Privacy Policy

1. Data Protection at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data is any data that can be used to personally identify you. Detailed information on the subject of data protection can be found in our privacy policy listed below this text.

Data Collection on Our Website | Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator, o 55 GmbH. Their contact details can be found under "Responsible Party" below.

How do we collect your data?

Your data is collected in part because you provide it to us. This may, for example, be data you enter into a contact form. Other data is automatically collected by our IT systems when you visit the website. This is primarily technical data (e.g., internet browser, operating system, or time of page access). This data is collected automatically as soon as you enter our website.

What do we use your data for?

Some of the data is collected to ensure the website is provided without errors. Other data may be used to analyze your user behavior.

What rights do you have regarding your data?

You have the right at any time to receive information free of charge about the origin, recipient, and purpose of your stored personal data. You also have the right to request the correction, blocking, or deletion of this data. You can contact us at any time at the address given in the legal notice ("Impressum") for this and any other questions on the subject of data protection. Furthermore, you have the right to lodge a complaint with the responsible supervisory authority. You also have the right, under certain circumstances, to demand a restriction of the processing of your personal data. For details, please refer to the privacy policy under "Right to restriction of processing."

Analysis tools and third-party tools

When you visit our website, your surfing behavior may be statistically evaluated. This is done primarily using cookies and so-called analysis programs. The analysis of your surfing behavior is generally anonymous; the surfing behavior cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. Detailed information can be found in the following privacy policy. You can object to this analysis. We will inform you of your options for objection in this privacy policy.

2. General Information and Mandatory Notices

Data Protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy. When you use this website, various pieces of personal data are collected. Personal data is data that can be used to identify you personally. This privacy policy explains which data we collect and what we use it for. It also explains how and for what purpose this is done. Please note that data transmitted over the internet (e.g., via email) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.

Note on the Responsible Party

The party responsible for data processing on this website is:
o 55 GmbH, Gautinger Strasse 1d, 82319 Starnberg
Phone: 08151 65225100
E-Mail: info@ek-group.ag
The responsible party is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data (e.g., names, email addresses, etc.).

Contact for the Data Protection Officer

Grant Thornton AG
Wirtschaftsprüfungsgesellschaft
Sebastian Barg
Johannstrasse 39
40476 Düsseldorf
Phone: +49 211 9524 8548

Unseren Datenschutzbeauftragten erreichen Sie unter sebastian.barg@de.gt.com oder unserer Postadresse (Ziffer I.) mit dem Zusatz „Datenschutzbeauftragter“.

Withdrawal of Your Consent to Data Processing

Many data processing operations are only possible with your express consent. You may withdraw consent you have already given at any time. An informal email to us is sufficient for this. The legality of the data processing carried out until the withdrawal remains unaffected by the withdrawal.

Right to Object to Data Collection in Special Cases and to Direct Marketing (Art. 21 GDPR)

Where data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right at any time, for reasons arising from your particular situation, to object to the processing of your personal data; this also applies to profiling based on these provisions. The specific legal basis for processing can be found in this privacy policy. If you object, we will no longer process your affected personal data, unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims (objection pursuant to Art. 21(1) GDPR).

If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for such marketing purposes; this also applies to profiling to the extent it is associated with such direct marketing. If you object, your personal data will subsequently no longer be used for direct marketing purposes (objection pursuant to Art. 21(2) GDPR).

Right to Lodge a Complaint with the Competent Supervisory Authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, place of work, or the place of the alleged violation. This right of complaint exists without prejudice to any other administrative or judicial remedy.

Right to Data Portability

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another responsible party, this will only be done to the extent technically feasible.

Information, Blocking, Deletion, and Correction

Within the scope of the applicable statutory provisions, you have the right at any time to free information about your stored personal data, its origin and recipients, and the purpose of the data processing, and, where applicable, a right to correction, blocking, or deletion of this data. You can contact us at any time at the address given in the legal notice for this and any further questions regarding personal data.

Right to Restriction of Processing

You have the right to request the restriction of the processing of your personal data. You may contact us at any time at the address given in the legal notice for this purpose. The right to restriction of processing exists in the following cases:

• If you dispute the accuracy of your personal data stored by us, we generally need time to verify this. For the duration of this verification, you have the right to demand the restriction of the processing of your personal data.
• If the processing of your personal data was/is unlawful, you may request the restriction of data processing instead of deletion.
• If we no longer need your personal data, but you need it to assert, exercise, or defend legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.
• If you have objected pursuant to Art. 21(1) GDPR, a balancing of your interests and ours must be carried out. As long as it has not yet been determined whose interests prevail, you have the right to demand the restriction of the processing of your personal data.
• If you have restricted the processing of your personal data, such data may – apart from being stored – only be processed with your consent or for the assertion, exercise, or defense of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a member state.

