The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally.
The data controller responsible for data processing on this website is:
OpenTAS GmbH
Poßmoorweg 2
22301 Hamburg
Germany
E-Mail: contact@opentas.com
Contact details of our Data Protection Officer:
Christian Hammerbacher
SPH IT + Consulting GmbH & Co. KG
Tel.: 0911 / 217 748 0
E-Mail: datenschutz@sph-consulting.de
You can also contact him by post at our address, marking the envelope ‘Data Protection Officer’.
(1) When you access our website, the browser on your device automatically transmits the following information to our website’s server:
(2) This data is processed for the technical provision of our website and to ensure its functionality and security.
(3) The legal basis for this is Article 6 paragraph 1 letter f) of the GDPR. As the website operator, we have a legitimate interest in the secure, stable and functional provision of our website.
(4) Your data is generally stored for a maximum of 7 days and then deleted. It may be stored for longer in individual cases if there are concrete indications of unlawful use or an attack and further storage is necessary for the purposes of investigation or legal proceedings.
(1) We use cookies and similar technologies on our website insofar as these are necessary for the provision and secure operation of the website. Cookies are small data files that can be stored on or read from your device. Depending on their configuration, cookies may be deleted when you close your browser or remain stored on your device for a specific period. Similar technologies may, for example, use your browser’s local storage or session storage, or access information already stored on your device. You can view the specific technologies used, their providers, purposes, and their duration of use and storage at any time in the Cookie Settings. There you will also find information on the recipients of the data and on any transfers to countries outside the European Union and the European Economic Area.
(2) Insofar as information is stored on your device or information already stored is read, this is done on the basis of Section 25 paragraph 2 No. 2 of the TDDDG. The processes in question are strictly necessary, enable us to provide you with the website you are visiting or the function you are using. If personal data is processed whilst using these technologies, the processing of this data is carried out on the basis of Article 6 paragraph 1 letter f) of the GDPR.
We use external hosting providers to host our website; in this capacity, they have access to the data referred to in this section. This website is currently hosted by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland (hereinafter „Microsoft“).
(1) If you send us enquiries by email or via the contact form, the details you provide in the email or enquiry form, including the contact details you have provided there, will be stored by us for the purpose of processing your enquiry and in the event of any follow-up questions.
(2) The processing of this data is based on Article 6 paragraph 1 letter b) of the GDPR, provided that your enquiry relates to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Article 6 paragraph 1 letter f) of the GDPR).
(3) The data you provide via email or the contact form will remain with us until the purpose for which it was stored no longer applies (e.g. following the performance of a contract or once your enquiry has been fully processed) or until you request its deletion beforehand. Mandatory legal provisions, in particular retention obligations, remain unaffected by this.
(4) We use the HubSpot CRM system to manage and process contact enquiries. In this context, the personal data provided when you contact us is stored and processed in HubSpot. Personal data may also be transferred to the parent company, HubSpot, Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141, USA. The hosting providers we use (see section 2.3) and our email provider also have access to your data.
(1) We use the HubSpot tracking code on this website. It is only loaded once you have given your consent to the ‘Marketing’ category via our cookie banner. The tracking code sets cookies (e.g. ‘__hstc’, ‘hubspotutk’, ‘__hssc’), records page views, clicks and form submissions on our website, and assigns these to your contact record in our CRM when you contact us at a later date.
(2) The legal basis for the use of the HubSpot tracking code is your consent pursuant to Article 6 paragraph 1 letter a) of the GDPR and Section 25 paragraph 1 of the TDDDG. You may withdraw your consent at any time via the ‘Cookie Settings’ link in the footer of the website.
(3) When the HubSpot tracking code is used, it cannot be ruled out that your data may also be transferred to the parent company, HubSpot, Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141, USA. The company is certified under the ‘EU-US Data Privacy Framework’ (DPF). The DPF is an agreement between the European Union and the USA designed to ensure compliance with European data protection standards when data is processed in the USA. Every company certified under the DPF is obliged to comply with these data protection standards. You can find further information here by entering ‘HubSpot’ in the search bar.
(4) For further details on data processing by HubSpot, please refer to the HubSpot Privacy Policy.
