This privacy policy is based on the legal provisions for the protection of your data, which are contained in the General Data Protection Regulation (GDPR - REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016). In addition, the legal provisions of the Federal Data Protection Act (BDSG) and the Telecommunications Digital Services Data Protection Act (TDDDG) are used.
The responsible body within the meaning of Article 24 GDPR is:
Overseas Projects GmbH
Am Hockeypark 10
41179 Moenchengladbach
germany
Telephone: +49 2161 62129 10
email: mail@overseas-projects.com
In this privacy policy, you will find information about which personal data is stored, processed and passed on when you visit our website, in what type and for what purpose.
personal data According to Article 4 (1) GDPR, all information relating to an identified or identifiable natural person (hereinafter “data subject”) is regarded as identifiable; a natural person who, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more special features, expresses the physical, physiological, genetic, psychological, economic, cultural or social identity of that person are a natural person who can be identified.
When accessing and using our website and related offers, data may be transferred to third countries, such as the USA, via subcontractors or companies affiliated with them. Processing is carried out on the basis of the adequacy decision between the USA and the EU of July 10, 2023. In addition, we minimize the risk as far as possible by concluding order processing contracts, provided that there is a contractual relationship, and by concluding standard data protection clauses including effective additions required by supervisory authorities.
When you visit our site, various server statistics are automatically saved, which your browser transmits to our provider's server. Every access to our website and every retrieval of a file stored on the website are logged. The storage is used for internal system-related and statistical purposes. The following are logged: name of the retrieved file, date and time of retrieval, amount of data transferred, message of successful retrieval, web browser and requesting domain. In addition, the IP addresses of the requesting computers are logged anonymously.
This data is used for statistical evaluation of visits to our site and cannot be attributed to specific persons by us. This data is not combined with other data sources. Based on the data, we can optimize our offer for users, for example by preventing access from harmful sites or optimising access via certain browsers, and by logging the IP address in the first place making it possible for the page to be delivered to the visitor. The data is automatically deleted after 14 days for the above purposes. To transfer your data, we use a secure server using Transport Layer Security (TLS) technology with 128-bit encryption. In this way, your data is transmitted to us securely and unreadable by unauthorized persons.
We use web hosting Cloudflare Germany GmbH, Rosental 7, c/o Mindspace, 80331 Munich. Data may also be transmitted to Cloudflare, Inc., 101 Townsend Street, San Francisco, California 94107, USA. Cloudflare allows us to run a domain under which we can publish our website. We also use Cloudflare's email system, cloud and servers. You can find out which data and the purpose of collection and storage in the section above (“Server Data”). Our legitimate interest lies in making it possible to operate a website on the Internet.
We have concluded an order processing agreement (AVV) with Cloudflare, with which this company assures and documents compliance with appropriate technical and organizational measures. For more information, see Cloudflare's privacy policy at https://www.cloudflare.com/de-de/privacypolicy/.
If you send us an enquiry by e-mail, we will collect and store the email address and the data contained in the email to answer your request. Our legitimate interest lies in communicating and responding to your inquiries.
Should a contractual relationship develop from the request by initiating a contract or if the request relates to an existing contractual relationship, the legal basis is Art. 6 para. 1 lit. b) GDPR, as the storage of the data is necessary to fulfill a pre-contractual or contractual obligation. The data will be deleted when the purpose of storage has ceased to apply, i.e. after your email request has been answered or when the matter associated with the request has been finally resolved. In the case of an existing contractual relationship or resulting from the request, the deletion takes place after the legal retention periods have expired.
Our website uses so-called “cookies” in some places. A cookie is text information that our website places on the device you are using via the web browser. They serve to make our offering more user-friendly, effective and secure. We only use so-called “session cookies.” They are automatically deleted at the end of your visit. You can exclude the acceptance of cookies in your web browser. However, this may impair functionality.
To obtain your consent, we use the “Usercentrics” cookie consent tool. The tool is operated by Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany. Usercentrics collects log file and consent data using JavaScript. This JavaScript makes it possible to inform the user about their consent to certain tags on our website and to obtain, manage and document this.
In doing so, we process consent data (anonymized logbook data (Consent ID, Processor ID, Controller ID), Consent Status, Timestamp), device data or data from the devices used (including abbreviated IP addresses (IP v4, IP v6), device information, timestamp) and user data (including email, ID, browser information, SettingIDs, changelog).
The key and consent status are also stored in a cookie in the end user's browser so that the website can automatically read and follow the end user's consent on all subsequent page requests and future end user sessions for up to 12 months. For more information, please see Usercentrics' privacy policy at https://usercentrics.com/de/datenschutzerklaerung/. Our legitimate interest results from the fact that we can only obtain the necessary consent in this way and can provide the necessary proof in the event of a review.
To integrate scripts and libraries on our website, we use a content delivery network (CDN) from Cloudflare Germany GmbH, Rosental 7, c/o Mindspace, 80331 Munich. Data may also be transmitted to Cloudflare, Inc., 101 Townsend Street, San Francisco, California 94107, USA (“Cloudflare”). With a content delivery network, the content of our website is stored on the service's server and, when the website is retrieved, the service distributes this content to you or your browser via a network of regional servers. The purpose of this is to be able to better ward off attacks, such as DDoS attacks, on our website and, in the case of large volumes of script and data, to provide you with the content of our pages quickly and in an optimized manner.
Since the traffic on our website runs on Cloudflare servers, your IP address is also transmitted to Cloudflare. We have also concluded a data processing agreement with Cloudflare, with which this company assures us compliance with appropriate technical and organizational measures and documents them.
Our legitimate interest results from the fact that this service is technically necessary to be able to take security measures against attacks on our website and large amounts of data can be delivered in an optimized manner.
