ortega holding GmbH

PRIVACY POLICY

General Information

This Privacy Policy provides detailed information about what happens to your personal data when you visit our website www.ortega-holding.com. Personal data refers to any data that can identify you personally. We strictly adhere to legal regulations, especially the General Data Protection Regulation (GDPR), and ensure that your visit to our website is absolutely secure.

Responsible Entity

Ortega Holding GmbH, based in Germany, is responsible for the collection and processing of personal data on this website. The contact details are as follows:

      • Address: Espasinger Str. 7, 78333, Germany

      • Phone: +49 175 823 8651

    Data Collection (Server Log Files)

    When you visit our website, we automatically collect and store access data in so-called server log files. This includes:

        • Browser type and version

        • Operating system used by your PC

        • Referrer URL (the source from which you came to our website)

        • Hostname of the accessing computer

        • Date and time of the server request

        • The current IP address used by your PC (possibly in anonymized form)

      We generally cannot and do not intend to identify individuals from this data. The processing of such data is in accordance with Article 6, Paragraph 1, lit. f of the GDPR, to maintain our legitimate interest in improving the stability and functionality of our website.

      Social Media (LinkedIn Plugin)

      Our website uses features from the LinkedIn network. The provider is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA („LinkedIn“).

      To enhance the protection of your data when visiting our website, the LinkedIn plugins are not unrestrictedly integrated but are only included using an HTML link (so-called „Shariff“ solution by c’t). This ensures that when you access a page of our website containing such plugins, no connection is made to LinkedIn’s servers. Only when you click on the LinkedIn button does a new window of your browser open and connect to LinkedIn’s page.

      For information about the purpose and scope of data collection and further processing and use of data by LinkedIn, as well as your related rights and settings options for protecting your privacy, please refer to LinkedIn’s privacy policy at: https://www.linkedin.com/legal/privacy-policy.

      Please note that this is a general translation and may not cover all legal nuances. For any legal matters, it’s advisable to consult a qualified legal professional.

      Contact Form

      If you contact us via email or through a contact form, the transmitted data, including your contact details, will be stored to process your request or to be available for follow-up questions. Your data will not be shared without your consent.
      The processing of the data entered into the contact form is based solely on your consent (Art. 6 Para. 1 lit. a GDPR). You can revoke your consent at any time. An informal email is sufficient for the revocation. The legality of the data processing operations carried out before the revocation remains unaffected by the revocation.
      Data transmitted via the contact form will remain with us until you request deletion, revoke your consent for storage, or there is no longer a need for data storage. Mandatory legal provisions, especially retention periods, remain unaffected.

      Duration of Comment Storage

      Comments and related data, such as IP addresses, are stored. The content remains on our website until it has been completely deleted or had to be deleted for legal reasons.

      Subscribing to Comments

      As a user of our website, you can subscribe to comments after registering. With a confirmation email, we verify that you are the owner of the specified email address. You can unsubscribe from the comment subscription at any time via a link in a subscription email. Data entered for setting up the subscription will be deleted in the event of unsubscription. If this data has been transmitted to us for other purposes and elsewhere, it will remain with us.
      The storage of comments is based on your consent (Art. 6 Para. 1 lit. a GDPR). You can revoke your consent at any time. An informal email is sufficient for the revocation. The legality of the data processing operations that have already taken place remains unaffected by the revocation.

      Use and Disclosure of Data

      The personal data that you provide to us, for example via email (e.g., your name and address or your email address), will neither be sold to third parties nor marketed in any other way. Your personal data will only be processed for correspondence with you and only for the purpose for which you have provided us with the data. For payment processing, we pass on your payment data to the credit institution commissioned with the payment.

      The use of data automatically collected during your visit to our website is only for the purposes mentioned above. No other use of the data takes place.

      We assure you that we will not pass on your personal data to third parties unless we are legally obliged to do so or you have given us your prior consent.

      Please note that this is a general translation and may not cover all legal nuances. For any legal matters, it’s advisable to consult a qualified legal professional.

      SSL or TLS Encryption

      For security reasons and to protect the transmission of confidential content, such as requests you send to us as the site operator, our website uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from „http://“ to „https://“, and by the lock symbol in your browser line.
      When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

      Storage Duration

      Personal data that has been communicated to us via our website will only be stored for as long as the purpose for which they were entrusted to us is fulfilled. If commercial and tax-related retention periods must be observed, the storage duration for certain data can be up to 10 years.

      Rights of the Data Subject

      In accordance with legal regulations, you have the following rights as a data subject in relation to the personal data concerning you:

      Right of Revocation

      Many data processing operations are only possible with your express consent. If the processing of your data is based on your consent, you have the right to revoke your consent for future data processing at any time in accordance with Art. 7 Para. 3 GDPR. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation. Data storage for billing and accounting purposes is not affected by a revocation.

      Right to Information

      You have the right, according to Art. 15 GDPR, to request confirmation from us as to whether we are processing personal data concerning you. If such processing exists, you have the right to information about your personal data processed by us, the processing purposes, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage duration or the criteria for determining the storage duration, the existence of a right to correction, deletion, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if it was not collected by us, the existence of automated decision-making including profiling and, if applicable, meaningful information about the logic involved and the scope and intended effects of such processing, as well as your right to be informed about the guarantees according to Art. 46 GDPR when forwarding your data to third countries.

      Right to Correction

      You have the right, according to Art. 16 GDPR, to demand immediate correction and/or completion of your incorrect or incomplete personal data at any time.

      Please note that this is a general translation and may not cover all legal nuances. For any legal matters, it’s advisable to consult a qualified legal professional.

      Right to Deletion

      According to Art. 17 GDPR, you have the right to request the deletion of your personal data if one of the following reasons applies:

          • The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.

