Data Protection Information
- www.optilyz.com -
In the course of using this website, your personal-related data will be processed and stored – for the duration necessary to fulfil the specified purposes and legal obligations – by us as the person responsible for data processing. In the following, we will inform you which data is concerned, in what ways they are processed and what rights you have in this matter.
According to (General Data Protection Regulation) GDPR S. 4 (1), personal-related data comprises of all information relating to an identified or identifiable natural person (hereinafter referred to as “concerned person or user”).
Name and contact information of the person responsible for processing
This data protection information applies to the data processing activities on the website www.optilyz.com by the person responsible:
optilyz GmbH
Neue Schönhauser Str. 19
10178 Berlin
Germany
(hereinafter referred to as “optilyz“)
Email: info@optilyz.com
Telephone: +49 (0)30 398 200 250
External Data Protection Officer
ePrivacy GmbH
represented by Prof. Dr. Christoph Bauer
Große Bleichen 21, 20354 Hamburg
For all questions and concerns regarding the security of your data, you can contact us and our data protection officer at datenschutz@optilyz.com.
If you have a particularly sensitive concern, please contact our data protection officer by mail, since communication via email can always be subject to security issues.Processing of personal-related data and purposes of processing
Webhosting
For the provision of this website, we use the webhosting service Amazon Web Services EMEA Sàrl, 5 rue Plaetis, 2338 Luxembourg, Luxembourg (hereinafter referred to as “AWS”).
Provision of a website requires the commissioning of a webhosting service. The use of AWS takes place in accordance with GDPR Section 6 (1) Sentence 1 lit. f due to our legitimate economic interest in maintaining our offer on our website. In connection with hosting, AWS processes personal-related data, which is generated when using the website, on our behalf.
We have concluded a contract processing agreement with AWS. Through this contract, the service provider assures that they process the data in accordance with the General Data Protection Regulation and guarantees the protection of the rights of the person concerned.
Upon visiting our website
You can access the website www.optilyz.com without having to reveal any information about your identity. The browser used on your terminal device merely automatically sends information to the server of our website (e.g. date and time of access, name and URL of the accessed file, browser type and version, and website from which the access is made (referrer URL)).
This also includes the IP address of your requesting terminal device. This is temporarily stored in a so-called log file and automatically deleted after 2 weeks.
The IP address is processed for the technical and administrative purposes of establishing and maintaining a connection, guaranteeing the safety and functional capability of our website and tracking potential illegal attacks on it.
GDPR Section 6 (1) Sentence 1 lit. f is the legal basis for the processing of the IP address. Our legitimate interest is based on the aforementioned security interest and the necessity of an unobstructed provision of our website.
We cannot draw any direct conclusions about your identity from processing the IP address in the log file.
Furthermore, we use cookies and pixel tags as well as analysis services when you visit our website. You will find more information about this under sections 4 and 5 of this data protection declaration.
Upon registration for our newsletter
If you have explicitly consented in accordance with GDPR Section 6 (1) Sentence 1 lit. a, we will use your email address to send you our newsletter on a regular basis. To receive this newsletter, it is sufficient to provide an email address.
You can unsubscribe at any time by clicking on the link “Unsubscribe” at the end of the newsletter. Alternatively, you can also send your request to unsubscribe via email at any time to datenschutz@optilyz.com.
Upon use of the contact form
We offer you the opportunity to use the online contact form to send us a contact request so that we can contact you personally. For this purpose, we collect the following mandatory information:
Name,
Business email address, and
Your telephone number.
The aforementioned information is necessary so that we know from whom the contact request originates and in order to contact you personally.
This data processing takes place in the context of responding to the contact request on basis of our legitimate interest in accordance with GDPR Section 6 (1) lit. f.
The personal-related data collected by us for the use of the contact form is deleted, provided that your request has been conclusively answered and there are no legal storage obligations preventing the deletion.
