Data protection

Below we inform you about the processing of your personal data in the context of the use of our online offer.

Verantwortlicher

The name and contact details of the person responsible can be found in the legal notice.

Contact person

If you have any questions about data protection, please use the contact details provided in the legal notice.

Data Protection Officer

Storage duration

In principle, we delete your personal data when it is no longer necessary for the purposes for which it was collected or otherwise processed.

If we have asked for your consent and you have given it, we will delete your personal data if you withdraw your consent and there is no other legal basis for the processing.

We will erase your personal data if you object to the processing and there are no overriding legitimate grounds for the processing or if you object to the processing for the purposes of direct marketing or related profiling.

If erasure is not possible because processing is still necessary for compliance with a legal obligation (statutory retention periods, etc.) to which we are subject or for the establishment, exercise or defense of legal claims, we will restrict the processing of your personal data.

Further information on the storage period can also be found in the following passages.

Your rights

You have the following rights with regard to your personal data:
– Right of access
– Right to rectification
– Right to erasure
– Right to restriction of processing
– Right to object to processing
– Right to data portability

You have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data which is based on Article 6 (1) GDPR. 1 lit. e or f GDPR; this also applies to profiling based on these provisions. We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.
If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing. We will then no longer process your personal data for these purposes.

You have the right to withdraw your consent to the processing of your personal data at any time if you have given us such consent. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

You have the right to complain to a supervisory authority about the processing of your personal data by us.

Provision of your personal data

The provision of your personal data is not required by law or contract and is not necessary for the conclusion of a contract. You are generally not obliged to provide your personal data. Should this nevertheless be the case, we will point this out to you separately when collecting your personal data (e.g. by marking the mandatory fields on input forms).

Failure to provide your personal data regularly means that we will not process your personal data for one of the purposes described below and you will not be able to take advantage of an offer related to the respective processing (example: without providing your e-mail address, you will not receive our newsletter).

Webhosting

We use external services for web hosting. These services may have access to personal data that is processed as part of the use of our online offering.

Web server log files

We process your personal data in order to be able to display our online offering to you and to ensure the stability and security of our online offering. Information (e.g. requested element, URL called up, operating system, date and time of the request, browser type and version used, IP address, protocol used, amount of data transferred, user agent, referrer URL, time zone difference to Greenwich Mean Time (GMT) and/or HTTP status code) is stored in so-called log files (access log, error log, etc.).

If we have asked for your consent and you have given it, the legal basis for the processing is Art. 6 para. 1 lit. a GDPR. If we have not asked you for your consent, the legal basis for the processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest is the proper display of our online offering and ensuring the stability and security of our online offering.

Security

For security reasons and to protect the transmission of your personal data and other confidential content, we use encryption on our domain. You can recognize this in the browser line by the character string “https://” and the lock symbol.

Kontaktaufnahme

If you contact us, we will process your personal data in order to process your contact.

If we have asked for your consent and you have given it, the legal basis for the processing is Art. 6 para. 1 lit. a GDPR. If we have not asked you for your consent, the legal basis for the processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest is the processing of your contact. If the processing is necessary to fulfill a contract with you or to carry out pre-contractual measures based on your request, the legal basis for the processing is also Art. 6 para. 1 lit. b GDPR.

We use external services to provide and maintain our email inboxes. These services may have access to personal data that is processed when you contact us. Further information on the services used, the scope of data processing and the technologies and procedures used when using the respective services can be found below in the further information on the services we use and under the links provided there:

Microsoft Exchange
Provider: Microsoft Corporation, United States of America.
Website: https://www.microsoft.com/de-de/microsoft-365/exchange/email
Further information and data protection: https://privacy.microsoft.com/de-de/ and https://www.microsoft.com/de-de/trust-center/privacy
Guarantee: EU standard contractual clauses. You can request a copy of the EU standard contractual clauses from us.
The provider has signed up to the EU-US Data Privacy Framework(https://www.dataprivacyframework.gov), which guarantees compliance with an appropriate level of data protection on the basis of a decision by the European Commission.