          • You revoke your consent on which the processing was based according to Art. 6 Para. 1 lit. a or Art. 9 Para. 2 lit. a GDPR, and there is no other legal basis for the processing.

          • You object to the processing according to Art. 21 Para. 1 GDPR and there are no overriding legitimate reasons for the processing, or you object to the processing according to Art. 21 Para. 2 GDPR.

          • The personal data have been processed unlawfully.

          • The deletion of personal data is necessary to fulfill a legal obligation under Union law or the law of the Member State to which we are subject.

          • The personal data were collected in relation to information society services according to Art. 8 Para. 1 GDPR.

        However, this right does not exist if the processing is necessary:

            • For the exercise of the right to freedom of expression and information.

            • To fulfill a legal obligation required by the law of the Union or of the Member State to which we are subject, or to perform a task carried out in the public interest or in the exercise of official authority vested in us.

            • For reasons of public interest in the area of public health according to Art. 9 Para. 2 lit. h and i as well as Art. 9 Para. 3 GDPR.

            • For archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes according to Art. 89 Para. 1 GDPR, insofar as the right to deletion is likely to render impossible or seriously impair the achievement of the objectives of such processing.

            • For the establishment, exercise, or defense of legal claims.

          If we have made your personal data public and are obliged to delete them, we will take appropriate measures, considering the available technology and implementation costs, to inform data controllers who process the personal data that you, as the data subject, have requested the deletion of all links to your personal data or copies or replications of these personal data.

          Right to Restriction of Processing

          According to Art. 18 GDPR, you have the right to request the restriction (blocking) of the processing of your personal data. You can contact us at any time using the address provided in the imprint. The right to restriction of processing exists in the following cases:

              • If you dispute the accuracy of your personal data stored with us, we usually need time to verify this. For the duration of the review, you have the right to request the restriction of the processing of your personal data.

              • If the processing of your personal data happened/is happening unlawfully, you can request the restriction of data processing instead of deletion.

              • If we no longer need your personal data, but you need them to exercise, defend, or assert legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.

              • If you have filed an objection according to Art. 21 Para. 1 GDPR, a balance must be struck between your interests and ours. As long as it is not yet clear whose interests prevail, you have the right to demand the restriction of the processing of your personal data.

            If you have restricted the processing of your personal data, these data may only be processed with your consent or for the establishment, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of significant public interest of the European Union or a Member State.

            Please note that this is a general translation and may not cover all legal nuances. For any legal matters, it’s advisable to consult a qualified legal professional.

            Right to be Informed

            If you have exercised your right to rectification, deletion, or restriction of processing against us, we are obligated to inform all recipients to whom your personal data have been disclosed about this rectification, deletion, or restriction of processing, unless this proves impossible or involves disproportionate effort. According to Art. 19 GDPR, you have the right to be informed about these recipients upon request.

            Right Not to be Subject to Automated Decision-Making

            According to Art. 22 GDPR, you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision:

                • Is necessary for entering into or performing a contract between you and us,

                • Is permitted by Union or Member State law to which we are subject and which also lays down suitable measures to safeguard your rights, freedoms, and legitimate interests, or

                • Is based on your explicit consent.

              However, these decisions must not be based on special categories of personal data under Art. 9 Para. 1 GDPR, unless Art. 9 Para. 2 lit. a or g applies and suitable measures to safeguard your rights and freedoms and legitimate interests are in place.

              In cases referred to in (a) and (c), we shall implement suitable measures to safeguard your rights, freedoms, and legitimate interests, which include at least the right to obtain human intervention on our part, to express your point of view, and to contest the decision.

              Right to Data Portability

              If the processing is based on your consent according to Art. 6 Para. 1 lit. a GDPR or Art. 9 Para. 2 lit. a GDPR or on a contract according to Art. 6 Para. 1 lit. b GDPR and is carried out by automated means, you have the right, according to Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format and to transmit those data to another controller, or to have the data transmitted directly to another controller, where technically feasible.

              Right to Object

              If we base the processing of your personal data on a balance of interests according to Art. 6 Para. 1 lit. f GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation; this also applies to profiling based on these provisions. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims (objection according to Art. 21 Para. 1 GDPR).

              If your personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing; this also applies to profiling to the extent that it is related to such direct marketing. If you object, your personal data will subsequently no longer be used for the purpose of direct marketing (objection according to Art. 21 Para. 2 GDPR).

              You have the option to exercise your right to object in connection with the use of information society services, notwithstanding Directive 2002/58/EC, by means of automated procedures using technical specifications.

              Right to Lodge a Complaint with a Supervisory Authority

              In the case of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work, or place of the alleged infringement. This right exists without prejudice to other administrative or judicial remedies.

              The supervisory authority responsible for us is:

              The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg

              P.O. Box 10 29 32 70025 Stuttgart

              or:

              Lautenschlagerstraße 20 70173 Stuttgart

              Phone: 07 11/61 55 41-0 Email: [email protected] Website: https://www.baden-wuerttemberg.datenschutz.de

              Validity and Amendment of this Privacy Policy

              This privacy policy is valid from September 4, 2023. We reserve the right to change this privacy policy at any time in compliance with applicable data protection regulations. This may be necessary, for example, to comply with new legal requirements or to take into account changes to our website or new services on our website. The version available at the time of your visit applies.

              If this privacy policy is changed, we intend to announce changes to our privacy policy on this page so that you are fully informed about what personal data we collect, how we process it, and under what circumstances it may be disclosed.

              ©2002-2023 LEGAL DOCUMENTS (Sequiter Inc.)

              Please note that this is a general translation and may not cover all legal nuances. For any legal matters, it’s advisable to consult a qualified legal professional.