Disclosure of personal-related data to third parties
Disclosure of your personal-related data to third parties is only possible, if
You have given your explicit consent to this in accordance with GDPR Section 6 (1) Sentence 1. lit. a,
To the extent permitted by law and required for the execution of contractual relationships with you according to GDPR Section 6 (1) Sentence 1 lit. b,
In the event that there is a legal obligation to disclose according to GDPR Section 6 (1) Sentence 1 lit. c, or
To the extent permitted by law and required to safeguard our interests or those of third parties in accordance with GDPR Section 6 (1) Sentence 1 lit. f. The disclosed data may be used by the third party exclusively for the purposes stated above.
Cookies and pixel tags
We use cookies on our website. These are small files that your browser automatically creates and that are stored on your terminal device (laptop, tablet, smartphone, etc.), when you visit our website. Cookies do not cause any damage on your terminal device and do not contain any viruses, trojans, or other malware.
Information is stored in the cookie, which is determined in connection with the terminal device used. This does not infer, however, that we will directly become aware of your identity.
We use pixel tags (also called counting or tracking pixels) in the context of our online offer. Pixels are small graphics that are integrated via the HTML code of our website. The pixel tag itself does not cause any information to be stored or changed on your terminal device, thus pixels do not cause any damage on your terminal device and do not contain any viruses, trojans, or other malware.
Pixels can send personal-related data, such as your IP address, the referrer URL of the visited website, the time at which the pixel was viewed, the browser used, and previously set cookie information to a web server. This makes it possible to carry out range measurements and other statistical evaluations, which serve the optimisation of our offer.
The use of cookies serves on the one hand to make the use of our offer more pleasant to you. For example, we use so-called session cookies to recognise that you have already visited our website. These are automatically deleted after leaving our website.
Furthermore, we also use temporary cookies that are stored on your terminal device for a specified period of time in order to optimise user-friendliness. In case you visit our website again to use our services, it is automatically recognised that you have already been on our website and which inputs and settings you have made so that you do not have to enter them again.
On the other hand, we use cookies and pixel tags in the context of third-party tools in order to statistically record the use of our website and to evaluate it for the purpose of optimising our offer to you (see item 5). These cookies and pixel tags enable us to automatically recognise that you have already visited our site when you visit it again. These cookies are automatically deleted after a specified period of time.
The data processed by cookies and pixel tags are necessary for the mentioned purposes to safeguard our legitimate interests in the analysis, optimisation and economic operation of our offer in accordance with GDPR Section 6 (1) Sentence 1 lit. f.
Most browsers automatically accept cookies and pixels. However, you can configure your browser so that no cookies are stored on your computer or a message appears any time before a new cookie is created. Yet, if you deactivate cookies completely, you may not be able to use all the functions of our website.
In addition, you can also prevent the use of pixels on our pages using corresponding tools or browser add-ons (e.g. via the add-on “AdBlock”). You will find further opt-out options in the following information about the tracking measures we use.
Web analysis
The tracking and targeting measures listed below and implemented by us are carried out on the basis on GDPR Section 6 (1) Sentence 1 lit. f.
With the tracking measures we use, we want to ensure that our website is designed to meet your needs and is continually optimised. On the other hand, we use the tracking measures to record the use of our website statistically and to evaluate it for the purpose of optimising our offer for you.
Through the targeting measures used, we want to ensure that you only see advertising on your terminal devices that is oriented towards your actual or supposed interests.
These interests shall be deemed legitimate within the aforementioned provision.
The respective data processing purposes and data categories can be found in the corresponding tracking and targeting tools.
Google Analytics
Our website uses Google Analytics, a web analysis service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter referred to as “Google“). In this context, pseudonymised user profiles are created and cookies (see item 4) are used. The information generated by the cookie about your use of this website such as
Browser type/version,
Operating system used,
Referrer-URL (the previously visited website),
Hostname of the accessing computer (IP address)
Time of server request,
are transferred to and stored in a Google server in the USA. These cookies lose their validity after 2 years at the latest.
