB Digital Services GmbH, he or she may contact our Data Protection Officer at any time. The Data Protection Officer of OHB Digital Services GmbH will arrange for the processing to be restricted.
Any person affected by the processing of personal data has the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used, and machine-readable format. They also have the right to transmit this data to a third party. To the extent that it is technically feasible and the rights and freedoms of others are not adversely affected, the data may be transferred directly to another controller.
To exercise the right to data portability, the data subject may contact the Data Protection Officer at OHB Digital Services GmbH at any time.
Any person affected by the processing of personal data has the right to object, on grounds relating to his or her particular situation, at any time to the processing of personal data concerning him or her that is based on Article 6(1)(e) or (f) of the GDPR. This also applies to profiling based on these provisions.
OHB Digital Services GmbH will no longer process the personal data in the event of an objection, unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or for the establishment, exercise, or defense of legal claims.
If OHB Digital Services GmbH processes personal data for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning him or her for such marketing. This also applies to profiling to the extent that it is related to such direct marketing. If the data subject objects to OHB Digital Services GmbH’s processing for direct marketing purposes, OHB Digital Services GmbH will no longer process the personal data for these purposes.
In addition, the data subject has the right, on grounds relating to his or her particular situation, to object to the processing of personal data concerning him or her by OHB Digital Services GmbH for statistical purposes pursuant to Article 89(1) of the GDPR, unless the processing is necessary for the performance of a task carried out in the public interest.
To exercise the right to object, the data subject may contact the Data Protection Officer of OHB Digital Services GmbH directly.
Any person affected by the processing of personal data has the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning him or her or similarly significantly affects him or her.
If the data subject wishes to exercise their rights regarding automated decisions, they may contact the data protection officer at any time.
i) Right to withdraw consent under data protection law
If you have given us your consent to process your personal data in accordance with Section 25(1), first sentence, of the TDDDG, Article 6(1)(a), or Article 9(2)(a) of the GDPR, you have the right to withdraw this consent at any time. If the data subject wishes to exercise their right to withdraw consent, they may contact the data protection officer at any time.
In the event of a breach of the GDPR, the data subject has the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work, or the place where the alleged breach occurred.
Article 6(1)(a) of the GDPR serves as the legal basis for our company’s processing activities for which we obtain consent for a specific processing purpose.
If the processing of personal data is necessary for the performance of a contract to which the data subject is a party, the processing is based on Article 6(1)(b) of the GDPR. The same applies to processing operations that are necessary to take steps prior to entering into a contract, for example in the case of inquiries about our products or services. If our company is subject to a legal obligation that requires the processing of personal data, such as for the fulfillment of tax or commercial law obligations, the processing is based on Article 6(1)(c) of the GDPR.
In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or another natural person, in which case the processing would be based on Article 6(1)(d) of the GDPR.
Ultimately, processing operations may be based on Article 6(1)(f) of the GDPR. This legal basis applies to processing operations not covered by any of the aforementioned legal grounds, provided that processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, unless such interests are overridden by the interests or fundamental rights and freedoms of the data subject that require the protection of personal data. We are permitted to carry out such processing operations in particular because they have been specifically mentioned by the European legislator. In this regard, the legislator took the view that a legitimate interest could be assumed if the data subject is a customer of the controller (Recital 47, Sentence 2 of the GDPR).
Where the processing of personal data is based on Article 6(1)(f) of the GDPR, our legitimate interest is to conduct our business in a manner that promotes the well-being of all our employees and shareholders.
We use Google Analytics on our website, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, Ireland, which allows us to analyze how you use our website.
By default, Google Analytics sets cookies when you visit the website; these are stored as small text files on your device and collect certain information. Google uses a plugin to shorten and anonymize the IP address of the data subject’s Internet connection if our website is accessed from a member state of the European Union or from another state party to the Agreement on the European Economic Area.
Your personal data may be transferred within Google Ireland to the parent company Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The European Commission has recognized the level of data protection for certain companies in the United States in an adequacy decision (the so-called EU-U.S. Data Privacy Framework). Google LLC has self-certified under this framework and has therefore undertaken to comply with it. This self-certification means that the transfer of personal data to the United States is permitted on the basis of the EU-U.S. Data Privacy Framework.
