Data protection - orochemie GmbH + Co. KG

Data protection declaration

1. 1. General

This data protection statement informs you how orochemie GmbH + Co. KG, Max-Planck-Straße 27, D-70806 Kornwestheim (hereinafter "orochemie") handles your personal data serves the purpose of explaining to you in particular the collection and use of your personal data in connection with visits to the websites offered by orochemie (,, and as well as our web presentations on Facebook (, Twitter ( and YouTube (, the use of our app ( as well as the availment of the services offered there. Personal data are individual details about personal or factual circumstances or a particular or identifiable natural person. They are all data that can be related to you personally, such as name, address, e-mail address, user behaviour (in this regard see under "6. Data processing details").

2. 2. 2. Company and contact data of the person responsible for data processing and of the operational data protection officer

orochemie GmbH + Co. KG
Max-Planck-Str. 27
D-70806 Kornwestheim

Telephone +49 (0)7154 - 1308 – 0
Fax +49 (0)7154 - 1308 - 40 oder – 42

The in-house data protection officer of orochemie GmbH + Co. KG can be reached at

3. Data processing prerequisites

We collect and use your personal data only inasmuch as a legal regulation permits us to do so, especially inasmuch as this is necessary for establishing a contractual relationship with you, for configuring its contents or for terminating it, in order to enable you to visit our websites and web presentations and to use the app as well as to avail yourself of the services offered there, or inasmuch as you have consented to the processing of your personal data. Furthermore, your data will be communicated only under the said prerequisites or when we are obliged to forward the data by a judicial or official order.

4. Data protection and third-party websites

Our websites, web presentations and app may contain links to and from third-party websites. If you follow a link to such a websites, please be aware that to this extent we cannot accept any liability for compliance with the data protection provisions. Please make sure of the respective applicable data protection provisions before you communicate personal data to these websites.

5. Data security

We maintain up-to-date technical measures to guarantee data security, particularly to protect your personal data from threats during data transmission and from third parties acquiring knowledge of it. They will always be updated according to the current state of technology.

Within the website and use of the app, we use the widely accepted SSL technology (secure socket layer) in in combination with the respective highest encryption level supported by your browser. This usually means 256-bit encryption. If your browser does not support 256-bit encryption, we fall back instead to 128-bit v3 technology. You can tell whether an individual page of our Internet presentation is being transmitted in encrypted form when the address line of the browser switches from "http://" to "https://" and when the bottom status line of your browser displays the closed key or padlock icon.

6. Data processing details

a) Visits to the websites for information and use of the app

When the website is being visited merely for information or the app is being used merely for information – in other words, when you do not register or log in to avail yourself of individual services or to communicate other information to us – we do not collect any personal data, except for data your browser communicates to enable you to visit the website or to use the app. These are:

- IP address, - Date and time of the inquiry,
- Time zone difference relative to Greenwich Mean Time (GMT),
- Content of the request (specific page),
- Access status/HTTP status code,
- Respectively transmitted data volume,
- Website from which the request comes,
- Browser,
- Operating system and its interface,
- Language and version of the browser software.

These items of information will be recorded temporarily in a so-called logfile without any action on your part and will be stored until they are automatically deleted. The said data will be used by us to ensure smooth establishment of a connection to our website or the app, comfortable use of the same as well as evaluation of the system security and stability.

The data processing for these purposes is necessary to safeguard our legitimate interests according to Art. 6 Para. 1 Sentence 1 Letter f of the General Data Protection Regulation ("GDPR"). In no case will we use the collected data for the purpose of drawing conclusions as to your person.

b) Cookies

IFurthermore, so-called cookies will be stored on your receiving device when you use the websites and app. Cookies are small text files that are stored on your receiving device and associated with the browser you use and through which specific information flows to the site that sets the cookie (in this case, to us). Cookies cannot run any programs or transmit viruses to your receiving device. They are used to make the web presence as a whole more user-friendly and effective. Our websites and app use cookies in the following scope:

Transient cookies (temporarily deployed) are automatically deleted when you close the browser. This expressly includes session cookies. They store a so-called session ID, with which various queries of your browser can be ascribed to the common session. Thereby your receiving device can be recognised when you return to the website. Session cookies are deleted when you log out or close the browser. This stored information is stored separately from any additional data that have been shared with us. In particular, data from cookies are not linked with your additional data.

Most browsers accept cookies automatically. However, you may configure your browser such that no cookies are stored on your computer or that a message always appears before a new cookie is created. However, complete deactivation of cookies may mean that you will not be able to use all functions of our websites and app.

