Data privacy statement
1. Data protection at a glance
The following advice gives a simple review about what happens with your personal data whenever you visit our web site. Personal data is all of the data with which you can be identified personally. You can obtain detailed information about the subject of data protection from our data privacy statement that is quoted in this text.
Advice about the responsible person
The responsible person for processing the data on this web site is:
Telephone: (0049) 431220120
The responsible position is the natural person or the legal entity that decides about the purposes and means of processing the personal data (e.g., names, e-mail addresses, etc.) solely or jointly with other persons or entities.
We have appointed a data-protection officer for our business enterprise:
Mr. Uwe Nolte, Ph.D.
Am Ziegelteich 44 b
Telephone: (0049) 431220120
Recording of data on our web site
Who is responsible for recording of data on this web site?
The data on this web site is processed by the web site's operator. You can obtain this contact data from the legal notice (“Impressum”) that is given on this web site.
How do we record your data?
We compile your data which you have notified to us on the one hand. While doing so, the data can typically concern the information that you have input on a contact form.
Our IT systems will automatically record other data during your visit to our web site: this data is mainly technical (e.g. the internet browser, operating system or time when the site was called up). This data is recorded automatically as soon as you enter our web site.
For what purpose do we use your data?
Part of the data is compiled in order to ensure that the web site is provided faultlessly. Other data can be utilized for analysing your behaviour as a user.
Which rights do you have regarding your data?
You have the right to receive free information about the origin, recipient(s) and purpose of your stored personal data at any time. You also have a right to demand that this data be corrected, blocked or deleted. You can contact us concerning this matter at any time and you can also ask us further questions about the subject of data protection at the address that is given in the legal notice (“Impressum”). Furthermore, you are vested with a right of complaint to the responsible supervisory authority.
Analytical tools and tools from third-party suppliers
Your surfing behaviour can be statistically evaluated when visiting our web site: that is mainly done with cookies and the so-called analytical programmes. Your surfing behaviour will be analysed anonymously as a rule: the surfing behaviour cannot be traced back to yourself. You can object to this analysis, or you can prevent it through not using certain tools. You can find detailed information about this matter in the following data-protection declaration.
You can object to this analysis. We will inform you in this data-protection declaration about the possibilities for making objections.
2. General advice and obligatory information
The operators of the pages on this web site take the protection of your personal data very seriously. We handle your personal data confidentially, as well as according to the legal data-protection regulations and this data privacy declaration.
Various items of personal data will be compiled whenever you use this web site. Personal data is the data with which you can be identified personally. This data privacy declaration explains which data we collect and what we use it for. It also explains how that happens and for which purpose.
We wish to point out that there can be breaches of security during transfer of data on the internet (e.g., when communicating by e-mail). It is impossible to protect the data completely against access by third parties.
Information, correction, blockage and deletion
You have the right - within the framework of the applicable legal requirements - to receive free information at any time about your stored personal data, its origin, recipient(s), the purpose for which the data is processed and you also have a right to demand that this data be corrected, blocked or deleted if necessary. You can contact us at any time concerning this matter and you can also ask us further questions about the subject of personal data at the address that is given in the legal notice (“Impressum”).
Revocation of your consent to process the data
Many data-processing operations are only possible with your express consent. You can revoke a consent that has already been granted at any time. It suffices to send us an informal notification by e-mail for this purpose. The legality of the data-processing operations that have taken place up to the date when we receive your revocation remain unaffected by it.
Right of complaint to the responsible supervisory authority
The affected natural person or legal entity has a right of complaint to the responsible supervisory authority in the case that the data-protection law is infringed. The responsible supervisory authority concerning questions about the data-protection law is Schleswig-Holstein's state data-protection officer at the Independent State Centre for Data Protection: https://www.datenschutzzentrum.de/
Right to transfer data
You have the right to arrange for the data - which we automatically process on the basis of your consent or in order to fulfil a contract - to be issued to yourself or to a third party in a customary format that can be scanned by machine. Insofar as you demand that the data should be directly transferred to another responsible person or entity, this will only take place to the extent that is technically feasible.