Google uses the information collected on our behalf to analyze your use of the website, to compile reports on website activity for us, and to provide us with other services related to website activity and internet usage. The truncated IP address transmitted by your browser as part of Google Analytics will not be combined with other Google data.
All processing described above, in particular the placement of cookies on the device you are using, will only take place if you have given us your express consent to do so in accordance with Article 6(1)(a) of the GDPR.
Unless you give your consent, Google Analytics will not be used during your visit to our website. You can withdraw your consent at any time, effective immediately. To exercise your right to withdraw consent, please disable this service using the “cookie consent tool” provided on the website.
We have entered into a data processing agreement with Google that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
Further information and Google’s applicable privacy policy can be found at www.google.de/intl/de/policies/privacy/ and www.google.com/analytics/terms/de.html.
Google Analytics is explained in more detail at this link: www.google.com/intl/de_de/analytics/.
We use Google Analytics on our website, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, Ireland, which allows us to analyze how you use our website.
By default, Google Analytics sets cookies when you visit the website; these are stored as small text files on your device and collect certain information. Google uses a plugin to shorten and anonymize the IP address of the data subject’s Internet connection if our website is accessed from a member state of the European Union or from another state party to the Agreement on the European Economic Area.
Your personal data may be transferred within Google Ireland to the parent company Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The European Commission has recognized the level of data protection for certain companies in the United States in an adequacy decision (the so-called EU-U.S. Data Privacy Framework). Google LLC has self-certified under this framework and has therefore undertaken to comply with it. This self-certification means that the transfer of personal data to the United States is permitted on the basis of the EU-U.S. Data Privacy Framework.
Google uses the information collected on our behalf to analyze your use of the website, to compile reports on website activity for us, and to provide us with other services related to website activity and internet usage. The truncated IP address transmitted by your browser as part of Google Analytics will not be combined with other Google data.
All processing described above, in particular the placement of cookies on the device you are using, will only take place if you have given us your express consent to do so in accordance with Article 6(1)(a) of the GDPR.
Unless you give your consent, Google Analytics will not be used during your visit to our website. You can withdraw your consent at any time, effective immediately. To exercise your right to withdraw consent, please disable this service using the “cookie consent tool” provided on the website.
We have entered into a data processing agreement with Google that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
Further information and Google’s applicable privacy policy can be found at www.google.de/intl/de/policies/privacy/ and www.google.com/analytics/terms/de.html.
Google Analytics is explained in more detail at this link: www.google.com/intl/de_de/analytics/.
We use Google Tag Manager on our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is a tool that allows us to integrate tracking or statistical tools and other technologies on our website. Google Tag Manager itself does not create any user profiles, does not store any cookies, and does not perform any independent analyses. It is used solely to manage and display the tools integrated through it. However, Google Tag Manager records your IP address, which may also be transmitted to Google’s parent company in the USA. Google Tag Manager is used on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the fast and uncomplicated integration and management of various tools on its website. If consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user’s terminal device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent may be revoked at any time.
We have entered into a data processing agreement with the service provider in accordance with Article 28 of the GDPR.
This website uses the LinkedIn Insight Tag. The provider of this service is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
With the help of the LinkedIn Insight Tag, we receive information about visitors to our website. If a website visitor has a LinkedIn account, we can, among other things, analyze key professional data about our website visitors and thus better tailor our site to the respective target groups. In addition, we can use the LinkedIn Insight Tag to track whether users take a specific action (conversion tracking). Conversion tracking can also be performed across devices (e.g., from a PC to a tablet).
The LinkedIn Insight Tag also offers a retargeting feature that we can use to display targeted ads to visitors to our website outside of the website; according to LinkedIn, this does not involve identifying the recipients of the ads.
LinkedIn also collects log files (URL, referrer URL, IP address, device and browser properties, and time of access). The IP addresses are truncated or (if they are used to identify LinkedIn members across devices) hashed (pseudonymized).
LinkedIn deletes the direct identifiers of its members after seven days. The remaining pseudonymized data is then deleted within 180 days.
As the website operator, we cannot link the data collected by LinkedIn to specific individuals. LinkedIn will store the personal data collected from website visitors on its servers in the United States and use it for its own advertising purposes. For more details, please refer to LinkedIn’s privacy policy at https://www.linkedin.com/legal/privacy-policy#choices-oblig.