(1) Provided you have given your consent via the cookie banner, we use Google Tag Manager on our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: ‘Google’). Google Tag Manager is a tool that enables us to integrate tracking or analytics tools and other technologies into our website. Google Tag Manager itself does not create user profiles, store cookies or carry out independent analyses. It serves solely to manage and deploy the tools integrated via it. However, Google Tag Manager does record your IP address. For further details, please refer to Google’s Privacy Policy.
(2) When using GTM, it is possible that Google may also transfer your data to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. This transfer takes place on the basis of an adequacy decision pursuant to Article 45 of the GDPR. It applies to US companies that hold certification under the ‘EU-US Data Privacy Framework’ (DPF). The DPF is an agreement between the European Union and the USA designed to ensure compliance with European data protection standards when data is processed in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. You can find further information here by enter “Google LLC” in the search bar.
(3) The legal basis for the use of GTM is your consent pursuant to Article 6 paragraph 1 letter a) of the GDPR and Section 25 paragraph 1 of the TDDDG.
(1) This website uses the web analytics service Google Analytics 4. The service provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter ‘Google’). Google Analytics enables us to statistically analyse the use of our website. To this end, information is processed in particular regarding page views, time spent on the site, the origin of website visitors, the use of individual website functions, as well as technical information about the devices and browsers used. The purpose of this processing is to better understand user behaviour on our website and to improve our online offering accordingly.
(2) Google Analytics uses cookies that are stored on your device and enable an analysis of your use of our website. In particular, pseudonymous user identifiers are processed, which can be used to associate individual visits and usage activities. The cookies used generally have a storage period of up to two years. According to Google, the IP addresses collected by Google Analytics are not permanently logged or stored.
(3) The processing of your personal data, as well as the storage of information on your device and access to this information, takes place exclusively on the basis of your consent in accordance with Article 6 paragraph 1 letter a) of the GDPR and Section 25 paragraph 1 of the TDDDG. You may withdraw your consent at any time with future effect via the privacy settings on our website. The lawfulness of the processing carried out up to the point of withdrawal remains unaffected.
(4) The personal user and event data collected via Google Analytics is stored for a period of 2 months (event data) or 14 months (user data) and is subsequently deleted automatically. This does not affect aggregated statistical analyses.
(5) When using Google Analytics, personal data may also be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework. Accordingly, an adequacy decision by the European Commission pursuant to Article 45 of the GDPR applies to such data transfers. Every company certified under the DPF undertakes to comply with these data protection standards. Further information is available here if you enter ‘Google LLC’ in the search bar.
(6) Further information on how user data is handled by Google Analytics can be found in Google’s Privacy Policy and here.
(1) Provided you have given your consent, we use ‘Google Ads’, an online advertising programme operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (‘Google’). Google Ads enables us to display advertisements in the Google search engine or on third-party websites when a user enters specific search terms into Google (keyword targeting). Furthermore, targeted adverts can be displayed based on user data held by Google (e.g. location data and interests) (audience targeting). As the website operator, we can evaluate this data quantitatively by, for example, analysing which search terms led to our adverts being displayed and how many adverts resulted in corresponding clicks.
(2) We also use the Google Ads Remarketing feature. This enables us to assign people who interact with our online offering to specific target groups, so that we can subsequently display interest-based advertising to them on the Google Display Network (remarketing or retargeting). Furthermore, the advertising target groups created using Google Ads Remarketing can be linked to Google’s cross-device functions. In this way, interest-based, personalised advertising messages, which have been tailored to you based on your previous usage and browsing behaviour on one device (e.g. a mobile phone), can also be displayed on another of your devices (e.g. a tablet or PC).
(3) If you have a Google Account, you can opt out of personalised advertising here.
(4) We also use Google Conversion Tracking. This enables Google and us to recognise whether a user has carried out certain actions. For example, we can analyse which buttons on our website are clicked and how often, and which pages have been viewed or accessed particularly frequently. This information is used to compile conversion statistics. We are informed of the total number of users who have clicked on our adverts and what actions they have carried out. We do not receive any information that would allow us to personally identify the user. Google itself uses cookies or similar recognition technologies for identification purposes.
