Data Protection Notice

 

1. General Information on Using our Website

We are pleased that you are visiting our website and thank you for your interest in our company and our products.

Protecting your privacy when using our website is of utmost concern to us. This is why we endeavour at all times to protect your personal data in accordance with applicable statutory provisions.

Hereinafter we will inform you in detail on how the supplier responsible, Ofa Bamberg GmbH (also referred to as “Ofa”, “we” or “us”) will deal with your data on this website.

 

1.1 Storage of access data

Every time you access our website access data regarding this procedure is recorded in a protocol file on the server of our provider.

This data record consists of:

  • Your IP address
  • Date and hour of access
  • Name of file required
  • Name of file from which the file was requested
  • Notice whether access was successful
  • Data volume transferred
  • Description of the web browser used and the operation system
  • Name of the internet provider

This data is collected for technical reasons and stored for a period of 90 days.

An evaluation of this data is made solely for statistical purposes and without personal reference. Additional personal data is only collected, used or passed on by us if this is allowed by law or you gave your permission for us to do so.

 

1.2 Contact

Personal data (like your name, e-mail address and telephone number) are only collected on this website if you provide these yourself – for example, by contacting us via the methods provided on this website.

The information you provide will only be stored for the purpose of processing your enquiry and answering any follow-up questions as well as for technical administration and customer management.

Any disclosure of this personal data takes place expressly on a voluntary basis.

You can object to receiving advertising content from our company at any time and for the future by requesting this via the contact details listed below, without any costs arising beyond the basic tariff that enables you to send this message. Declarations of consent can also be revoked via the contact details provided.

 

1.3 Prize draws/promotional competitions

Insofar as no further consent has been given by the participant, the personal data collected by us as part of prize draws/promotional competitions will be collected, processed and used solely for the set-up, realisation and/or completion of the prize draw/promotional competition. This data will be deleted again after the completion of the prize draw/promotional competition.

This personal data will not be passed on to third parties. You can find further information in the respective conditions of participation of our prize draws and promotional competitions.

 

1.4 Newsletter

When registering for our newsletter your data (email address) is used to provide you with information on special topics and forward helpful tips and useful information on all our brands.

If you open the newsletter or click on a link, this will be recorded via our webserver (date, hour, email address). This is for internal statistical purposes. This data is not consolidated to establish a personal utilization profile. Unsubscribing the newsletter service is possible at any time and can be done via the unsubscribe link provided in the newsletter.

 

1.5 Embedded third-party content and services

In some cases, this website may include embedded content and services by third parties, such as maps by Google Maps.

This always requires the providers of this content to use your IP address. Without your IP address, they would not be able to send the content to your browser. The IP address is thus necessary in order for the content to be displayed on your device. We endeavour to only use content whose respective providers only use the IP address to make the content available to you. However, we do not have any influence on the providers storing your data for reasons such as statistical purposes.

 

1.6 Links to other websites

We occasionally refer to third-party websites. While we select these third parties carefully, we cannot guarantee or accept any liability for the accuracy or completeness of the content or the data protection that third-party websites provide. Furthermore, this privacy policy does not apply to any third-party websites that we link to.

Social media

We maintain an online presence on social networks and social platforms in order to communicate with the customers, interested parties and users who are active on these and to be able to inform them about our services on these platforms.
We would like to point out that in doing so, user data may be processed outside the European Union. This may result in certain risks for the users – for example, this might make it more difficult to enforce the user’s rights. With regard to US providers certified under the Privacy Shield framework, we would like to highlight that these providers commit to comply with the EU’s data protection standards.
Furthermore, user data is usually processed for market research and advertising purposes. For example, usage profiles may be created based on the usage behaviour and resulting interests of the users. The usage profiles may in turn be used for purposes such as the placement of advertisements within and outside the platforms that are likely to correspond to the interests of the users. For these purposes, cookies are usually stored on the users’ computers. In these cookies, the users’ usage behaviour and interests are stored. Furthermore, data may also be stored in the usage profiles irrespective of the devices used by the users (especially if the users are members of the respective platforms and are logged in to them). The processing of users’ personal data is based on our legitimate interest in effectively informing users and communicating with users pursuant to Article 6(1)(f) GDPR. If the users are asked by the respective providers to consent to the data processing (i. e. declare their consent via methods such as ticking a checkbox or confirming a button), the legal basis of the processing are Article 6(1)(a) and Article 7 GDPR.
For a detailed description of the respective processing and the options to object (opt-out), please refer to the information by the providers linked below.
In the case of requests for information and the assertion of user rights, we would also like to point out that these can be asserted most effectively directly with the providers. Only the providers have access to the users’ data and can take appropriate measures and provide information directly. Should you still require help regardless of this, feel free to contact us.

