Data Protection

The following information concerns the processing of personal data of users of the website www.ophardt.com. Websites and other electronic information and communication services are designated in detail as "telemedia service" by the German Telemedia Act (DDG).
The name and contact details of the controller responsible for the processing of personal data in connection with your use of this telemedia service are

The contact details of the data protection officer appointed by the controller are
Ophardt Hygiene Technik GmbH
Dr. Heiko Haaz

UIMC DR. VOSSBEIN GmbH & Co KG
Unternehmens- und Informations-Management Consultants Nützenberger Straße 119, 42115 Wuppertal
Tel.: +49-202-26574-0, Fax: +49-202-26574-19
E-Mail: Der-Datenschutzbeauftragte@uimc.de, Internet: www.uimc.de

Lindenau 27
D-47661 Issum
Tel.: +49 (0) 202 265740

Purposes & legal bases

The processing of personal data in connection with the provision of this website is made for the following purposes and is based on the following legal principles and – if factually relevant – for the pursuit of the following legitimate interests of the controller or a third party:

1. 1. Purpose: provision of the telemedia service
   Legal basis: Article 6 (1) (b) Regulation (EU) 2016/679
2. 2. Purpose: provision of additional services within the telemedia service
   Legal basis: Article 6 (1) (f) Regulation (EU) 2016/679
3. In doing so, the controller pursues the following legitimate interests:
   Improvement of user-friendliness, reduction of required bandwidths, increase of the efficiency of his equipment.
4. In this context, we would like to draw your special attention to your right to object, see below, in the list of your rights.
5. 3. Purpose: processing of requests from users of the telemedia service,
   Legal basis: Article 6(1) (b) Regulation (EU) 2016/679
6. 4. Purpose: to ensure the confidentiality, integrity, availability and resilience of the telemedia service and the systems used for its provision, including measures to detect, limit, avoid and remedy faults or errors in the telemedia service
   Legal basis: Article 6(1) (c) Regulation (EU) 2016/679
7. Corresponding legal obligations of the controller arise from, among other things
   Art. 32 (1) Regulation (EU) 2016/679
8. 5. Purpose: economic optimization and demand-oriented design of the telemedia service,
   Legal basis: Article 6(1) (f) Regulation (EU) 2016/679
9. In doing so, the controller pursues the following legitimate interests:
   To increase the efficiency of his or her resources, to increase revenues, to reduce costs, to test and improve user-friendliness.
   In this context, we would like to draw your special attention to your right to object, see below, in the list of your rights.
10. 6. Purpose: advertising
    Legal basis: Article 6(1) (a) Regulation (EU) 2016/679

The personal data processed in connection with the provision of this website will be disclosed to the following categories of recipients:

1. Processors, i.e. companies which, due to contractual obligations, handle your data exclusively in accordance with the instructions of the controller
- Providers of technical services and services, in particular data center services
2. Third parties, i.e. companies that handle your data under their own responsibility:
- Hosting providers / content suppliers
The controller has no intention of disclosing personal data to recipients in a third country.
With regard to the indication of the duration of storage, it should generally be noted that personal data is only stored by the controller for as long as it is necessary to pursue the purpose of its processing. This results in detail:
For the above-mentioned purposes No. 1, No. 2, No. 4 and No. 5, the data will be stored by the controller for as long as your use of the telemedia service lasts.
For the above-mentioned purpose No. 3, the data will be stored by the controller until the communication with the user is terminated; if the contents of the communication trigger storage obligations, the data will be stored beyond the time of termination of the communication, until the expiry of the storage obligation, otherwise at least for as long as the possibility of the controllers own legal defence makes storage necessary within the scope of statutory limitation or preclusion periods.
For the above-mentioned purpose No. 6, the data will be stored by the controller until the purpose is achieved or you revoke the consent you have given, whichever occurs first.

In principle, i.e. subject to the legal restrictions, you have the rights listed below. In order to facilitate the exercise of these rights, you are informed that a corresponding application from you does not require a specific form and can therefore be submitted electronically (in particular by e-mail).
You may request information from the controller for the personal data concerning you.

You can request that incorrect personal data concerning you be corrected by the controller.
You may request the deletion of your personal data by the controller.

You may request that the controller limit the further processing of personal data concerning you.

You have the right to object to the further processing of personal data concerning you by the controller for the above-mentioned purposes No. 2 and No. 5, if you give reasons for this in individual cases arising from your particular situation.

You have the right to obtain the personal data concerning you which you have provided to the controller for the above-mentioned purposes No. 1, No. 3 and No. 6, from the controller in a structured, common and machine-readable format, and to transfer these data to another person without hindrance by the controller to whom the personal data have been provided.
Finally, you have the right to revoke any consent you have given at any time, without prejudice to the lawfulness of the processing carried out on the basis of the respective consent until revocation.

Zoho PageSense

Nature and scope of processing

We use the tool Zoho PageSense provided by Zoho Corporation B.V., Beneluxlaan 4B, 3527 HT Utrecht, Netherlands. Zoho PageSense enables us to analyze how visitors use our website.

The following personal data may be processed:

anonymized usage data (e.g. page views, button clicks, heatmaps, selected click paths), anonymized IP address, browser information, page location, and referrer URL.

Purpose and legal basis

The purpose of using Zoho PageSense is to analyze user behavior on our website in order to optimize content and improve user-friendliness. The legal basis for this processing is your consent pursuant to Art. 6(1)(a) GDPR. You may provide your consent via the cookie banner and withdraw it at any time with future effect. No data will be collected or transferred without your consent.

Storage period

The specific storage period of the cookies set by Zoho PageSense depends on the respective purpose. Once the purpose has been fulfilled, the data will be deleted. You may withdraw your consent at any time via the cookie settings.