(5) When using Google Ads, it is possible that Google may also transfer your data to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. We have no control over this. This transfer takes place on the basis of an adequacy decision pursuant to Article 45 of the GDPR. It applies to US companies that hold certification under the ‘EU-US Data Privacy Framework’ (DPF). The DPF is an agreement between the European Union and the USA designed to ensure compliance with European data protection standards when data is processed in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information is available here if you enter ‘Google LLC’ in the search bar.
(6) The use of Google Ads is based on your consent in accordance with Article 6 paragraph 1 letter a) of the GDPR and Section 25 paragraph 1 of the TDDDG. Further information can be found in Google’s Privacy Policy.
(1) If you have given your consent, we use the conversion tracking technology and the retargeting function provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (hereinafter “LinkedIn”) on our website.
(2) These enable us to display personalised advertisements to visitors to our website on LinkedIn. To this end, a cookie (the LinkedIn Insight Tag) is set in your browser, valid for 120 days, and data is transmitted to LinkedIn. This enables LinkedIn to recognise you if you visit our website whilst logged into your LinkedIn account. LinkedIn uses this data to generate anonymous reports on the performance of our adverts and to provide information on website interaction.
(3) This data processing is carried out on the basis of your consent in accordance with Article 6 paragraph 1 letter a) of the GDPR and Section 25 paragraph 1 of the TDDDG. You may object to the collection and use of your data at any time or withdraw your consent, for example by adjusting your cookie settings on our website accordingly. LinkedIn members also have the option to opt out of LinkedIn conversion tracking and to block and delete cookies here or to deactivate demographic targeting. There is no separate opt-out option in LinkedIn’s settings for third-party impressions or click tracking for campaigns running on LinkedIn, as all underlying campaigns respect LinkedIn members’ settings. You can also deactivate the LinkedIn Insight Conversion Tool and interest-based advertising as a non-member by opting out here.
(4) It cannot be ruled out that LinkedIn may also transfer your data to LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. This transfer takes place on the basis of an adequacy decision pursuant to Article 45 of the GDPR. It applies to US companies that are certified under the ‘EU-US Data Privacy Framework’ (DPF). The DPF is an agreement between the European Union and the USA designed to ensure compliance with European data protection standards when data is processed in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on the DPF is available here if you enter ‘LinkedIn Corporation’ in the search bar. Information on data processing by LinkedIn can be found in LinkedIn’s Privacy Policy.
(1) We embed videos from the YouTube platform on our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: ‘Google’).
(2) We use YouTube in enhanced data protection mode (youtube-nocookie.com). The videos are only loaded once you actively click ‘Play’ in the notification window. No connection to YouTube is established before this. Once the video starts playing, YouTube receives your IP address and information about which page of our website you have visited. In addition, YouTube may store cookies or similar technologies on your device. If you are logged into your YouTube account, YouTube may associate your browsing behaviour with your personal profile. You can prevent this by logging out of your YouTube account beforehand.
(3) The legal basis is your consent pursuant to Article 6 paragraph 1 letter a) of the GDPR and Section 25 paragraph 1 of the TDDDG, which you give by clicking ‘Play’. This consent applies for the duration of your visit and may be withdrawn at any time with future effect.
(4) It cannot be ruled out that Google may also transfer your data to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. This transfer takes place on the basis of an adequacy decision pursuant to Article 45 of the GDPR. It applies to US companies that hold certification under the ‘EU-US Data Privacy Framework’ (DPF). The DPF is an agreement between the European Union and the USA designed to ensure compliance with European data protection standards when data is processed in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information is available here if you enter ‘Google LLC’ in the search bar.
(5) Further information on how Google handles user data can be found in Google’s Privacy Policy.
(1) If you have given your consent, we use the Google reCAPTCHA service on our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: ‘Google’). We use reCAPTCHA to verify whether entries on our website, for example in contact forms, are made by a natural person or, fraudulently, by automated programmes. Its use therefore serves to protect our website, our IT systems and the functions provided via our website from spam, automated access, misuse and other attacks. In particular, the following data may be processed for this purpose:
(2) We store the data we process in connection with reCAPTCHA only for as long as is necessary for the security purposes set out above. The storage period is normally 30 days and may be extended in individual cases if this is necessary to investigate incidents of misuse or security breaches.