The use of appropriate cookies for these purposes is necessary to safeguard our legitimate interests according to Art. 6 Para. 1 Sentence 1 Letter f GDPR. In no case will we use the collected data for the purpose of drawing conclusions as to your person.

c) Matomo (formerly "Piwik")

We also use the open source web analysis service known as Matomo (formerly "Piwik") of InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand. Matomo uses technologies that permit site-transcending recognition of the user for analysis of the user's behaviour (e.g. cookies or device fingerprinting). The information recorded by Matomo on the use of this website is saved on our server. The IP address is anonymised before being saved. By means of Matomo, we are able to record and analyse data about the use of our website by visitors to the website. Hereby we are able to find out, among other information, which pages were visited and when, as well as from which region they came. Moreover, we record various logfiles (e.g. IP address, referrer, browser used and operating systems) and are able to measure whether our website visitors perform particular actions (e.g. clicks, purchases, etc.). The use of these analysis tools takes place on the basis of Art. 6 Para. 1 Letter f GDPR. The website operator has a legitimate interest in the anonymised analysis of user behaviour, in order to optimise both its web content and its advertising. If appropriate consent was requested (e.g. consent to storage of cookies), processing takes place exclusively on the basis of Art. 6 Para. 1 Letter a GDPR; the consent may be revoked at any time.

We host Matomo exclusively on our own servers, so that all analysis data remain with use and are not forwarded.

d) Google AdWords and Google Conversion Tracking

Our websites and app use Google AdWords. AdWords is an online-advertising program of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States ("Google"). In connection with Google AdWords, we use so-called conversion-tracking. When you click on an ad delivered by Google, a conversion-tracking cookie is set. These cookies expire after 30 days and are not used for personal identification of the users. If the user visits certain pages of this website or uses the app while the cookie has not yet expired, Google and we are able to recognise that the user has clicked on the ad and been directed to this page. Each Google AdWords customer receives a different cookie. The cookies cannot be tracked by AdWords customers via the websites or app. The information obtained by means of conversion cookies is used to create conversion statistics for AdWords customers who have opted for conversion tracking. The customers learn the total number of users who clicked on their ad and were directed to a page marked with a conversion tracking tag. However, they do not obtain any information with which users can be identified personally.

If you do not want to participate in tracking, you may deny this use by easily deactivating the Google conversion tracking cookie under user settings of your Internet browser. Then you will not be included in the conversion tracking statistics.

The storage of "conversion cookies" takes place on the basis of Art. 6 Para. 1 Sentence 1 Letter f GDPR. We have a legitimate interest in the analysis of user behaviour, in order to optimise both our web content and our advertising.

You can find more information about Google AdWords and Google Conversion-Tracking in the data protection policies of Google:

e) Google reCAPTCHA

We use Google reCAPTCHA on our websites. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States ("Google"). The purpose of reCAPTCHA is to check whether the data entered on our websites (e.g. in a contact form) is coming from a real person or an automated program. For this purpose, reCAPTCHA analyses the behaviour of the website visitor or app user on the basis of several features. This analysis begins automatically, as soon as the website visitor enters the website or the app user uses the app. For the analysis, reCAPTCHA evaluates various items of information (e.g. IP address, time spent by the website visitor on the website or app, or mouse movements activated by the user). The data recorded during the analysis are forwarded to Google. The reCAPTCHA analyses run completely in the background. Website visitors or app users are not notified that an analysis is taking place.

The data processing takes place on the basis of Art. 6 Para. 1 Sentence 1 Letter f GDPR. The website operator has a legitimate interest in protecting its web content from abusive automated spyware and from SPAM.

You can find further information about Google reCAPTCHA as well as the data protection statement of Google from the following links:

) Google Maps

This site uses the map service known as Google Maps via an API. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). For use of the functions of Google Maps, it is necessary that your IP address be stored. This information is usually transmitted to a Google server in the USA and stored there. We have no influence on this data transmission.

The use of Google Maps takes place in the interests of an attractive presentation of our online content and for ease of finding the locations indicated by us on the websites or app. This represents a legitimate interest within the meaning of Art. 6 Para. 1 Letter f GDPR.

You can find more information about the handling of user data in the data protection statement of Google:

g) Social links / Web presentations on Facebook, Twitter and YouTube

Links to services such as Facebook, Twitter and YouTube, where we maintain our own web presentations, are integrated into our websites and app. After you click on the integrated graphic, you will be directed to the website of the respective provider. Thus it is only then that user information will be transmitted to the respective provider.

If you click on a link to corresponding services while on our websites and app, your browser will establish a direct connection with the servers of the respective provider. When you click on the link, the provider receives the information that your browser has visited the corresponding page of our web presentation, even if you do not have your own user account with the respective provider or are directly logged in there. This information is communicated directly by your browser to a server of the respective provider and stored there.

If you are logged in with a provider, the provider is able to associate the visit to our website or app directly with your user account. If you interact with corresponding plugins, such as the "LIKE" or "SHARE" button on Facebook, the corresponding information is likewise communicated directly to the respective server of the provider and stored there. In addition, the information may be published on your profile with the respective provider and your contacts may be displayed.