Google complies with the data protection regulation of the U.S. privacy shield and is registered with the U.S. Department of Commerce’s “U.S. Privacy Shield”-program. In addition, we have concluded a data processing contract with Google for the use of Google Analytics. Through this contract, Google ensures that it will process the data in accordance with the General Data Protection Regulation and that it will protect the rights of the concerned person or user.
The information is used to evaluate the use of the website, to compile reports on website activities and to provide other services related to the website and Internet use for market research purposes and to design these Internet pages aligned with the requirements.
This information may also be disclosed to third parties where legally required, or where such third parties process the information on Google’s behalf. Under no circumstances will your IP address be merged with other Google data. The IP addresses are anonymised so that an allocation is not possible (IP masking).
You can prevent the installation of cookies by changing the settings of your browser accordingly. However, we would like to point out that in this case, you may not be able to use all functions of this website to the full extent.
You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a Browser-Add-on.
As an alternative to the browser add-on, especially for browsers on mobile devices, you can prevent Google Analytics from preventing your data by clicking on this link. An opt-out cookie will be set to prevent your information from being collected in the future when you visit this website. This opt-out cookie applies only to this browser and only for our website and will be stored on your device. If you delete the cookies in that browser, you will need to set the opt-out cookie again.
For more information about data protection in connection with Google Analytics, see the Google Analytics Help section.
Google AdWords Conversion Tracking
On our website, we use Google Conversion Tracking from Google Ireland Limited(Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter referred to as “Google“), in order to record the use of our website statistically and to evaluate it for the purpose of optimising our services to you. Google Adwords places a cookie on your computer (cf. item 4) if you have reached our website from a Google advertisement.
These cookies expire after 30 days. If the user visits certain pages on the AdWords customer’s website and the cookie has not yet expired, Google and the customer will be able to tell that the user clicked on the ad and was directed to that page.
The information generated by the cookie about your use of this website will be transmitted to an and stored on Google servers in the United States. Google complies with the data protection regulation of the U.S. privacy shield and is registered with the U.S. Department of Commerce’s “U.S. Privacy Shield”-program. In addition, we have concluded a data processing contract with Google for the use of Google AdWords. Through this contract, Google ensures that it will process the data in accordance with the General Data Protection Regulation and that it will protect the rights of the concerned person or user.
Each AdWords customer receives a different cookie. Therefore, cookies cannot be tracked through AdWords customers’ websites. The information collected from the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. We find out the total number of users who clicked on their ad and were directed to a page tagged with a conversion tracking tag. However, you will not receive any information that personally identifies users.
If you do not wish to participate in the tracking procedure, you can also refuse to set a cookie as required for this purpose – for example by setting your browser to deactivate the automatic setting of cookies in general. You can also deactivate cookies for conversion tracking by setting your browser to block cookies from the domain “www.googleadservices.com”.
You may also opt out of data processing for the purpose of displaying interest-based advertisements using Google’s Advertisement Settings Manager.
Google’s Privacy Policy for conversion tracking can be found here.
Google DoubleClick
Our website uses cookies to collect and analyse information to optimise the display of advertisements. To do this, we use targeting technologies from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter referred to as “Google“): Double Click, Double Click Exchange Buyer, Double Click Bid Manager.
These technologies enable us to specifically address you with individually interest-related advertising. For example, the cookies used (see item 4) record which of our contents you have been interested in. On the basis of this information, we can also display offers on the pages of third parties that are specifically geared to your interests, such as those resulting from your previous user behaviour. The recording and evaluation of your user behaviour is carried out exclusively under a pseudonym and does not enable us to identify you.
The cookie is automatically deleted after 30 days.
You may also opt out of data processing for the purpose of displaying interest-based advertisements using Google’s Advertisement Settings Manager.
For more information about Google’s privacy practices, please read Google’s privacy statement.
