Skip links
orpra@dibaso.de
Request a demo

Privacy Policy

1. Introduction

This privacy policy informs you about the processing of personal data at dibaso GmbH. We process your data in accordance with the legal provisions on data protection.

We refer to the terms used by the European legislator for the adoption of the General Data Protection Regulation (GDPR). Our privacy policy should be easy to read and understand. To ensure this, we would first like to explain the terminology used.

In this data protection declaration, we use the following terms, among others:

a) Personal data
Personal data is any information by which a natural person (“data subject”) can be identified.

b) Data subject
Data subject is any identified or identifiable natural person whose personal data are processed by the controller.

c) Processing
Data processing means any operation or set of operations which is performed upon personal data, whether or not by automatic means. This includes collecting, recording, organizing, arranging, storing, adapting or changing, retrieval, querying, using, disclosing by transmission, dissemination or otherwise making available, comparing or linking as well as restricting, deleting or destroying.

d) Restriction of processing
Restriction of processing is the marking of stored personal data with the aim of limiting their processing in the future.

e) Pseudonymization
Pseudonymization is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information.

f) Controller or controller responsible for the processing
Controller or controller is the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data.

g) Processor
Processor is a natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller.

h) Recipient
Recipient means a natural or legal person, public authority, agency or other body to whom the personal data are disclosed, whether or not a third party.

i) Third party
Third party is a natural or legal person, public authority, agency, or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data.

j) Consent
Consent of the data subject is any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

2. General Information

Controller

This website is operated by the following responsible party:

dibaso GmbH

Heinrich-Brune-Str. 20
D- 33334 Gütersloh
Tel: +49 (0) 5241 7033373
E-mail: orpra.ai@dibaso.de
Website: www.orpra.ai

Questions concerning privacy can be sent directly to: privacy@dibaso.de

Revocation of consent to data processing

You can revoke an already given consent at any time. To do so, simply send an informal e-mail to privacy@dibaso.de.

Right of complaint

Questions regarding data protection can be sent directly to the following address: privacy@dibaso.de

If you have any concerns or complaints, reach out to the Nordrhein-Westfalen State Commissioner for Data Protection and Freedom of Information.

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestraße 2-4, 40213 Düsseldorf
Tel: 0211 384240

3. Purposes of data processing

We collect data in order to provide you with our website without errors and with the best possible user experience. In addition, you can use various forms to contact us or request information for download. We use your data to process the requests and entries.

4. Collection of general data and information

4.1 Cookies

This website uses cookies. Cookies are text files that are stored in a computer system via an Internet browser.

Many websites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a character string through which Internet pages and servers can be assigned to the specific Internet browser in which the cookie was stored. This allows visited Internet sites and servers to differentiate the individual browser of the data subject from other Internet browsers that contain other cookies. A specific Internet browser can be recognized and identified using the unique cookie ID. Through the use of cookies, ORPRA AI can provide the users of this website with more user-friendly services that would not be possible without the cookie setting.

Articles on this site may include embedded content (e. g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website. These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, including tracking your interaction with the embedded content if you have an account and are logged in to that website

Essential services are necessary for the website to function properly. This category only includes cookies that ensure basic functionalities and security features of the website. These cookies do not store any personal information.

This includes the following cookies and scripts:

  • Polylang
    • Polylang is a multi-language system for WordPress websites to output the website in multiple languages, making it available to a larger amount of users. Cookies or cookie-like technologies can be stored and read. These can store the chosen language of the user and can redirect the user to the version of the website that matches with the browser language. The legitimate interest in using this service is to store the user’s language to deliver the content in the correct language.
  • GDPR Cookie Compliance by Moove
    • GDPR Cookie Compliance by Moove asks website visitors for consent to set cookies and process personal data. For this purpose, a UUID (pseudonymous identification of the user) is assigned to each website visitor, which is valid until the cookie expires to store the consent. Cookies are used to test whether cookies can be set, to store reference to documented consent, to store which services from which service groups the visitor has consented to, and, if consent is obtained under the Transparency & Consent Framework (TCF), to store consent in TCF partners, purposes, special purposes, features and special features. As part of the obligation to disclose according to GDPR, the collected consent is fully documented. This includes, in addition to the services and service groups to which the visitor has consented, and if consent is obtained according to the TCF standard, to which TCF partners, purposes and features the visitor has consented, all cookie banner settings at the time of consent as well as the technical circumstances (e.g. size of the displayed area at the time of consent) and the user interactions (e.g. clicking on buttons) that led to consent. Consent is collected once per language.