Encryption by means of SSL or TLS
This site uses an encryption device by means of SSL or TLS for reasons of security and for protecting the transfer of confidential contents, like for example the purchase orders or enquiries which you send to us as the site's operator. You can recognize an encrypted link by means of noting that the lines of the browser's address change from 'http://' to 'https://' and through a symbolic lock in your browser's lines.
The data that you transfer to us cannot be jointly read by third parties whenever the encryption by means of SSL or TLS has been activated.
3. Recording of data on our web site
Our website is hosted by Domainfactory GmbH, Oskar-Messter-Str. 33, 85737 Ismaning. We have concluded a contract for the processing of personal data (in accordance with EU GDPR) with Domainfactory GmbH, in which we oblige Domainfactory GmbH to protect the data of our customers and not to pass them on to third parties. A sample of this contract can be found at the following link: https://www.df.eu/fileadmin/media/doc/ADV_Kunden_Domainfactory.pdf.
Server-log data files
The provider of the site's pages automatically compiles and stores information in the so-called server-log data files which your browser automatically transmits to us. This information refers to the:
• type and version of the browser,
• utilized operating system,
• URL referrer,
• host's name of the accessing computer,
• time of the server's query,
• IP address.
This data is not combined with other sources of data. The collection of this data is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and the optimization of his website - for this purpose, the server log files must be recorded.
This website partly uses so-called cookies. Cookies do not harm your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and stored by your browser. Most of the cookies we use are so-called "session cookies". They are automatically deleted after your visit. Other cookies remain stored on your device until you delete them. These cookies allow us to recognize your browser the next time you visit.
You can set your browser so that you are informed about the setting of cookies, allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or disable them generally, and activate the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.
When you send us an e-mail, we store and process your data to establish, conduct and maintain a contractual relationship, to perform odour measurements or chemical measurements, to provide expert opinions, to sell and send measuring equipment / lab material or gases and, where necessary, to maintain and repair measuring equipment, to facilitate your participation in proficiency testing, to organize conferences, workshops, working groups, to provide software services or to handle your services / supplies with you as a supplier. For this purpose, we need the following personal data from you: salutation, first and last name, address and function data, communication data (Tel./Fax, e-mail address). The basis for data processing is Art. 6 para. 1 lit. b GDPR, which allows the processing of data to fulfill a contract or pre-contractual measures. If you do not agree with the storage and processing, a contractual cooperation is unfortunately not possible. In the event that services are handled by us through third parties, we will transmit your data to the extent necessary to the respective cooperation partner or service provider. Olfasense GmbH uses G-Suite services (Google LLC, USA) for the purpose of internal communication and communication with customers / prospects as well as a platform for internal cooperation. Your data will be transmitted to Google. In addition to the contract data processing contract, Olfasense has signed the EU standard clauses (EU Model Clauses) with Google LLC developed by the European Commission. Another transmission of further personal data does not take place and is not planned. We do not merge personal data with other data and do not conduct any evaluations (profiling). We store your data for the duration of the business relationship and beyond the period that the business relationship lasts, for a maximum of 4 years in accordance with §195 BGB. This retention period begins with each new contractual relationship. Individual data may be subject to longer storage obligations for tax and commercial reasons and may only be deleted after expiration of these legal obligations. However, until then, the data will be protected from further access (blocked).
If you arrange to send us enquiries via the contact form, then we will store the information that you have input on the contact form - including the contact details that you have given there - for the purpose of processing the enquiry and for the case of subsequent questions. We will not forward this data without your consent.
Therefore, the data that was input on the contact form is processed solely on the basis of your consent (Art. 6, Para. 1, Part a of the EU GDPR). You can revoke this consent at any time: an informal notification by e-mail suffices for this purpose. The legality of the data-processing operations that have taken place up to the date when we receive your revocation remain unaffected by it.
The data that you have input on the contact form remains with us until you request us to delete it, or until you revoke your consent to the storage, or until the purpose for storing the data is inapplicable (e.g. after completion of your enquiry). Compulsory legal provisions - especially those concerning the time limits for keeping or storing the data - remain unaffected.
