Status: 12th May 2021
§1 Preliminary remark
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.
§2 Responsible person
Responsible for data processing on this website is:
ortho & sport
Owner Matthias Keller
phone: +49 89 2778088 00
§3 Information on the collection and processing of personal data
Personal data will only be collected and processed by us if this is permitted under the applicable regulations on the protection of personal data or if you have given us your consent.
"Personal data" means any information relating to an identified or identifiable natural person. This includes in particular name, address, e-mail address, gender, date of birth, telephone number, age and bank details.
What data is collected by default when visiting our website?
Visiting our website is generally possible without registration or logging in. When you call up our website, we only collect data from you that is transmitted by your browser to our provider's server. For reasons of security and stability, as well as for the purpose of statistical analysis, our provider's web server automatically logs access to our website. In this way, the following server log files are collected and processed when our website is accessed:
- browser type and browser version
- Operating system used
- referrer URL
- Host name of the accessing computer
- Time of the server request
- IP address
This information is stored separately from any other data you may have provided to us, in particular when registering for our website. The data is not linked to this other data. The information is evaluated for statistical purposes. It is not possible to draw conclusions about your person or your individual behaviour.
The legal basis for the collection of the IP address is Art. 6 para. 1 sentence 1 lit. f) DS-GVO. The collection of this data is necessary to ensure the security and stability of our website, for example in the event of hacker attacks. Your IP address is stored for a maximum of 7 days for the purpose of detecting and defending against attacks and is then deleted or anonymised.
Under what circumstances is further personal data collected and processed?
The provision of further (additional) personal data is voluntary. In principle, it will not have any negative consequences for you if you do not provide us with any further personal data. In individual contexts, however, we as the responsible party require your personal data in order to act, e.g. in order to enable you to participate in a training and further education event (hereinafter referred to as "seminar"). In these cases, we cannot provide the service requested by you without recourse to the personal data required for this purpose.
a) Registration and use of your OS account
You have the option of registering on our website. In order to create your personal OS account, you must enter your e-mail address and a password as part of the registration process.
We collect and process your email address to enable you to create your personal OS account. The legal basis for processing your e-mail address for the aforementioned purpose is Art. 6 para. 1 sentence 1 lit. b) DS-GVO.
b) Seminar booking
If you wish to make a binding booking for a seminar via our website, you must first register on our website and create your personal OS account (see above § 3 point 2 lit. a)). After successful registration, it is necessary for the seminar booking and thus for the conclusion of the contract that you provide the personal data required for the processing of the contract as part of the booking process. These are in particular your name, gender, address, telephone number, job title and e-mail address. The mandatory data required for the processing of the contract are highlighted with an asterisk during the booking process. In addition to these required mandatory details, you can provide further details voluntarily.
The legal basis for the collection and processing of your personal data for the purpose of seminar booking is Art. 6 para. 1 sentence 1 lit. b) DS-GVO.
Use of Zoom
We use the Zoom video conferencing system of Zoom Video Communications, Inc, 55 Almaden Blvd, San Jose, CA 95113, USA (hereinafter "Zoom") to conduct online seminars.
If we use the Zoom service, you will receive a link from us in advance of the seminar with access data for the seminar you have booked. If you take part in our online seminar after clicking on the link, the following personal data will be processed within the scope of using the Zoom service:
Information provided by you (e.g. booking number or first and last name, contact details, profile picture if applicable (should you use this),
Meeting metadata (e.g. IP addresses of participants, device information),
connection data (e.g. telephone number)
If applicable, text, audio and video content (e.g. when using the chat function or activating your camera/microphone, or sharing your screen).
The processing of the above data is necessary for the implementation of the online seminar booked by you and thus for the fulfilment of our contractual obligations. The legal basis for the data processing is therefore Art. 6 para. 1 p. 1 lit. b) DS-GVO.
The aforementioned data will be processed by us for the duration of the respective zoom meeting. The aforementioned data will not be passed on to third parties.
We have concluded an order processing agreement with Zoom within the meaning of Art. 28 DS-GVO. Zoom also processes data for its own purposes. For more information on Zoom's own purposes, please visit https://zoom.us/de-de/privacy.html.
In the context of the use of Zoom, we cannot exclude the possibility that your personal data may also be processed outside the EU or the EEA. Zoom will either process data in an area covered by an adequacy decision of the European Commission and therefore subject to an adequate level of protection, or Zoom will implement appropriate safeguards to protect your personal data. This includes transfer in accordance with the applicable transfer mechanisms, the European Commission's standard contractual clauses.
