Privacy Policy
General
As the operator of this website and as a company, we come into contact with your personal data. This refers to all data that says something about you and with which you can be identified. In this privacy policy, we would like to explain in what way, for what purpose and on what legal basis we process your data.
Responsible for data processing on this website and in our company is:
OSSCAD Beteiligungen GmbH
Friedrich-Ebert-Strasse 75
51429 Bergisch Gladbach
Germany
Telephone: + 49 2204 / 84 - 2770
E-mail: info@osscad.de
General information
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the browser’s address bar begins with https:// and by the lock icon in the browser bar.
Retention Period
Unless a more specific retention period is stated in this Privacy Policy, we store personal data only for as long as is necessary for the respective purpose. Data may be stored for a longer period if statutory retention obligations apply, if processing is necessary to assert, exercise, or defend legal claims, or if another legal basis permits such storage.
Recipients and Data Processors
We disclose personal data only if it is necessary for the specific purpose, if there is a legal obligation to do so, if you have given your consent, or if another legal basis permits it. Service providers who process personal data on our behalf are engaged on the basis of data processing agreements pursuant to Article 28 of the GDPR.
Transfers to Third Countries
Personal data is transferred to countries outside the European Union or the European Economic Area only if the requirements of Articles 44 et seq. of the GDPR are met. To the extent that service providers based in the United States are used and are certified under the EU-U.S. Data Privacy Framework, the transfer may be based on the European Commission’s adequacy decision pursuant to Article 45 of the GDPR. Otherwise, we base transfers to third countries in particular on the European Commission’s Standard Contractual Clauses pursuant to Article 46 of the GDPR and, where necessary, on supplementary safeguards.
Your Rights
Under the GDPR, you have the following rights:
- Right of access under Article 15 of the GDPR,
- Right to rectification under Article 16 of the GDPR,
- Right to erasure under Article 17 of the GDPR,
- Right to restriction of processing under Article 18 of the GDPR,
- Right to data portability under Article 20 of the GDPR,
- Right to object under Article 21 of the GDPR,
- Right to withdraw consent under Article 7(3) of the GDPR.
If you have given your consent, you may withdraw it at any time with future effect. The lawfulness of the processing carried out prior to the withdrawal remains unaffected.
Objection to Processing Based on Legitimate Interests
To the extent that we process personal data based on Article 6(1)(f) of the GDPR, you have the right to object to such processing at any time for reasons arising from your particular situation. We will then no longer process the data in question unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.
Right to File a Complaint with a Supervisory Authority
You have the right to file a complaint with a data protection supervisory authority. The competent authority for North Rhine-Westphalia is:
State Commissioner for Data Protection and Freedom of Information, North Rhine-Westphalia
Kavalleriestraße 2-4
40213 Düsseldorf
Website: https://www.ldi.nrw.de/
Overview of Data Processing on This Website
On this website, we process personal data primarily to provide the website, ensure technical security, handle contact requests, manage cookie settings, and analyze website usage for statistical purposes. Details can be found in the sections below.
We generally base technically necessary processing activities—such as hosting, server log files, form functions, and locally embedded fonts or icons—on Article 6(1)(f) of the GDPR. For contract-related inquiries, Article 6(1)(b) of the GDPR applies. We use cookies and similar technologies that require consent only on the basis of your consent pursuant to Section 25(1) of the German Telemedia Act (TDDDG) and Article 6(1)(a) of the GDPR.
A separate cookie table can be found in the section “Cookies, Consent, and Similar Technologies.” Storage and retrieval processes are listed separately there.
Hosting and Server Log Files
External Hosting
Our website is hosted by the following provider:
IONOS SE
Elgendorfer Str. 57
56410 Montabaur
Germany
The hosting provider processes personal data generated when you use our website. This may include, in particular, IP addresses, pages visited, the date and time of access, browser and device information, as well as metadata and communication data. If you use forms, the data you enter may also be processed via the hosting provider’s systems.
