Data Protection Declaration

  1. General


The object of data protection is personal data (hereinafter also data). This is all the data which refers to an identified or identifiable natural person, including details such as name, address, email address, phone number, and also user data such as an IP address if necessary.


The party responsible for the collection, processing, and use of your personal data is OCEANS ON AIR GMBH – Neuer Wall 10 – 20354 Hamburg – Germany (hereinafter Operator). The Operator will use your personal data solely for the purposes specified in this Data Protection Declaration. If your data are disclosed by the Operator to third parties, this will take place solely within the scope of statutory data protection provisions.


If you would like to object to the collection, processing, and use of your data by the operator according to this Data Protection Declaration on the whole or with regard to single measures, you may do this in the contact data specified in the Legal Notice. Please note that in the event of such an objection, the use of the website (hereinafter website) may possibly be limited or not be possible at all.


  1. Extent of processing of your personal data


2.1 Website access


Every time the website is accessed, usage data are transmitted by the respective internet browser and stored in log files (server log files). The saved data records contain the following information:

  • Date and time of access
  • Name of the accessed website
  • IP Address
  • Referrer URL (origin URL from which you came to the website)
  • Transmitted data quantity
  • Product and version information of the utilized browser

Your IP address is deleted or anonymized upon termination of use. In the event of anonymization, the IP addresses are changed so that they cannot be allocated to a specific or identifiable natural person or this can only be done with an excessive amount of time, costs and manpower.


The log files are analyzed by the Operator in an anonymized form to further improve the website and make it more user-friendly, to enable speedier troubleshooting as well as to control server capacities. This makes it possible to track the times when website usage is very popular so that the Operator can provide an appropriate data volume.


2.2 Contact form


A contact form is available if you would like to contact the Operator. Within this form you must provide the following details:

  • Message
  • Name and surname
  • Email
  • Phone number

The Operator will use your data to reply to your contact inquiry and to send you the requested information, for example.


2.3 Email with one click


In the navigation bar, you can open an email addressed to the Operator with just one click. The email address which is linked with your email program is automatically inserted as the sender.


If you do not want your email address to be retrieved in this manner, you can change this in the settings of your respective email program.


The Operator will use your data to reply to your contact inquiry and to send you the requested information, for example.


2.4 Newsletter


To receive additional information from the Operator, you can subscribe to an email newsletter. Only your email address has to be provided for this. Further details for personalization of the newsletter are voluntary.


The newsletter is sent by means of the so-called double opt-in process, i.e. you will receive a newsletter by email only if you have expressly confirmed beforehand that the newsletter service should be activated. After you have activated the newsletter, you will receive an email notification with an activation link. You will not receive the newsletter until you click this link.


You can deactivate the newsletter at any time. For this purpose, please contact the Operator or use the unsubscribe link in any of the newsletters.


In the course of sending newsletters, usage data are processed in order to create pseudonymized usage profiles for the purpose of market research, advertising or needs-based design of documents (e.g. a newsletter or white paper).


You may refuse your consent to this processing at any time by writing



  1. Google Analytics


The Operator uses the web analysis service Google Analytics, which uses the above-named cookies to collect information about your operating system, your browser, your IP address, the previously accessed website as well as the date and time of your visit to the Operator’s website. The information generated by the cookies about the use of the website is transmitted to a Google server in den U.S.A. and stored there. Google will use this information to analyze the use of the website, to prepare reports about the website activity for the Operator, and to provide further services connected with website usage and internet usage. Google will also disclose this information to third parties if this is prescribed by law or if third parties process these data by order of Google. This use is anonymized or pseudonymized. More information about this can be found directly at Google


Google-Analytics uses the cookie Double Click DART. You can disable the use of DART cookies by clicking the following link Privacy policy of the Google advertising network and content advertising network.


During the use of Google Analytics, no direct personal data are stored, but only the internet protocol address. The purpose of this information is to automatically recognize you and facilitate navigation the next time you visit the Operator’s site.


You can prevent cookies from being installed on your hard drive by making the relevant setting in your internet usage program (browser). To do this, you must disable the storage of cookies in your internet browser. For more information, please refer to your browser’s usage hints.


  1. Links to third-party websites


During a visit to the Operator’s website, content may be displayed which is linked with third-party websites. The Operator does not have any access to the cookies or other functions which are used by third-party websites nor can the Operator control them. Such third-party websites are not subject to the Operator’s data protection regulations.