Objection to Advertising Emails

The use of contact data published within the scope of the legal notice obligation for the purpose of sending advertising and informational material not expressly requested is hereby objected to. The website operators expressly reserve the right to take legal action in the event of the unsolicited sending of promotional information, such as through spam emails.

3. Data Collection on Our Website

Cookies

We use cookies. Cookies are small files that our website sends to your device's browser during your visit and that are stored there.

Some features of our website cannot be offered without the use of technically necessary cookies. Other cookies, on the other hand, enable us to carry out various analyses. For example, some cookies can recognize the browser you are using upon a repeat visit to our website and transmit various information to us. We use cookies to make our website easier and better to use. Through cookies, we can, among other things, make our website more user-friendly and effective for you, for example, by tracking your use of our website and identifying your preferred settings (e.g., country and language settings). If third parties process information via cookies, they collect this information directly through your browser. Cookies do not cause any damage to your device. They cannot execute programs and cannot contain viruses. Various types of cookies are used on our website, the nature and function of which are explained below.

We use the following categories of cookies:

a) Necessary Cookies

Necessary cookies ensure functions without which our website cannot be used as intended. These strictly necessary cookies are used, for example, to ensure that a logged-in user remains logged in when accessing different subpages. These are so-called first-party cookies, which are used only by us. These cookies do not require consent; however, you may deactivate cookies in your browser at any time.

b) Statistics Cookies

Statistics cookies collect information about how a website is used in order to improve its attractiveness, content, and functionality. For example, the following data is collected: the number of visits to a page or subpages, the time spent on the website, the order of pages visited, which search terms led you to us, the country, region, and city from which access occurred, as well as the proportion of mobile devices accessing our website. Furthermore, it is analyzed which areas of our website interest you the most.

c) Personalization Cookies

Personalization cookies allow our website to save information you have already provided (e.g., registered name, language selection, location) and to offer you improved and more personalized functions based on this. Only anonymized information is processed through these cookies.

d) Marketing-Cookies

Marketing cookies are used to display interest-based advertisements to visitors of the website. They are also used to limit the frequency of ad display and to measure the effectiveness of advertising campaigns. These cookies record whether a website has been visited or not. This information obtained may be shared with third parties, such as advertisers. Cookies used to improve targeting and advertising are often linked to third-party site functionalities. A complete overview of the cookies and their durations that we use can be found here.

Legal Basis and Storage Duration

Due to the described purposes of use, the legal basis for the processing of personal data using cookies is Art. 6(1)(f) GDPR. If you have given us your consent to the use of cookies based on a notice provided on the website (the "cookie banner"), the legal basis is Art. 6(1)(a) GDPR.

As soon as the data transmitted to us via cookies is no longer required for the purposes described above, this information will be deleted. Further storage may occur in individual cases if legally required.

Configuring browser settings

Most web browsers are set by default to automatically accept cookies. However, you can configure your browser to accept only certain cookies or no cookies at all. Please note, however, that you may then no longer be able to use all the functions of our website.

You can also delete cookies already stored in your browser through your browser settings. It is also possible to set your browser to notify you before cookies are stored. Since the various browsers differ in the way they function, we ask that you use the respective help menu of your browser for the corresponding configuration options.

Deactivating the use of cookies may require the storage of a permanent cookie on your computer. If you delete this cookie, you must set it again for it to take effect.

Further information on configuring cookie settings in the respective browsers can be found at:

1. Internet Explorer
2. Edge
3. Safari
4. Chrome
5. Firefox
6. Opera

Server Log Files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

• Browser type and browser version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server request
• IP address

This data is not merged with other data sources. This data is collected on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website – for this purpose, the server log files must be recorded.

4. Plugins and Tools

Google Web Fonts

Nature and scope of data processing

We use external fonts from Google on this website. Google Fonts is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Tel: +353 1 543 1000, Fax: +353 1 686 5660, Email: support-deutschland@google.com ("Google").

These web fonts are integrated via a server call. This may also be a Google server located in the USA. In doing so, information about which of our internet pages you have visited is transmitted to the server. Your device's IP address is also processed by Google.

Purpose and legal basis

The purpose of using Google Fonts is the uniform presentation of fonts. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR.

Storage duration

We do not process the data collected by Google as a result of the use of Google Fonts.

Right to object

You have the right to object to the creation of these user profiles. This objection must be directed to Google.

Further information can be found in Google's privacy notices, which you can access here: https://www.google.com/policies/privacy/

Google Maps

Nature and scope of data processing

We integrate the online maps of the Google Maps service. Google Maps is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Tel: +353 1 543 1000, Fax: +353 1 686 5660, Email: support-deutschland@google.com ("Google").

