Last updated: January 20, 2024
Privacy Policy
Table of Contents
1. General information on data processing
2. Provision of the website and creation of log files
3. APIs we use
3.1 Google API
3.2 Meta API
3.3 TikTok API
4. Cookies we use
5. How we use personal data
5.1 Statistical analyses
5.2 Company-specific tracking
5.3 Webinars
5.4. Newsletter
5.5 Online store
5.6 Application
5.7 Email contact/contact form
6. Use of third party providers
6.1 Facebook (Meta)
6.2 Google Advertising Products
6.3 Snapchat
6.4 Taboola Europe Ltd.
6.5 TikTok
6.6 YouTube
7. Data transfer to third countries
8. Length of storage of personal data
9. Data exchange with third parties
10. Use of corporate presences in social networks
10.1. LinkedIn
10.2. Youtube
11. Hosting
12. Plug-ins
12.1 Use of LinkedIn
12.2 Use of Twitter
12.3. Use of Facebook
13. Data security
14. Rights of the data subject
15. Changes to the privacy policy
16. Contact
We are pleased to see that you are interested in our company. One More DMCC (hereafter "OneTrack") develops website tracking software solutions based on unique twin-server technology. OneTrack offers software as a service ("SaaS") to businesses and operates the website to showcase its products and tell its story. The URL of the website is: https://www.one-track.io ("OneTrack Website").
The data controller for the purposes of the General Data Protection Regulation ("GDPR"), other data protection laws applicable in the Member States of the European Union and other data protection regulations is OneTrack, which operates the OneTrack Website.
This Privacy Policy describes the types of personal data collected, how that data is used, and your rights and choices regarding the processing of your personal data when you visit and interact with the OneTrack website. The website is not intended for children and we do not knowingly collect data from children. This Privacy Policy does not apply to third party websites, services or applications, even if they are accessible through the OneTrack website.
Name and address of the responsible party
The responsible party in the sense of the General Data Protection Regulation (GDPR) and other data protection regulations is:
One More DMCC
Unit No: O5-PF-CWC40
Detached Retail O5
Plot No: JLT-PH2-RET-O5
Jumeirah Lake Towers
Cluster O, JLT
Dubai
United Arab Emirates
+971 4 548 0989
info@one-track.io
www.one-track.io
Commercial Court City: Dubai
Contact details of the Data Protection Officer:
The data protection officer of the responsible party is:
KINAST Rechtsanwaltsgesellschaft mbH
Hohenzollernring 54
50672 Cologne
Germany
+49 221 222 1830
www.kinast.eu/
1. General information on data processing
Scope of the processing of personal data
As a matter of principle, we process personal data of our users only to the extent that this is necessary for the provision of a functional website as well as our content and services. The processing of personal data of our users is regularly carried out only with the consent of the user. An exception applies in those cases where obtaining prior consent is not possible for actual reasons and the processing of the data is required by legal regulations.
Legal basis for the processing of personal data
In case we obtain the consent of the data subject for processing operations involving personal data, Article 6 (1) sentence 1 lit. a GDPR serves as the legal basis.
When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) p. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.
Insofar as processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6 (1) p. 1 lit. c GDPR serves as the legal basis.
In the event that vital interests of the data subject or another natural person make processing of personal data necessary, Art. 6 (1) S. 1 lit. d GDPR serves as the legal basis.
If the processing is necessary to protect a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not override the first-mentioned interest, Art. 6 (1) p. 1 lit. f GDPR serves as the legal basis for the processing.
Data deletion and storage period
The personal data of the data subject shall be deleted or blocked as soon as the purpose of storage ceases to apply. Storage may also take place if this is provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject. Blocking or deletion of data will also take place if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.
2. Provision of the website and creation of log files
Scope of data processing
The term "personal data" is defined in the GDPR as any information relating to an identified or identifiable natural person ("data subject"). Personal data is any data by which you can be identified or which can be associated with you.
We collect and process personal data that you voluntarily provide to us, as well as information that your browser or mobile device automatically provides when you visit the OneTrack website.
Typically, we may collect and process the following categories of data:
- Your first and last name
- Your contact information, such as telephone and email address
- Your business information, such as company name and type of business
- Your consent form to receive our marketing materials, such as promotions and newsletters
- Your IP address
- Operating system
- Browser type
- Browser version
- Browser configuration
- Other relevant information about your computer and internet connection, to identify the type of device you are using, to connect to the website, to exchange data with your (mobile) device or to ensure proper use of the website
- The URL and IP address of the website from which you access the OneTrack website or from which you are redirected to our website, including date and time
- All pages of the OneTrack website that you click on during your visit and all links on our website that you click on, including the date and time
- The entire Uniform Resource Locator (URL) clickstream to, through and from the website, including date and time
- Information collected through cookies or similar technologies (as explained below)
- Other similar data and information that may be used in the event of cyber-attacks on our information technology systems
This data is stored in the log files of our system. Storage of this data together with other personal data of the user does not take place.