For more information on data processing by Zoom, please visit https://zoom.us/de-de/privacy.html.
c) Arrangement of seminars with cooperation partners
If, after prior registration on our website, you would like to book for a seminar organised and conducted by a cooperation partner of the OSINSTITUT, we will collect and process your personal data transmitted to us via the button located on our website as part of the seminar booking process, if and to the extent that this is necessary to establish and execute a contract that you (would like to) conclude with one of our cooperation partners.
The legal basis for the collection and processing of your personal data for the purpose of concluding a contract with the relevant cooperation partner of the OSINSTITUT is Art. 6 para. 1 sentence 1 lit. f) DS-GVO.
We will pass on your personal data transmitted to us for the aforementioned purpose to the cooperation partner with whom you wish to conclude a contract. Data will not be transferred to a third country outside the European Union.
d) Publication of OSCOACHES' contact details on our website.
If you have successfully participated in one of our seminars and are certified as an OSCOACH, you may allow us to collect and process your contact data, i.e. in particular your first and last name as well as the place where you are professionally active, for the purpose of publication on our website under the category "OSCOACHES" and "Search for experts - OSCOACHES". We will only collect and process your personal data that you submit to us via the button located on our website for the aforementioned purpose if you have given us your express consent to do so.
The legal basis for the collection and processing of your personal data is Art. 6 para. 1 sentence 1 lit. a) DS-GVO.
You can revoke your consent at any time vis-à-vis the person responsible (see § 2). In the event of revocation, we will no longer publish your data, which we have processed on the basis of your consent, on our website. However, the lawfulness of the data processing carried out on the basis of your consent until the revocation remains unaffected by this.
You can subscribe to our newsletter by giving your consent on our website for us to inform you about the latest news from our field of activity. After you have subscribed to our newsletter by entering your e-mail address, we will send you an e-mail in which you must confirm your subscription to the newsletter again. This enables us to ensure that we do not send our newsletter to an incorrect e-mail address and that you really want to receive our newsletter. Your e-mail address will then be processed for the purpose of sending you our newsletter.
The legal basis for the collection of your e-mail address is Art. 6 para. 1 sentence 1 lit. f) DS-GVO, the legal basis for the further processing of your e-mail address for sending the individual newsletters is your consent - Art. 6 para. 1 sentence 1 lit. a) DS-GVO.
You can object to the processing of your personal data for the newsletter at any time by notifying the person responsible (§ 2) or revoking your consent. Please note that for unsubscribing from the newsletter, a so-called "unsubscribe link" is additionally embedded at the end of each newsletter, via the activation of which you can send us an objection regarding the sending of the newsletter. If you object to the use of your data, we will no longer use your contact data for our newsletter.
The data you provide for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted after you unsubscribe from the newsletter. Data stored by us for other purposes (e.g. e-mail addresses for the personal OS account) remain unaffected by this.
§4 Duration of storage of personal data; archiving obligations
Your personal data will only be stored for as long as is necessary for the purposes defined in § 3, i.e., for example, for the implementation of the contractual relationship or, alternatively, until the point in time at which the consent previously given by you to the processing of your personal data has been revoked by you or the data processing has been lawfully objected to.
If you are a customer of ours, mandatory legal requirements, in particular archiving obligations, may result in a duty to retain data that goes beyond the respective contractual relationship and the processing of the contract. For example, due to existing commercial and tax law requirements, we are obliged to retain or store certain of your data for a period of ten years. In these cases, we will block your personal data so that it can only be used for archiving purposes.
The legal basis for the storage of cookies is Art. 6 para. 1 sentence 1 lit. f) DS-GVO.
We use "transient cookies" and "persistent cookies" on our website and would like to inform you below about their scope and functionality.
Transient cookies" are cookies that allow you to move quickly, easily and efficiently through several Internet pages without having to authenticate yourself each time. Transient cookies" include, in particular, so-called "session cookies", which store a session ID with which various requests from your browser can be assigned to the joint session. This enables your computer to be recognised when you return to our website. "Transient cookies" are automatically deleted as soon as you close your browser.
"Persistent cookies" result in faster and more convenient access to websites by having certain preferences already set when you return. "Persistent cookies" are stored for a limited time even after you close your browser. They are automatically deleted after a predefined period of time, which may differ depending on the cookie.
§6 Data disclosure
As a matter of principle, we only pass on your personal data to those of our cooperation partners with whom you would like to conclude a contract via our website. You can find more detailed information on the transfer of your personal data to these (third party) companies in § 3 No. 2. lit. c) of this data protection declaration.
