Data privacy statement
1. Data protection at a glance
The following advice gives a simple review about what happens with your personal data whenever you visit our web site. Personal data is all of the data with which you can be identified personally. You can obtain detailed information about the subject of data protection from our data privacy statement that is quoted in this text.
Advice about the responsible person
The responsible person for processing the data on this web site is:
Telephone: (0049) 431220120
The responsible position is the natural person or the legal entity that decides about the purposes and means of processing the personal data (e.g., names, e-mail addresses, etc.) solely or jointly with other persons or entities.
We have appointed a data-protection officer for our business enterprise:
Mr. Uwe Nolte, Ph.D.
Am Ziegelteich 44 b
Telephone: (0049) 431220120
Recording of data on our web site
Who is responsible for recording of data on this web site?
The data on this web site is processed by the web site’s operator. You can obtain this contact data from the legal notice (“Impressum”) that is given on this web site.
How do we record your data?
We compile your data which you have notified to us on the one hand. While doing so, the data can typically concern the information that you have input on a contact form.
Our IT systems will automatically record other data during your visit to our web site: this data is mainly technical (e.g. the internet browser, operating system or time when the site was called up). This data is recorded automatically as soon as you enter our web site.
For what purpose do we use your data?
Part of the data is compiled in order to ensure that the web site is provided faultlessly. Other data can be utilized for analysing your behaviour as a user.
Which rights do you have regarding your data?
You have the right to receive free information about the origin, recipient(s) and purpose of your stored personal data at any time. You also have a right to demand that this data be corrected, blocked or deleted. You can contact us concerning this matter at any time and you can also ask us further questions about the subject of data protection at the address that is given in the legal notice (“Impressum”). Furthermore, you are vested with a right of complaint to the responsible supervisory authority.
Analytical tools and tools from third-party suppliers
Your surfing behaviour can be statistically evaluated when visiting our web site: that is mainly done with cookies and the so-called analytical programmes. Your surfing behaviour will be analysed anonymously as a rule: the surfing behaviour cannot be traced back to yourself. You can object to this analysis, or you can prevent it through not using certain tools. You can find detailed information about this matter in the following data-protection declaration.
You can object to this analysis. We will inform you in this data-protection declaration about the possibilities for making objections.
2. General advice and obligatory information
The operators of the pages on this web site take the protection of your personal data very seriously. We handle your personal data confidentially, as well as according to the legal data-protection regulations and this data privacy declaration.
Various items of personal data will be compiled whenever you use this web site. Personal data is the data with which you can be identified personally. This data privacy declaration explains which data we collect and what we use it for. It also explains how that happens and for which purpose.
We wish to point out that there can be breaches of security during transfer of data on the internet (e.g., when communicating by e-mail). It is impossible to protect the data completely against access by third parties.
Information, correction, blockage and deletion
You have the right – within the framework of the applicable legal requirements – to receive free information at any time about your stored personal data, its origin, recipient(s), the purpose for which the data is processed and you also have a right to demand that this data be corrected, blocked or deleted if necessary. You can contact us at any time concerning this matter and you can also ask us further questions about the subject of personal data at the address that is given in the legal notice (“Impressum”).
Revocation of your consent to process the data
Many data-processing operations are only possible with your express consent. You can revoke a consent that has already been granted at any time. It suffices to send us an informal notification by e-mail for this purpose. The legality of the data-processing operations that have taken place up to the date when we receive your revocation remain unaffected by it.
Right to object to data collection in special cases and direct mail (Article 21 GDPR)
If your personal data is processed for purposes of direct marketing, you have the right to object at any time to the processing of personal data for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct marketing activities. If you object, your personal data will then no longer be used for the purpose of direct advertising (objection under Art. 21 (2) GDPR).
Right of complaint to the responsible supervisory authority
The affected natural person or legal entity has a right of complaint to the responsible supervisory authority in the case that the data-protection law is infringed. The responsible supervisory authority concerning questions about the data-protection law is Schleswig-Holstein’s state data-protection officer at the Independent State Centre for Data Protection: https://www.datenschutzzentrum.de/
Right to transfer data
You have the right to arrange for the data – which we automatically process on the basis of your consent or in order to fulfil a contract – to be issued to yourself or to a third party in a customary format that can be scanned by machine. Insofar as you demand that the data should be directly transferred to another responsible person or entity, this will only take place to the extent that is technically feasible.
