Responsible

orto
Corporation in formation

Dipl.-Ing. Arch. Felix Matschinske
M.A. Alexander Werle

Niederbarnimstr. 10
10247 Berlin
+49 30 21092012
hallo@orto.space

orto is a project by MUH and Lucid. Berlin GmbH.

Hereinafter, we would like to inform you about the handling of your data following Article 13 of the General Data Protection Regulation (GDPR).

Usage Data

When you visit our websites, usage data is temporarily evaluated on our web server for statistical purposes to improve the quality of our websites. This data set consists of:

- the name and address of the requested content,
- the date and time of the request,
- the amount of data transmitted,
- the access status (content transmitted, content not found),
- the description of the web browser and operating system used,
- the referral link indicating how you arrived at our site,
- the IP address of the requesting computer, which is shortened so that a personal reference is no longer possible.

The mentioned log data is only evaluated in anonymized form.

Legal

Storage of IP Address for Security Purposes
Furthermore, we strictly store the full IP address transmitted by your web browser for seven days to detect, narrow down, and eliminate attacks on our websites. After this period, we delete or anonymize the IP address. The legal basis is Article 6(1) sentence 1 lit. f GDPR.

Data Security
We implement technical and organizational measures to protect your data from unauthorized access. We employ an encryption method on our websites. Your information is transferred from your computer to our server via TLS encryption. You can usually recognize this by the closed padlock symbol in the status bar of your browser and the address line beginning with https://.

Embedded Videos
On our websites, we embed videos not stored on our servers. To ensure that visiting our websites with embedded videos does not automatically lead to the loading of content from the third-party provider, we initially only display locally stored preview images of the videos. As a result, the third-party provider does not receive any information. Only after clicking on the preview image will content from the third-party provider be loaded. As a result, the third-party provider receives information that you have visited our site, as well as the technically required usage data.

Additionally, the third-party provider can implement tracking technologies. We have no influence on further data processing by the third-party provider. By clicking on the preview image, you consent to load content from the third-party provider.

The embedding is based on your consent according to Article 6(1) sentence 1 lit. a GDPR if you have consented by clicking on the preview image. Please note that embedding many videos may result in your data being processed outside the EU or EEA. In some countries, there is a risk that authorities may access the data for security and monitoring purposes without informing you or giving you legal recourse. If we use providers in insecure third countries and you consent, the transfer to an insecure third country is based on Article 49(1) lit. a GDPR.

Newsletter Registration and Sending
You can subscribe to a newsletter on our website. Please note that for newsletter registration, we require specific data (at least your email address). The newsletter will only be sent if you have given us explicit consent under Article 6(1) sentence 1 lit—a GDPR. After successfully ordering on our website, you will receive a confirmation email at the email address you provided (double opt-in). You can revoke your consent at any time. An uncomplicated option for withdrawing your consent can be found in each newsletter via the unsubscribe link. In the context of newsletter registration, we store additional data beyond the data mentioned above, if necessary, so that we can prove that you have subscribed to our newsletter. This may include storing the complete IP address at the time of ordering or confirming the newsletter and a copy of the confirmation email we sent. The corresponding data processing is based on Article 6(1) sentence 1 lit. f GDPR, and serves the purpose of being able to account for the legality of sending the newsletter. When sending newsletters, we are supported by our service provider, Mailchimp (USA). In this context, we transmit your email address to Mailchimp, which acts as a processor bound by strict instructions on our behalf. We have concluded an appropriate data processing agreement with the service provider following Article 28(3) GDPR.

Storage Duration
Unless we have already informed you individually about the storage period, we will delete personal data when it is no longer required for the processing purposes mentioned above, and there are no legal retention obligations preventing deletion.

Your Rights as a Data Subject
When processing your personal data, the GDPR grants you, as a data subject, certain rights:

Right to Information (Article 15 GDPR)
You have the right to request confirmation as to whether relevant personal data is processed; if this is the case, you have a right to information about this personal data and the Information listed in Article 15 GDPR.

Right to Correction (Article 16 GDPR)
You have the right to request the correction of incorrect personal data concerning you without delay, as well as the completion of incomplete personal data.

Right to Deletion (Article 17 GDPR)
You have the right to request that personal data concerning you be deleted without delay if one of the reasons listed in Article 17 GDPR applies.

Right to Restriction of Processing (Article 18 GDPR)
You have the right to request that processing be restricted if one of the conditions listed in Article 18 GDPR is met, e.g., if you have objected to processing for the duration of the examination by the responsible party.

Right to Data Portability (Article 20 GDPR)
In some instances, which are listed in Article 20 GDPR, you have the right to receive the personal data concerning you in a structured, standard, and machine-readable format or to request the transfer of this data to a third party.

Right of Withdrawal (Article 7 GDPR)
If data processing is based on your consent, you are entitled to withdraw your consent according to Article 7(3) GDPR. Please note that the withdrawal will only take effect in the future. Processing that occurred before the withdrawal is not affected.

Right to Object (Article 21 GDPR)
Suppose data is collected based on Article 6(1) sentence 1 lit. f GDPR (data processing for the protection of legitimate interests), you have the right to object to data processing for reasons arising from your particular situation. We will no longer process the personal data unless we can prove compelling, legitimate reasons for the processing that outweigh your interests, rights, and freedoms or the processing serves the enforcement, exercise, or defense of legal claims.

Complaint to a Supervisory Authority (Article 77 GDPR)
According to Article 77 of GDPR, you have the right to complain to a supervisory authority if you believe that the processing of data concerning you violates data protection regulations. The right to complain can be exercised in the member state of your habitual residence, your place of work, or the site of the alleged violation.

Exercising Your Rights
Unless otherwise described above, please get in touch with the contact person listed in the Legal Notice to exercise your rights as a data subject.