This allows us to display interactive maps directly on our website and enables you to conveniently use the map function.

If you access the Google Maps component embedded in our website, Google stores a cookie on your device via your internet browser and processes the following data:

• Information about the operating system,
• Information about the browser type and version used,
• Information about your internet service provider,
• Your IP address,
• Date and time of access,
• Websites from which you accessed our website,
• Websites you access via our website.

This occurs regardless of whether you are logged into a Google user account. If you are logged into Google, it is possible for Google to assign your data to your account. If you do not wish for this assignment to your Google profile, please log out of Google.

Purpose and legal basis of data processing

Google stores your data as usage profiles and uses them for the purposes of advertising, market research, and/or the demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) for the provision of personalized advertising. We use Google Maps in order to be able to display online maps on our website, particularly for directions. The legal basis for processing is your consent pursuant to Art. 6(1)(a) GDPR.

Storage duration

The stored data will be deleted by us as soon as it is no longer required for the purposes stated.

Right to object

You have the right to object to the creation of user profiles. This objection must be directed to Google. You can prevent the transmission of data to Google by deactivating JavaScript in your browser settings. In this case, however, you will not be able to use Google Maps on our website.

Further information on Google's terms of use: https://policies.google.com/terms?gl=DE&hl=de

Further information in Google Maps' additional terms of use: www.google.com/intl/de_US/help/terms_maps.html

Further information can be found in Google's privacy policy: http://www.google.de/intl/de/policies/privacy/

Google Analytics

Nature and scope of data processing

We use the tracking tool Google Analytics from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Tel: +353 1 543 1000, Fax: +353 1 686 5660, Email: support-deutschland@google.com ("Google") on our website.

Google Analytics uses so-called "cookies," text files stored on your computer that enable an analysis of your use of the website.

The information generated by the cookie about your use of this website is generally transmitted to and stored on a Google server in the USA.

On behalf of the operator of this website, Google will use this information to systematically evaluate your use of the website, to compile reports on website activity, and to provide other services related to website usage and internet usage to the website operator.

When individual pages of our website are accessed, the following data is stored:

• Three bytes of the IP address of the user's accessing system (anonymized IP address)
• The page accessed
• The website from which the user arrived at the accessed page on our website (referral URL)
• The subpages accessed from the page visited
• The time spent on the website
• The frequency with which the website is accessed

We use Google Analytics with IP anonymization enabled. This shortens the IP address by the last octet (e.g., 192.168.79.***; so-called IP masking). It is no longer possible to assign the shortened IP address to the accessing computer or the user's device.

Purpose and legal basis of data processing

The Google Analytics service is used to analyze the usage behavior of our website. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR.

Storage duration

The stored data will be deleted by us as soon as it is no longer required for our record-keeping purposes. In our case, the storage duration is a maximum of 24 months.

Right to object

You can prevent the storage of cookies by adjusting your browser software settings accordingly; however, we would like to point out that in this case you may not be able to fully use all the functions of this website. In addition, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plug-in available under the following link:http://tools.google.com/dlpage/gaoptout?hl=de

Further information on Google Analytics' terms of use:

www.google.com/analytics/terms/de.htmlFurther information on Google Analytics' data protection: https://support.google.com/analytics/answer/6004245?hl=de

You can also change your consent in the cookie settings at any time.

Data Transfer

We only pass on your personal data to third parties if:

• You have given your express consent to do so pursuant to Art. 6(1)(a) GDPR in the individual case;
• this is legally permissible and is required under Art. 6(1)(b) GDPR for the fulfillment of a contractual relationship with you or for the implementation of pre-contractual measures (e.g., to payment, shipping, delivery, or debt collection service providers);
• there is a legal obligation for the disclosure under Art. 6(1)(c) GDPR (e.g., to authorities, social insurance providers, health insurance funds, supervisory authorities, and law enforcement agencies);
• the disclosure is necessary under Art. 6(1)(f) GDPR to safeguard legitimate business interests, as well as to assert, exercise, or defend legal claims, and there is no reason to assume that you have an overriding, legitimate interest in the non-disclosure of your data (e.g., to debt collection service providers);
• we use external service providers (so-called processors) pursuant to Art. 28 GDPR, who process data according to our instructions and are obligated to handle your data carefully (e.g., in the areas of IT or marketing).

When transferring data to external parties in third countries, i.e., outside the European Union (EU) or the contracting states of the Agreement on the European Economic Area (EEA), we ensure that these parties handle your personal data with the same care as within the EU or EEA. We only transfer personal data to third countries for which the EU Commission has confirmed an adequate level of protection, or where we can ensure the careful handling of personal data through contractual agreements or other appropriate safeguards.

Changes to the Privacy Policy

We reserve the right to update this statement at any time as necessary.

‍