Encryption by means of SSL or TLS
This site uses an encryption device by means of SSL or TLS for reasons of security and for protecting the transfer of confidential contents, like for example the purchase orders or enquiries which you send to us as the site’s operator. You can recognize an encrypted link by means of noting that the lines of the browser’s address change from ‘http://’ to ‘https://’ and through a symbolic lock in your browser’s lines.
The data that you transfer to us cannot be jointly read by third parties whenever the encryption by means of SSL or TLS has been activated.
3. Recording of data on our web site
Our website is hosted by vektorrausch GmbH, Werftbahnstraße 8, 24143 Kiel. We have concluded a contract for the processing of personal data (in accordance with EU GDPR) with vektorrausch GmbH, in which we oblige vektorrausch GmbH to protect the data of our customers and not to pass them on to third parties.
Server-log data files
The provider of the site’s pages automatically compiles and stores information in the so-called server-log data files which your browser automatically transmits to us. This information refers to the:
- type and version of the browser,
- utilized operating system,
- URL referrer,
- host’s name of the accessing computer,
- time of the server’s query,
- IP address.
This data is not combined with other sources of data. The collection of this data is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and the optimization of his website – for this purpose, the server log files must be recorded.
This website partly uses so-called cookies. Cookies do not harm your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and stored by your browser. Most of the cookies we use are so-called “session cookies”. They are automatically deleted after your visit. Other cookies remain stored on your device until you delete them. These cookies allow us to recognize your browser the next time you visit.
You can set your browser so that you are informed about the setting of cookies, allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or disable them generally, and activate the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.
When you send us an e-mail, we store and process your data to establish, conduct and maintain a contractual relationship, to perform odour measurements or chemical measurements, to provide expert opinions, to sell and send measuring equipment / lab material or gases and, where necessary, to maintain and repair measuring equipment, to facilitate your participation in proficiency testing, to organize conferences, workshops, working groups, to provide software services or to handle your services / supplies with you as a supplier. For this purpose, we need the following personal data from you: salutation, first and last name, address and function data, communication data (Tel./Fax, e-mail address). The basis for data processing is Art. 6 para. 1 lit. b GDPR, which allows the processing of data to fulfill a contract or pre-contractual measures. If you do not agree with the storage and processing, a contractual cooperation is unfortunately not possible. In the event that services are handled by us through third parties, we will transmit your data to the extent necessary to the respective cooperation partner or service provider. Olfasense GmbH uses G-Suite services (Google LLC, USA) for the purpose of internal communication and communication with customers / prospects as well as a platform for internal cooperation. Your data will be transmitted to Google. In addition to the contract data processing contract, Olfasense has signed the EU standard clauses (EU Model Clauses) with Google LLC developed by the European Commission. Another transmission of further personal data does not take place and is not planned. We do not merge personal data with other data and do not conduct any evaluations (profiling). We store your data for the duration of the business relationship and beyond the period that the business relationship lasts, for a maximum of 4 years in accordance with §195 BGB. This retention period begins with each new contractual relationship. Individual data may be subject to longer storage obligations for tax and commercial reasons and may only be deleted after expiration of these legal obligations. However, until then, the data will be protected from further access (blocked).
If you arrange to send us enquiries via the contact form, then we will store the information that you have input on the contact form – including the contact details that you have given there – for the purpose of processing the enquiry and for the case of subsequent questions. We will not forward this data without your consent.
Therefore, the data that was input on the contact form is processed solely on the basis of your consent (Art. 6, Para. 1, Part a of the EU GDPR). You can revoke this consent at any time: an informal notification by e-mail suffices for this purpose. The legality of the data-processing operations that have taken place up to the date when we receive your revocation remain unaffected by it.
The data that you have input on the contact form remains with us until you request us to delete it, or until you revoke your consent to the storage, or until the purpose for storing the data is inapplicable (e.g. after completion of your enquiry). Compulsory legal provisions – especially those concerning the time limits for keeping or storing the data – remain unaffected.
By completing our electronic download form for PDF documents, we will store the information that you have input on the download form – including the contact details that you have given there – for the purpose of processing the enquiry and for the case of subsequent questions. We will not forward this data without your consent.
Therefore, the data that was input on the download form is processed solely on the basis of your consent (Art. 6, Para. 1, Part a of the EU GDPR). You can revoke this consent at any time: an informal notification by e-mail suffices for this purpose. The legality of the data-processing operations that have taken place up to the date when we receive your revocation remain unaffected by it.
The data that you have input on the download form remains with us until you request us to delete it, or until you revoke your consent to the storage, or until the purpose for storing the data is inapplicable (e.g. after completion of your enquiry). Compulsory legal provisions – especially those concerning the time limits for keeping or storing the data – remain unaffected.