Purpose of data processing
The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the IP address of the user must remain stored for the duration of the session.
The storage in log files is done to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
These purposes are also our legitimate interest in data processing according to Art. 6 para. 1 p. 1 lit. f GDPR.
Legal basis for data processing
The legal basis for the temporary storage of the data and the log files is Art. 6 para. 1 p. 1 lit. f GDPR.
Duration of storage
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
In the case of storage of data in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible.
Possibility of objection and removal
The collection of data for the provision of the website and the storage of the data in log files is mandatory for the operation of the website. Consequently, there is no possibility of objection on the part of the user.
3. APIs we use
3.1 Google API
Google API Services User Data Policy Compliance
OneTrack complies with the Google API Services User Data Policy, including the Limited Use requirements. We are committed to ensuring that our use and transfer of information received from Google APIs adhere to these policies. You can find the full Google API Services User Data Policy at
https://developers.google.com/terms/api-services-user-data-policy
Disclosure
OneTrack's use and transfer of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements. By using our services, you consent to our collection, use, and disclosure of your information as outlined in this Privacy Policy and the Google API Services User Data Policy.
3.2 Meta API
Meta Marketing API Developer Policy Compliance
OneTrack complies with the Meta Marketing API Developer Policy, including the Limited Use requirements. We are committed to ensuring that our use and transfer of information received from Meta APIs adhere to these policies. You can find the full Meta Marketing API Developer Policy at
https://developers.facebook.com/devpolicy/#marketingapi
Disclosure
OneTrack's use and transfer of information received from Meta APIs will adhere to Meta Marketing API Developer Policy, including the Limited Use requirements. By using our services, you consent to our collection, use, and disclosure of your information as outlined in this Privacy Policy and the Meta Marketing API Developer Policy.
3.3 TikTok API
TikTok Developer Terms of Service Compliance
OneTrack complies with the TikTok Developer Terms of Service, including the Limited Use requirements. We are committed to ensuring that our use and transfer of information received from TikTok APIs adhere to these policies. You can find the full TikTok Developer Terms of Service at
https://www.tiktok.com/legal/page/global/tik-tok-developer-terms-of-service/en
Disclosure
OneTrack's use and transfer of information received from TikTok APIs will adhere to TikTok Developer Terms of Service, including the Limited Use requirements. By using our services, you consent to our collection, use, and disclosure of your information as outlined in this Privacy Policy and the TikTok Developer Terms of Service.
4. Cookies we use
Cookies are text files that are stored on a computer system via an Internet browser.
Many websites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a string of characters by which websites and servers can be assigned to the specific Internet browser in which the cookie was stored. This enables visited websites and servers to distinguish the individual browser of the data subject from other Internet browsers that contain other cookies. A specific internet browser can be recognized and identified via the unique cookie ID.
We exclusively use 1st party cookies.
Statistics cookies:
We use OneTrack's own 1st party cookie. This allows OneTrack to retain full control over the data collected, which is processed on the OneTrack server and owned by OneTrack.
We use the OneTrack cookie to collect non-personally identifiable aggregate statistics about your visit. You can see below what information we collect about your visit.
If you do not make a selection in the banner, no cookies will be used (either substantial or non-substantial), but the banner will be displayed again each time you visit our website.
By means of a cookie (if you allow it), the information and offers on our website can be optimized in terms of the user. Cookies allow us to recognize the users of our website. The purpose of this recognition is to make it easier for the user to use our website. For example, the user of the website that uses cookies does not have to enter access data each time the website is called up, as this data is taken from the website and the cookie is stored on the user's computer system.
You can prevent the setting of cookies by our website at any time by means of an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies. Furthermore, cookies that have already been set can be deleted at any time using an Internet browser or other software programs. This is possible in all common Internet browsers. If you deactivate the setting of cookies in the Internet browser used, not all functions of our website may be fully usable.
Cookies currently used on the OneTrack website:
Name
Provider
Technology
Category
Purpose
Storage
one-visitor-id-js
OneTrack
1st party cookie
Statistics
Collection of non-personally identifiable aggregate statistics as well as consent or refusal of statistics cookies
1 year
one-visitor-id
OneTrack
1st party cookie
Statistics
Collection of non-personally identifiable aggregate statistics as well as consent or refusal of statistics cookies
1 year
one-session-id
OneTrack
1st party cookie
Statistics
Collection of non-personally identifiable aggregate session statistics
1 year
5. How we use personal data
5.1 Statistical analyses
Purpose: Reach measurement and/or analysis of visitor numbers, success analysis of marketing campaigns, improvement of website usability, content optimization.
The following personal data is used: Browser cookie, device information, IP address, surfing behavior.
All personal data is processed in pseudonymized form on the OneTrack Twin server. (Proxy server) In doing so, OneTrack does not draw any conclusions about the individual visitors to the website.