The respective provider may use this information for the purpose of advertising, market research and configuration of its service to match your needs. For this purpose, usage, interests and relationship profiles will be created by the provider, for example in order to evaluate your use of our website and app with respect to the advertisements displayed to you by the provider, to inform other users about your activities on our website and to furnish further services associated with the use of the provider.

If you do not want the provider to associate the data collected via our website presentation with your user account, you must log out of our web presentation with the respective provider prior to your visit.

We use our website presentations on the basis of Art. 6 Para. 1 Sentence 1 Letter f GDPR in order to make our company better known in this respect and to supply the user with additional information.

You can find further information on the services integrated by us into the websites and app under the following points.

ga) YouTube Plugins

Our websites and app use plugins of the service known as You Tube. The operator of the service is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA ("YouTube"). If you visit or use the app on one of our websites equipped with a You Tube plugin, a connection will be established to the servers of YouTube. In the process, which of our sites you have visited will be reported to the YouTube server. If you are logged into your YouTube account, you enable YouTube to correlate your surfing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account.

The use of YouTube takes place in the interests of an attractive presentation of our online content. This represents a legitimate interest within the meaning of Art. 6 Para. 1 Letter f GDPR. You can find more information about the handling of user data in the data protection statement of YouTube:

h) Contact inquiry / Technical inquiry / Consultant search / Form for product purchase orders / Purchase of newsletter / Monthly hygiene tip / Registration for and invitations to events (hygiene days) / Online hygiene training

For the purpose of processing your inquiries, of delivery of purchased newsletters as well as of registration of applications for events (hygiene days) via our websites and app, we may, if appropriate, collect personal data such as

- Name of the contact person,
- Name of the company / of the facility / of the private practice as well as branch,
- Function of the contact person,
- Customer number,
- Address,
- Telephone number,
- Fax number,
- E-mail address,
- Banking connection,
- Your location (postal code)
- Photographic material showing the local disinfection situation,

which will be deleted immediately after completion of processing of your inquiry or after the event has occurred, provided you do not want any further information. Data stored by us for other purposes (e.g. e-mail address for the members' area) will remain unaffected by this. Which personal data will then be specifically communicated to us in the respective case will be evident from the respective entry form.

Data processing for purposes of contact inquiry, technical inquiry, consultant search, ordering of the newsletter, monthly hygiene tip as well as invitation to events is contingent on your consent in this regard (Art. 6 Para. 1 Sentence 1 Letter a GDPR).

Data processing for purposes of purchase orders for products as well as registration for events is necessary for fulfilment of contractual obligations or for implementation of precontractual actions at your request (Art. 6 Para. 1 Sentence 1 Letter b GDPR).

We use Rapidmail to send newsletters. The provider is rapidmail GmbH, Augustinerplatz 2, 79098 Freiburg i.Br., Deutschland ("Rapidmail"). Rapidmail is a service with which, among other matters, the sending of newsletters can be organised and analysed. The data entered by you for the purpose of subscribing to the newsletter will be stored on the servers of Rapidmail in Germany. If you do not want any analysis by Rapidmail, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in every newsletter issue. Furthermore, you may also unsubscribe from the newsletter directly on the website.

For the purpose of analysis, the e-mails sent with Rapidmail contain a so-called "tracking pixel", which connects to the servers of Rapidmail when the e-mail is opened. In this way, it can be determined whether a newsletter issue has ben opened. Furthermore, we are able to ascertain by means of Rapidmail whether and which links are being clicked in the newsletter issue. All links in the e-mail are so-called tracking links, with which your clicks can be counted. Your can find more detailed information about the analysis functions of Rapidmail on the following link:

The data saved by us for the purposes of the newsletter subscription will be stored by us until you opt out of the newsletter and will be deleted both from our servers and from the servers of Rapidmail once you have unsubscribed from the newsletter.

i) E-Shop (product purchase orders) / Hygiene knowledge training module / Disinfection and cleaning plans module / Checklists for hygiene inspections / Creation of illustrated flyers

If you as a customer would like to use our E-Shop, the [hygiene knowledge] training module, the training module for disinfection and cleaning plans, hygiene inspection or for creation of illustrated flyers, you must register from them with your data (see above), whereupon a user name will be sent to you by e-mail and you will be assigned a password. Which personal data will be communicated to us in the process will be evident from the respective entry form used for registration. We use the data stored for your account exclusively for processing your purchase order or for furnishing the services requested by you. In order to optimise our presence, our consultants (see orochemie contact data under Service & Support) have access to your personal data as well as to the plans prepared by you and are on hand to assist you if you have questions.

This data processing takes place on the basis of Art. 6 Para. 1 Sentence 1 Letter b GDPR.

