Privacy Policy

I. General Information

  1. Below, we provide information about the collection of personal data when using our website.
  2. The term “personal data,” as defined in Article 4(1) of Regulation (EU) 2016/679 (hereinafter referred to as the “General Data Protection Regulation” or “GDPR”), includes all data that can be linked to you personally. This includes, for example, your name, address, email address, and user behavior. For further terms, particularly “processing,” “controller,” “processor,” and “consent,” we refer to the legal definitions in Article 4 GDPR.
  3. We process personal data only to the extent necessary to provide a functional website and the content and services we offer. Personal data processing typically occurs only if you have provided your consent in accordance with Article 6(1)(a) GDPR or if the processing is permitted by legal provisions, particularly one of the legal bases listed in Article 6(1)(b)-(f) GDPR.
  4. Your personal data will be deleted or blocked as soon as the purpose of storage no longer applies. Data may be stored beyond this period if required by national or European regulations to which we are subject. In such cases, data will be blocked or deleted once the legally prescribed retention periods have expired, unless further storage is necessary for contract conclusion or fulfillment.
  5. If we engage service providers for specific website functions or intend to use your data for advertising purposes, we will inform you in detail about the respective processes below.

II. Controller

  1. The controller within the meaning of Article 4(7) GDPR and other applicable data protection laws is: ONMA Online Marketing GmbH
    Managing Director: Winfried Wengenroth
    ONMA GmbH
    Kurt-Schumacher-Straße 25
    30159 Hannover, Germany
    Phone: +49 511 62668500
    Email: info@onma.de
    Website: www.onma.de
    Registration Court: Amtsgericht Hannover
    Registration Number: HRB 213428
  2. Further details about the controller can be found in our Imprint.

III. Data Protection Officer

You can contact our Data Protection Officer at:

Michael Quack
Sürther Hauptstr. 59
50999 Cologne, Germany
Phone: +49 2236 9615585
Email: datenschutzbeauftragter@onma.de

IV. Your Rights

  1. Regarding your personal data, you have the following rights:
    • The right to access,
    • The right to rectification and erasure,
    • The right to restrict processing,
    • The right to object to processing,
    • The right to data portability.
  2. Additionally, you have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data.

V. Processing of Personal Data During Informational Use of Our Website

  1. When visiting our website without registering or otherwise providing information (“informational use”), we collect only the personal data your browser transmits to our server. If you wish to view our website, we collect the following data necessary for technical reasons to display the website and ensure its stability and security:
    • IP address,
    • Date and time of the request,
    • Time zone difference to GMT,
    • Content of the website,
    • Access status (HTTP status),
    • Transferred data volume,
    • Referring website,
    • Browser,
    • Operating system,
    • Language and version of the browser.
  2. The aforementioned data is also stored in server log files. This data is not stored together with other personal data.
  3. The temporary storage of the IP address is necessary to deliver the website to your device. For this purpose, your IP address must remain stored for the duration of the session.
  4. Log file storage serves to ensure website functionality, optimization, and the security of our IT systems.
  5. The aforementioned data is not evaluated for marketing purposes. Our legitimate interest in processing this data is based on the purposes stated above. The legal basis for this processing is Article 6(1)(f) GDPR. The data will be deleted when the session ends. As the collection and storage of this data are essential for operating the website, no objection is possible.

VI. Processing of Personal Data Through Cookies

  1. Our website uses cookies. Cookies are small text files stored on your device’s storage medium (e.g., hard drive) that allow us to gather specific information. Cookies cannot run programs or transmit viruses to your device. The types of cookies used on this website and their functions are explained below.
  2. Cookies stored by your web browser:
    • Persistent Cookies: These cookies are automatically deleted after a specified duration, which varies by cookie. You can delete these cookies at any time through your browser settings.
  3. The processing of personal data through cookies aims to make our website more user-friendly and effective. Certain website functions cannot be provided without the use of cookies, as they require browser recognition across page transitions. If you have an account, cookies are used to identify you during subsequent visits, eliminating the need for repeated logins. Data processed by cookies necessary for website functionality is not used to create user profiles. Cookies for analytical purposes help improve the quality and usability of our website.
  4. Our legitimate interest in processing this data lies in the purposes mentioned above. The legal basis for this processing is Article 6(1)(f) GDPR.
  5. Cookies are stored on your device and transmitted to our server. You can configure your browser settings to reject third-party cookies or all cookies. Note that disabling cookies may limit website functionality. We also recommend regularly deleting cookies and browser history manually.