 

 

1.7 Cookies

Our website uses so-called ‘cookies’. Cookies are small data packets that do not cause any damage to your terminal device. They are stored on your terminal device either temporarily, for the duration of a session (session cookies), or permanently (permanent cookies). Session cookies are automatically deleted after your website visit. Permanent cookies remain stored on your terminal device until you delete them yourself or until they are automatically deleted by your web browser.

Cookies have various different functions. Many cookies are necessary for technical reasons, as certain website functions would not work without them (displaying of videos, for example). Other cookies may be used to evaluate user behaviour or for advertising purposes.

Cookies enable us to see whether you have previously visited our website or are a new visitor. These cookies do not save your personal data. Cookies may originate from us (first-party cookies) or from third-party companies (third-party cookies). Third-party cookies enable the integration of certain services by third-party companies on a first-party website (such as collection of contact information).

You are also able to view our website without the use of cookies. You can change the settings in your browser to ensure you are notified about the setting of any cookies. You can also decide to only allow the setting of cookies in individual cases, to refuse cookies in individual cases or altogether and to activate the automatic deletion of cookies when closing the browser.

However, refusing cookies may result in limited functionalities during your online experience.

List of the individual cookies we use:

Cookie name Cookie description Cookie validity
__hs_cookie_cat_pref   6 months
__hssc   30 minutes
__hssrc   Session
__hstc   24 months
_fbp   3 months
_ga   12 months
_ga_T451CQN3TF   12 months
_gat   24 hours
_gid   24 hours
django_language   12 months
hubspotutk   6 months

 

Revoking cookie consent

Consent to the use of cookies and similar technologies, including the potential data transfer to third countries, is voluntary and can be revoked at any time. To revoke your cookie consent, please click here: https://www.ofa.de/cookie-optout/.

 

1.8 Analytics tools

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google LLC (hereafter referred to as ‘Google’). Google Analytics uses so-called ‘cookies’, which are text files that are placed on your computer to enable an analysis of how you use our website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

However, if IP anonymisation is activated on this website, your IP address will be shortened by Google before this transmission within member states of the European Union or in other contracting states that are part of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing further services relating to website activity and internet usage to the website operator.

The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You may refuse the storage of cookies by selecting the appropriate settings on your browser. However, please do note that if you do this, you may not be able to use the full functionality of this website.

Furthermore, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing a browser plug-in available via the following link: https://tools.google.com/dlpage/gaoptout?hl.

By using this website, you consent to Google’s processing of personal data you provided in the manner and for the purposes set out above.

You can find more information about the terms of use and data protection on: http://www.google.com/intl/de/analytics/learn/privacy.html or via https://www.google.de/intl/de/policies/.

We would like to highlight that on this website, Google Analytics has been extended by the code ‘ga('set', 'anonymizeIp', true)’ in order to ensure that IP addresses are collected anonymously (so-called IP masking).

Demographic features

This website uses Google Analytics demographics reports, which use data from Google’s interest-based advertising as well as visitor data provided by third parties (such as age, gender and interests). This data cannot be traced back to an individual person and its collection can be deactivated at any time via the ad settings.

For this purpose, Google has made a browser add-on available, which you can activate here: https://tools.google.com/dlpage/gaoptout?hl.

 

Google Tag Manager

We use Google Tag Manager. Its provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is a tool that enables us to integrate tracking or statistical tools and other technologies on our website. Google Tag Manager does not create any user profiles, store cookies or perform any autonomous analyses by itself. It only serves to manage and carry out the tools that are integrated via Google Tag Manager. However, Google Tag Manager does collect your IP address, which may also be transmitted to Google’s parent company in the United States.

The use of Google Tag Manager is based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in a fast and uncomplicated integration and management of various tools on their website. Insofar as a corresponding consent has been requested, the processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and § 25(1) TTDSG, so long as the consent includes the storage of cookies or the access to information in the user’s terminal device (such as device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.

 

1.10 HubSpot CRM

We use HubSpot CRM on this website. This tool’s provider is HubSpot Inc. 25 Street, Cambridge, MA 02141, USA (hereafter referred to as ‘HubSpot CRM’).

