Data Protection Declaration

I. Content of our website

1. User registration

In order to become a registered user of our website, you must provide certain personal data.

The personal data transferred to us is defined from the input screen used during the registration process. Any personal data you enter will be collected and stored exclusively for our internal use and our own purposes. We may arrange for the data to be transferred to one or more contract processors, for example a parcel shipment company; these processors will also use the personal data solely for internal purposes, for which we will be responsible.

If you register on our website, the IP address assigned by your Internet Service Provider (ISP) and the date and time of registration will also be stored. This is necessary to prevent misuse of our services and investigate any crimes that might be committed. We store this data as a means of protecting our interests. As a basic principle, this data will not be transferred to third parties unless there is a legal obligation to do so or the transfers are necessary for law enforcement purposes.

By registering and providing your personal data on a voluntary basis, you will also enable us to offer you content or services whose nature means that they can only be offered to registered users. Individuals who have registered on the website are free to request that the personal data provided during registration be amended or completely erased from our database at any time.

We are always happy to provide information on the personal data we have stored about you. We are also happy to correct or erase personal data in response to a request, provided that we are not obliged by law to retain the data. Data subjects are welcome to contact the data protection officer named in this privacy statement or any other employees in this regard.

Your data will be processed for the purpose of allowing you to use our website in the most convenient and straightforward way possible. This constitutes a legitimate interest within the meaning of Article 6(1)(f) GDPR.

2. Data protection officer

Pursuant to Regulation (EU) 2016/679 (General Data Protection Regulation), OASE GmbH has appointed a data protection officer who reports directly to the management as part of his role.

The data protection officer of OASE GmbH can be contacted by sending an email to the following address: datenschutzbeauftragter(at)oase.com

3. Data processing in connection with the opening of a customer account and the performance of a contract

Pursuant to Article 6(1)(b) GDPR, data may be collected and processed if you have provided us with this data in connection with the performance of a contract or the opening of a customer account. The types of data that are collected can be determined from the relevant input forms. You can delete your customer account at any time by emailing the controller (using the email address provided above). We will store and use the data that you provide for performance of the contract. Once the contract has been performed in full or your customer account has been deleted, your data will be blocked until expiry of the relevant retention periods under tax and commercial law and then erased, unless you have expressly consented to further use of your data or we are permitted by law to continue using the data; we will inform you below of any such permitted uses of your data.

4. Data processing for order handling

To the extent necessary, and within the framework of contract performance, the personal data that we collect will be transferred to the shipping company responsible for delivering the goods. In so far as is necessary for the purpose of processing your payment, we will transfer your payment details to the relevant financial institution. If payment service providers are used, we will explicitly inform you thereof in the following paragraphs. The legal basis for this transfer of data is Article 6(1)(b) GDPR.

5. Conclusion of contracts for online shop, dealers and shipment of goods

We only transfer personal data to third parties if this is necessary in connection with performance of the contract, for example to the companies responsible for delivering the goods or the financial institution responsible for processing the payment. Further data transfers will not take place or will only take place if you have expressly consented to them. Your data will not be transferred to third parties, e.g. for advertising purposes, without your express consent.

The basis for data processing is Article 6(1)(b) GDPR, which permits the processing of data in connection with the performance of a contract or pre-contractual measures.

6. Contact/contact form

Your personal data will be collected if you make contact with us (e.g. via a contact form or by email). The types of data collected if you contact us via a contact form can be determined from the relevant contact form. The data will be stored and used exclusively for the purpose of answering your query or for making contact, and for the associated technical administrative matters. The legal basis for the processing of the data is our legitimate interest in responding to your query pursuant to Article 6(1)(f) GDPR. If you have made contact for the purpose of concluding a contract, Article 6(1)(b) GDPR will serve as an additional legal basis for processing. Once your query has been answered, your data will be deleted; this can be assumed to be the case if it is clear from the circumstances that the matter has been concluded and if there are no statutory retention obligations that would prevent deletion of the data.

7. Services/digital assets

We only transfer personal data to third parties if this is necessary in connection with performance of the contract, for example to the financial institution responsible for processing the payment.

Further data transfers will not take place or will only take place if you have expressly consented to them. Your data will not be transferred to third parties, e.g. for advertising purposes, without your express consent.

The basis for data processing is Article 6(1)(b) GDPR, which permits the processing of data in connection with the performance of a contract or pre-contractual measures.