VII. Additional Features and Services on Our Website

  1. Beyond the informational use of our website, we offer various services that you can utilize if interested. Typically, providing additional personal data is necessary for these services. This data is required to deliver the respective service. The aforementioned principles of data processing apply.
  2. In some cases, we rely on external service providers for the processing of this data. These providers are carefully selected, commissioned by us, and bound by our instructions. They are regularly monitored. If personal data is shared with third parties as part of services offered jointly with partners, detailed information can be found in the descriptions of the respective services below. If these third parties are located outside the European Economic Area, you can find more information about the implications of this in the respective service descriptions.

VIII. Contacting Us

  1. If you contact us via email, the personal data you provide will be stored.
  2. Additionally, our website offers a contact form for reaching out to us. The data you enter into the form will be transmitted to and stored by us. This includes: first name, last name, email address, phone number, and your message.
  3. The data is used solely to respond to your inquiries. Unless explicitly stated in this privacy policy, your data will not be shared with third parties. Additionally, we record your IP address and the time of submission.
  4. The processing of the aforementioned personal data is solely for handling your inquiries.
  5. Additional data collected through the use of the contact form on our website serves to prevent misuse and ensure the security of our IT systems.
  6. This constitutes our legitimate interest in processing your personal data. If you have given your consent, the legal basis for processing this data is Article 6(1)(a) GDPR. Otherwise, the legal basis for processing is Article 6(1)(f) GDPR, especially if the data is transmitted via email. If your email is intended to initiate a contract, Article 6(1)(b) GDPR serves as an additional legal basis.
  7. Subject to legal retention periods, the data will be deleted once your inquiry has been fully processed. If you contact us via email, you can object to the storage of your personal data at any time. Please note that this will prevent further processing of your inquiry. You may withdraw your consent or object to the storage of your data by emailing us at the address provided in our legal notice.

IX. Newsletter

  1. We offer a newsletter that you can subscribe to on our website. Details about the newsletter, including its potential content, are specified in the consent declaration. To subscribe, you must provide the mandatory information requested during registration, specifically your email address.
  2. Providing additional personal data during registration is voluntary.
  3. We use a double-opt-in procedure for newsletter subscriptions. After registering, we send a confirmation email to the provided email address, asking you to confirm your subscription. If confirmation is not received within the specified period, your data will be locked and deleted after five weeks. Additionally, we store your IP address and the time of both registration and confirmation. No data will be shared with third parties. These data are used exclusively for sending the newsletter.
  4. If no third-party provider is used for sending the newsletter, no data is shared with external entities.
  5. The data you provide during registration is processed to personalize the newsletter. After confirmation, we store your email address to send you the newsletter. The IP address and timestamps are stored to verify your registration and address potential misuse. This constitutes our legitimate interest. If you have given consent, the legal basis is Article 6(1)(a) GDPR. If processing is based on our legitimate interests, Article 6(1)(f) GDPR applies.
  6. Data is deleted when it is no longer necessary for the stated purposes. We store your data while you are subscribed to the newsletter. After unsubscribing, data is retained solely for statistical purposes in anonymized form.
  7. You can withdraw your consent to receive the newsletter at any time by unsubscribing. You can do so by clicking the unsubscribe link in any newsletter email.

X. Blog

  1. Our website features a blog where we publish posts on various topics.
  2. If you have given consent for data storage, you may withdraw it at any time. You may also object to the storage of your data at any time.