Event registration form
Via the website, you can register for events, e.g. the interlaboratory tests organized by Olfasense GmbH. Such registration takes place via an online event registration form, via which you are providing us with the personal information collected on the form. The basis for processing the data is Art. 6, Para. 1, Part b of the EU GDPR which permit the data to be processed for fulfilling a contract or for taking a pre-contractual measure.
If you would like to subscribe to the newsletter that is offered on our web site, then we will require you to give us an e-mail address and the information which allows us to check that you are the proprietor of the stated e-mail address and that you agree to receiving the newsletter. Further data will not be compiled, or it will only be compiled on a voluntary basis. We will solely utilize this data for despatching the requested information and we will not forward this data to third parties.
The data that is input on the registration form for the newsletter will be processed solely on the basis of your consent (Art. 6, Para. 1, Part a of the EU GDPR). You can revoke at any time the granted consent for storing the data and the e-mail address, as well as using it for despatching the newsletter, via the ‘unsubscribe’ link in the newsletter for example. The legality of the data-processing operations that have taken place up to the date when we receive your revocation remain unaffected by it.
We will store the data about yourself that has been filed by us for the purposes of subscribing to the newsletter until you have been taken off the newsletter’s list and it will be deleted after you have cancelled your subscription to the newsletter. The data that has been stored by us for other purposes (e.g. for the performance of a contract) remains unaffected by this procedure.
This web site uses CleverReach’s services for despatching the newsletter. The supplier is CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede, Germany.
CleverReach is a service that enables the despatch of newsletters to be organized and analysed, among other things. If you input data for the purposes of subscribing to the newsletter (e.g., e-mail address), then this data will be stored on CleverReach’s servers in the EU.
We can analyse our newsletter campaigns with the aid of CleverReach. If you open an e-mail that has been despatched with CleverReach, then the data file (a so-called web beacon) that is contained in the e-mail will be linked to CleverReach servers in the EU. It can be established in this way whether a newsletter’s message has been opened and which links have been activated by clicking on them if necessary. Technical information will be recorded apart from that (e.g., the point in time when the call was made, the IP address, type of browser and operating system). This information cannot be ascribed to the respective recipient of the newsletter: it solely serves for statistically analysing the newsletter campaigns. The results of these analyses can be used in order to make future newsletters more suitable for the reader’s interests.
If you do not want any analysis to be made by CleverReach, then you must cancel your subscription to the newsletter. We provide a corresponding link for this purpose in every newsletter’s message. Furthermore, you can also cancel your subscription to the newsletter directly on https://seu2.cleverreach.com/f/126888-184980/wwu/. .
The data is processed on the basis of your consent (Art. 6 Para. 1, Part a of the EU GDPR). You can revoke this consent at any time by means of cancelling your subscription to the newsletter. The legality of the data-processing operations that have taken place up to the date when we receive your revocation remain unaffected by it.
We will store the data that you have filed with us for the purposes of subscribing to the newsletter until you have been taken off the newsletter’s list and it will be deleted not only from our own servers but also from CleverReach’s servers after you have cancelled your subscription to the newsletter. The data that has been stored by us for other purposes (e.g. for the performance of a contract) remains unaffected by this procedure.
You can obtain more details from CleverReach’s data-protection provisions at: https://www.cleverreach.com/en/data-security. .
Conclusion of a data-processing agreement
We have concluded a so-called ‘data-processing agreement’ in accordance with EU GDPR with CleverReach, in which we undertake CleverReach to protect the data of our clients and not to forward it to third parties.
When sending us your application by mail, e-mail or via an online portal (eg Ebay Kleinanzeigen, Employment Agency, etc.), you provide us with your personal information. In addition to your name, the usual correspondence data such as postal address or e-mail address are stored with us. Further data types can be found in the accompanying documents such as CVs, certificates, etc.
Your information from your application, including the personal data provided by you, will be stored by us for processing the application and in case of follow-up questions.
The basis for data processing is Art. 6 para. 1 lit. b DSGVO, which allows the processing of data to fulfil a contract or for pre-contractual measures.
Your data will be accessible to the persons responsible for personnel selection of the respective department of Olfasense GmbH. Your data will not be shared with other companies or individuals without your consent.
Your data from your application, including the personal data you provide, will remain with us until you request us to delete it or the purpose for the data storage ceases (at the latest 6 months after completing the application process). The legality of the data processing operations carried out until the revocation remains unaffected by the revocation. Mandatory statutory provisions – especially retention periods – remain unaffected.
