Data protection information according to Art. 13 GDPR
Introduction
We take the protection of your personal data very seriously and adhere strictly to the rules of data protection laws. With this data protection notice, we are informing you about the processing of your personal data and your data protection rights in accordance with the General Data Protection Regulation (GDPR).
1. Contact information of the person responsible
For inquiries about data protection or to exercise your rights, please contact:
OCELL GmbH
St.-Martin-Strasse 61 81669 Munich
info@ocell.io
2. Data Protection Officer
We have appointed a data protection officer for our company. You can reach him under:
simply Legal GmbH
Sebastian Schenk
Burkarderstr. 36, 97082 Würzburg
dpo@dieter-datenschutz.de
3. General data protection principles
Our processing of personal data is carried out in accordance with the legal provisions of the GDPR and national data protection regulations. Your data will only be processed for the purposes stated below and on the basis of the specified legal bases.
4. Data processing operations
4.1 Affected parties
- Customers
- Visitors
4.2 Data categories
- Contact details (name, address, telephone number, e-mail address)
- Contract data (contract number, contract contents, terms)
- Communication data (correspondence, inquiries, complaints, appointments)
- Usage data (login data, IP addresses, usage behavior on our website)
- Visit data (name, time of visit)
- Location data
4.3 Purposes and legal bases of processing
- Customer support and service (Art. 6 para. 1 lit. b GDPR)
- Conducting surveys and market research (Art. 6 para. 1 lit. a GDPR, consent)
- Compliance with legal obligations (Art. 6 para. 1 lit. c GDPR)
- Security and access controls (Art. 6 para. 1 lit. f GDPR, legitimate interests)
- Conducting surveys and market research (Art. 6 para. 1 lit. a GDPR, consent)
4.4 Possible recipients
- External service providers (e.g. payment service providers, IT service providers,Event management service providers, marketing agencies)
- Visitor data will not be passed on.
- Business partner data will not be passed on.
5. Data transfer to third countries
Personal data is not transferred to a third country outside the EU/EEA.
6. Duration of data storage
Your personal data will be stored for as long as is necessary to fulfill the above-mentioned purposes or as required by statutory retention periods.
7. Automated decision-making and profiling
We do not use automated decision-making, including profiling, which produces legal effects concerning you or similarly significantly affects you.
Automated decision-making means that decisions are made exclusively by automated processes without human intervention.
Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects, in particular to analyze or predict aspects concerning the data subject's performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or movements.
8. Your data protection rights
You have the right to information, correction, deletion, restriction of processing, data portability and objection to the processing of your personal data. To exercise your rights, you can contact us or our data protection officer at any time.
8.1 Right to information (Art. 15 GDPR)
You have the right to obtain confirmation as to whether or not personal data concerning you is being processed. If this is the case, you have the right to receive information about this personal data and a copy of the data. The information also includes information about
- the purposes of processing,
- the categories of personal data,
- the recipients or categories of recipients to whom the data has been or will be disclosed,
- the planned storage period or the criteria for determining this period,
- the existence of a right to rectification, erasure or restriction of processing or a right to object to such processing,
- the existence of a right of appeal to a supervisory authority,
- the origin of the data if it was not collected from you,
- the existence of automated decision-making, including profiling and, where applicable, meaningful information about the logic involved and the scope and intended impact of such processing.
8.2 Right to rectification (Art. 16 GDPR)
You have the right to demand the immediate correction of incorrect or completion of incomplete personal data.
8.3 Right to erasure (Art. 17 GDPR)
You have the right to request the deletion of your personal data if one of the following reasons applies:
- The data are no longer necessary for the purposes for which they were collected or processed.
- You withdraw your consent and there is no other legal basis for the processing.
- You object to the processing and there are no overriding legitimate grounds for the processing.
- The data was processed unlawfully.
- The deletion of the data is necessary to fulfill a legal obligation.
- The data was collected in relation to information society services offered.
8.4 Right to restriction of processing (Art. 18 GDPR)
You have the right to request the restriction of the processing of your personal data if:
- you contest the accuracy of the data, for a period enabling us to verify the accuracy of the data.
- the processing is unlawful and you oppose the erasure of the data and request the restriction of their use instead.
- We no longer need the data, but you need it to assert, exercise or defend legal claims.
- you have objected to processing pending the verification whether our legitimate grounds override yours.
8.5 Right to data portability (Art. 20 GDPR)
- You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller, provided that
- the processing is based on consent or a contract and
- the processing is carried out using automated procedures.
8.6 Right to object (Art. 21 GDPR):
- You have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data which is based on point (e) or (f) of Art. 6 (1) GDPR. We will then no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.
- Where personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing.
8.7 Right to withdraw consent (Art. 7 (3) GDPR):
- You have the right to withdraw your consent to the processing of personal data at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
8.8 Right to lodge a complaint with a supervisory authority (Art. 77 GDPR):
You have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data violates the GDPR.
The responsible supervisory authority is:
Bavarian State Office for Data Protection Supervision
P.O. Box 606, 91511 Ansbach
Status: 07.01.2026