Among other things, HubSpot CRM allows us to manage existing and potential customers as well as customer contacts. With the help of HubSpot CRM, we are able to record, collate and analyse customer interactions via e-mail, social media or telephone across different channels. The personal data collected in this way may be evaluated and used for communication with the potential customer or for marketing measures (such as newsletter distribution). What’s more, HubSpot CRM enables us to record and analyse the user behaviour of our contacts on our website.

The use of HubSpot CRM is based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in the most efficient customer management and customer communication possible. Insofar as a corresponding consent has been requested, the processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and § 25(1) TTDSG, so long as the consent includes the storage of cookies or the access to information in the user’s terminal device (such as device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.

You can find more details in HubSpot’s privacy policy: https://legal.hubspot.com/privacy-policy.

Data transfer to the USA is based on the standard contractual clauses issued by the EU Commission. You can find more details here: https://www.hubspot.com/data-privacy/privacy-shield.

Order processing agreement

We have entered into an agreement on order processing for the use of the above-mentioned service. This is a contract required by data protection law, which ensures that this service only processes our website visitors’ personal data in accordance with our instructions and in compliance with the GDPR.

 

1.11 YouTube with advanced data protection

This website embeds videos from the YouTube website. The provider of this website is Google Ireland Limited (‘Google’), Gordon House, Barrow Street, Dublin 4, Ireland. We use YouTube in its advanced data protection mode. According to YouTube, this mode ensures that YouTube does not store any information about visitors to this website before they watch the video. However, the transfer of data to YouTube partners may not necessarily be excluded by this extended data protection mode. This way, YouTube creates a connection with the Google DoubleClick network – regardless of whether you watch a YouTube video or not. As soon as you start a YouTube video on this website, a connection to YouTube’s servers is made. This way, the YouTube servers will be informed about the websites you have visited. If you are logged into you YouTube account, you enable YouTube to match your browsing habits directly to your personal profile. You can prevent this by logging out of your YouTube account. Furthermore, YouTube may save several cookies on your terminal device or utilise similar identification (such as device fingerprinting) tools after you have started a video. This way, YouTube can collect information about this website’s visitors. Among other things, this information is used to collect video statistics, improve the usability and to prevent fraud attempts. After starting a YouTube video, further data processing operations may be triggered which are beyond our control. We use YouTube on our website in the interest of an attractive presentation of our online offers. This constitutes a legitimate interest within the meaning of Article 6(1)(f) GDPR. Insofar as a corresponding consent has been requested, the processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and § 25(1) TTDSG, so long as the consent includes the storage of cookies or the access to information in the user’s terminal device (such as device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time. For more information about YouTube’s data protection, please review their privacy policy at: https://policies.google.com/privacy?hl.

 

 

2. Information for guest users and registered users of our portal for specialist suppliers and consent for marketing purposes in compliance with data protection laws.


2.1 General Information

Our website allows specialist suppliers to purchase our products via our portal for specialist suppliers solely as registered users.

When you use our portal, we store personal data transmitted (eg name of specialist supplier, address, email address, telephone number, name of end customer, address, order data ).

In addition, we capture data on portal activity, such as eg order history, quotes or returns. This data we store and use – subject to your further consent or legal provisions – to process your order, apply the functions of the portal (eg summarized presentation of your order history) and for customer support (eg in the case of queries about using the portal effectively).

The technical infrastructure and relevant systems required to run the portal are operated on behalf of Ofa Bamberg GmbH in cooperation with the service provider commissioned by us in accordance with Art. 28 DSGVO.

We and, possibly, the service provider commissioned by us have access to personal data of the specialist supplier and end consumer only in as far as this data is used for the above-mentioned purpose of running the portal, of providing administrative support to process orders and allow the specialist supplier to use the portal’s functions.

Further information on relevant data processing in our portal can be found in detail in the information on data protection in the portal itself.

 

2.2 Notes on advertising purposes

We do not use personal data collected via the website or data from our retail portal for advertising purposes. Should you have consented to any form of data use for advertising purposes within the scope of our business relationship, you may revoke this consent at any time.

 

3. Contact

In case of questions as to the collection, processing or use of your personal data as well as in the case of information, corrections, blocking or deletion of data please contact:

Ofa Bamberg GmbH
Laubanger 20
96052 Bamberg

Tel. 0951-6047-0
export@ofa.de or direct: datenschutz@ofa.de

 

Please note:

The fast technological development of the internet and the changes to rights and laws in the field of data protection and telemedia oblige us from time to time to bring our data protection information in line with the new requirements.

Last updated: 12.10.2023

You can find our General Data Protection Regulation/GDPR here:

General Data Protection Regulation GDPR according to Art 13