Legal basis: legitimate interest in relation to our services, Art. 6 (1) lit. f GDPR;
Involved third party providers: Google Ireland Ltd, Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland
We use Google Analytics to create aggregated statistical reports without personal data about the reach of our website.
In addition, we use Google Ads to serve ads and we create aggregated statistical reports without personal data about the success rate of our advertising campaigns, i.e. the total number of users who responded to our ad. These aggregated statistics include the origin of visitors, their time spent on individual pages, and the use of search engines, and thus allows us to optimize our content.
Possibility of objection and removal:
The applicant has the possibility to object to the processing of personal data at any time.
Data subjects may communicate their request for modification or deletion of their data at any time via the email address specified in the privacy policy.
All personal data stored in the course of electronic applications will be deleted in this case.
5.2 Company-specific tracking
Purpose: Success analysis of marketing campaigns, improvement of website usability, content optimization.
The following data is used: Name, origin and industry of the visiting company, source/speaker of the visiting company, search term, visitor behavior (e.g. (sub)pages visited, time of visit, duration of visit).
Third-party providers involved: none
Usage of OneTrack:
We use the web analytics service OneTrack on our website or on parts of our website to record how our website is used by its visitors and to evaluate and optimize the effectiveness of our advertising/marketing measures. OneTrack is a web analytics service provided by the One More DMCC in Dubai, United Arab Emirates. One More DMCC acts for us as a processor on the basis of a commissioned processing agreement pursuant to Art. 28 DSGVO.
OneTrack enables an analysis of the use of the website and the customer journey, using first party cookies as well as browser and device information, such as the user's IP address, the configuration of the respective user agent (user agent string), the screen resolution, the installed fonts and plugins and the processor of the respective device.
Data processing when using OneTrack takes place entirely in Europe; there is no data transfer to unsafe third countries without an adequate level of data protection.
Legal basis: legitimate interest in relation to our services, Art. 6 para. 1 lit. f) GDPR.
We use OneTrack for the needs-based design of our website and the evaluation and optimization of our marketing measures. Should processing of personal data nevertheless occur, it will be based on our legitimate interests to optimize the website and marketing campaigns. Our overriding legitimate interest stems from the limited processing purpose, the pseudonymous data processing, the low intensity of intervention due to the restriction to company data, the provision of information on the website in accordance with Art. 13 GDPR and the easy possibility to object (opt-out).
Possibility of objection and removal:
You can freely give or refuse the respective consent. You can change your decision at any time by sending an email to the email address provided in the Privacy Policy. If you change your decision, this will not affect the lawfulness of the processing based on the consent prior to its revocation.
5.3 Webinars
Purpose: To conduct the webinar/send relevant information about services and events.
We organize regular free events in the form of webinars as part of our service. When you register for one of our webinars, you may provide us with additional personal information. In order to conduct the webinar, we will process the information you provide, such as your first and last name or organization. We will use your email to communicate relevant information about the webinar.
The following personal data will be used: First and last name, email address, organization.
Third Party Providers Involved: WebinarJam (Genesis Digital LLC, 4730 S. Fort Apache Road, Suite 300, Las Vegas, Nevada, United States).
We use the software solution WebinarJam to conduct the online seminars. Your data is processed on servers hosted by Genesis Digital in the EU and the USA and within the scope of the GDPR. We have also concluded appropriate data protection agreements with Genesis Digital (including in accordance with the EU standard data protection clauses), with which we oblige the provider to process the data of our visitors strictly in accordance with instructions, to protect them and not to pass them on to third parties. Genesis Digital takes further technical precautions to protect personal data. Personal data is not transferred to third parties within the meaning of Art. 4 No. 10 GDPR.
Legal basis: legitimate interest in relation to our services, Art. 6 (1) (f) GDPR / consent pursuant to Art. 6 (1) (a) GDPR.
Insofar as your data is necessary for the implementation of the webinar, we base the data processing on our legitimate interest.
If you give us your consent to do so, we may additionally use your data to send you relevant information about OneTrack services and events via email. Furthermore, you may consent to your data being shared with our marketing partners who may send you information about your services and events. You will see the consent options in the registration form.
Objection, revocation and removal options:
You can freely give or refuse the respective consent. You can change your decision at any time by sending an email to the email address provided in the Privacy Policy. If you change your decision, this will not affect the lawfulness of the processing based on the consent prior to its revocation.
5.4. Newsletter
Purpose: Communication of relevant information about the OneTrack services and events.
The collection of the user's email address serves to deliver the newsletter.The collection of other personal data as part of the registration process serves to prevent misuse of the services or the email address used.
Third-party providers involved: ActiveCampaign LLC, 1 North Dearborn St, 5th Floor, Chicago, Illinois, United States.
The following personal data is used: First and last name, email address, telephone number, organization.
Legal basis: consent in accordance with Art. 6 (1) a) GDPR.
Duration of storage:
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. Accordingly, your email address will be stored as long as the subscription to the newsletter is active.