Furthermore, we will only pass on your personal data to third parties if we are legally entitled or obliged to do so or if you have given us permission to do so.
We will only pass on your personal data to state institutions and/or authorities if we are obliged to do so by mandatory legal regulations or official or court orders. 2.
We also pass on your personal data to third parties if and insofar as this is necessary for the execution of the contract or the dispatch of the newsletter, for example to the credit institution commissioned with the payment processing or the company entrusted with the dispatch of the newsletter. The legal basis for the transfer of your personal data is then Art. 6 para. 1 sentence 1 lit. b) DS-GVO. 3.
If the aforementioned conditions do not apply, we will only pass on your data to third parties if you have expressly consented to this. In this case, the legal basis is Art. 6 para. 1 sentence 1 lit. a) DSGVO.
§7 YouTube video integration
We have integrated YouTube videos on our website. YouTube is an internet video portal where users can post various types of video clips, among other things. The operating company of YouTube is "YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA", a subsidiary of "Google Inc, 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA".
2. the YouTube videos embedded on our website are stored on http://www.YouTube.com and can be played directly from our website. We have embedded all of these YouTube videos in the so-called "extended data protection mode". This means that, in principle, no data about you is transmitted to YouTube unless you play one of the YouTube videos embedded on our website. However, as soon as you click on one of our YouTube videos and allow it to play, data is transmitted to YouTube. We have no influence on this data transmission to YouTube. YouTube at least receives information about your IP address and when you visit our website. If you are logged into YouTube at the same time, the data collected by YouTube is directly assigned to your YouTube account. The legal basis for the processing of your data is Art. 6 para. 1 sentence 1 lit. f) DS-GVO.
Further information on the purpose and scope of data collection as well as on data processing and use by YouTube can be found in the data protection declaration available at https://www.google.de/intl/de/policies/privacy. At the same URL, you will also receive further information on your rights and setting options for protecting your privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
§8 Social Media Links/Social Media Buttons
Among other things, we have integrated social media buttons from Facebook, YouTube and Instagram into our online offer.
For data protection reasons, we have decided to design these social media buttons only as links to our profiles on the social media services YouTube, Facebook and Instagram. This means that no data about you will be transmitted to the respective operators unless you click on the respective button. However, as soon as you click on the link to one of the profiles set by us, you will be redirected to the website of the respective service. There, data will be transmitted to the operator of the service. We have no influence whatsoever on this, possibly personal, data transmission and data collection to/from the operator. We also have no knowledge of the individual purposes of this data processing or its scope and storage period. We also do not know whether the operator deletes or anonymises the data and this is not within our sphere of influence.
If you are logged in to the respective service at the same time as clicking the social media button on our website, the data collected by the operator when you call up their website can be directly assigned to your profile held there. You can counteract this allocation to your profile with the social media service by logging out of your respective social media account before clicking on the further link on our site.
Further information on the purpose and scope of data collection and processing by the operators can be found in their data protection declarations. There you will also receive further information on your rights and setting options for protecting your privacy. The operators also process their personal data in the USA and have submitted to the US-EU Privacy Shield. You can find more information on this at https://www.privacyshield.gov.
Please note that by clicking on the respective social media button, you leave the protection and responsibility of our website and, by clicking on the link, trigger the data collection and processing by the respective service, which is not under our control.
§9 SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
§10 Right of withdrawal
Many data processing operations are only possible with your express consent. You can revoke consent you have already given at any time. For this purpose, an informal communication by e-mail to us is sufficient. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
§11 Right to information, correction, deletion, restriction of processing, data portability
You have the following rights with regard to the personal data concerning you:
- Right to information (Art. 15 DS-GVO),
- Right to rectification or deletion (Art. 16 and 17 DS-GVO),
- Right to restriction of data processing (Art. 18 DS-GVO),
- Right to data portability (Art. 20 DS-GVO).
§12 Right of appeal to the data protection supervisory authority
If you believe that we are not processing your personal data in accordance with the requirements described herein and/or applicable data protection laws, you may complain about our processing of your personal data to the data protection supervisory authority at any time in accordance with Article 13(2)(d) of the GDPR.
Pursuant to Art. 21 (1) DS-GVO, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data relating to you which is carried out on the basis of Art. 6 (1) sentence 1 lit. e) or lit. f). You can address your objection to the person responsible (see § 2). In the event of an objection, we will no longer use your personal data for the purposes in question and will delete them from our systems, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.