Third country transfer

In connection with the use of Zoho PageSense, data may be transferred to service providers, some of which are located outside the EU/EEA. In such cases, an adequate level of data protection is ensured by entering into EU Standard Contractual Clauses or by using Binding Corporate Rules. You may request a copy of these safeguards at any time.

Further information can be found in Zoho’s privacy policy.

Zoho Content Delivery Network (CDN)

Nature and scope of processing

To ensure the proper delivery of the content of our website, we use Zoho CDN, a service provided by Zoho Corporation B.V., Beneluxlaan 4B, 3527 HT Utrecht, Netherlands.

A content delivery network helps to provide online content, in particular files such as graphics or scripts, more quickly via regionally or internationally distributed servers. When you access such content, your IP address and, where applicable, browser data such as your user agent are transmitted to Zoho. This data is processed solely for the aforementioned purposes and to maintain the security and functionality of Zoho CDN.

Purpose and legal basis

Zoho CDN is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TTDSG.

Storage period

The data will be stored for as long as necessary to fulfill the relevant purpose. You may withdraw your consent at any time with future effect.

Third country transfer

Personal data may be transferred to third countries, in particular the United States or India. An adequate level of data protection is ensured by entering into EU Standard Contractual Clauses. You may request a copy of these safeguards at any time.

Further information can be found in Zoho’s privacy policy: https://www.zoho.com/privacy.html

Neo Commerce (Neocom including AI Agent)

Nature and scope of processing

We have integrated the digital product advisory services of Neo Commerce GmbH, Max-Bill-Str. 8, 80807 Munich, Germany (“Neocom”), into our website. These services include click-based product advice and an AI-powered AI Agent that allows you to ask questions in free-text form.

The product advisory service helps you find suitable products and receive product recommendations. When you use the AI Agent, your input is analysed automatically in order to understand your request, provide relevant information and suggest suitable products. The responses and recommendations provided by the AI Agent are generated automatically.

In particular, the following data is processed when you use these services:

• browser and HTTP information, in particular browser type and version, IP address and browser language,
• a Neocom session ID and a conversation ID,
• your responses within the click-based product advisory service,
• your free-text input and the respective conversation history when using the AI Agent,
• product recommendations displayed and interactions with the product advisory service,
• where applicable, your email address if you request that a product recommendation be sent to you.

The IP address is technically required for communication with the service. It is stored for 14 days.

A session ID is stored on your device for the duration of the browser session in order to provide the service technically. With your consent, chat messages and a cross-session Neocom ID may also be stored. The cross-session ID is used in particular for purchase tracking, which makes it possible to determine whether a purchase was made following a product consultation. In this context, the session ID may be linked to information about the shopping cart or purchase, in particular products, quantities and prices.

If you request that a product recommendation be sent to you by email, your email address will be processed exclusively for the purpose of sending the information you requested. Where applicable, confirmation is obtained using a double opt-in procedure.

Purposes and legal bases

The data technically required to provide the product advisory service and the AI Agent is processed for the purpose of carrying out the digital product consultation requested by you. The legal basis is our legitimate interest in providing a user-friendly, interactive product advisory service pursuant to Art. 6(1), first sentence, point (f) GDPR.

Where information must be stored on or accessed from your device and this is strictly necessary for this purpose, such storage or access is carried out in accordance with Section 25(2) no. 2 TDDDG.

A cross-session Neocom ID, purchase tracking and the persistent storage of chat messages are used only with your consent pursuant to Section 25(1) TDDDG and Art. 6(1), first sentence, point (b) GDPR.

Your email address is processed for the purpose of sending the requested product recommendation on the basis of your consent pursuant to Art. 6(1), first sentence, point (b) GDPR.

The product advisory service and the AI Agent are evaluated for improvement purposes only within the agreed and legally permissible data protection purposes. Where you have consented to this, specific conversation histories may be used to identify incorrect responses, incomplete information and gaps in knowledge and to improve the reliability of the AI Agent. Only aggregated or effectively anonymised data is used for longer-term evaluations.

Recipients and processing on our behalf

Neocom processes the data as a processor on our behalf pursuant to Art. 28 GDPR. In connection with the technical provision of the services, data may also be received by further subprocessors engaged by Neocom, in particular providers of hosting, AI and email services. These subprocessors may process the data only in accordance with the contractual agreements and applicable data protection legislation.

Storage period

Temporary session data is generally processed only for the duration of your browser session. A Neocom ID stored for purchase tracking is deleted after no more than 365 days.

Chat messages and complete conversation histories are stored beyond the current session only if you have consented to this and the corresponding feature is enabled. They are stored in particular to identify incorrect responses and gaps in knowledge and to improve the AI Agent. Stored conversation histories are retained for a maximum of 14 days and are then deleted automatically. You may delete your conversation history at any time before the end of this period.

Your email address is stored only for as long as necessary to send the product recommendation. If a required double opt-in confirmation is not completed within 24 hours, the relevant data is deleted or blocked in accordance with the procedure used.

Supervisory authority

Furthermore, you have the right to lodge a complaint with a supervisory authority responsible for data protection regarding the handling of your data by the controller. To facilitate the exercise of this right, you are informed that the supervisory authority responsible for the registered office of the controller can be contacted at the following address:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen,
Kavalleriestr. 2-4, 40213 Düsseldorf

Your provision of personal data concerning you is necessary for the provision of the telemedia service. There is no legal obligation to provide the data. However, failure to provide the data would mean that the telemedia service cannot be provided to you.

Automated decisions which could have legal effects on you or which could affect you considerably in a similar way will not be made in connection with your use of the telemedia Service.