We use support systems (appointment booking systems, live chats, ticket systems or helpdesks etc.) and use external services to support the processing of your contact. These services may have access to personal data that is processed when you contact us via a support system. Further information on the services used, the scope of data processing and the technologies and procedures for using the respective services can be found below in the further information on the services we use and under the links provided there:

Microsoft Teams
Provider: Microsoft Corporation, United States of America.
Website: https://www.microsoft.com/de-de/microsoft-teams/group-chat-software/
Further information and data protection: https://privacy.microsoft.com/de-de/ and https://www.microsoft.com/de-de/trust-center/privacy
Guarantee: EU standard contractual clauses. You can request a copy of the EU standard contractual clauses from us.
The provider has signed up to the EU-US Data Privacy Framework(https://www.dataprivacyframework.gov), which guarantees compliance with an appropriate level of data protection on the basis of a decision by the European Commission.

Cookies and similar technologies

Cookies are used. Cookies are text information that is stored on your end device. A distinction is made between session cookies, which are deleted immediately after you close your browser, and persistent cookies, which are only deleted after a certain period of time.

In addition to cookies, similar technologies (tracking pixels, web beacons, etc.) may also be used. The following information on cookies also applies to similar technologies. These statements also apply to further processing in connection with cookies and similar technologies (analysis and marketing, etc.). This also applies in particular to any consent you may have given for the use of cookies. This also extends to other technologies and to further processing in connection with cookies and similar technologies.

Cookies can be used to enable the use of certain functions. Cookies can also be used to measure the reach of our online offer, to design it in line with requirements and interests and thus to optimize our online offer and our marketing. Cookies can be used by us and by external services.

We use a consent tool to manage the cookies used and the related consents. Details on the cookies used (purpose, storage period, external service if applicable, etc.) and the consent tool can be found in the following passages and in the consent tool we use.

If we have asked for your consent and you have given it, the legal basis for the processing is Art. 6 para. 1 lit. a GDPR. If we have not asked you for your consent, the legal basis for the processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest is the management of the cookies used and the related consents. Depending on the purpose of the processing, our legitimate interests can be found in the following passages.

You can prevent the storage of cookies by selecting the appropriate settings in your browser. Below we provide you with links for typical browsers where you can find further information on managing cookie settings:
– Firefox: https://support.mozilla.org/de/kb/verbesserter-schutz-aktivitatenverfolgung-desktop
– Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
– Internet Explorer / Edge: https://support.microsoft.com/de-de/windows/l%C3%B6schen-und-verwalten-von-cookies-168dab11-0753-043d-7c16-ede5947fc64d
– Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
– Opera: https://help.opera.com/de/latest/web-preferences/#cookies
– Yandex: https://browser.yandex.com/help/personal-data-protection/cookies.html

You can find further objection options under the following links: https://www.youronlinechoices.eu/, https://youradchoices.ca/en/tools, https://optout.aboutads.info/?c=2&lang=EN and https://optout.networkadvertising.org/?c=1.

If you prevent cookies from being saved, this may impair the proper functioning of our online offering. If you delete all cookies, the above settings will also be lost and must be made again.

You can also activate the Do-Not-Track function of your browser to signal that you do not wish to be tracked. Below we provide you with links for typical browsers where you can find further information on the Do-Not-Track setting:
– Firefox: https://support.mozilla.org/de/kb/wie-verhindere-ich-dass-websites-mich-verfolgen
– Chrome: https://support.google.com/chrome/answer/2790761?co=GENIE.Platform%3DDesktop&hl=de
– Internet Explorer / Edge: https://support.microsoft.com/de-de/windows/verwenden-von-do-not-track-in-internet-explorer-11-ad61fa73-d533-ce96-3f64-2aa3a332e792
– Opera: https://help.opera.com/de/latest/security-and-privacy/
– Safari no longer supports the “Do-Not-Track” function since February 2019. The following link can be used to prevent cross-site tracking in Safari: https://support.apple.com/de-de/guide/safari/sfri40732/12.0/mac
– Yandex: https://browser.yandex.com/help/personal-data-protection/ytp.html

You can also revoke or manage your consent with regard to the cookies used in the consent tool we use.

Cookie settings

Newsletter

If we have asked for your consent and you have given it, we will process your e-mail address in order to carry out e-mail marketing and, if necessary, other personal data in order to address you personally. The legal basis for the processing is Art. 6 para. 1 lit. a GDPR. The content of the email marketing is specifically described when your consent is obtained. Otherwise, email marketing contains information about us, our goods and services.

We use the so-called double opt-in procedure to prevent possible misuse of your personal data. For this purpose, after collecting your e-mail address, we will send you an e-mail to the e-mail address you have provided, in which we ask you to confirm that you actually wish to receive e-mail marketing. The legal basis for the processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest is the legally compliant implementation of email marketing.