This processing is carried out to ensure the secure, stable, and efficient provision of our website. The legal basis is Article 6(1)(f) of the GDPR. To the extent that the website is used to initiate or execute a contract, Article 6(1)(b) of the GDPR also serves as the legal basis. A contract for data processing in accordance with Article 28 of the GDPR has been entered into with the hosting provider.
Server Log Files
When you visit our website, information is automatically processed in server log files. This includes, in particular, the browser type and version, the operating system used, the referrer URL, the hostname of the accessing computer, the time of the server request, and the IP address. This processing is carried out to technically provide the website, detect errors, defend against attacks, and ensure the stability of the website.
The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest lies in the secure and error-free provision of our website.
Cookies, Consent, and Similar Technologies
General Information About Cookies
Our website uses cookies and similar technologies. Cookies are small text files that are stored on your device. Some cookies are technically necessary for the website to function or to provide features you have requested. Other cookies or similar technologies are used to analyze website usage or for other non-essential purposes.
The storage of information on your device or access to information stored there is governed by Section 25 of the TDDDG. Technically necessary cookies and similar technologies may be used without consent pursuant to Section 25(2) of the TDDDG. We use non-essential cookies and similar technologies only if you have given your consent (Section 25(1) of the TDDDG). The subsequent processing of personal data is carried out in accordance with the provisions of the GDPR.
| Name | Category | Purpose | Provider / Domain | Technology | Legal Basis | Retention period | Third-Party |
| PHPSESSID | Technically necessary | Provision of the website session and basic technical functions of the website system. | www.osscad.eu | HTTP-Cookie | § 25 Abs. 2 Nr. 2 TDDDG; Art. 6 Abs. 1 lit. f DSGVO | Session cookie; is regularly deleted when the browser is closed | No |
| currentvpposition | Technically necessary | Saves the last viewport position. | www.osscad.eu | HTTP-Cookie | § 25 Abs. 2 Nr. 2 TDDDG; Art. 6 Abs. 1 lit. f DSGVO | 14 days | No |
| accept-cookies | Technically necessary / Cookie-configuration | Storing your choice in the cookie notice—that is, whether cookies were accepted or rejected. | www.osscad.eu | HTTP-Cookie | § 25 Abs. 2 Nr. 2 TDDDG; Art. 6 Abs. 1 lit. f DSGVO | 30 days | No |
| _pk_id.* | Statistics / Analysis | Recognition of repeat visits and statistical analysis of website usage with Matomo, provided that analytics cookies have been accepted. | www.osscad.eu | HTTP-Cookie / Matomo | § 25 Abs. 1 TDDDG; Art. 6 Abs. 1 lit. a DSGVO | 30 days | No |
| _pk_ses.*, _pk_cvar.*, _pk_hsr.* | Statistics / Analysis | Temporary association of individual page views with a visit session and analysis of user behavior using Matomo, provided that analytics cookies have been accepted. | www.osscad.eu | HTTP-Cookie / Matomo | § 25 Abs. 1 TDDDG; Art. 6 Abs. 1 lit. a DSGVO | Session cookie; is regularly deleted when the browser is closed | No |
| MATOMO_SESSID | Statistics / Analysis | Temporary association of individual page views with a visit session and analysis of user behavior using Matomo, provided that analytics cookies have been accepted. | if approved piwik1.lessingtiede.de | HTTP-Cookie / Matomo | § 25 Abs. 1 TDDDG; Art. 6 Abs. 1 lit. a DSGVO | Session cookie; is regularly deleted when the browser is closed | Yes (piwik1.lessingtiede.de) |
Cookie Notice and Cookie Settings
We use our own cookie management system on this website. A cookie notice is displayed on your first visit. If you select “Agree and Continue,” the “accept-cookies” cookie is stored with the value “yes.” If you select “Do Not Accept,” existing cookies are deleted via the cookie control, and the “accept-cookies” cookie is then stored with the value “no.” The cookie is stored for 30 days.
The “accept-cookies” cookie is necessary so that the website can take your selection into account and the notice does not reappear every time you visit a page. The legal basis for storing this cookie is Section 25(2)(2) of the TDDDG. The subsequent processing of personal data is based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in the user-friendly and legally compliant management of your cookie preferences.