 

II. Application management/list of vacancies

We collect and process job applicants' personal data for the purpose of handling the application procedure. This data may also be processed electronically. In particular, this will be the case if an applicant sends us the relevant application documents electronically, for example by email or via a web form on the website. If we enter into an employment contract with an applicant, the data that has been transferred will be stored in accordance with the statutory provisions for the purpose of handling the employment relationship. If we decide not to enter into an employment contract with the applicant, the application documents will automatically be deleted two months after the applicant has been notified of the corresponding decision, provided that there are no other legitimate interests on our part that would prevent their deletion. Other legitimate interests in this connection include e.g. an obligation to provide evidence in proceedings under the General Equal Treatment Act [Allgemeines Gleichbehandlungsgesetz, AGG].

Data will be processed in this connection on the basis of our legitimate interest pursuant to Article 6(1)(f) GDPR.

 

III. Newsletter

1. Newsletter for existing customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to send you regular offers by email regarding goods or services from our range that are similar to those that you have already purchased. Pursuant to Section 7(3) of the Unfair Competition Act [Gesetz gegen den unlauteren Wettbewerb, UWG], we do not have to obtain any separate consent from you for this. Data will be processed in this connection solely on the basis of our legitimate interest in personalised direct advertising pursuant to Article 6(1)(f) GDPR. If you initially object to the use of your email address for this purpose, we will not send you any emails. You are entitled to object to the use of your email address for the aforementioned advertising purposes at any time with future effect, by emailing the controller (email address provided above). You will only be charged the transmission costs in accordance with the basic tariffs. After we receive your objection, we will immediately stop using your email address for advertising purposes.

2. Advertising newsletter

You can subscribe to our company's newsletter on our website. The personal data transferred to us is defined from the input screen when you subscribe to the newsletter.

We send a newsletter to our customers and business partners at regular intervals to inform them about our offers. As a basic principle, you may only receive our company's newsletter if

1. you have a valid email address, and

2. you have registered to receive a newsletter.

For legal reasons, a double opt-in confirmation email will be sent to the email address you first provided when subscribing to the newsletter. This confirmation email is used to check that you are the owner of the email address and that you have authorised a subscription to the newsletter.

When you register for the newsletter, we also store the IP address (assigned by your Internet Service Provider or ISP) of the IT system you used at the time you registered, as well as the date and time of your registration. It is necessary to collect this data as a basis for investigating any (potential) misuse of your email address at a later date, or in other words as a means of protecting our legal interests.

The personal data collected in connection with a subscription to the newsletter will be used exclusively for the purpose of sending out the newsletter. Subscribers to the newsletter may also receive emails in so far as this is necessary for operation of the newsletter service or if an additional registration is required, for example if changes are made to the newsletters that are offered or if technical changes are made. The personal data collected in connection with a subscription to the newsletter is not transferred to third parties. You can cancel your subscription to our newsletter at any time. Consent to the storage of personal data that has been granted for the purpose of receiving the newsletter can be withdrawn at any time. Each newsletter contains a link that can be followed to withdraw consent. It is also possible to unsubscribe from the newsletter at any time directly on our website or to contact us in another way with an unsubscribe request.

The legal basis for the processing of data for the purpose of sending out the newsletter is Article 6(1)(a) GDPR.

3. Episerver newsletter

Full details of the privacy policy adopted by the corporate group Episerver can be found here.

 

IV. Our social networking activities

We have our own pages on social networks in order to communicate with you and provide you with information about our services.

We are not the original provider (controller) of these pages; we use them only within the scope of the opportunities offered to us by the relevant providers.

As a precautionary measure, we would therefore like to point out that your data may also be processed outside the European Union or the European Economic Area. Use of the data may therefore involve data protection risks since it may be more difficult for you to exercise your rights, e.g. the right to information, the right to erasure, the right to object etc., and data is frequently processed directly by social networks for advertising purposes or to analyse user behaviour in a manner that is beyond our control. If the provider creates user profiles, this often involves the use of cookies or the direct assignment of user behaviour to your member profile on social networks (if you are logged in to those sites).

These processing operations will only be carried out if you grant express consent pursuant to Article 6(1)(a) GDPR.

Since we do not have access to the providers' databases, we would like to point out that it is advisable for you to contact the relevant provider directly to exercise your rights (e.g. to information, correction, erasure etc.). Further information on the processing of your data by social networks and the options available to you to exercise your right to object or withdraw ("opt out") are listed below for the individual providers of social networks on which we have a presence:

1. Facebook

Data controller in Europe:

Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

Privacy notice: https://www.facebook.com/about/privacy

Opt-out and ad preferences:

https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen

Facebook has joined the EU-US Privacy Shield:

https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active

https://de-de.facebook.com/about/privacy/

2. YouTube

Data controller:

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

Privacy notice:  https://policies.google.com/privacy

Opt-out and ad preferences:  https://adssettings.google.com/authenticated

Google has joined the EU-US Privacy Shield:

https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

3. LinkedIn

Data controller in Europe:

LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland

Privacy notice: https://www.linkedin.com/legal/privacy-policy

Opt-out and ad preferences:

https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

LinkedIn has joined the EU-US Privacy Shield:

https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active

 

V. Handling of customer and supplier data

We will process your data (including your personal data) for the purpose of arranging, performing and handling contractual relationships, for preparing offers and for invoicing, as well as for making contact and providing information as part of the customer service relationship.

