Privacy Policy
Effective as of: May 15, 2025
1. Principles of Data Processing
1.1. Oetker Collection KG, Gehrenberg 2, D-33602 Bielefeld, Germany
(hereinafter referred to as “we” or “Controller”), processes personal data in accordance with the applicable data protection regulations, in particular the General Data Protection Regulation GDPR and the German Federal Data Protection Act BDSG.
1.2. Our online offering at www.oetker-collection.com may contain links to external third-party websites. The respective operator is solely responsible for the content and data protection practices of these websites. Please refer to the respective privacy policies of such third-party providers.
2. Controller under the GDPR
Oetker Collection KG
Gehrenberg 2
D-33602 Bielefeld
Germany
Email: contact@oetker-collection.com
3. Data Protection Officer
Nikolaus Schramm
Maria-Louisen-Straße 31
D-22301 Hamburg
Germany
Email: ns@schrammconsulting.de
4. Definitions
The data protection terms used in this declaration are based on Art. 4 GDPR, including but not limited to:
- Personal Data (Art. 4 (1) GDPR)
- Data Subject (Art. 4 (1) GDPR)
- Processing (Art. 4 (2) GDPR)
- Restriction of Processing (Art. 4 (3) GDPR)
- Controller (Art. 4 (7) GDPR)
- Processor (Art. 4 (8) GDPR)
- Recipient (Art. 4 (9) GDPR)
- Third Party (Art. 4 (10) GDPR)
- Consent (Art. 4 (11) GDPR)
5. Processing of Personal Data
5.1. Server Log Files
When accessing our website, the following information is automatically collected and temporarily stored:
- Browser type/version
- Operating system
- Referrer URL
- Hostname of the accessing computer
- Time of server request
- IP address
The legal basis for this processing is Art. 6 (1) (f) GDPR (legitimate interest in ensuring the stability and security of the website). The data is stored for seven days and subsequently deleted.
5.2. Contact
If you contact us (e.g., by email, post, or telephone), the personal data you provide will be processed to handle your inquiry. The legal basis for this is Art. 6 (1) (f) GDPR. Your data will be deleted once the purpose of the processing no longer applies, provided no statutory retention obligations apply.
5.3. Video Surveillance
Our premises are monitored by video surveillance for safety and security purposes. Recording is carried out solely on our premises. The standard retention period is 72 hours. Extended storage occurs only in justified individual cases.
6. Data Processing by Third Parties and Data Transfers
6.1. Processors
We engage external service providers as processors in accordance with Art. 28 GDPR for the processing of personal data. These service providers are contractually bound to comply with applicable data protection requirements.
6.2. Data Transfers to Third Parties
Personal data is only disclosed to third parties under the following conditions:
- Explicit consent (Art. 6 (1) (a) GDPR)
- Necessity for contract performance (Art. 6 (1) (b) GDPR)
- Legal obligation (Art. 6 (1) (c) GDPR)
- Protection of vital interests (Art. 6 (1) (d) GDPR)
- Performance of a task carried out in the public interest (Art. 6 (1) (e) GDPR)
- Legitimate interest (Art. 6 (1) (f) GDPR), unless overridden by your interests or fundamental rights
7. Data Security
7.1. Encryption
This website uses SSL/TLS encryption to ensure secure data transmission. You can recognize an encrypted connection by the prefix “https://” in the address bar and the lock symbol in your browser.
7.2. Email Communication
Please note that data transmission via email may be subject to security vulnerabilities. For particularly sensitive content, we recommend using postal mail.
7.3. Technical and Organizational Measures
We implement appropriate measures to protect your data against unauthorized access, manipulation, loss, or destruction.
8. Retention Periods and Data Deletion
Personal data is deleted once the purpose for processing no longer applies, unless statutory retention periods or legitimate interests prevent deletion. In such cases, processing will be restricted.
9 . Rights of Data Subjects
As a data subject, you have the following rights:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (“right to be forgotten”) (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to processing (Art. 21 GDPR)
- Right to withdraw consent (Art. 7 (3) GDPR)
- Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
10. Supervisory Authority
Competent supervisory authority:
The State Commissioner for Data Protection and Freedom of Information of NRW
Kavalleriestr. 2-4
40213 Düsseldorf
Phone: +49 211 38424-0
Email: poststelle@ldi.nrw.de
11. Amendments to this Privacy Policy
This Privacy Policy is valid as of May 15, 2025.
We reserve the right to amend this statement in response to legal developments or updates to our online services. The current version is always available at: https://oetker-collection.com/datenschutz