The use of LinkedIn Insight is based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in effective advertising measures, including social media.
If consent has been requested, the processing is carried out exclusively on the basis of Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG, provided that the consent covers the storage of cookies or access to information on the user’s terminal device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent may be revoked at any time.
Data transfers to the United States are based on the EU Commission's standard contractual clauses. Details can be found here: www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.
You can opt out of LinkedIn's analysis of your usage behavior and targeted advertising by clicking the following link:
https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
In addition, LinkedIn members can control how their personal data is used for advertising purposes in their account settings. To prevent LinkedIn from linking data collected on our website to your LinkedIn account, you must log out of your LinkedIn account before visiting our website.
This website uses the LinkedIn Insight Tag. The provider of this service is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
With the help of the LinkedIn Insight Tag, we receive information about visitors to our website. If a website visitor has a LinkedIn account, we can, among other things, analyze key professional data about our website visitors and thus better tailor our site to the respective target groups. In addition, we can use the LinkedIn Insight Tag to track whether users take a specific action (conversion tracking). Conversion tracking can also be performed across devices (e.g., from a PC to a tablet).
The LinkedIn Insight Tag also offers a retargeting feature that we can use to display targeted ads to visitors to our website outside of the website; according to LinkedIn, this does not involve identifying the recipients of the ads.
LinkedIn also collects log files (URL, referrer URL, IP address, device and browser properties, and time of access). The IP addresses are truncated or (if they are used to identify LinkedIn members across devices) hashed (pseudonymized).
LinkedIn deletes the direct identifiers of its members after seven days. The remaining pseudonymized data is then deleted within 180 days.
As the website operator, we cannot link the data collected by LinkedIn to specific individuals. LinkedIn will store the personal data collected from website visitors on its servers in the United States and use it for its own advertising purposes. For more details, please refer to LinkedIn’s privacy policy at https://www.linkedin.com/legal/privacy-policy#choices-oblig.
The use of LinkedIn Insight is based on Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in effective advertising measures, including social media.
If consent has been requested, the processing is carried out exclusively on the basis of Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG, provided that the consent covers the storage of cookies or access to information on the user’s terminal device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent may be revoked at any time.
Data transfers to the United States are based on the EU Commission's standard contractual clauses. Details can be found here: www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.
You can opt out of LinkedIn's analysis of your usage behavior and targeted advertising by clicking the following link:
https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
In addition, LinkedIn members can control how their personal data is used for advertising purposes in their account settings. To prevent LinkedIn from linking data collected on our website to your LinkedIn account, you must log out of your LinkedIn account before visiting our website.
We inform you that the provision of personal data is partly required by law (e.g., tax or commercial law regulations) or may also result from contractual provisions (e.g., information about the contractual partner). In some cases, it may be necessary for a data subject to provide us with personal data that must subsequently be processed by us in order for a contract to be concluded. Before the data subject provides personal data, the data subject must contact one of our employees. Our employee will inform the data subject on a case-by-case basis whether the provision of personal data is required by law or contract or is necessary for the conclusion of the contract, whether there is an obligation to provide the personal data, and what the consequences would be if the personal data were not provided.
As a responsible company, we do not use automated decision-making or profiling.
You are currently viewing placeholder content from Vimeo. To access the actual content, click the button below. Please note that doing so will result in data being shared with third-party providers.
More InformationYou are currently viewing placeholder content from YouTube. To access the actual content, click the button below. Please note that doing so will share data with third-party providers.
More InformationYou need to load content from reCAPTCHA to submit the form. Please note that doing so will result in data being shared with third-party providers.
More InformationYou are currently viewing a placeholder content from reCAPTCHA. To access the actual content, click the button below. Please note that doing so will share data with third-party providers.
More InformationYou need to load content from hCaptcha to submit the form. Please note that doing so will result in data being shared with third-party providers.
More InformationYou need to load content from reCAPTCHA to submit the form. Please note that doing so will result in data being shared with third-party providers.
More InformationYou are currently viewing placeholder content from Turnstile. To access the actual content, click the button below. Please note that doing so will result in data being shared with third-party providers.
More Information