Statistical services are needed to collect pseudonymous data about the visitors of the website. The data enables us to understand visitors better and to optimize the website.

This includes the following cookies and scripts:

  • Google Analytics
    • Google Analytics creates detailed statistics of user behavior on the website to obtain analysis information. This requires processing a user’s IP-address and metadata which can be used to determine a user’s country, city and language. Cookies or cookie-like technologies can be stored and read.
    • These can contain personal data and technical data like user ID which can provide the following additional information:
      • time information about when and how long a user was or is on the different pages of the website
      • device category (desktop, mobile and tablet), platform (web, iOS app or Android app), browser and screen resolution a user used
      • where a user came from (e.g. origin website, search engine including the searched term, social media platform, newsletter, organic video, paid search or campaign)
      • whether a user belongs to a target group/audience or not
      • what a user has done on the website and which events were triggered by actions of the user (e.g. page views, user engagement, scroll behaviour, clicks, added payment info and custom events like e-commerce tracking)
      • conversions (e. g. if a user bought something and what was bought)
      • gender, age and interest if an allocation is possible
    • This data can also be used by Google to collect visited websites, and it can be used to improve the services of Google. It can be linked across multiple domains, which are operated by this website operator, with other Google products (e.g. Google AdSense, Google Ads, BigQuery, Google Play) which the website operator uses. It can also be linked by Google to the data of users logged in on the websites of Google (e.g. google.com). Google provides personal information to their affiliates and other trusted businesses or persons to process it for them, based on Google’s instructions and in compliance with Google’s privacy policy. It can also be used for profiling by the website operator and Google, e.g. to provide a user with personalized services, such as ads based on a user’s interests or recommendations.
    • The legal basis for the processing of your personal data is your consent in accordance with Art. 6 Para. 1 S. 1(a) EU GDPR. You may revoke your consent at any time here. The purpose of processing your personal data by the Google Analytics service is to analyse the interaction of our website visitors with our website. By analysing the data collected, we can optimise our offerings and improve user-friendliness. We delete or anonymise data collected with Google Analytics as soon as they are no longer required for our purposes. This will be the case after 26 months.

The data subject may, at any time, accept or reject the use of non-necessary cookies by navigating to the Change Privacy Settings on the bottom of the website. Furthermore, already set cookies may be deleted at any time via an Internet browser or other software programs. This is possible in all popular Internet browsers. If the data subject deactivates the setting of cookies in the Internet browser used, not all functions of our website may be entirely usable.

4.2 Server log files

The website of ORPRA AI collects a series of general data and information when a data subject or automated system calls up the website. This general data and information are stored in the server log files. Collected may be

  • (1) the browser types and versions used,
  • (2) the operating system used by the accessing system,
  • (3) the website from which an accessing system reaches our website (so-called referrers),
  • (4) the sub-websites,
  • (5) the date and time of access to the Internet site, and
  • (6) any other similar data and information that may be used in the event of attacks on our information technology systems.

When using these general data and information, ORPRA AI does not draw any conclusions about the data subject. Rather, this information is needed to

  • (1) deliver the content of our website correctly,
  • (2) optimize the content of our website as well as its advertisement,
  • (3) ensure the long-term viability of our information technology systems and website technology, and
  • (4) provide law enforcement authorities with the information necessary for criminal prosecution in case of a cyber-attack.

Therefore, ORPRA AI analyzes anonymously collected data and information statistically, with the aim of increasing the data protection and data security of our enterprise and to ensure an optimal level of protection for the personal data we process. The anonymous data of the server log files are stored separately from all personal data provided by a data subject.

4.3 Contact form

If a data subject contacts the controller via the contact form, the personal data transmitted by the data subject will be stored automatically. A transfer of this personal data to third parties does not take place. Users may opt-in to receive additional information, e. g. a newsletter by ORPRA AI.

The processing of the data entered in the contact form is thus based exclusively on the consent of the data subject (Art. 6 para. 1 lit. a GDPR). The data subject may revoke this consent at any time by means of an informal e-mail.

The transmitted personal data will be stored for the purpose of processing or contacting the data subject. They remain with us until a request for deletion or a revocation of consent is made by the data subject or the purpose for storage no longer applies.