The other personal data collected during the registration process is usually deleted after a period of seven days.
Possibility of objection and removal:
You can cancel your subscription to the newsletter at any time. For this purpose, you will find a corresponding link in each newsletter.
This also allows you to revoke your consent to the storage of personal data collected during the registration process.
5.5 Online store
Purpose: Execution of orders of the OneTrack SaaS.
The following personal data is used: Name, email address, emergency contact information, billing address and payment method, payment information and billing information.
Third-party providers involved: Stripe Inc, 354 Oyster Point Blvd, South San Francisco, California 94080, United States (hereinafter Stripe).
Legal basis: performance of pre-contractual measures carried out at the request of the data subject, Art. 6(1)(b) GDPR.
When you place an order in our online store, you initiate a contract for the use of the OneTrack SaaS with us. We use Stripe, a cloud-based billing platform, to take the actions necessary to conclude the contract and fulfill your order. Please note that Stripe is a U.S.-based company, so placing an order through our online store results in an international data transfer to the United States. We have entered into appropriate data protection agreements with Stripe (including in accordance with the EU standard data protection clauses), with which we oblige the provider to process our visitors' data strictly in accordance with instructions, to protect it and not to pass it on to third parties. Stripe takes further technical safeguards to protect personal data.
Detailed information about Stripe’s data processing operations and sub-processors can be found in the Stripe Privacy Policy.
5.6 Application
Purpose: Processing of your application
The following personal data will be used: First name, last name, e-mail address.
You can send us your application by e-mail. We collect your e-mail address and the data you provide in the e-mail.
Third-party providers involved: none
Legal basis: implementation of pre-contractual measures, which are carried out at the request of the data subject, Art. 6 para. 1 p.1 lit. b) Alt. 1 GDPR
Duration of storage:
After completion of the application process, the data will be stored for up to six months. At the latest after the expiration of the six months, your data will be deleted. In the event of a legal obligation, the data will be stored within the scope of the applicable provisions.
Possibility of objection and removal:
The applicant has the option to object to the processing of personal data at any time. In such a case, the application can no longer be considered.
Data subjects may communicate their request for modification or deletion of their data at any time via the email address indicated in the privacy policy.All personal data stored in the course of electronic applications will be deleted in this case.
5.7 Email contact/contact form
Purpose: Contacting and processing communication with website visitors.
A contact form is available on our website, which enables quick electronic contact with OneTrack as well as direct communication with us. If a user takes advantage of this option, the data entered in the input mask is transmitted to us and stored.
Third-party providers involved: Typeform (Typeform SL, Calle Bac De Roda, 163 Barcelona, B 08018 Spain) and Webflow (Webflow Inc., 398 11th Street, Floor 2, San Francisco, CA 94103)
The following personal data is used:
At the time the message is sent, the following data is stored: email address, last name, first name, telephone / mobile phone number, IP address of the calling computer, date and time of contact, message, company name.
Alternatively, it is possible to contact us via the email address provided. In this case, the personal data of the user transmitted with the email will be stored.The data is used exclusively for processing the conversation.
Legal basis for data processing:
For the processing of the data, your consent is obtained during the sending process and reference is made to this privacy policy.
The legal basis for the processing of the data, if the user has given his consent, is Art. 6 para. 1 p. 1 letter a) GDPR.The legal basis for the processing of data transmitted in the course of sending an email is Art. 6 para. 1 p. 1 lit. f) GDPR.
If the email contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 p. 1 letter b) GDPR.
Duration of storage:
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form and those sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it is clear from the circumstances that the matter in question has been conclusively clarified.
The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.
Possibility of objection, revocation and removal:
The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts us by email, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued.
Data subjects can communicate their revocation of consent and objection to storage at any time via the email address given in the privacy policy.
All personal data stored in the course of contacting us will be deleted in this case.
6. Use of third party providers
6.1 Facebook (Meta)
Facebook is an online social networking service that enables its users to connect with friends and family.
Company processing the data
Facebook Inc.
Paseo de la Castellana, 180, Madrid
Community of Madrid 28046
ES
Privacy Policy
Purpose of data processing
Measure ad performance (consent (GDPR 6.1.a))
Legal basis for data processing
Consent (GDPR 6.1.a)
6.2 Google Advertising Products
Google Ads is an online advertising platform developed by Google.