Google Tag Manager
Our website uses the Google Tag Manager tool from Google Ireland Limited(Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter referred to as “Google“). The Google Tag Manager is used to manage the tools described in this privacy protection statement. For details regarding these tools, please refer to the information regarding the specific tool.
The tool Tag Manager itself (which implements the tags) is a cookie-free domain. The tool triggers other tags that may themselves collect data. Google Tag Manager does not access this data. If a deactivation has been made at domain or cookie level, it will remain unchanged for all tracking tags implemented by the Google Tag Manager.
For more information about the Google Tag Manager, see the usage guidelines for this product.
Hotjar
We also use the Hotjar analysis service of Hotjar Ltd. (St Julian’s Business Centre 3, Elia Zammit Street, St Julian’s STJ 1000, Malta; hereinafter referred to as “Hotjar”). Hotjar is a tool for analysing user behaviour. Hotjar enables us to measure, evaluate and track the behaviour of visitors on our website, such as mouse movements, clicks and scroll height.
For this purpose, Hotjar uses, among other things, cookies on the terminal devices of website visitors (see item 4) and may store data of website visitors such as browser information, operating system, time spent on the website, etc. in anonymised form.
You can prevent this data processing by Hotjar by deactivating the use of cookies in the settings in your web browser and deleting already active cookies. Another way to prevent Hotjar from processing your data is to activate the “Do-Not-Track” function in your browser. You can find out, how this can be set here.
For more information about privacy protection at Hotjar, please see their privacy policy.
LinkedIn Insight-Tag
On our website we use the analysis and conversion tracking technology of the platform LinkedIn Inc. (2029 Stierlin Ct, Mountain View, CA 94043, USA; hereinafter referred to “LinkedIn”).
The aforementioned technology allows you to view more relevant advertisements based on your interests. LinkedIn also provides us with aggregated and anonymous reports of ad activity and information about how you interact with our website. For this purpose, LinkedIn uses a Javascript code (Insight Tag), which in turn stores a cookie (see Item 4) in your web browser or uses a pixel.
The LinkedIn Insight tag is used to collect information about the use of our website, including URL, referrer URL, IP address, device and browser properties, time stamps and page views. The data collected via the LinkedIn Insight tag is encrypted and anonymised within 7 days. The anonymised data will be deleted within 90 days. LinkedIn does not share any personal-related data with the owner of the website, but only provides aggregated reports about the website’s target audience and display performance.
In connection with the use of LinkedIn Conversion Tracking, the information collected is also processed on servers of LinkedIn Inc. in the USA. LinkedIn is certified under the US-EU-Data Protection Agreement “Privacy Shield” und is committed to complying with European data protection regulations.
If you do not want us to evaluate your user behaviour in connection with LinkedIn ads, you can deactivate it by opting out by clicking here.
Alternatively, you can prevent the evaluation of your user behaviour in connection with LinkedIn by setting the appropriate cookie in your browser.
You can find further information on data protection at LinkedIn here.
ProdPerfect
We use ProdPerfect, a web analytics service provided by ProdPerfect Inc. (50 Milk St, 16th Fl, Boston, MA 02110, USA; hereinafter referred to as “ProdPerfect”), on our website. This allows us to perform automated browser testing and simulations of our website to create pseudonymous usage profiles about the use of the website, to evaluate the use of our website, to compile reports about website activity, and to see how different versions of our website are used by website visitors in different browsers. For this purpose, cookies (see Item 4) from ProdPerfect are used. The cookie is used to collect information about the use of our website, including the pseudonymised IP address, approximate location, URL, referrer URL, device and browser properties, time stamp, and page views.
The information we collect about your use of our website is transferred to and stored on a ProdPerfect server in the United States. ProdPerfect is certified under the US-EU-Data Protection Agreement “Privacy Shield” and is committed to complying with European data protection regulations. In addition, we have concluded a contract processing agreement with ProdPerfect. This contract ensures that ProdPerfect processes the data in accordance with the General Data Protection Regulation and guarantees the protection of the rights of the person or user concerned.