4. Plug-ins and tools
Google’s web fonts
This site uses a standardized representation of the types of script, i.e., the so-called web fonts, which will be provided by Google. Your browser will load the required web fonts into your browser’s cache in order to display the texts and types of script correctly, whenever a page is called up on the web site.
The browser that you are using must link up with Google’s servers for this purpose. Google will be notified by these means that our web site has been called up via your IP address. Google’s web fonts are used in the interests of representing our online offers in a standardized and suitable way. This arrangement represents a justified interest for the purposes of Art. 6, Para. 1, Part. f of the EU GDPR.
Your computer will use a standard script if your browser does not support the web fonts.
5. Analytical tools and advertisement
If you have given your consent when entering our website, “Google reCAPTCHA” (hereinafter “reCAPTCHA”) is used on our websites. This service is provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”). reCAPTCHA is used to check whether the data entered on our website (such as in a contact form) has been entered by a human or by an automated program. The purpose of the website operator is to protect the website from abusive automated crawling and spam.
To do this, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis starts automatically as soon as the website visitor enters the website after giving his consent. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, how long the visitor has been on the website, or mouse movements made by the user). The data collected during the analysis will be forwarded to Google.
The reCAPTCHA analyses take place completely in the background. Website visitors are not advised that such an analysis is taking place. Data processing is based on Art. 6, Para. 1, Part. A of the EU GDPR, the agreement can be revoked at any time. You do have the option to prevent the archiving of cookies by making pertinent changes to the settings of your browser software. However, we have to point out that in this case you may not be able to use all of the functions of this website to their fullest extent.
If you have given your consent when entering our website, Google Analytics, a web analysis service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland is used on this website.
Google Analytics uses so-called cookies. Cookies are text files, which are stored on your computer and that enable an analysis of the use of the website by users.
On behalf of the operator of this website, Google shall use this information to analyse your use of this website to generate reports on website activities and to render other services to the operator of this website that are related to the use of the website and the Internet. The resulting information is used to optimize our website.
The legal basis for the use of Google Analytics is your consent in accordance with Art. 6 para. 1 lit. a GDPR.
The information generated by cookies on your use of this website is usually transferred to a Google server in the United States, where it is stored. We have executed a contract data processing agreement with Google and are implementing the stringent provisions of the German data protection agencies to the fullest when using Google Analytics. In addition, personal data will be transferred to the USA under the EU-US Privacy Shield on the basis of the European Commission’s adequacy decision. You can download the certificate at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI.
The data sent by us and linked to cookies, user-identifiers (e.g. User-IDs) or advertising-identifiers are automatically deleted after 14 months. Data whose retention period has been reached is automatically deleted once a month.
On this website, we have activated the IP anonymization function. As a result, your IP address will be abbreviated by Google within the member states of the European Union or in other states that have ratified the Convention on the European Economic Area prior to its transmission to the United States. The full IP address will be transmitted to one of Google’s servers in the United States and abbreviated there only in exceptional cases. On behalf of the operator of this website, Google shall use this information to analyse your use of this website to generate reports on website activities and to render other services to the operator of this website that are related to the use of the website and the Internet. The IP address transmitted in conjunction with Google Analytics from your browser shall not be merged with other data in Google’s possession.
You do have the option to prevent the archiving of cookies by making pertinent changes to the settings of your browser software. However, we have to point out that in this case you may not be able to use all of the functions of this website to their fullest extent. Moreover, you have the option prevent the recording of the data generated by the cookie and affiliated with your use of the website (including your IP address) by Google as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
Objection to the recording of data
You have the option to prevent the recording of your data by Google Analytics by clicking on the following link. This will result in the placement of an opt out cookie, which prevents the recording of your data during future visits to this website: Deactivate Google Analytics
Demographic parameters provided by Google Analytics
This website uses the function „demographic parameters“ provided by Google Analytics. It makes it possible to generate reports providing information on the age, gender and interests of website visitors. The sources of this information are interest-related advertising by Google as well as visitor data obtained from third party providers. This data cannot be allocated to a specific individual. You have the option to deactivate this function at any time by making pertinent settings changes for advertising in your Google account or you can generally prohibit the recording of your data by Google Analytics as explained in section „Objection to the recording of data.“
For more information about the handling of user data by Google Analytics, please consult Google’s Data Privacy Declaration at: https://support.google.com/analytics/answer/6004245?hl=en
6. Google G Suite
Olfasense GmbH uses Google services for the purpose of internal communication and communication with customers / leads / suppliers / applicants as well as a platform for internal cooperation. The Google services used by Olfasense GmbH essentially include the Google G-Suite for e-mail, scheduling and collaboration applications (word processing, spreadsheets, shared presentation) and file sharing.