Company processing the data
Google Ireland Ltd
Gordon House, Barrow Street
Dublin 4
IE
Privacy Policy
Purpose of data processing
- Store and/or retrieve information on a device (consent (GDPR 6.1.a))
- Create a personalized ads profile (consent (GDPR 6.1.a))
- Select personalized ads (Consent (GDPR 6.1.a))
- Select simple ads (Legitimate Interests (GDPR 6.1.f))
- Create a personalized content profile (Legitimate Interests (GDPR 6.1.f))
- Select personalized content (Legitimate Interests (GDPR 6.1.f))
- Measure ad performance (Legitimate Interests (GDPR 6.1.f))
- Use market research to gain insights about target groups (Legitimate Interests (GDPR 6.1.f))
- Develop and improve products (Legitimate Interests (GDPR 6.1.f))
- Ensure security, prevent fraud and fix bugs (Legitimate Interests (GDPR 6.1.f))
- Provide ads or content technically (Legitimate Interests (GDPR 6.1.f))
Feature
- Merge with offline data sources
- Link different devices
Feature
- Consent (DSGVO 6.1.a)
- Legitimate interests (DSGVO 6.1.f)
Data transfer outside the EU
This provider may transfer, store or process your personal data outside the EEA/EU. These countries may not have the same level of data protection and the enforcement of your rights may be limited or not possible.
Cookies set in your browser
Expiration time: 395 days, 17 hours, 14 minutes (uses other access methods besides cookies).
6.3 Snapchat
Snapchat is an online social networking service that enables its users to connect with friends and family.
Company processing the data
Snap Inc.
2772 Donald Douglas Loop N, Santa Monica
CA 90405
USA
Privacy Policy
Purpose of data processing
Measure ad performance (consent (GDPR 6.1.a))
Legal basis for data processing
Consent (GDPR 6.1.a)
Data transfer outside the EU
This provider may transfer, store or process your personal data outside the EEA/EU. These countries may not have the same level of data protection and the enforcement of your rights may be limited or not possible.
6.4 Taboola Europe Ltd.
Taboola is an advertising platform that helps people explore interesting and new things in the next moment.
Company processing the data
Taboola Europe Limited
33 Aldgate High Street
Aldgate House, 2nd Floor
London EC3N 1DL
GB
Privacy Policy
Purpose of data processing
- Storing and/or retrieving information on a device (consent (GDPR 6.1.a))
- Select simple ads (consent (GDPR 6.1.a))
- Create a personalized ads profile (consent (GDPR 6.1.a))
- Select personalized ads (consent (GDPR 6.1.a))
- Create a personalized content profile (consent (GDPR 6.1.a))
- Select personalized content (consent (GDPR 6.1.a))
- Measure ad performance (consent (GDPR 6.1.a))
- Measure content performance (consent (GDPR 6.1.a))
- Develop and improve products (Consent (GDPR 6.1.a))
- Ensure security, prevent fraud and fix bugs (Legitimate Interests (GDPR 6.1.f))
- Provide ads or content technically (Legitimate Interests (GDPR 6.1.f))
Feature
- Merge with offline data sources
- Link different devices
- Receive and use automatically sent device properties for identification
Legal basis for data processing
- Consent (DSGVO 6.1.a)
- Legitimate interests (DSGVO 6.1.f)
Data transfer outside the EU
This provider may transfer, store or process your personal data outside the EEA/EU. These countries may not have the same level of data protection and the enforcement of your rights may be limited or not possible.
Cookies set in your browser
Expiration time: 365 days, 5 hours, 49 minutes (uses other access methods besides cookies).
6.5 TikTok
TikTok is an online social networking service that enables its users to connect with friends and family.
Company processing the data
TikTok Inc.
5800 Bristol Pkwy
Culver City
CA 90230
USA
Privacy Policy
Purpose of data processing
Provide ads or content technically (consent (DSGVO 6.1.a)).
Legal basis for data processing
Consent (DSGVO 6.1.a)
Data transfer outside the EU
This provider may transfer, store or process your personal data outside the EEA/EU. These countries may not have the same level of data protection and the enforcement of your rights may be limited or not possible.
6.6 YouTube
YouTube is a video sharing platform that allows users to upload, watch and share videos, including movie clips, music clips and amateur content.
Company processing the data
Google Ireland Ltd
Gordon House, Barrow Street
Dublin 4
IE
Privacy Policy
Purpose of data processing
Provide ads or content technically (consent (DSGVO 6.1.a)).
Legal basis for data processing
Consent (DSGVO 6.1.a)
Data transfer outside the EU
This provider may transfer, store or process your personal data outside the EEA/EU. These countries may not have the same level of data protection and the enforcement of your rights may be limited or not possible.
Cookies that are set in your browser
Cookie name
Example value
Expiration time
Type
Domain
LAST_RESULT_ENTRY_KEY
Session
[unknown]
www.youtube-nocookie.com
__sak
1
Persistent
Function
www.youtube-nocookie.com
nextId
Session
[unknown]
www.youtube-nocookie.com
requests
Session
[unknown]
www.youtube-nocookie.com
yt-player-bandwidth
{"data":"{\"delay\":0.17710009...
Persistent
Function
www.youtube-nocookie.com
yt-player-headers-readable
{"data":"true",
"expiration":16...
"expiration":16...
Persistent
Function
www.youtube-nocookie.com
yt-remote-connected-devices
{"data":"[]","expiration":1658...
Persistent
Function
www.youtube-nocookie.com
yt-remote-device-id
{"data":"54686084-7425-4b62-98...