4.4 Forms for downloading content

ORPRA AI offers content in the form of PDFs for download via request forms. If a data subject contacts the data controller via a form, the personal data transmitted by the data subject is automatically stored. This personal data is not passed on to third parties. Users may opt-in to receive additional information, e. g. a newsletter by ORPRA AI.

The processing of the data entered in the contact form is thus based exclusively on the consent of the data subject (Art. 6 para. 1 lit. a GDPR). The data subject may revoke this consent at any time by means of an informal e-mail.

The transmitted personal data will be stored for the purpose of processing or contacting the data subject. They remain with us until a request for deletion or a revocation of consent is made by the data subject or the purpose for storage no longer applies.

4.5 SSL/TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

5. Profiles in Social Networks (Social Media)

We maintain online presences within social networks and process user data in this context in order to communicate with the users active there or to offer information about us.

We would like to point out that user data may be processed outside the European Union. This may entail risks for users, e.g. by making it more difficult to enforce users’ rights.

In addition, user data is usually processed within social networks for market research and advertising purposes. For example, user profiles can be created on the basis of user behaviour and the associated interests of users. The user profiles can then be used, for example, to place advertisements within and outside the networks which are presumed to correspond to the interests of the users. For these purposes, cookies are usually stored on the user’s computer, in which the user’s usage behaviour and interests are stored. Furthermore, data can be stored in the user profiles independently of the devices used by the users (especially if the users are members of the respective networks or will become members later on).

For a detailed description of the respective processing operations and the opt-out options, please refer to the respective data protection declarations and information provided by the providers of the respective networks.

Also in the case of requests for information and the exercise of rights of data subjects, we point out that these can be most effectively pursued with the providers. Only the providers have access to the data of the users and can directly take appropriate measures and provide information. If you still need help, please do not hesitate to contact us.

  • Processed data types: Contact data (e.g. e-mail, telephone numbers); Content data (e.g. text input, photographs, videos); Usage data (e.g. websites visited, interest in content, access times); Meta, communication and process data (e.g. IP addresses, time information, identification numbers, consent status).
  • Data subjects: Users (e.g. website visitors, users of online services).
  • Purposes of Processing: Contact requests and communication; Feedback (e.g. collecting feedback via online form); Marketing; Provision of our online services and usability.
  • Legal Basis: Legitimate Interests (Article 6 (1) (f) GDPR).

Further information on processing methods, procedures and services used:

6. Rights of the data subject

6.1 Right of confirmation, information, rectification, restriction, and erasure

Every data subject has the right to obtain confirmation from the controller at any time as to whether or not personal data relating to him or her are being processed. For this purpose, an informal e-mail to privacy@dibaso.de is sufficient.

Within the framework of the applicable legal provisions, every data subject has the right to obtain information about the data stored about him or her, as well as a copy of this information.

In addition (under certain conditions)

  • the right to rectification,
  • the right to deletion,
  • the right to restriction of processing

of the personal data.

For this purpose, you can contact privacy@dibaso.de at any time.

6.2 Right to data portability

Every data subject has the right to obtain personal data concerning him or her that has been provided to a controller in a commonly used and machine-readable format. Direct transfer to another controller will only take place to the extent that this is technically feasible.

For this purpose, you can contact privacy@dibaso.de at any time.

6.3 Right to object

Any data subject has the right, granted by the European Directives and Regulations, to object at any time, on grounds relating to his or her particular situation, to processing of personal data concerning him or her carried out on the basis of Article 6(1)(e) (public interest or exercise of official authority) or (f) (legitimate interest) of the GDPR.

ORPRA AI shall no longer process the personal data in the event of the objection, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject, or for the establishment, exercise, or defense of legal claims.

To exercise the right to object, you may, at any time, send an informal e-mail to privacy@dibaso.de.

Privacy Overview

This website uses cookies so that we can provide you with the best user experience possible. Cookie information is stored in your browser and performs functions such as recognising you when you return to our website and helping our team to understand which sections of the website you find most interesting and useful.

Strictly Necessary Cookies

Strictly Necessary Cookie should be enabled at all times so that we can save your preferences for cookie settings.

Analytics

This website uses Google Analytics to collect anonymous information such as the number of visitors to the site, and the most popular pages.

Keeping this cookie enabled helps us to improve our website.