We log the time at which you give your consent and the time of your confirmation as well as your IP address and the content of your declaration of consent in order to be able to prove that your consent has been obtained in accordance with the law. The legal basis for the processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest is the legally compliant implementation of email marketing.

We use external services for email marketing. Further information on the services used, the scope of data processing and the technologies and procedures used when using the respective services, as well as whether profiling takes place when using the respective services and, if applicable, information on the logic involved and the scope and intended effects of such processing for you can be found in the further information on the services we use at the end of this passage and under the links provided there.

You can withdraw your consent at any time. The withdrawal of your consent does not affect the lawfulness of processing based on consent before its withdrawal. To withdraw your consent, you can use the link provided for this purpose in the emails or contact us using the contact details given above.

If you have withdrawn your consent, we reserve the right to process your personal data in a so-called blacklist/blocklist in order to ensure that no further email marketing is carried out in connection with this personal data in the future. The legal basis for the processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest is the avoidance of unwanted email marketing.

We process your personal data in the context of tracking or performance measurement in order to measure the reach of our email marketing, to design it in line with your needs and interests and thus to optimize our email marketing. This may also involve profiling (for the purposes of advertising, personalized information, etc.). Profiling can also take place across services and devices. If we have asked for your consent and you have given it, the legal basis for the processing is Art. 6 para. 1 lit. a GDPR. If we have not asked you for your consent, the legal basis for the processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest is the optimization of our email marketing. A separate withdrawal of your consent or objection in relation to tracking or performance measurement is unfortunately not possible. You must use the above options to withdraw your consent or object to the processing of your personal data for the purpose of email marketing as a whole.

CleverReach
Provider: CleverReach GmbH & Co KG, Germany.
Website: https://www.cleverreach.com/de/
Further information and data protection: https://www.cleverreach.com/de/datenschutz/

Analysis and marketing

We process your personal data in order to measure the reach of our online offering, to design it in line with your needs and interests and thus to optimize our online offering and our marketing.

If we have asked for your consent and you have given it, the legal basis for the processing is Art. 6 para. 1 lit. a GDPR. If we have not asked you for your consent, the legal basis for the processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest is the optimization of our online offer and our marketing.

We use external services for analysis and marketing purposes. This may also involve profiling (for the purposes of advertising, personalized information, etc.). Profiling can also take place across services and devices. Further information on the services used, the scope of data processing and the technologies and procedures used when using the respective services, as well as whether profiling takes place when using the respective services and, if applicable, information on the logic involved and the scope and intended effects of such processing for you can be found in the further information on the services we use at the end of this passage and under the links provided there.

Further information on cookies and similar technologies can be found above.

Google Analytics, Google Ads
Provider: In the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://marketingplatform.google.com/intl/de/about/analytics/
Further information and data protection: https://support.google.com/analytics/answer/6004245?hl=de and https://policies.google.com/?hl=de
The transfer of personal data to third countries depends on the respective Google service and is subject to the various EU standard contractual clauses, insofar as these are offered by Google. Further information on this and Google’s responsibility can be found at the following link https://business.safety.google/gdpr/. You can view a copy of the EU standard contractual clauses there. Google has signed up to the EU-US Data Privacy Framework(https://www.dataprivacyframework.gov), which guarantees compliance with an appropriate level of data protection on the basis of a decision by the European Commission.

Matomo – On-Premise
Provider: Self-hosted
Website: https://matomo.org/
Further information and data protection: https://matomo.org/gdpr-analytics and https://matomo.org/privacy-policy/

Social media presences

We maintain social media presences on external services in order to be able to communicate with users there and thus optimize our online offering and our marketing.

This privacy policy also applies to the following social media presences:

https://de.indeed.com/q-oke-jobs.html

https://www.instagram.com/oke_group/

https://www.facebook.com/OKEplus/

https://de.linkedin.com/company/oke-automotive-gmbh-&-co.kg

https://www.vimeo.com/user/OKEGroup

https://www.youtube.com/user/TheOKEGroup

https://www.instagram.com/alhorn_inside

If we have asked for your consent and you have given it, the legal basis for the processing is Art. 6 para. 1 lit. a GDPR. If we have not asked you for your consent, the legal basis for the processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest is the optimization of our online offer and our marketing.