(3) The data processed is generally transferred to a server operated by Google LLC in the USA and stored there. We have no influence over this. The transfer of your data to Google LLC takes place on the basis of an adequacy decision pursuant to Article 45 of the GDPR. This applies to US companies that hold certification under the ‘EU-US Data Privacy Framework’ (DPF). The DPF is an agreement between the European Union and the USA designed to ensure compliance with European data protection standards when data is processed in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information is available here if you enter ‘Google LLC’ in the search bar.
(4) The use of Google reCAPTCHA is based on your consent in accordance with Article 6 paragraph 1 letter a) of the GDPR. Further information can be found in Google’s Privacy Policy.
(1) We use Storylane for interactive product demos. The provider is Storylane Inc., 2261 Market Street #4813, San Francisco, CA 94114, USA (hereinafter: ‘Storylane’).
(2) When using the embedded product demonstrations, personal data may be transmitted to Storylane and processed there. This includes, in particular, your IP address, information about your browser and device, the date and time of access, and information about your interactions with the product demonstrations (e.g. content viewed, clicks and usage behaviour). The processing serves to provide the product demonstrations and to analyse and optimise our offering. Storylane may use cookies and similar technologies, in particular your browser’s session storage, to store and analyse information about the use of the product demonstrations.
(3) Storylane is only loaded once you have given your consent via our cookie banner. The legal basis is your consent pursuant to Article 6 paragraph 1 letter a) of the GDPR and Section 25 paragraph 1 of the TDDDG. You may withdraw your consent at any time. The lawfulness of the processing carried out up to the point of withdrawal remains unaffected.
(4) In connection with the use of Storylane, personal data is also transferred to the USA and processed there. To ensure an adequate level of data protection, the data transfer takes place on the basis of the European Commission’s Standard Contractual Clauses in accordance with Article 46(2)(c) of the GDPR.
(5) Further information can be found in Storylane’s Privacy Policy.
(1) On our website, we use the jsDelivr service, a Content Delivery Network (CDN) provided by Volentio JSD Limited, Suite 2a1, Northside House, Mount Pleasant, Barnet, England, EN4 9EB, United Kingdom (hereinafter: ‘jsDelivr’).
(2) jsDelivr enables the fast and reliable delivery of files, in particular JavaScript libraries and CSS files, via a network of distributed servers. When you visit our website, your browser establishes a connection to the service’s servers in order to retrieve the required files. In doing so, your IP address, information about your browser, the files requested, and the date and time of access may, in particular, be transmitted and processed.
(3) Processing is carried out on the basis of Article 6 paragraph 1 letter f) of the GDPR. Our legitimate interest lies in the technically sound, secure and efficient provision and optimisation of our website.
(4) When using jsDelivr, personal data may be transferred to the United Kingdom. An adequacy decision has been issued by the European Commission for the United Kingdom pursuant to Article 45 of the GDPR, confirming an adequate level of data protection.
(5) In providing the service, jsDelivr engages further service providers, in particular providers of content delivery networks. In this context, personal data may also be transferred to other countries outside the European Union or the European Economic Area. Where no adequacy decision by the European Commission exists for these countries, the transfer takes place on the basis of appropriate safeguards in accordance with Article 46 of the GDPR, in particular standard contractual clauses.
(6) According to the provider, personal data is generally stored only for as long as is necessary for the respective processing purposes. Non-aggregated usage data is stored temporarily, in particular for analysis and security purposes. The provider states that it does not use cookies or similar tracking technologies.
(7) Further information on data processing by jsDelivr can be found in the provider’s Privacy Policy.
(1) If you apply for a job with us by post, email or via the contact form, we will process the following data in order to assess your suitability for potential employment with our company:
The legal basis for the processing of your data is the decision regarding the establishment of an employment relationship in accordance with Article 6 paragraph 1 letter b) of the GDPR.
(2) The data provided in this context will be automatically deleted within six months of the conclusion of the specific application process. This does not apply where statutory provisions preclude deletion, where further storage is necessary for the purposes of providing evidence, or where you have expressly consented to longer-term storage (see paragraph 3).
