Privacy Policy


OKU Automation GmbH

Below you will find information on what types of personal data we process, to what extent and for what purposes.

Personal data is information that can be used to identify you as a data subject, such as your name, address, e-mail address or user behavior.

Data subjects are those with whom a relationship exists in the context of the provision of our services, visitors to our website and users of our entire online offering.

Name and address of the data controller:

OKU Automation GmbH

Mr. Florian Rösch

Rosenstrasse 15

73650 Winterbach


Phone: +49 (0) 7181 707 0

Fax: +49 (0) 7181 707 170

We collect and store the following types of data

  • Inventory data (e.g. names and addresses)
  • Contact data (e.g. telephone numbers and e-mail addresses)
  • Contract data (e.g. terms and conditions)
  • Payment data (e.g. account data)
  • Usage data (e.g. access times, pages viewed)
  • Metadata (e.g. browser type, IP address, operating system)
  • Content data (e.g. your text entries in contact forms or similar)

The categories of persons affected:

  • Employees
  • Applicants
  • Customers and their employees
  • Contractual partners
  • Interested parties
  • Users (website/online offers)

The data is collected for the following purposes:

  • Information
  • communication
  • Customer service
  • Services for contract fulfillment
  • Direct marketing/marketing
  • (Technical) provision of the online offer
  • Security measures to protect the (online) offering
  • Reach measurement to improve the offering

Your personal data is processed exclusively on the basis of the following legal bases

  • Consent pursuant to Art. 6 para. 1 lit. a GDPR

“The data subject has given consent to the processing of personal data concerning him or her for one or more specific purposes”

  • Performance of a contract and pre-contractual inquiries pursuant to Art. 6 para. 1 lit. b GDPR

“processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract”

  • Legal obligations pursuant to Art. 6 para. 1 lit. c GDPR

“processing is necessary for compliance with a legal obligation to which the controller is subject”

  • Legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR

“processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child”

  • Art. 88 GDPR, § 26 BDSG-new

Data processing in the employment context or data processing for the purposes of the employment relationship

Transfer to third parties and third countries

Your data will always remain within our company. The transfer or disclosure of your personal data to a third party only takes place

  • on the basis of a legal permission,
  • with your consent,
  • if we are legally obliged to do so or
  • on the basis of a legitimate interest pursuant to Art. 6 lit. f GDPR.

Our processors are obliged to comply with the necessary technical and organizational measures to ensure the protection of the rights of the data subjects by means of an order processing contract in accordance with Art. 28 GDPR.

The transfer of your personal data to third countries (outside the European Union (EU) / the European Economic Area) will only take place to countries

  • for which an adequacy decision of the EU Commission or
  • suitable guarantees within the meaning of Art. 46 GDPR exist,
  • which provide an adequate level of protection in accordance with Art. 45 et seq. GDPR,
  • are subject to officially recognized contractual obligations such as the so-called “standard contractual clauses”, or
  • for which one of the exemptions under Art. 49 GDPR is relevant.

Duration of storage

Your personal data will be routinely deleted or restricted in processing or blocked at the latest after expiry of the respective statutory retention periods (e.g. retention periods under commercial and tax law), provided that this data is no longer necessary for the fulfillment of the contract and / or there is no legitimate interest on our part for further storage.

Use of the website and creation of log files

When you visit our website, your browser automatically transmits the following information to our provider's server

- IP address of your device

- Date and time of access

- Name and URL of files accessed

- Website from which access was made or from which you were directed to our site (referrer URL)

- Browser used and, if applicable, the operating system of your device

- Name of the access provider.

This data is not merged with other data sources. The IP address is anonymized.

‍This data is collected to ensure the proper use of the website, to optimize the website and to ensure the security of our IT systems. These aforementioned purposes also constitute our legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f GDPR.

This data is deleted automatically on a regular basis. In the event of misuse of the website, the relevant data, the further storage of which is necessary for evidence purposes, will be retained until the incident has been clarified.

Hosting by HubSpot

We use the hosting service of Hubspot, 2nd Floor 30 North Wall Quay Dublin 1, Ireland, for the purpose of providing the website on the basis of processing on our behalf. When you visit our website, Hubspot collects various log files including your IP addresses.

Further information on data protection: HubSpot privacy policy

If Hubspot transfers the data to HubSpot Inc. in the USA for processing, this is done on the basis of the currently valid EU standard contractual clauses.

The European Commission adopted its adequacy decision for third country transfers to the USA on July 10, 2023.

HubSpot Inc. is certified according to the EU-US Privacy Framework.


This website uses cookies. These are small text files that are stored in the internet browser or by the internet browser on the user's end device. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.

A distinction is made between the following types of cookies:

Session cookies

Session cookies are functionally necessary cookies that do not require consent, as they are automatically deleted when you leave the website; the legal basis for this processing is Art. 6 para. 1 lit. f GDPR.

Permanent cookies

Persistent cookies remain permanently on the end device. This allows, for example, the login status to be checked or preferred content to be displayed. In addition, the data processed here can be used for reach measurements. The legal basis for this processing is Art. 6 para. 1 lit. a GDPR, i.e. it requires the user's consent.