XI. Online Job Applications

  1. Our website allows you to submit online job applications. To participate in the application process, you must provide personal data such as first name, last name, address, date of birth, contact details (e.g., phone number, email address), and information about your education and work history (e.g., resumes, certifications, references). Mandatory fields are clearly marked. Unless a third-party provider is named in this privacy policy, no data is shared with external parties.
  2. This data is processed for the purpose of conducting the application process. If you have given consent, the legal basis is Article 6(1)(a) GDPR. For contract-related processing, Article 6(1)(b) GDPR applies.
  3. Data is deleted once it is no longer needed for its intended purpose. If your application results in an employment or similar relationship, your data will be transferred to the personnel file. Otherwise, the application process ends upon rejection, and data is deleted after statutory retention periods unless further storage is required to assert, exercise, or defend legal claims.
  4. You may withdraw your consent or object to the processing of your personal data at any time. Please note that without this data, we cannot process your application.
  5. Personal data is processed and/or stored on servers within the European Union, ensuring compliance with EU data protection standards.

XII. Contact Form 7

No personal data is processed when using this service.

XIII. Google (Invisible) reCAPTCHA

We use Google (Invisible) reCAPTCHA to verify whether form submissions are made by humans or automated systems. This service helps protect against spam, DDoS attacks, and similar threats. Legal basis: Article 6(1)(f) GDPR.

XIV. Google Analytics

We use “Google Analytics” on our website, a web analysis service provided by Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred to as “Google”). Google uses cookies, small text files stored on your device that allow an analysis of your use of our website. The information generated by the cookie about the use of our website is usually transferred to and stored on a Google server. If IP anonymization is activated on the website (“IP anonymization”), your IP address will be truncated by Google within European Union member states or other contracting states of the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server outside the EU and truncated there. Google will use this information to evaluate your use of our website on our behalf, compile reports on website activity, and provide other services related to website usage and internet usage. Pseudonymous usage profiles may be created from the processed data. The IP address transmitted when using Google Analytics will not be merged with other Google data.

We use Google Analytics only with the aforementioned IP anonymization activated. This means that your IP address will be truncated by Google during further processing. This excludes the possibility of personal identification.

We use Google Analytics to analyze website usage and continuously improve individual features, offers, and the user experience. Through the statistical evaluation of user behavior, we can improve our offerings and make them more attractive for you as a user. The legal basis for this processing is Article 6 (1) Sentence 1 lit. a) GDPR (Consent).

You can prevent the storage of cookies generated by Google Analytics by adjusting the settings in your web browser. Please note that in this case, you may not be able to use all features of our website. If you want to prevent the collection of data generated by the cookie, including your IP address, and its processing by Google, you can also download and install the web browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

To ensure that Google processes the transmitted data only in accordance with our instructions and complies with applicable data protection regulations, we have signed a data processing agreement with Google.

Third-party information: Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland.

For further information on how Google uses data, settings and opt-out options, and privacy matters, please refer to the following Google websites:
Terms of Service: https://marketingplatform.google.com/about/analytics/terms/en/
Privacy Overview: https://support.google.com/analytics/answer/6004245?hl=en&ref_topic=2919631
Privacy Policy: https://policies.google.com/privacy?hl=en
Google’s Data Usage in Your Use of Websites or Apps of Our Partners: https://policies.google.com/technologies/partner-sites?hl=en
Google Data Usage for Advertising Purposes: https://policies.google.com/technologies/ads?hl=en
Settings for Personalized Ads by Google: https://adssettings.google.com
The data is deleted once it is no longer necessary for the purpose of collection.

Data deletion at the user and event level, associated with cookies, user identifiers (e.g., User ID), and advertising IDs (e.g., DoubleClick cookies, Android advertising ID, IDFA [Apple’s Advertising Identifier]), occurs no later than 26 months after collection.