As a registered user you will be additionally informed by us, by e-mail, about changes of the training and product offerings as well as about relevant legislative changes, provided you consent to such (Art. 6 Para. 1 Sentence 1 Letter a GDPR).

Registered customers are free to modify the personal data provided during registration at any time or to have them deleted completely from our database, provided no statutory retention obligations dictate otherwise.

If you are dealers or freelance hygiene consultants/authorised representatives, you may also create plans for your end customers under your account. In this case, please ensure that you first obtain the consent of your respective end customer to do so and also fulfil all other obligations of data protection law with respect to your end customer. If your end customer revokes any consent given to you, you have to delete the corresponding data in your account immediately.

7. Job applications

We collect, process and use your personal data that you provide to us for the purpose of an application for an employment relationship. In doing so, we collect only the data needed for implementation of the application process, and if an employment relationship with you is established, the data required for this.

This data processing is conducted for the purpose of handling your application and for implementing the application process. In the case of a positive decision, it takes place further for justification, implementation and if applicable termination of an employment relationship.

This data processing takes place on the basis of Art. 6 Para. 1 Letter b GDPR.

We may communicate your personal data to companies affiliated with us, provided this is necessary or permissible in connection with the explained purpose. Incidentally, personal data will be processed on our behalf on the basis of contracts according to Art. 28 GDPR, especially by host providers or providers of job applicant management systems. Communication to a third country is not contemplated.

We store your personal data as long as necessary for the decision about your application. If an employment relationship between you and us is not established, we may continue to store data in this regard, provided this is necessary to defend against possible legal claims. For this purpose, the application documents will be deleted 6 months after the denial decision, provided a longer storage period is not required on the basis of legal disputes. If an employment relationship is established between you and us, the personal data will be included in your personal file, if applicable.

The provision of personal data for the job application process is not stipulated either by legislation or by contract, but you are still obliged to provide the personal data. The provision of personal data in connection with a job application process is nevertheless required for the decision about and for entering into a contract governing an employment relationship with us. This means that, if you do not provide us with any personal date in a job application, we will be unable to enter into any employment relationship with you.

No automated decision within the meaning of Art. 22 GDPR will be made in the individual case. In other words, the decision on your job application is not exclusively contingent on automated processing.

8. Rights of affected parties

  • Pursuant to Art. 15 GDPR, you have the right to request information about your personal data processed by us. In particular, you may request information about the purpose of processing, the category of the personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage duration, the existence of a right to correction, deletion, restriction of or objection to processing, the existence of a right of appeal, the source of your data, if they were not collected by us, as well as about the existence of automated decision making including profiling and if applicable meaningful information about the details in this regard;
  • pursuant to Art. 16 GDPR, to demand immediate correction of your personal data stored by us if they are inaccurate, or inclusion of missing data
  • pursuant to Art. 17 GDPR, to demand deletion of your data stored by us, unless the processing is necessary for exercise of the right to freedom of expression and to information, for fulfilment of a legal obligation, for reasons of the public interest or for assertion, exercise or defence of legal claims;
  • pursuant to Art. 18 GDPR, to demand restriction of processing of your personal data, provided the accuracy of the data is disputed by you, the processing is unlawful, but you decline to have them deleted and we no longer need the data, but you need them for assertion, exercise or defence of legal claims or, pursuant to Art. 21 GDPR, you have filed objection to processing;
  • pursuant to Art. 20 GDPR, to receive, in a structured, established and machine-readable format. your personal data that you have provided to us or to demand communication to another responsible party;
  • pursuant to Art. 7 Para. 3 GDPR, to revoke at any time your consent once given to use, for which purpose an e-mail to this effect to "" is sufficient. This has as a consequence that we are no longer permitted in future to continue the data processing that depends on this consent;
  • pursuant to Art. 77 GDPR, to appeal to a supervisory authority. For this purpose, you may as a rule contact the supervisory authority of your normal place of residence, of your workplace or of our corporate head office.
9. Right of objection

If your personal data will be processed on the basis of legitimate interests pursuant to Art. 6 Para. 1 Sentence 1 Letter f GDPR, you have the right, pursuant to Art. 21 GDPR, to file objection to the processing of your personal data, provided reasons for doing so exist that result from your particular situation or the objection is for opposition to direct advertising. In the latter case, you have a general right of objection, which will be implemented by us without details of a particular situation. If you wish to make use of your right of objection, an e-mail to this effect to "" will be sufficient.

10. Updating of the data protection statement

This data protection statement is currently valid.

Due to further development of the content on our websites, web presentations and app, or on the basis of changed legislative or official requirements, it may be necessary to amend this data protection statement. Needed updates of the data protection statement will not be expressly announced by us. We therefore recommend that you reacquaint yourself with the data protection statement at regular intervals.

The respective current data protection statement can be accessed by you at any time on our websites, web presentations and app as well as printed out.

Status as of: December 2020