We use cookies that enable an analysis of the user's surfing behavior.

The following data is stored and transmitted in the cookies

- Frequency of page views

- Use of website functions

When accessing our website, the user is informed about the use of cookies for analysis purposes and their consent to the processing of the personal data used in this context is obtained. In this context, reference is also made to this privacy policy.

The user can revoke their consent at any time via the cookie settings and object to the processing of their personal data.

In addition, the user can also object via the corresponding settings of their browser.

The transmission of cookies can be deactivated or restricted by changing the settings in the Internet browser. Cookies that have already been saved can be deleted at any time. This deletion can also be automated. Each browser manages these cookie settings differently. This setting is described in the help menu of each browser, which explains how you can change your cookie settings. If cookies are deactivated, the functionality of this website may be restricted.

We may work with advertising partners who help us to make our website more interesting for you. For this purpose, cookies from partner companies are also stored on your hard disk when you visit our website (third-party cookies). This also includes providers from unsafe third countries. The data is passed on to partner companies from the USA, for example.

Contact us

It is generally possible to use our website without providing personal data.

If you contact us by other means, such as by e-mail or telephone, the data collected here will be treated confidentially and will not be passed on to third parties without your consent.

The respective purpose of the data processing results from

  • the voluntary indication of the data subject pursuant to Art. 6 para. 1 lit. a GDPR
  • the fulfillment of a contract or for the implementation of pre-contractual measures pursuant to Art. 6 para. 1 lit. b GDPR
  • by the legitimate interest in the effective processing of inquiries addressed to the company in accordance with Art. 6 para. 1 lit. f GDPR.

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected.

For personal data sent by email, this is the case when the respective conversation with the user has ended. The conversation is deemed to have ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified.

The user has the option to object to the processing of personal data at any time. In such a case, the conversation cannot be continued. All personal data stored in the course of contacting us will be deleted in this case.


Our organization uses the services of Personalwerk GmbH, Dieselstraße 22, 61184 Karben, Germany, for the recruiting process. This service provider may accept applications, conduct interviews and perform other personnel-related tasks in the name of and on behalf of our organization.

By submitting their application, applicants consent to the processing of their data for the application process in accordance with our privacy policy.

The legal basis for the processing of applicant data is Art. 88 GDPR, § 26 BDSG-new and, if applicable, Art. 6 para. 1 lit. b GDPR for the initiation or execution of contractual relationships.

Insofar as special categories of personal data within the meaning of Art. 9 para. 1 GDPR are voluntarily communicated as part of the application process, their processing is also carried out in accordance with Art. 9 para. 2 lit. b) GDPR (e.g. health data, such as severely disabled status or ethnic origin).

Insofar as special categories of personal data within the meaning of Art. 9 para. 1 GDPR are requested from applicants as part of the application process, their processing is also carried out in accordance with Art. 9 para. 2 lit. a) GDPR (e.g. health data if this is necessary for the exercise of the profession).

The data provided by applicants may be processed by us for the purposes of the employment relationship in the event of a successful application. Otherwise, if the application for a job offer is unsuccessful, the applicant's data will be deleted. Applicants' data will also be deleted if an application is withdrawn, which applicants are entitled to do at any time. The deletion takes place after a period of six months so that we can answer any follow-up questions about the application and meet our obligations to provide evidence under the General Equal Treatment Act. Invoices for any reimbursement of travel expenses are archived in accordance with tax law requirements.

Social media presence

We are represented on the following social networks to communicate and inform users and for advertising purposes

  • YouTube
  • Facebook
  • Instagram
  • TikTok
  • LinkedIn
  • Xing

We only process the data obtained via the social media presences for the purposes mentioned on the legal basis of

  • the voluntary indication of the data subject pursuant to Art. 6 para. 1 lit. a GDPR
  • the fulfillment of a contract or for the implementation of pre-contractual measures pursuant to Art. 6 para. 1 lit. b GDPR or
  • by the legitimate interest in the effective processing of requests addressed to the company in accordance with Art. 6 para. 1 lit. f GDPR.

The operators of social networks generally process user data for market research and advertising purposes. With the help of the user's interests and usage behavior, usage profiles can be created in order to display advertising to the user in the future both inside and outside the network that corresponds to their profile/interests.

For further information on processing, objection options and assertion of data subject rights, please refer to the data protection declarations of the respective provider.



Facebook & Instagram

Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland





LinkedIn Ireland Unlimited Company, Wilton Plaza Wilton Place, Dublin 2, Ireland


New Work SE, Am Strandkai 1, 20457 Hamburg, Germany


Tracking tools

The tracking measures listed below and used by us are carried out on the basis of Art. 6 para. 1 sentence 1 lit. a GDPR.

With the tracking measures used, we want to ensure a needs-based design and the continuous optimization of our website. We also use the tracking measures to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you.

The respective data processing purposes and data categories can be found in the corresponding tracking tools.