Therefore you are asked to contact such third-party suppliers directly or to use their data protection declaration as an information basis.


  1. Assigned data usage


The Operator will observe the principle of assigned data usage. The Operator will collect, process and use your personal data only for the above-named purposes. Your personal data will not be disclosed to third parties without your express consent unless this is necessary for contract implementation. Transmission to state institutions and authorities entitled to receive this information will take place only within the scope of statutory duties of disclosure or if we are obliged to disclose the data by court decision.


  1. Rights of the person concerned


You are entitled to disclosure of your personal data which the Operator has stored. The Operator will endeavor to process requests for disclosure promptly.


You can also revoke the consent you granted for data collection and usage without stating any reasons at any time. To do this, please use the contact address specified in the Legal notice.


You can have the personal data stored about you at the Operator changed or deleted with future effect at any time. Your personal data will be deleted only if this is not barred by legal duties to retain data, if the data are no longer necessary for fulfillment of the intended purpose of storage or if their storage is prohibited for other legal reasons. The Operator will delete your data with due regard for pertinent data protection provisions after expiry of the stipulated period.

The use of cookies

The provider uses so called cookies for data collection and data storage. Cookies are small data packages, that usually consist of letters and numbers and are saved on a browser if the user visits specific websites. Cookies allow the website, to recognize the browser of a user, to follow him through different departments of a website and to identify him if he returns to the website. In any case, cookies do not contain data to identify the user personally, but the provider can assign the personal information saved, to the data he gets from cookies

Information the provider receives from the user by the application of cookies can be used for the following purposes:

  • Recognition of the user’s computer when visiting this website
  • Retracking your surfing history on this website
  • lmproving the usability of this website
  • Statistical purposes to assess the use of this website
  • Operation of this website
  • Prevention of fraud and safety improvement on this website
  • Customization of the website taking account of the needs of users

Cookies do not cause any damage on your computer. They contain no viruses and do not allow the provider to spy on you. There are two kinds of cookies in use. Temporary cookies are automatically deleted on closing the browser (session cookies). In contrast, permanent cookies have a maximum lifetime of 20 days. These kinds of cookies enable the provider to identify your computer on your next visit. With the aid of cookies, the provider is able to understand usage behavior better in the above named purpose and to the necessary extent. They should also optimize surfing on this website. The provider collects these data also only in an anonymised way.

You may of course also view our website without cookies. If you do not want us to recognise your computer, you can prevent the saving of cookies on your hard drive, by selecting the option „no cookies accepted” in your browser settings. How this works in detail can be found in the instructions provided by your browser manufacturer. However, if you do not accept cookies, the functionality of our offerings may be restricted. Even if you want to delete any cookies that are already on your computer, please read the manual of your browser manufacturer.

Information obligations pursuant to Sec. 13 GDPR

The responsible party hereby informs the person concerned about personal data processing according to its obligation pursuant to Section. 13 of the General Data Protection Regulation (GDPR).


Information pursuant to Sec. 1 GDPR


1.1      Contact details of the responsible party and the data protection officer if necessary (Sec. 13 Para. 1 lit a, b GDPR)


The party responsible pursuant to Sec. 4 No. 7 GDPR for personal data processing is:



Neuer Wall 10, 5. OG

20354 Hamburg




1.2 Purpose and legal basis of personal data processing (Sec. 13 Para. 1 lit c GDPR)


The purpose of processing is contacting, transmission of information and transmission of a newsletter.


The legal basis for the transmission of a newsletter is Sec. 6 Para. 1 lit. a GDPR. Said processing is legal due to the consent given by the person concerned for the defined purpose.


The legal basis for the transmission of a newsletter and contacting is Sec. 6 Para. 1 lit. b GDPR. Said processing is necessary in order to fulfill a contract whose contractual partner is the person concerned or to implement pre-contractual measures which are carried out upon the request of the person concerned.


The legal basis for this is also Sect. 6 Para. 1 lit. f GDPR. Said processing is necessary in order to protect the justified interests of the responsible party because the interests or basic rights and basic freedoms of the person concerned which require the protection of personal data do not prevail.


1.3 Justified interest of the responsible party or third parties (Sec. 13 Para. 1 lit. d GDPR)


The interest of the responsible party or a third party prevails over a contrary interest of the person concerned. The interest here is in particular handling contact and requests as well as customer care.