1. Legal basis for data processing

The processing of data is necessary for performance of a contract or pre-contractual measures pursuant to Article 6(1)(b) GDPR or to protect our legitimate interest pursuant to Article 6(1)(f) GDPR, and there are no overriding interests or fundamental rights and freedoms on the part of the data subject.

2. Categories of recipients

Internal recipients include Consulting, Contract Management, Accounting, Controlling and Back Office. We also use service providers (contract processors) to fulfil our tasks, such as IT service providers and hosting providers, and transfer data to authorities or courts within the scope of our legal obligations.

 

VI. Handling of visitor data

We will process your data (including your personal data) for the purpose of checking whether you are entitled to access the building. We will store the following data in this connection:

contact details of visitors (title, surname, first name, email address)

details of the actual visit (location, building, date, time)

1. Legal basis for data processing

Processing is necessary for the purpose of monitoring access to the building and protecting our legitimate interest pursuant to Article 6(1)(f) GDPR; there are no overriding interests or fundamental rights and freedoms on the part of the data subject.

2. Retention period

Your personal data will be stored for a period of one year from your last visit.

 

VII. OASE Easy Control app

The creator of the app takes the protection of your personal data very seriously. We treat your data as confidential, in accordance with the provisions of data protection legislation and of this privacy statement.

This app accesses your device's camera. The data will only be stored locally on your device and will not be transferred to third parties. No other personal data will be collected.

Create fascinating water features with Easy Control

The Easy Control app from OASE intelligently networks a range of OASE products for your garden or aquarium, enabling you to control entire aquatic environments. The Easy Control app provides one clear and convenient solution for consolidating and controlling all of your OASE products. You'll also find that the design of the app has been updated to make it much more user friendly, and you can have fun personalising the dashboard in the app with your own images.

Options for your aquarium:

The Easy Control app can be used to control OASE products that are compatible with Easy Aquarium Control via the EAC controller.

Lights for creating the right atmosphere.

Pre-set lighting scenarios create the ideal lighting for your plants and fish. Premium Highline LEDs help you to create customised sunrise, sunset and moon phases that can be stored in a daily schedule. The segments can be controlled separately so you can also set up different lighting scenarios for specific areas of your aquarium as required.

Regulate current conditions to create the perfect climate.

OASE StreamMax Premium pumps help you create the ideal current conditions for your aquarium. You can also choose whether to integrate one or two pumps in the Easy Control app. If you choose to control two pumps using the Easy Control system, you can set the pumps to be in sync with one another or to operate at different times. This can be done manually or by using one of the pre-configured programmes.

Practical additional features.

The feeding mode automatically switches off the flow pumps during feeding times. Furthermore, the Easy Control app will send you a notification if there is an error message from your aquarium controller. You can also receive this notification by email if you register in the cloud.

Options for your garden or terrace:

You can control the OASE InScenio FM-Master WiFi/EGC and/or InScenio EGC Controller using the Easy Control app. These control centres enable central management of all the important functions in your pond and garden via your home network or the cloud. The performance of your OASE devices, such as pumps, filters or lights, can therefore be monitored and controlled easily, conveniently and quickly via the Easy Control app.

The OASE InScenio EGC Controller connects up to ten EGC-enabled OASE devices, which you can then control in the Easy Control app. The InScenio FM-Master WiFi/EGC can do this too, and also features three on/off power outlets and one dimmable outlet. Each power outlet can be controlled intuitively over a 24-hour cycle via an integrated timer. The InScenio FM-Master WiFi/EGC can also be used to integrate remote-controlled OASE products and enable control via the app.

This arrangement allows you to control your garden lighting, set up different lighting scenarios and create a unique atmosphere — all via the Easy Control app. You can also individually control and check the performance of your filters and pumps. You can monitor the functions of your cloud-enabled garden and pond equipment from the cloud, anytime, anywhere. Email notifications in the event of malfunctions and discrepancies can also be activated via the cloud, giving you the opportunity to respond appropriately at any time.

The functions of the Easy Control app and the number of Easy Control-enabled OASE products are constantly being expanded and improved for you. We always look forward to receiving your feedback and suggestions!