Google Analytics 4

If you have given your consent, this website uses Google Analytics 4, a web analytics service provided by Google LLC. The controller for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

Nature and purpose of processing

Google Analytics uses cookies that enable your use of our website to be analyzed. The information collected by the cookies about your use of this website is usually transferred to a Google server in the USA and stored there.

In Google Analytics 4, the anonymization of IP addresses is activated by default. Due to IP anonymization, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. According to Google, the IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

‍During your visit to the website, your user behavior is recorded in the form of “events”. Events can be

  • Page views
  • First visit to the website
  • Start of the session
  • Visited web pages
  • Your “click path”, interaction with the website
  • Scrolls (whenever a user scrolls to the end of the page (90%))
  • Clicks on external links
  • Internal search queries
  • Interaction with videos
  • file downloads
  • Ads viewed / clicked on
  • language setting

Also recorded:

  • Your approximate location (region)
  • Date and time of the visit
  • Your IP address (in abbreviated form)
  • Technical information about your browser and the end devices you use (e.g. language setting, screen resolution)
  • your internet provider
  • the referrer URL (via which website/advertising medium you came to this website)

Purposes of the processing

On behalf of the operator of this website, Google will use this information to evaluate your pseudonymous use of the website and to compile reports on website activity. The reports provided by Google Analytics are used to analyze the performance of our website.


Recipients of the data are/may be

  • Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as processor pursuant to Art. 28 GDPR)
  • Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
  • Alphabet Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA

Third country transfer

For the USA, the European Commission adopted its adequacy decision on July 10, 2023. Google LLC is certified under the EU-US Privacy Framework. Since Google servers are distributed worldwide and a transfer to third countries (for example to Singapore) cannot be completely ruled out, we have also concluded the EU standard contractual clauses with the provider.

Storage duration

The data sent by us and linked to cookies is automatically anonymized or deleted after 14 months. The maximum lifespan of Google Analytics cookies is 2 years. Data whose retention period has been reached is automatically deleted once a month. You can find details on this under the following link:

Legal basis

‍‍The legal basis for this data processing is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR and § 25 para. 1 sentence 1 TDDDG.

Withdrawal of consent

You can withdraw your consent at any time with effect for the future by accessing the cookie settings and changing your selection there. This does not affect the lawfulness of the processing carried out on the basis of the consent until revocation.

You can find more information on the terms of use of Google Analytics and on data protection at Google at and at

Google Tag Manager

We also use Google Tag Manager. This service can be used to manage website tags. Google Tag Manager only sets up “tags” - “tags” are a code that is used to measure visitor traffic and visitor behavior.

The “tags” originate from other services - in our case from Google Analytics (see above). These tags are only managed via the Google Tag Manager, no cookies are set and no personal data is collected. If tracking has been deactivated, this also applies to all tracking tags that are managed with Google Tag Manager.

Your rights

As a data subject, you have the opportunity to assert your rights against us in connection with the General Data Protection Regulation. This includes the following rights:

Right to information in accordance with Article 15 GDPR

You have the option of requesting your data stored by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information on its details. An informal request by email or post is sufficient for this purpose. You will receive the requested information within one month of receipt of the letter.

Right to rectification in accordance with Article 16 GDPR

In the event that we have recorded / stored incorrect data about you, you can request the correction or completion of this data via an informal request. You will receive information about the change to your data within one month of receipt of the letter.

Right to erasure in accordance with Article 17 GDPR

You have the right to request the erasure of your personal data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims. However, this presupposes that the purposes for processing have ceased to exist, or that you have objected to the processing in accordance with Article 21 GDPR, you withdraw your consent in accordance with Article 7 GDPR or the processing is unlawful.

Right to restriction of processing in accordance with Article 18 GDPR

You have the right to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful but its erasure is rejected and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have objected to the processing in accordance with Art. 21 GDPR. You can also notify us of this informally.

Right to data portability in accordance with Article 20 GDPR

You have the right to receive the data we have stored about you in a structured, commonly used and machine-readable format or to request that it be transferred to another controller.

Right to withdraw consent in accordance with Art. 7 para. 3 GDPR

You have the right to withdraw your consent from us at any time. The consequence of this is that we may no longer continue the data processing based on this consent in the future and

Right to object in accordance with Article 21 GDPR

If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data if there are reasons for this arising from your particular situation or if the objection is directed against direct advertising.

In the latter case, you have a general right to object, which will be implemented by us without specifying a particular situation.

If you wish to exercise your right of revocation or objection, simply send an email to

Right to lodge a complaint under Article 77 GDPR

You have the right to lodge a complaint with a supervisory authority. To do so, you can contact the supervisory authority of your usual place of residence or workplace or our registered office.

The Hamburg Commissioner for Data Protection and Freedom of Information

Ludwig-Erhard-Str. 22, 7th floor

20459 Hamburg

Phone: 040 / 428 54 - 4040

Fax: 040 / 428 54 - 4000

E-mail: mailbox(at)

Up-to-dateness and amendment of this privacy policy

This privacy policy is currently valid and has the status 31.01.2024

Created and checked by