(3) If you have consented to the storage of your application documents beyond the period specified in paragraph 2, your data will be stored for a maximum of a further 2 years on the basis of your consent pursuant to Article 6 paragraph 1 letter a) of the GDPR. This consent is voluntary and may be withdrawn at any time with future effect. To do so, simply send an email to the email address specified in point 1. Should you withdraw your consent to the processing of your personal data, we will delete the application information we have received from you from our applicant database. Withdrawal does not affect the lawfulness of the data processing carried out up to that point. Your data will be deleted after these two years have elapsed. This does not apply if statutory provisions preclude deletion, if further storage is necessary for the purposes of providing evidence, or if you have expressly consented to longer-term storage once again. In the event of renewed consent, this paragraph shall apply mutatis mutandis to the continued storage.
(4) We use the Personio software to manage applications. The provider is Personio SE & Co. KG, Seidlstraße 3, 80335 Munich, Germany. Via the ‘Open Positions’ link and the individual job advertisements on our careers page, you will be directed to our careers portal on Personio (opentas.jobs.personio.com). The data you enter there as part of your application is stored in Personio and processed by us for the purpose of conducting the application process. Further information can be found in the Privacy Policy of our Personio careers portal.
(1) If you have subscribed to our newsletter via the relevant form, we will use your email address to send you our newsletter on a regular basis. The legal basis for this is your consent to receive the newsletter in accordance with Article 6 paragraph 1 letter a) of the GDPR, which you give by clicking the ‘Subscribe to newsletter’ button. After clicking the button, you will receive a confirmation email from us, containing a confirmation link. Once you click the confirmation link, your registration is complete and we will use your email address as the recipient address for newsletter emails for the duration of your subscription.
(2) You may withdraw your consent and unsubscribe from the newsletter at any time, for example via a link at the end of each newsletter. Alternatively, you are welcome to send us your request to unsubscribe at any time by email to the email address specified in paragraph 1. Once you have unsubscribed, we will delete your data, provided that no statutory retention obligations prevent us from doing so.
(3) Once you have unsubscribed from the newsletter mailing list, your email address may be stored on a blacklist by us or the newsletter service provider if this is necessary to prevent future mailings. The data from the blacklist is used solely for this purpose and is not combined with any other data. This serves both your interests and our interest in complying with the legal requirements for sending newsletters (legitimate interest within the meaning of Article 6 paragraph 1 letter f) of the GDPR) . Data is stored on the blacklist for an indefinite period. You may object to this storage on grounds relating to your particular situation (see the section ‘Right to object’) if your interests override our legitimate interests.
(4) We use mailing service providers as data processors to send out our newsletter. These providers also have access to your data.
On our website, you will find links to our company pages on various social media platforms. Simply visiting our website does not, in principle, result in any personal data being transmitted to the operators of these platforms via the links. Only when you click on the relevant link will you be redirected to the website of the respective platform operator. In doing so, your IP address, details of your browser and device, and the fact that you have previously visited our website may be processed. If you are logged in to the respective platform, the platform operator may, where applicable, associate your visit with your user account. The respective platform operator is generally responsible for any subsequent processing on that platform. Further details can be found in the privacy policy of the respective operator.
(1) You have the following rights vis-à-vis us with regard to your personal data:
Information on your right to object under Art. 21 GDPR
Right to object on grounds relating to your particular situation
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6 paragraph 1 letter f) of the GDPR (data processing based on a balancing of interests).
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.
Recipients of an objection
The objection may be made in any form and should be sent to the email address specified in section 1.
(2) You also have the right to lodge a complaint with a data protection supervisory authority regarding our processing of your personal data.
Our business operations require data to be collected and processed. Wherever data is collected and processed, data protection and data security must be guaranteed. For us, this is not merely a legal requirement, but a matter of the utmost importance.
Should you have any further questions or suggestions regarding data protection in relation to our services, please do not hesitate to contact us using the contact details provided above (please see section 1).
OpenTAS 365 delivers a unified operating layer for terminal operations, integrating planning, execution, and data to remove complexity and enable scalable, secure performance.
Learn more
You need to load content from reCAPTCHA to submit the form. Please note that doing so will share data with third-party providers.
More Information