This service is provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”).
If you use contact forms or download forms on this website, your inquiries will automatically be forwarded to the G-Suite email addresses of the responsible employees of Olfasense GmbH. In addition, Google Forms will be used to create event registration forms. In these cases, your data will be transmitted to Google.
For the use of G-Suite services by Olfasense GmbH, the agreement of the EU standard clauses developed by the European Commission (EU Model Clauses) ensures an adequate level of data protection.
The EU standard contractual clauses are a recognized means of ensuring a reasonable level of data protection when transferring data outside Europe. These include the requirements of European data protection law in the form of contractual clauses and may not be changed by the contracting parties without the prior approval of the EU Commission.
The EU Model Clauses used by Google can be found at the following link: https://workspace.google.com/terms/mcc_terms.html.
The compliance of the EU standard contract clauses with the requirements of the EU data protection law used for the application programs of the Google G-Suite has been confirmed by European data protection authorities.
In addition, Google introduced the Data Processing Amendment to G Suite and/or Complementary Product Agreement (Version 2.0) in October 2017, due to the EU GDPR which comes into force on 25 May 2018. This regulates the rights and obligations between Olfasense GmbH as data controller and Google as data processor.
Based on our interest in presenting our online content in an appealing manner, this website embeds videos of the website YouTube. The website operator is Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland.
If you have given your consent when entering our website, and if you visit a page on this website into which a YouTube has been embedded, a connection with YouTube’s servers will be established. As a result, the YouTube server will be notified, which of our pages you have visited. Furthermore, YouTube will be able to place various cookies on your device. With the assistance of these cookies, YouTube will be able to obtain information about this website’s visitors. Among other things, this information will be used to generate video statistics with the aim of improving the user friendliness of the site and to prevent attempts to commit fraud. These cookies will stay on your device until you delete them.
If you are logged into your YouTube account while you visit our site, you enable YouTube to directly allocate your browsing patterns to your personal profile. You have the option to prevent this by logging out of your YouTube account.
The processing takes place exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the agreement can be revoked at any time. You do have the option to prevent the archiving of cookies by making pertinent changes to the settings of your browser software. However, we have to point out that in this case you may not be able to use all of the functions of this website to their fullest extent.
Olfasense GmbH Kiel, Germany; hereinafter referred to as “Olfasense”, is responsible for the content of the Facebook page https://de-de.facebook.com/olfasense/.
The legal basis for the processing of Facebooks Insights data by us is Article 6 (1) (f) GDPR. We use this data to make the posts on the site more attractive or to find the right time for publication.
According to the judgment of the European Court of Justice, there is a joint liability according to Article 26 GDPR between Facebook and Olfasense, you can see the page controller addendum here: https://www.facebook.com/legal/terms/page_controller_addendum
If you would like to know more about Insight data on Facebook, please visit the following page: https://www.facebook.com/legal/terms/information_about_page_insights_data
Olfasense does not have full access to the collected data or your profile data. Which user data is hence captured by Facebook, Olfasense cannot understand. Olfasense can only see the public information of your profile. Which of these are concrete, you decide in your Facebook settings. In addition, you have in your Facebook settings (https://www.facebook.com/settings?tab=privacy) the ability to actively hide your “likes”, prohibit tags or stop following the page. Then your profile will no longer appear in the list of fans of this Facebook page.
Olfasense receives anonymous statistics on the use and use of the site from Facebook. The following information is provided here, for example:
- Followers: number of people following Olfasense – including growth and development over a defined time frame.
- Range: Number of people who see a specific post. Number of interactions on a post. From this it is possible to deduce, for example, which content in the community arrives better than others.
- Ad performance: What does Olfasense cost a click? How many people have seen an ad?
- Demographics: Average age of visitors, gender, place of residence, language.
These statistics, from which we can not draw any conclusions about individual users, we use to constantly improve our online offer on Facebook and better respond to the interests of our users. We can not link the statistical data to the profile data of our fans. You can use your Facebook settings to decide how you want targeted advertising to appear.
Olfasense has deliberately opted to disable messaging and not use contact forms so as not to collect unnecessary personal information (e.g., first name, last name, occupation). If you would like to actively contact us, please send us an email or contact us by post.
9. Final provisions
When translated into other languages, solely the German version of this data privacy statement is binding.