The latest technical review has also revealed that the web server sets a session cookie named “PHPSESSID” when you visit the website. This cookie is used for technical session functions of the website system and is classified as technically necessary.
Withdrawal and Modification of Your Cookie Settings
You may withdraw your consent at any time with future effect or modify your cookie settings. To do so, use the cookie icon (button) visible at the bottom left of the screen.
Contacting Us
Contact Form
We provide contact forms on our website. When you contact us via a form, we process the information you enter, specifically your first name, last name, email address, company name, phone number, message, and the CAPTCHA code used to prevent spam. In addition, technical metadata such as the time of the request and your IP address may be processed.
This processing is carried out to handle your inquiry and any follow-up questions. To the extent that your inquiry serves the purpose of taking pre-contractual measures or fulfilling a contract, the legal basis is Article 6(1)(b) of the GDPR. In all other cases, the legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest lies in the effective handling of incoming inquiries.
Required information is necessary so that we can process and respond to your inquiry. Without this information, we may not be able to process your inquiry at all or only to a limited extent.
We delete form-based inquiries as soon as the inquiry has been fully processed and there are no legal retention obligations or legitimate interests in further storage. Longer retention may be necessary, in particular, if your inquiry leads to a contract, warranty claims, or communications relevant under commercial or tax law.
Inquiries via Email, Phone, or Fax
If you contact us via email, phone, or fax, we process your personal information and the content of your communication to handle your inquiry. The legal basis is Article 6(1)(b) of the GDPR, to the extent that the communication serves to implement pre-contractual measures or to fulfill a contract. In all other cases, the legal basis is Article 6(1)(f) of the GDPR.
Statistical Analysis with Matomo
We use Matomo, an open-source software tool for analyzing website usage. Matomo helps us understand how our website is used, which content is relevant, and how we can improve the website in terms of both technology and content.
Based on the currently identifiable technical implementation, Matomo endpoints are used at “https://vibe.osscad.eu/”. In addition, another Matomo tracker is integrated at “https://piwik1.lessingtiede.de/matomo.php” with website ID 70 if analytics cookies are accepted. “vibe.osscad.eu” is another Matomo instance on a separate OSSCAD URL.
When using Matomo, the following data in particular may be processed: truncated or anonymized IP addresses, pages visited, referrers, time of visit, duration of visit, browser and device information, and click paths. If analytics cookies are used, this information may be assigned to a pseudonymous visitor profile. The IP address is truncated or anonymized after processing, provided that Matomo is configured accordingly.
To the extent that Matomo sets cookies or reads comparable information from your device, this is done solely on the basis of your consent pursuant to Section 25(1) of the German Telemedia Act (TDDDG) and Article 6(1)(a) of the General Data Protection Regulation (GDPR). You may revoke your consent at any time via the cookie settings with future effect.
If Matomo is operated without cookies and without similar access to information on your device, the resulting privacy-friendly audience measurement may be based on Article 6(1)(f) of the GDPR. Our legitimate interest in this case lies in the statistical analysis and improvement of our website. In this case, the wording in the cookie banner must not give the impression that no audience measurement takes place at all if consent is refused. Additionally, an option to object must be provided.
Technical recommendation: If visitors select “Do Not Accept,” no Matomo tracking requests should be executed, unless a completely cookie-free and privacy-friendly audience measurement system based on legitimate interests is intentionally implemented and transparently described.
External Links and Services
YouTube
Our website contains links to our YouTube profile. Simply visiting our website does not cause these links to load any content from YouTube or transmit any data to YouTube. Only when you click on the link do you leave our website. Google or YouTube is responsible for the subsequent processing of personal data.
The provider is Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. For more information, please see Google’s Privacy Policy at https://policies.google.com/privacy?hl=de.
Automated Decision-Making
This website does not engage in automated decision-making, including profiling, as defined in Article 22 of the GDPR.
Effective Date
Effective date of this Privacy Policy: July 21, 2026