If you do not want us to evaluate your behaviour in connection with ProdPerfect, you can prevent this by making an appropriate cookie-setting in your browser.
For more information about ProdPerfect’s data protection practices, click here.
Use of SalesViewer® technology
This website uses SalesViewer® technology from SalesViewer® GmbH on the basis of the website operator’s legitimate interests (Section 6 paragraph 1 lit.f GDPR) in order to collect and save data on marketing, market research and optimisation purposes.
In order to do this, a javascript based code, which serves to capture company-related data and according website usage. The data captured using this technology are encrypted in a non-retrievable one-way function (so-called hashing). The data is immediately pseudonymised and is not used to identify website visitors personally.
The data recording and storage can be repealed at any time with immediate effect for the future, by clicking on https://www.salesviewer.com/opt-out in order to prevent SalesViewer® from recording your data. In this case, an opt-out cookie for this website is saved on your device. If you delete the cookies in the browser, you will need to click on this link again.
Freshdesk
We use the customer service system Freshdesk (hereinafter referred to as “Freshdesk”), a service of Freshworks Inc. (1250 Bayhill Drive, Suite 315, San Bruno, CA 94066, USA; hereinafter referred to as “Freshworks”), to accept and manage contact requests. When you contact us (via contact form or email), your details will be stored in Freshdesk for processing the contact request.
Freshworks complies with the data protection regulations of the „US privacy shield“ and is registered with the US Department of Commerce’s Privacy Shield program. In addition, we have a contract with Freshworks for the use of Freshdesk. By this contract Freshworks assures that they process the data in accordance with the General Data Protection Regulation and guarantee the rights of the person or user concerned.
The corresponding data processing takes place on the basis of GDPR Section 6 (1) S. 1 lit. b and may be necessary for the execution of the contract with you or pre-contractual measures. In addition, data processing is carried out on the basis of our legitimate interests pursuant to GDPR Section 6 (1) S. 1 lit. f. Our legitimate economic interest lies in optimising the management of contact enquiries and improving customer service in order to provide our services.
More information about Freshdesk and data protection at Freshworks can be found here.
If you have informed yourself about our products but have not concluded a contract with us, your personal-related data will be deleted after the respective request has been dealt with. If you are a customer of ours and your contact request is related to your contractual relationship, your data, in particular data relevant under tax and commercial law (from German laws HGB, StGB, or AO), will be automatically deleted at the end of the statutory retention period.
Freshchat
We furthermore use the Freshchat tool (hereinafter referred to as “Freshchat”), which is also a service of Freshworks Inc. (1250 Bayhill Drive, Suite 315, San Bruno, CA 94066, USA; hereinafter referred to as “Freshworks”), to contact us quickly and easily. Through Freshchat you can communicate with us via live chat without providing any personal information of your own. When using live chat, the chat history and your IP address are transmitted to Freshworks and stored on their servers in the USA.
The data processed during the use of Freshchat can be used to create user profiles under a pseudonym. Cookies (see Item 4) can be used to recognise the user for this purpose. The data collected by Freshchat will not be used to personally identify the visitor to our website and will not be merged with personal-related data about the bearer of the pseudonym without the separate consent of the person or user concerned.
Freshworks complies with the US-Privacy-Shield and is registered with the US Department of Commerce’s Privacy Shield program. In addition, we have entered into a contract with Freshworks for the use of Freshchat. By this contract, Freshworks assures that they process the data in accordance with the General Data Protection Regulation and guarantee the protection of the rights of the person or user concerned.
The corresponding data processing takes place on the basis of GDPR Section 6 (1) S. 1 lit. b and may be necessary for the execution of the contract with you or pre-contractual measures. In addition, data processing is carried out on the basis of our legitimate interests pursuant to GDPR Section 6 (1) S. 1 lit. 5. Our legitimate economic interest lies in optimising the management of contact enquiries and improving customer service in order to provide our services.