Persistent
Function
www.youtube-nocookie.com
yt.innertube::nextId
{"data":2,"expiration":1658515...
Persistent
[unknown]
www.youtube-nocookie.com
yt.innertube::requests
{"data":{},"expiration":165851...
Persistent
[unknown]
www.youtube-nocookie.com
ytidb::LAST_RESULT_ENTRY_KEY
{"data":{"hasSucceededOnce":tr...
Persistent
[unknown]
www.youtube-nocookie.com
7. Data transfer to third countries
We are entitled to transfer your personal data outside the EU/EEA, including to third party companies (contracted service providers), to the extent that this is appropriate for the data processing described in this Privacy Policy. The recipients are obliged to protect your data to the same extent as we do. If the level of data protection in a particular country is lower than in the EU, we ensure by concluding EU standard contractual clauses for the transfer of personal data to third countries that the level of protection for your personal data in the third country is equivalent to that in the EU due to technical and organizational measures.
8. Length of storage of personal data
Your personal data will be stored for as long as necessary to achieve the defined processing purposes. After expiry of this period, the corresponding data will be routinely deleted, provided that they are no longer required for contract initiation or contract fulfillment. If the purpose of storage no longer applies, or if a storage period prescribed by the European Directive and Regulation or another competent legislator expires, the personal data will be deleted routinely and in accordance with the statutory provisions.
9. Data exchange with third parties
We use a select number of trusted third party service providers for certain technical data analysis, processing and/or storage offerings (e.g., IT and related services). We may also enlist the help of third parties to improve our website and certain tools for our marketing. These third-party service providers are carefully selected and meet high privacy and security standards. We contractually require them to keep all information we share with them confidential and to process personal data only in accordance with our instructions. The legal basis for such processing would be legitimate interest under Art.6(1)(f) GDPR.
In addition to service providers, other categories of third party service providers may include:
Suppliers/Public Entities. To the extent necessary to use certain services that require specialized expertise (e.g. legal, accounting or auditing services), we may disclose personal data to suppliers of such services or to public bodies providing such services (e.g. courts). The legal basis for this data processing is Art.6(1)(f) GDPR.
Disclosure in case of organizational changes. We may disclose Personal Data to facilitate a change in ownership of OneTrack (including, but not limited to, an acquisition by or merger with another company, a financing due diligence, reorganization, bankruptcy, receivership, purchase or sale of assets, or transition of services to another provider) and the related transfer of all such information to the new owner, in which case all information will remain protected in accordance with this Privacy Notice. The legal basis for this data processing is Art.6(1)(f) GDPR.
Except in the cases mentioned above, we will only disclose your personal data to third parties if we consider this necessary for the initiation/fulfillment of the contract with you, if we have received explicit consent in accordance with Art.6(1)(a) GDPR, or if we are required to do so by law or by order of a public authority or court.
10. Use of corporate presences in social networks
10.1. LinkedIn
Scope of data processing
We use the possibility of company appearances on the professionally oriented network. LinkedIn (LinkedIn, Unlimited Company Wilton Place, Dublin 2, Ireland).On our site we provide information and offer users the possibility of communication. The company website is used for job applications, information/PR and active sourcing. We do not have any information on the processing of your personal data by the companies jointly responsible for the corporate presence. For more information, please refer to the privacy policy of:
LinkedIn: https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv
If you carry out an action on our company website (e.g. comments, posts, likes, etc.), it may be that you make personal data (e.g. clear name or photo of your user profile) public.
Legal basis for data processing
The legal basis for the processing of your data in connection with the use of our corporate presence is Art.6 para.1 p.1 letter f) GDPR.
Purpose of data processing
Our corporate presence serves us to inform users about our services and to obtain statistical data about the reach of our content. In doing so, each user is free to publish personal data through activities.
Joint responsibility
We are jointly responsible for data processing with LinkedIn and conclude a corresponding joint responsibility agreement (GVV), which defines and distributes the respective rights and obligations of the joint controllers, especially in the case of data subject requests.
Duration of storage
We store your activities and personal data published via our corporate website until you object to data processing. In addition, we comply with the statutory retention periods.
Possibility of objection and elimination
You can object at any time to the processing of your personal data that we collect in the course of your use of our corporate presence and assert your data subject rights as stated under IV. of this data protection declaration. To do so, send us an informal email to the email address stated in this data protection declaration.
You can find more information on objection and removal options here:
LinkedIn: https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv
10.2. Youtube
Scope of data processing
We use the possibility of company appearances on the video platform YouTube (YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, United States).
On our company page we provide information and offer YouTube - users the possibility of communication. If you perform an action on our YouTube corporate site (e.g. comments, posts, likes, etc.), you may make personal data (e.g. clear name or photo of your user profile) public. However, since we generally or to a large extent have no influence on the processing of your personal data by YouTube, the company co-responsible for the OneTrack GmbH corporate presence, we cannot provide any binding information on the purpose and scope of the processing of your data.