For the purpose of exchanging ideas with our customers and for general information about our company and its employees, we operate an account on www.linkedin.com, the LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”). If you access the page via our website using the LinkedIn icon and are logged into your account at the same time, LinkedIn can immediately associate your visit to our website with your LinkedIn account. If you do not want LinkedIn to associate your data with your account, you must log out of LinkedIn before visiting our website. When you access interactive features of the site (like, comment, share, message, etc.), a LinkedIn login screen appears. After any registration, LinkedIn will once again recognize you as a specific user.
For more information, please see LinkedIn's privacy policy at https://de.linkedin.com/legal/privacy-policy. You can check the privacy settings in your LinkedIn account. You can activate the “Block third-party cookies” function in your browser settings. However, blocking cookies may result in limited functionality of the site.
Our legitimate interest in operating a LinkedIn account lies in presenting ourselves on social networks to acquire customers. By managing a LinkedIn account and, if necessary, submitting an interaction, you agree to the storage and use of your data by LinkedIn. You can withdraw your consent at any time by deleting all cookies set in your browser. You can also prevent the collection of information by generally deactivating the automatic setting of cookies in your browser settings.
When using our contact form, we collect and store the name and email address for the purpose of answering your request. The telephone number is provided voluntarily. Before submitting your request, you give us your express consent by ticking the box below the contact form.
Should a contractual relationship develop from the request by initiating a contract or if the request relates to an existing contractual relationship, the legal basis is Art. 6 para. 1 lit. b) GDPR, as the storage of the data is necessary to fulfill a pre-contractual or contractual obligation. The data will be deleted when the purpose of storage has ceased to apply, i.e. after your contact form request has been answered or when the matter related to the request has been finally resolved. In the case of an existing contractual relationship or resulting from the request, the deletion takes place after the legal retention periods have expired.
We use the following “Google services.” The responsible body is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Ireland transmits data to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, which we always draw attention to.
For more information on whether and which data is collected by Google through the use of these services, please see Google's privacy policy.
Our website uses Google Tag Manager. With this solution, so-called tags are created and updated, which we can then manage. The Tag Manager implements tags from the services we use and thus triggers other tags. The tool itself does not collect any personal data, but is only used for administration. However, the tags that are triggered by this can automatically collect personal data (see below). However, Google Tag Manager does not access this collected data. When the tool is deactivated, the deactivation applies to all tags that were implemented via the tool.
This website uses the web analysis service Google Analytics 4:
Google Analytics uses so-called “cookies” for the purpose of analyzing user behavior on the website and measuring reach. An overview of how Google uses cookies and which cookies are used can be found in this overview.
By giving your consent to the use of Google Analytics, you consent to the processing of your data. Google Analytics automatically anonymizes IP addresses and only records geo-localization. It is therefore not possible for us to assign the collected analysis data to a specific person.
Google assures that data from end devices in the EU is stored and processed on EU servers. However, an at least indirect transfer of this data to the USA cannot be ruled out. However, due to automatic IP anonymization, your IP address will be abbreviated beforehand by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and Internet usage to the website operator.
The data transfer is based on the EU-US adequacy decision (EU-US Data Privacy Framework). By joining, Google proves that we have complied with appropriate and appropriate technical and organizational measures to protect your personal data. In addition, EU standard data protection clauses have been concluded with Google.
You can withdraw your consent at any time by deleting all (consent) cookies set in your browser.
In principle, you can prevent cookies from being saved by setting your browser software accordingly or in the cookie consent tool. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.
You can find more information about data protection at Google Analytics at https://support.google.com/analytics/answer/6004245?hl=de.
By default, the data stored by Google is deleted within 14 months.
For the purpose of contract processing and invoicing, we collect and store the personal data you provide, such as name, address and email address. If you have already provided us with this data as part of your registration, we will use it for the purposes stated there to process the contract. The data is passed on to tax advisors and banks as part of billing. In addition, the billing data is transferred to the tax office in accordance with Art. 6 para. 1 lit. c) GDPR. This data will be deleted after the applicable legal storage obligations have expired. Insofar as we are not subject to any legal storage obligations, the data will be deleted when the purpose ceases to exist.
If we process your data to protect legitimate interests (Art. 6 para. 1 lit. f) GDPR), you can object to this processing for reasons arising from your particular situation. We will then no longer process your personal data unless we can prove compelling legitimate grounds for processing that outweigh your interests, rights and freedoms or the processing serves to assert, exercise or defend legal claims. In the event of an objection to data processing for direct marketing purposes, processing for this purpose will no longer take place.
You have the right to request confirmation from us as to whether we are processing personal data concerning you and, if so, a right to information about the personal data and related information (Art. 15 para. 1 lit. a — h GDPR)
You have the right to request that we correct incorrect personal data concerning you without undue delay. In addition, taking into account the purposes of processing, you have the right to request the completion of incomplete personal data — including by means of a supplementary statement.
You have the right to request that we delete personal data concerning you without undue delay and we are obliged to delete it immediately if one of the reasons set out in Article 17 GDPR applies.
You have the right to ask us to restrict personal data concerning you if one of the conditions set out in Article 18 GDPR is met.
You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format and have the right to transfer this data to another person responsible, provided that the processing is based on consent in accordance with Article 6 paragraph 1 letter a or Article 9 paragraph 2 letter a or on a contract in accordance with Article 6 paragraph 1 letter b and the processing is carried out using automated procedures.
If you believe that the processing of your personal data violates the Data Protection Regulation, you can lodge a complaint with a competent supervisory authority.
State Commissioner for Data Protection and Freedom of Information
North Rhine Westphalia
P.O. Box 20 04 44
40102 Dusseldorf
Phone: 0211/38424-0
Fax: 0211/38424-10
email: poststelle@ldi.nrw.de