More information about Freshchat and data protection at Freshworks can be found here.
If you have informed yourself about our products but have not concluded a contract with us, your personal-related data will be deleted after the respective request has been dealt with. If you are a customer of ours and your contact request is related to your contractual relationship, your data, in particular data relevant under tax and commercial law (from German laws HGB, StGB, or AO), will be automatically deleted at the end of the statutory retention period.
Google Fonts
We use so-called web fonts, which are provided by Google, for the uniform display of fonts. When you access a website, your browser loads the web fonts you need into your browser cache to display text and fonts correctly. For this purpose, the browser you are using must establish connection to Google’s servers. This enables Google to know that your IP address has been used to access our website.
Google complies with the US-Privacy-Shield and is registered with the US Department of Commerce’s Privacy Shield program.
The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of GDPR Section 6 (1) S. 1 lit. f. If your browser does not support web fonts, a standard font will be used by your computer. Further information on Google Web Fonts can be found here and in Google’s privacy policy.
Rights of persons or users concerned
You have the right:
In accordance with GDPR Section 7 (3), to revoke your consent once given to us at any time. As a result, we may no longer continue the data processing based on this consent in the future;
To request information about your personal-related data processed by us in accordance with GDPR Section 15. In particular, you may request information on the processing purposes, the category of personal-related data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right of rectification, deletion, restriction of processing or objection, the existence of a right of complaint, the origin of your data, unless it has been collected from us, as well as the existence of an automated decision making process including profiling and, if applicable, meaningful information on its details;
In accordance with GDPR Section 16 to immediately request the correction of incorrect or incomplete personal-related data stored by us;
To demand the deletion of your personal-related data stored by us in accordance with GDPR Section 17, unless processing is necessary for exercising the right to freedom of expression and information, for fulfilling a legal obligation, for reasons of public interest or for asserting, exercising or defending legal claims;
To demand the restriction of the processing of your personal-related data in accordance with GDPR Section 18, if the accuracy of the data is disputed by you, the processing is unlawful but you refuse its deletion and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have objected to the processing in accordance with GDPR Section 21;
In accordance with GDPR Section 20, to receive your personal data which you have provided to us in a structured, common and machine-readable format or to request the transfer to another responsible person, and
To complain to a supervisory authority in accordance with GDPR Section 77. As a rule, you can contact the supervisory authority at your usual place of residence or workplace or at our company headquarters.
Information about your right to objection according to GDPR Section 21
You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal-related data concerning you carried out pursuant to GDPR Section 6 (1) S. 1, lit. f (Data processing on the basis of a balancing of interests), including profiling of GDPR Section 4 (4) GDPR on the basis of that provision.
If you file an objection, we will no longer process your personal-related data unless we can prove compelling reasons or the processing worthy of protection which outweigh your interests, rights, and freedoms, or the processing serves the assertion, exercise or defense of legal claims.
If your objection is against the processing of data for the purpose of direct marketing, we will cease processing immediately. In this case, the indication of a special situation is not necessary. This also applies to profiling as far as it is connected with such direct advertising.
If you want to exercise your right to objection, you can send an email to datenschutz@optilyz.com.
Data Security
All data transmitted by you personally is encrypted using the generally accepted and secure standard TLS (Transport Layer Security). TLS is a secure and proven standard that is also used, for example, in online banking. You can recognise a secure TLS connection by the s attached to the http (https://..) in the address bar of your browser or by the lock symbol at the bottom of your browser.
We also make use of suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorised access by third parties. Our security measures are continuously improved in line with technological developments.
Validity and changes of this data protection agreement
This data protection agreement is currently valid and is of November 2018.
Due to the further development of our website and offers about it or due to changed legal or official requirements, it may be necessary to change this privacy policy. The current data protection declaration can be viewed at any time on the website under
https://www.optilyz.com/en/data-privacy
can be retrieved and printed by you.