Profiling (for the purposes of advertising, personalized information, etc.) may also occur as part of the use of external services. Profiling can also take place across services and devices. Further information on the services used, the scope of data processing and the technologies and procedures used when using the respective services, as well as whether profiling takes place when using the respective services and, if applicable, information on the logic involved and the scope and intended effects of such processing for you can be found in the further information on the services we use at the end of this passage and under the links provided there.

Facebook
Provider: Meta Platforms Ireland Limited, Ireland. Meta Platforms Ireland Limited is a subsidiary of Meta Platforms, Inc., United States of America.
Website: https://www.facebook.com
The provider and we are joint controllers. We have concluded a corresponding agreement with the provider. You can view this agreement at https://www.facebook.com/legal/terms/page_controller_addendum and https://www.facebook.com/legal/controller_addendum.
Further information and data protection: https://developers.facebook.com/docs/plugins/, https://www.facebook.com/legal/terms/information_about_page_insights_data, https://www.facebook.com/privacy/policy/, https://de-de.facebook.com/policies/cookies/, https://www.facebook.com/help/566994660333381?ref=dp and https://de-de.facebook.com/help/568137493302217
Guarantee: EU standard contractual clauses. You can request a copy of the EU standard contractual clauses from us.
The provider has signed up to the EU-US Data Privacy Framework(https://www.dataprivacyframework.gov), which guarantees compliance with an appropriate level of data protection on the basis of a decision by the European Commission.

Indeed
Provider: If you are located outside the USA and Japan, the site is provided by: Indeed Ireland Operations Limited. Platforms Ireland Limited, Ireland. If you are located in the United States, the Site is provided by Indeed Inc, 6433 Champion Grandview Way, Building 1, Austin, TX, 78750. If you are located in Japan, the Site is provided by: Indeed Japan K.K.
Website: https://de.indeed.com/
Further information and privacy: https://de.indeed.com/legal?hl=de&from=gnav-acme-acme-webapp#termsFAQ
Warranty: EU Standard Contractual Clauses. You can request a copy of the EU standard contractual clauses from us.
The provider has signed up to the EU-US Data Privacy Framework(https://www.dataprivacyframework.gov), which guarantees compliance with an appropriate level of data protection on the basis of a decision by the European Commission.

Instagram
Provider: Meta Platforms Ireland Limited, Ireland. Meta Platforms Ireland Limited is a subsidiary of Meta Platforms, Inc., United States of America.
Website: https://www.instagram.com
Further information and data protection: https://help.instagram.com/581066165581870 and https://help.instagram.com/519522125107875
Guarantee: EU standard contractual clauses. You can request a copy of the EU standard contractual clauses from us.
The provider has signed up to the EU-US Data Privacy Framework(https://www.dataprivacyframework.gov), which guarantees compliance with an appropriate level of data protection on the basis of a decision by the European Commission.

LinkedIn
Provider: If you are located in the EU, the European Economic Area (EEA) or Switzerland, this service is provided by LinkedIn Ireland Unlimited Company, Ireland. If you are located outside the EU, the European Economic Area (EEA) or Switzerland, this service is provided by LinkedIn Corporation, United States of America.
Website: https://www.linkedin.com
Further information and data protection: https://de.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy and https://de.linkedin.com/legal/cookie-policy?trk=homepage-basic_footer-cookie-policy
Guarantee: EU standard contractual clauses. You can request a copy of the EU standard contractual clauses from us.

YouTube
Provider: In the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://www.youtube.com
Further information and data protection: https://policies.google.com/?hl=de
The transfer of personal data to third countries depends on the respective Google service and is subject to the various EU standard contractual clauses, insofar as these are offered by Google. Further information on this and Google’s responsibility can be found at the following link https://business.safety.google/gdpr/. You can view a copy of the EU standard contractual clauses there. Google has signed up to the EU-US Data Privacy Framework(https://www.dataprivacyframework.gov), which guarantees compliance with an appropriate level of data protection on the basis of a decision by the European Commission.

Vimeo
Provider: Vimeo, Inc., United States of America
Website: https://www.vimeo.com
Further information and data protection: https://vimeo.com/privacy
Guarantee: EU standard contractual clauses. You can request a copy of the EU standard contractual clauses from us.

Social media content / plugins

We use social media content / plugins from external services in order to display content and functions of external services to you and thus optimize our online offering and our marketing.

If we have asked for your consent and you have given it, the legal basis for the processing is Art. 6 para. 1 lit. a GDPR. If we have not asked you for your consent, the legal basis for the processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest is the optimization of our online offer and our marketing.