Purpose
Our corporate presence in social networks is used for communication and information exchange with (potential) customers. In particular, we use the company presence for communication and information exchange with (potential) customers*.
Publications on the company website may contain the following content: Information about services, advertising, customer contact, information about our events; Current industry-specific news.
Each user is free to publish personal data through activities.
Joint responsibility
We are jointly responsible for data processing with YouTube and conclude a corresponding joint responsibility agreement (GVV), which defines and distributes the respective rights and obligations of the joint responsible parties, in particular in the case of data subject inquiries.
Legal basis for data processing
The legal basis for data processing is Art. 6 para.1 p.1 lit. f GDPR.The data generated by the company website is not stored in our own systems.
Possibility of objection and removal
You can object at any time to the processing of your personal data that we collect in the course of your use of our YouTube corporate presence and assert your data subject rights mentioned under IV. of this data protection declaration. To do so, send us an informal email to privacy@OneTrack.com. You can find more information about the processing of your personal data by YouTube and the corresponding objection options here:
YouTube: https://policies.google.com/privacy?gl=DE&hl=de
11. Hosting
Scope of data processing
The website is hosted on servers of a service provider contracted by us.
Our service provider is: Webflow Inc., 398 11th Street, 2nd Floor, San Francisco, California 94103, United States.
The servers automatically collect and store information in so-called server log files, which your browser automatically transmits when you visit the website.
The information stored is: Browser type and browser version, Operating system used, Referrer URL, Host name of the accessing computer, Date and time of the server request, IP address.
This data is not merged with other data sources.
Legal basis for data processing
The collection of this data is based on our legitimate interests pursuant to Art. 6 (1) (f) GDPR in the technically error-free presentation and optimization of the website - for this purpose, the server log files must be collected.
The location of the website's server is geographically in the European Union (EU) or the European Economic Area (EEA).
12. Plug-ins
Our website contains social media features, such as share buttons from Facebook, Twitter and LinkedIn.
12.1 Use of LinkedIn
Scope of the processing of personal data
We use functions of the network LinkedIn. The provider is LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland (hereinafter referred to as LinkedIn). Each time one of our pages containing LinkedIn functions is accessed, a connection to LinkedIn servers is established. LinkedIn is informed that you have visited our web pages with your IP address. If you click the "Recommend button" of LinkedIn and are logged into your account at LinkedIn, it is possible for LinkedIn to assign your visit to our website to you and your user account. Personal data can thus be stored and evaluated, especially the user's activity (in particular, which pages have been visited and which elements have been clicked on) and device and browser information (in particular, the IP address and operating system).
We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by LinkedIn. Further information on the processing of data by LinkedIn can be found here:
https://www.linkedin.com/legal/privacy-policy
Purpose of data processing
The use of the LinkedIn plugin serves the user-friendliness of our online presence.
Legal basis for the processing of personal data
The legal basis for the processing of users' personal data is basically the user's consent pursuant to Art. 6 para. 1 p.1 lit. a GDPR.
Duration of storage
Your personal information will be stored for as long as necessary to fulfill the purposes described in this Privacy Policy or as required by law, e.g. for tax and accounting purposes.
Possibility of revocation and removal
You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
You can prevent the collection as well as the processing of your personal data by LinkedIn by preventing the storage of third-party cookies on your computer, using the "Do Not Track" function of a supporting browser, disabling the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser. Furthermore, the transmission can be prevented by logging out of your LinkedIn account before calling up our website.
You can deactivate the use of your personal data by LinkedIn using the following links:
https://www.linkedin.com/psettings/guest-controls
For more information on objection and removal options vis-à-vis LinkedIn, please visit:
https://www.linkedin.com/legal/privacy-policy
12.2 Use of Twitter
Scope of the processing of personal data
We may use the social plugins of Twitter, Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA (hereinafter referred to as: Twitter).
With the social plugins, we can integrate content from Twitter (in particular tweets or moments) or links to the Twitter platform (in particular tweet or follow button) on our online presence. Personal data can be stored and evaluated, especially the activity of the user (in particular which pages have been visited and on which elements have been clicked) as well as device and browser information (in particular the IP address and the operating system).
By using Twitter and the "Re-Tweet" function, the online presences you visit are connected to your Twitter account and disclosed to third parties. We receive no information about the content of the transmitted data and its use by Twitter.
Further information on the processing of data by Twitter can be found here:
https://twitter.com/de/privacy
Purpose of data processing
The integration of the Twitter plug-in serves to improve user-friendliness. Content from Twitter can be displayed embedded and users of the Twitter service can use Twitter functions.
Legal basis for the processing of personal data
The legal basis for the processing of users' personal data is generally the user's consent pursuant to Art. 6 (1) p.1 lit. a GDPR.
Duration of storage
Your personal information will be stored for as long as necessary to fulfill the purposes described in this Privacy Policy or as required by law.