By completing our electronic download form for PDF documents, we will store the information that you have input on the download form - including the contact details that you have given there - for the purpose of processing the enquiry and for the case of subsequent questions. We will not forward this data without your consent.
Therefore, the data that was input on the download form is processed solely on the basis of your consent (Art. 6, Para. 1, Part a of the EU GDPR). You can revoke this consent at any time: an informal notification by e-mail suffices for this purpose. The legality of the data-processing operations that have taken place up to the date when we receive your revocation remain unaffected by it.
The data that you have input on the download form remains with us until you request us to delete it, or until you revoke your consent to the storage, or until the purpose for storing the data is inapplicable (e.g. after completion of your enquiry). Compulsory legal provisions - especially those concerning the time limits for keeping or storing the data - remain unaffected.
Event registration form
Via the website, you can register for events, e.g. the interlaboratory tests organized by Olfasense GmbH. Such registration takes place via an online event registration form, via which you are providing us with the personal information collected on the form. The basis for processing the data is Art. 6, Para. 1, Part b of the EU GDPR which permit the data to be processed for fulfilling a contract or for taking a pre-contractual measure.
If you would like to subscribe to the newsletter that is offered on our web site, then we will require you to give us an e-mail address and the information which allows us to check that you are the proprietor of the stated e-mail address and that you agree to receiving the newsletter. Further data will not be compiled, or it will only be compiled on a voluntary basis. We will solely utilize this data for despatching the requested information and we will not forward this data to third parties.
The data that is input on the registration form for the newsletter will be processed solely on the basis of your consent (Art. 6, Para. 1, Part a of the EU GDPR). You can revoke at any time the granted consent for storing the data and the e-mail address, as well as using it for despatching the newsletter, via the 'unsubscribe' link in the newsletter for example. The legality of the data-processing operations that have taken place up to the date when we receive your revocation remain unaffected by it.
We will store the data about yourself that has been filed by us for the purposes of subscribing to the newsletter until you have been taken off the newsletter's list and it will be deleted after you have cancelled your subscription to the newsletter. The data that has been stored by us for other purposes (e.g. for the performance of a contract) remains unaffected by this procedure.
This web site uses CleverReach's services for despatching the newsletter. The supplier is CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede, Germany.
CleverReach is a service that enables the despatch of newsletters to be organized and analysed, among other things. If you input data for the purposes of subscribing to the newsletter (e.g., e-mail address), then this data will be stored on CleverReach's servers in the EU.
We can analyse our newsletter campaigns with the aid of CleverReach. If you open an e-mail that has been despatched with CleverReach, then the data file (a so-called web beacon) that is contained in the e-mail will be linked to CleverReach servers in the EU. It can be established in this way whether a newsletter's message has been opened and which links have been activated by clicking on them if necessary. Technical information will be recorded apart from that (e.g., the point in time when the call was made, the IP address, type of browser and operating system). This information cannot be ascribed to the respective recipient of the newsletter: it solely serves for statistically analysing the newsletter campaigns. The results of these analyses can be used in order to make future newsletters more suitable for the reader's interests.
If you do not want any analysis to be made by CleverReach, then you must cancel your subscription to the newsletter. We provide a corresponding link for this purpose in every newsletter's message. Furthermore, you can also cancel your subscription to the newsletter directly on https://seu2.cleverreach.com/f/126888-184980/wwu/.
The data is processed on the basis of your consent (Art. 6 Para. 1, Part a of the EU GDPR). You can revoke this consent at any time by means of cancelling your subscription to the newsletter. The legality of the data-processing operations that have taken place up to the date when we receive your revocation remain unaffected by it.
We will store the data that you have filed with us for the purposes of subscribing to the newsletter until you have been taken off the newsletter's list and it will be deleted not only from our own servers but also from CleverReach's servers after you have cancelled your subscription to the newsletter. The data that has been stored by us for other purposes (e.g. for the performance of a contract) remains unaffected by this procedure.
You can obtain more details from CleverReach's data-protection provisions at: https://www.cleverreach.com/en/data-security.