Profiling (for the purposes of advertising, personalized information, etc.) may also occur as part of the use of external services. Profiling can also take place across services and devices. Further information on the services used, the scope of data processing and the technologies and procedures used when using the respective services, as well as whether profiling takes place when using the respective services and, if applicable, information on the logic involved and the scope and intended effects of such processing for you can be found in the further information on the services we use at the end of this passage and under the links provided there.

YouTube
Provider: In the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://www.youtube.com
Further information and data protection: https://policies.google.com/?hl=de
The transfer of personal data to third countries depends on the respective Google service and is subject to the various EU standard contractual clauses, insofar as these are offered by Google. Further information on this and Google’s responsibility can be found at the following link https://business.safety.google/gdpr/. You can view a copy of the EU standard contractual clauses there. Google has signed up to the EU-US Data Privacy Framework (https://www.dataprivacyframework.gov), which guarantees compliance with an appropriate level of data protection on the basis of a decision by the European Commission.

Vimeo
Provider: Vimeo, Inc., United States of America
Website: https://www.vimeo.com
Further information and data protection: https://vimeo.com/privacy
Guarantee: EU standard contractual clauses. You can request a copy of the EU standard contractual clauses from us.

Applications

If you apply to us, we will process your personal data in order to carry out the application process and make a decision on the establishment of an employment relationship. At the end of the application process, we will restrict the processing of your personal data and delete or destroy it no later than 6 months after you have received the rejection or return the application documents to you and delete or destroy any copies, unless you have consented to us continuing to use your personal data.

If we have asked for your consent and you have given it, the legal basis for the processing is Art. 6 para. 1 lit. a GDPR. If we have not asked you for your consent, the legal basis for the processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest is the proper execution of the application procedure and, if necessary, the defense against claims due to the rejection of an application. If the processing is necessary for the decision on the establishment of an employment relationship, the legal basis for the processing is also Section 26 (1) sentence 1 BDSG.

Captchas

We use captchas to protect our online offering from abusive, machine and/or automated entries (e.g. in forms) and to prevent any misuse.

If we have asked for your consent and you have given it, the legal basis for the processing is Art. 6 para. 1 lit. a GDPR. If we have not asked you for your consent, the legal basis for the processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest is the protection of our online offering and the prevention of misuse.

We use external services to provide the captchas. This may also involve profiling. Profiling can also take place across services and devices. Further information on the services used, the scope of data processing and the technologies and procedures used when using the respective services, as well as whether profiling takes place when using the respective services and, if applicable, information on the logic involved and the scope and intended effects of such processing for you can be found in the further information on the services we use at the end of this passage and under the links provided there.

MOLECO Captcha
Provider: MOLECO GmbH, Germany
Website: https://www.moleco.de/
Further information and data protection: https://www.moleco.de/loesungen/ and https://www.moleco.de/datenschutzerklaerung/

This privacy policy was created with the configurator of getLaw.de.

Use of SalesViewer® technology

This website uses SalesViewer® technology from SalesViewer® GmbH to collect and store data for marketing, market research and optimization purposes on the basis of the website operator’s legitimate interests (Art. 6 (1) (f) GDPR).

For this purpose, a javascript-based code is used to collect company-related data and use it accordingly. The data collected with this technology is encrypted using a non-reversible one-way function (so-called hashing). The data is immediately pseudonymized and is not used to personally identify the visitor to this website.

The data stored within the framework of Salesviewer® will be deleted as soon as it is no longer required for its intended purpose and the deletion does not conflict with any statutory retention obligations.

You can object to the collection and storage of data at any time with effect for the future by clicking on this link https://www.salesviewer.com/opt-out to prevent the collection by SalesViewer® within this website in the future. An opt-out cookie for this website will be stored on your device. If you delete your cookies in this browser, you must click this link again.

Mouseflow

This website uses Mouseflow, a web analysis tool from Mouseflow ApS, Flaesketorvet 68, 1711 Copenhagen, Denmark. Mouseflow records selected visits (randomly selected) in order to analyze mouse movements, clicks, scrolling behavior and similar interactions anonymously. The recording is used to improve the user-friendliness of the website.

The data collected is anonymous and will not be passed on to third parties.

If you do not want Mouseflow to collect data about your visit, you can object to the collection at any time:
Opt-out link

Further information can be found in Mouseflow’s privacy policy:
https://mouseflow.com/legal/privacy-policy/