We, Otto International (‘Oi’), take the protection of your privacy and your personal data very seriously. Therefore, we attach great importance to the fact that your data is secure and that the data processing complies with the applicable data protection regulations, in particular the EU General Data Protection Regulation (GDPR). Furthermore, we ensure, through technical and organisational measures, that your data is optimally protected against unauthorised access by third parties.
1. Personal data
Personal data – the law also speaks of personally identifiable information – are personal information that allow you to draw conclusions about your identity. These include, for instance information such as name, address, telephone number or e-mail address as well as information about surfing behaviour, provided that this information can be assigned to you directly or indirectly.
In principle, you can use the Oi website without disclosing your personal data. However, when you contact us via the Oi website, we collect and process your personal information for the purpose of contacting you. Additionally, when you fill in a form on the website, we retain the data purely for reference.
2. Provision of the website
2.1 Storage of data in a log file and geo-localisation
2.1.1 Type of data and processing purposes
With every visit by a user to the Oi website certain data of the retrieving device is automatically collected by our web servers in a log file and temporarily stored. The following data may be collected:
- the IP address of the retrieving device
- type of device
- type of browser and operating system
- date and time of the visit (time stamp)
- the visited website (URL)
- session ID
- geo-localisation data
This data is collected to ensure the functionality of the website. Furthermore, the data serves to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
Further, the IP address is used for a so-called geo-localisation (IP geo-localisation). This may help us to deliver the contents in the language with which you are probably most familiar.
2.1.2 Legal basis
The legal basis for the temporary storage of the data is Art. 6 para. 1 lit. f GDPR. Our legitimate interest in data processing lies in the aforementioned data collection and processing purposes.
2.1.3 Duration of storage
The data will be deleted as soon as it is no longer necessary for the purpose of its collection. The data will be deleted at the earliest after 7 days, and at the latest after 32 days.
2.1.4 Option of withdrawal
The collection and processing of the data for the purposes stated in this section is mandatory for the operation of the Oi website. Therefore, you have no option of withdrawal.
3. Use of cookies and other technologies
The Oi website uses cookies. Cookies are small text files that can be stored in the web browser or by the web browser on the user’s device. Cookies contain a characteristic string that allows unambiguous identification of the browser or device when the website is re-launched.
Different types of cookies are used on this website. It is necessary to distinguish between:
- Temporary session cookies that are regularly deleted after leaving the web browser;
- Permanent cookies that are stored longer on your device and contain certain settings, such as the language you have selected to use the Oi website;
- Own cookies (first-party cookies) stored on the Oi website on your device;
Our own cookies (first-party cookies) used by this Oi website include temporary session cookies and permanent cookies. The permanent cookies store information of the website on any personal user preferences you may have and to improve your user experience during your next visit (for example, the language settings you have selected). The temporary session cookies store technical information of the website that is necessary for the functioning of the website. The storage period of these cookies depends on the deadlines specified in this paragraph.
In general, you can instruct your web browser to prevent the storage of cookies or the execution of analysis technologies. However, some features of this website may then no longer be available. As a compromise, you can also instruct your web browser to notify you when a cookie or similar analysis technology is used. In addition, all cookies can be deleted manually at any time.
4. Making contact
If you contact us through a contact form, telephone or e-mail, your personal information will be collected and stored.
We use the collected data exclusively for the purpose of answering your request.
The arising data in this context is deleted after the storage is no longer required for the purpose of the contact or limit the processing in the case of legal storage obligations.
The legal basis for data processing is Art. 6 para. 1 lit. b GDPR, if the contact is aimed at concluding a contract. Otherwise, the legal basis is Art. 6 para. 1 lit. f GDPR, where our legitimate interest in data processing is responding to contact requests.
If the contact was not made for purposes of contract initiation, you have the right to withdraw from the processing of your personal data at any time. In case of withdrawal the correspondence cannot be continued. All personal data collected in this context will be deleted in the event of a legitimate withdrawal.
5. Your privacy rights
5.1 Your rights
With regards to your personal data, you have the following rights in relation to Oi:
- Right of information
- Right to rectification and erasure
- Right to restriction of processing
- Right to withdraw from the processing
- Right to data portability
If you have given us consent to the use of your personal data (for example, by activating the social plug-in sharing buttons), you have the right to revoke this consent at any time for the future, without stating a reason.
Any right of withdrawal that is not explicitly stated here can in principle be asserted against the person listed below for data protection matters at Oi.
If you wish to have your personal data deleted, we may be required by law to retain such information for a certain period of time, such as for tax or accounting purposes. In this case we will delete the data immediately after expiry of the storage period.
If your personal data has been recorded incorrectly, you can have it corrected at any time by contacting us personally.
5.2 Contact person
If you have any questions about the collection, processing or use of your personal data as well as for information, corrections, deletions, processing restrictions, withdrawals or the transfer of your data, please contact us.
When making your request, please make sure to provide your complete contact details (first name, name and address); we will answer your request quickly only if we can clearly identify you.
5.3 Right of complaint
You have the right to complain to a data protection supervisory authority about the processing of your personal data by Oi. The competent supervisory authority in connection with postal services is the Federal Commissioner for Data Protection and Freedom of Information, Husarenstr. 30, 53117 Bonn (https://www.bfdi.bund.de).
6. Responsible body
Body responsible for contents pursuant to Art. 4 Abs. 7 GDPR is
Otto International (HK) Ltd – represented by Chief Executive Officer Heidi Stevens
19/F, Peninsula Square, 18 Sung On Street, Hung Hom, Hong Kong
Tel.: (+852) 8489 5688
Fax.: (+852) 2330 8885