Possibility of revocation and removal
You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
You can prevent the collection as well as the processing of your personal data by Twitter by preventing the storage of third-party cookies on your computer, using the "Do Not Track" function of a supporting browser, disabling the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.
For more information on opt-out and removal options with respect to Twitter, please visit:
https://twitter.com/de/privacy
Should you use these features, they may collect your IP address, which page you are visiting on our website and they may set a cookie in order for the feature to work properly. You may exercise your rights with respect to the use of this data as further indicated in the "Data Subject Rights" section below. Your interactions with these features are subject to the rules of the privacy policy of the third party company that provides them.
12.3. Use of Facebook
Scope of the processing of personal data
We use functions of the social network Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA and its representative in the Union Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal H , D2 Dublin, Ireland (hereinafter: Facebook). We use this plugin to enhance the functionality of our online presence. With the social plugins, we can integrate content from Facebook or links to the platform of Facebook (in particular the "share" button) on our online presence. Personal data can be stored and evaluated, especially the activity of the user (in particular which pages have been visited and on which elements have been clicked) as well as device and browser information (in particular the IP address and the operating system).
By using Facebook and the "Share" function, the online presences you visit are connected to your Facebook account and disclosed to third parties. We receive no information about the content of the transmitted data and its use by Facebook.
Personal data may be stored and evaluated as a result, especially the user's activity (in particular, which pages have been visited and which elements have been clicked on) as well as device and browser information (in particular, the IP address and the operating system). We have no information about the exact scope of the collection of personal data.Further information on the processing of data by Facebook can be found here:
https://de-de.facebook.com/policy.php
Purpose of data processing
The use of the Facebook plug-in serves to improve the user-friendliness of our online presence. We use this plug-in to enable our users to easily share the content of our website on social media.
Legal basis for the processing of personal data
The legal basis for the processing of users' personal data is basically the user's consent in accordance with Art. 6 para. 1 p.1 lit. a GDPR.
Duration of storage
Your personal information will be stored for as long as necessary to fulfill the purposes described in this Privacy Policy or as required by law, e.g. for tax and accounting purposes.
Right of revocation and removal
You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
You can prevent the collection as well as the processing of your personal data by Facebook by preventing third-party cookies from being stored on your computer, by using the "Do Not Track" function of a supporting browser, by disabling the execution of script code in your browser or by installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.
For more information on objection and removal options vis-à-vis Facebook, please visit:
https://de-de.facebook.com/policy.php
13. Data security
We make every effort to establish internal procedures to ensure that your personal data is both accurate and protected from accidental loss, unauthorized access, unauthorized use, unauthorized modification and unauthorized disclosure. OneTrack has implemented technical and organizational measures to ensure the most complete protection of personal data processed through its website. Nevertheless, Internet-based data transmissions can generally have security vulnerabilities, so that absolute protection cannot be guaranteed. For this reason, every data subject is free to transmit personal data to us by alternative means, e.g. by telephone.
14. Rights of the data subject
Subject to mandatory legal provisions or conflicting obligations, you may request from us at any time and free of charge information about your personal data processed by us, the correction of any errors in your personal data, the termination of the processing of your personal data or the deletion of your personal data.
In particular, if you are considered a "data subject" within the meaning of the GDPR, you have the right:
- to request information about the personal data we process about you, in accordance with Art. 15
- in accordance with Art. 16, to request without undue delay the rectification of inaccurate data or the completion of incomplete personal data held by us
- in accordance with Art. 17, to request the erasure of your personal data stored by us, unless the processing of the data is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defense of legal claims
- in accordance with Art. 20, to receive your personal data processed by us in a structured, commonly used and machine-readable format or to request its transfer to another controller
- in accordance with Art. 7(3), to withdraw the consent you have given us at any time. As a result, we will no longer be able to continue the data processing based on this consent
- in accordance with Art. 77, the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or the legal address of OneTrack for this purpose
- if the processing of your personal data is processed on the basis of legitimate interests pursuant to Art. 6(1)(f), object to the processing of your personal data pursuant to Art. 21, provided that there are grounds based on your particular situation or the objection is directed against direct marketing. In the latter case, you have a general right to object, which will be implemented by us without any indication of a specific situation
- in accordance with Art. 18, to request the restriction of the processing of your personal data, insofar as the accuracy of the data is contested by you or the processing is unlawful
If you wish to exercise these rights, please contact us as indicated below under Contact. Please provide any information that will help us identify you in our database, such as your full name and email address.
15. Changes to the privacy policy
We may need to make changes to this privacy statement. Privacy legislation is constantly evolving, and government agencies issue guidelines and updates on an ongoing basis. We may need to change our Privacy Policy to ensure that we implement such recommendations, or if we change the way we sell our products or provide our services. We will notify you of any non-trivial changes to this Privacy Policy by email if that option is available to us.
16. Contact
To exercise your rights under the GDPR, you may contact us at any time by letter or email at:
support@one-track.io