XV. Google Tag Manager

We use “Google Tag Manager” on our website, a service provided by Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred to as “Google”). Google Tag Manager allows us, as marketers, to manage website tags through an interface. The tool Google Tag Manager, which implements the tags, is a cookie-free domain and does not itself collect any personal data. Google Tag Manager triggers other tags that may collect data. Google Tag Manager does not have access to these data. If deactivation is done at the domain or cookie level, this will apply to all tracking tags implemented through Google Tag Manager.

Third-party information: Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland.

For more information on data protection, please refer to the following Google websites:
Privacy Policy: https://policies.google.com/privacy?hl=en
Google Tag Manager FAQ: https://www.google.com/intl/en/tagmanager/faq.html
Google Tag Manager Terms of Service: https://www.google.com/intl/en/tagmanager/use-policy.html

XVI. Google Web Fonts

We use “Google Web Fonts” on our website, a service provided by Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred to as “Google”). Google Web Fonts allows us to use external fonts, known as Google Fonts. When you visit our website, the necessary Google Font is loaded into your browser cache. This is necessary to display our text in an improved visual format. If your browser does not support this feature, a standard font from your computer will be used. The integration of these web fonts is done via a server call, usually to a Google server in the USA. This transmits information to the server about which of our webpages you have visited. The IP address of your device’s browser is also stored by Google. We have no influence on the scope or further use of the data that Google collects and processes through the use of Google Web Fonts.

We use Google Web Fonts for optimization purposes, particularly to improve your experience and make our website more user-friendly. This is also our legitimate interest in processing the above data by the third-party provider. The legal basis is Article 6 (1) Sentence 1 lit. f) GDPR.

Third-party information: Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland.

For further information on data protection, please refer to Google’s Privacy Policy: https://policies.google.com/privacy?hl=en.

Further information on Google Web Fonts can be found at: https://fonts.google.com/, https://developers.google.com/fonts/faq?hl=en-US&csw=1, and https://www.google.com/fonts#AboutPlace:about.

XVII. Hotjar

We use “Hotjar” on our website, a web analysis service provided by Hotjar Ltd., Level 2, St Julian’s Business Centre, 3, Elia Zammit Street, St Julian’s STJ 1000, Malta (hereinafter referred to as “Hotjar”). Hotjar uses cookies, small text files stored in your browser’s cache on your device, and a tracking code. The cookies used by Hotjar are stored on your device for varying lengths, from only during your visit to up to 365 days. The information collected is transmitted to and stored on a server in Ireland. The tracking code collects the following information:

  • Device-related data, including your device’s IP address (stored in an anonymized format), email address, screen size, device type, browser information, geographical data (only country), language, and user interactions such as mouse movements, clicks, and keyboard entries.
  • Log data automatically generated by our server when using Hotjar, including referring domain, visited pages, geographical data, language, date and time of access.

Hotjar uses this information to evaluate your use of our website, generate reports, and provide other services related to the analysis of our website. Hotjar also uses third-party services (e.g., Google Analytics and Optimizely) to perform its services. These third parties may store or process information that your browser transmits during your visit to our website (possibly including your IP address).

We use Hotjar to analyze the usage of our website and continuously improve features and user experience. Through statistical evaluation of user behavior, we can enhance our offerings and make them more engaging. This is also our legitimate interest in processing the above data by the third-party provider. The legal basis is Article 6 (1) Sentence 1 lit. f) GDPR.

You can prevent the installation of cookies by deleting existing cookies and disabling cookie storage in your browser settings. Please note that, in this case, some features of our website may not function fully. You can also prevent Hotjar from collecting data by setting an opt-out cookie on the following page: https://www.hotjar.com/legal/compliance/opt-out. Please note that this setting will be deleted if you delete your cookies.

Third-party information: Hotjar Ltd., Level 2, St Julian’s Business Centre, 3, Elia Zammit Street, St Julian’s STJ 1000, Malta.

For further information on data usage by Hotjar, settings and opt-out options, and privacy matters, please refer to Hotjar’s privacy policy at: https://www.hotjar.com/legal/policies/privacy.

Scroll to Top