Conclusion of a data-processing agreement
We have concluded a so-called 'data-processing agreement' in accordance with EU GDPR with CleverReach, in which we undertake CleverReach to protect the data of our clients and not to forward it to third parties. This agreement can be consulted via the following link: https://cloud-files.crsend.com/docs/Vereinbarung_Auftragsverarbeitung_Mu....
When sending us your application by mail, e-mail or via an online portal (eg Ebay Kleinanzeigen, Employment Agency, etc.), you provide us with your personal information. In addition to your name, the usual correspondence data such as postal address or e-mail address are stored with us. Further data types can be found in the accompanying documents such as CVs, certificates, etc.
Your information from your application, including the personal data provided by you, will be stored by us for processing the application and in case of follow-up questions.
The basis for data processing is Art. 6 para. 1 lit. b DSGVO, which allows the processing of data to fulfil a contract or for pre-contractual measures.
Your data will be accessible to the persons responsible for personnel selection of the respective department of Olfasense GmbH. Your data will not be shared with other companies or individuals without your consent.
Your data from your application, including the personal data you provide, will remain with us until you request us to delete it or the purpose for the data storage ceases (at the latest 6 months after completing the application process). The legality of the data processing operations carried out until the revocation remains unaffected by the revocation. Mandatory statutory provisions - especially retention periods - remain unaffected.
4. Plug-ins and tools
Google's web fonts
This site uses a standardized representation of the types of script, i.e., the so-called web fonts, which will be provided by Google. Your browser will load the required web fonts into your browser's cache in order to display the texts and types of script correctly, whenever a page is called up on the web site.
The browser that you are using must link up with Google's servers for this purpose. Google will be notified by these means that our web site has been called up via your IP address. Google's web fonts are used in the interests of representing our online offers in a standardized and suitable way. This arrangement represents a justified interest for the purposes of Art. 6, Para. 1, Part. f of the EU GDPR.
Your computer will use a standard script if your browser does not support the web fonts.
5. Analytical tools and advertisement
We use "Google reCAPTCHA" (hereinafter "reCAPTCHA") on our websites. This service is provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google"). reCAPTCHA is used to check whether the data entered on our website (such as in a contact form) has been entered by a human or by an automated program. To do this, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis starts automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, how long the visitor has been on the website, or mouse movements made by the user). The data collected during the analysis will be forwarded to Google.
The reCAPTCHA analyses take place completely in the background. Website visitors are not advised that such an analysis is taking place. Data processing is based on Art. 6, Para. 1, Part. f of the EU GDPR. The website operator has a legitimate interest in protecting its site from abusive automated crawling and spam.
6. Google G Suite
Olfasense GmbH uses Google services for the purpose of internal communication and communication with customers / leads / suppliers / applicants as well as a platform for internal cooperation. The Google services used by Olfasense GmbH essentially include the Google G-Suite for e-mail, scheduling and collaboration applications (word processing, spreadsheets, shared presentation) and file sharing.
This service is provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google").
If you use contact forms or download forms on this website, your inquiries will automatically be forwarded to the G-Suite email addresses of the responsible employees of Olfasense GmbH. In addition, Google Forms will be used to create event registration forms. In these cases, your data will be transmitted to Google.
For the use of G-Suite services by Olfasense GmbH, the agreement of the EU standard clauses developed by the European Commission (EU Model Clauses) ensures an adequate level of data protection.
The EU standard contractual clauses are a recognized means of ensuring a reasonable level of data protection when transferring data outside Europe. These include the requirements of European data protection law in the form of contractual clauses and may not be changed by the contracting parties without the prior approval of the EU Commission.
The EU Model Clauses used by Google can be found at the following link: https://gsuite.google.com/terms/mcc_terms.html.
The compliance of the EU standard contract clauses with the requirements of the EU data protection law used for the application programs of the Google G-Suite has been confirmed by European data protection authorities.
In addition, Google introduced the Data Processing Amendment to G Suite and/or Complementary Product Agreement (Version 2.0) in October 2017, due to the EU GDPR which comes into force on 25 May 2018. This regulates the rights and obligations between Olfasense GmbH as data controller and Google as data processor.
7. Final provisions
When translated into other languages, solely the German version of this data privacy statement is binding.