1.4 Intention to transmit to a third country (Sec. 13 Para. 1 lit. f GDPR)


The responsible party does not intend to transmit the data to a third country outside the EU.


An adequacy decision of the commission pursuant to Sec. 45 Para. 1 GDPR is available (Official Journal of the European Community dated August 25, 2000, No. L 215/1).


  1. Information pursuant to Sec. 2 GDPR


2.1 Duration or criteria for the duration of storage (Sec. 13 Para. 2 lit. a GDPR)


The first storage (beginning of the storage period) of data shall take place upon submission of the respective request (contact/newsletter/registration).


The collected personal data are stored for the period of time which the respective assigned process requires. The data are deleted when the process is terminated.


The personal data for the newsletter are stored for the duration of the subscription of the newsletter and deleted upon its termination.


2.2 Rights of the person concerned (Sec. 13 Para. 2 lit. b GDPR)


The person concerned is entitled to the following rights:


  • Right to information (Sec. 15 GDPR)

The responsible party shall inform the concerned person upon request if it processes data concerning him. The responsible party shall endeavor to process requests for disclosure promptly.


  • Correction of incorrect data (Sec. 16 GDPR)

The person concerned is entitled to request the responsible party to correct the incorrect personal data concerning him immediately.


  • Deletion (Sec. 17 GDPR)

The person concerned is entitled to request the responsible party to delete the personal data concerning him immediately, and the Operator is obligated to delete personal data immediately if one of the reasons named in Sec. 17 Para. 1 lit. a-f GDPR applies.


  • Limitation of processing (Sect. 18 GDPR)

The person concerned is entitled to request the responsible party to limit said processing if one of the prerequisites of Sec. 18 Para. 1 lit. a- d GDPR is given:


  • Right to data portability (Sec. 20 GDPR)

The person concerned is entitled to maintain the personal data concerning him, which it provided to the Operator, in a structured, common, and machine-readable format and he is entitled to transmit these data to another responsible party without any hindrance from the responsible party to which the personal data were provided, if said processing is based on consent pursuant to Sec. 6 Para. 1 lit. a GDPR, Sec. 9 Para. 2 lit. a GDPR or on a contract pursuant to Sec. 6 Para. 1 lit. b GDPR and said processing is carried out with the aid of an automated process.


  • Right of objection to unreasonable data processing (Sec. 21 GDPR)

The concerned party is entitled to file an objection to the processing of personal data concerning him, which is carried out on the basis of Sec. 6 Para. 1 lit. e or f GDPR, at any time for reasons resulting from his special situation; this shall also apply to profiling based on these provisions. The responsible party shall not process personal data any more unless it can provide compelling legitimate reasons for said processing which prevail over the interests, rights, and freedoms of the person concerned or processing serves the assertion, exercise, or defense of legal claims.


If personal data are used in order to conduct direct advertising, the person concerned is entitled to file an objection to said processing of personal data concerning him for the purpose of such advertising at any time; this shall also apply to profiling if it is associated with such direct advertising.


The concerned person is entitled to file an objection to the processing of personal data concerning him, which is carried out for scientific or historical research purposes or for statistical purposes pursuant to Sec. 89 Para. 1 GDPR, for reasons resulting from his special situation unless said processing is necessary for the performance of a public interest task.


2.3 Revocability of consent (Sec. 13 Para. 2 lit. c GDPR)


The consent for processing can be revoked at any time. The legitimacy of processing based on said consent shall remain unaffected until its revocation (ex-nunc effect).


2.4      Right of complaint at a supervisory authority (Sec. 13 Para. 2 lit. d GDPR)


The person concerned is entitled to a right of complaint regarding illegal data processing pursuant to Sec. 77 Para. 1 GDPR at a supervisory authority.


2.5      Duty or obligation to provide data (Sec. 13 Para. 2 lit. e GDPR)


The information in the registration form consists of mandatory and voluntary information.


The provision of mandatory data is necessary for the performance of the registration process. A customer account cannot be created without this information. The person concerned is responsible for providing these data.


The same applies to the information in the contact form. The responsible party cannot process the contact request if mandatory information is not provided.


Submission of data in order to sign up for the newsletter is voluntary. The person concerned is only responsible for providing its email address. Newsletter subscription is not possible without this information.