Privacy Policy

[As of: 01.12.2022]

With this information, the responsible entity mentioned under section 1 ("We") informs the user of the website ("You" or "User") in accordance with Article 13 of the General Data Protection Regulation (GDPR) about the collection and processing of personal data.

For the use of websites of other providers, to which reference is made, for example, via links, the privacy information provided there applies.

A General Information
1 Data Controller and Data Protection Officer
1.1 The responsible entity for this website is: Oktastor LLP, 5307 Victoria Drive 120, Vancouver, BC V5P 3V6, info@oktastar.com.

1.2 You can reach the data protection officer via email at datenschutz@oktastar.com, or via the address in section 1.1. with the addition "Attention: Data Protection Officer". A data protection officer does not need to be appointed by us.

1.3 Our website is hosted by ALL-INKL.COM (www.all-inkl.com), i.e., technically provided on servers of this web hosting provider. The web hosting provider is a data processor contracted by us according to Article 28 GDPR.

2 Data Subject Rights
If personal data concerning you is collected by us, as a "data subject", you have the following rights:

2.1 Right to Information

You can request information according to Article 15 GDPR about your personal data that we process.

2.2 Right to Object

You have a right to object for specific reasons under Article 21(1) GDPR. We will inform you separately about this under section "B".

2.3 Right to Rectification

If the information concerning you is (no longer) accurate, you can request rectification under Article 16 GDPR. If your data is incomplete, you can request completion.

2.4 Right to Erasure

Under the conditions of Article 17 GDPR, you can request the erasure of your personal data.

2.5 Right to Restriction of Processing

In the cases of Article 18 GDPR, you have the right to request restriction of processing of your personal data ("blocking").

2.6 Right to Lodge a Complaint

If you believe that the processing of your personal data violates data protection law, you have the right under Article 77(1) GDPR to lodge a complaint with a supervisory authority of your choice.

2.7 Right to Data Portability

In the event that you have provided us with personal data according to Article 20(1) GDPR, you have the right to receive the data processed automatically based on your consent or for the performance of a contract, in a structured, commonly used, and machine-readable format, to yourself or to third parties. The collection of data for the provision of the website and the storage of log files (see section 3.1 below) are necessary for the operation of the website. Therefore, they are not based on consent according to Article 6(1)(a) GDPR or on a contract according to Article 6(1)(b) GDPR, but are justified according to Article 6(1)(f) GDPR. Therefore, the requirements of Article 20(1) GDPR are not fulfilled in this respect.

3 Procedure: Provision of the Website and Creation of Log Files
3.1 What data is processed for what purpose?

Each time content of the website is accessed, information (data) is temporarily collected and stored by the web server of our web hosting provider, where our website is stored, from the internet browser of the accessing computer or device of the user. This data may potentially enable identification of the user and is therefore personal data.

3.1.1 The following data is collected and stored by our web hosting provider:

- User's IP address,
- Date and time of the website access,
- The protocol, e.g., HTTP,
- The request method "Get" or "Post",
- Content of the request or specification of the retrieved file sent to the user,
- Access status (successful transmission, error, etc.),
- The amount of data transmitted in bytes,
- Incoming and outgoing traffic ("traffic"),
- A process identification number ("process ID"),
- The duration until the web server responded to the user's request,
- The website from which the user's access originated,
- The browser used by the user, the operating system, the interface, the language of the browser, and the version of the browser software.

3.1.2 The temporary storage of this user data is necessary for the operation of a website visit in order to enable delivery of the website. For this purpose, the user's IP address must necessarily be stored for the duration of the session (i.e., the website visit).

3.1.3 Further storage of the IP address with the data mentioned above beyond this purpose is carried out in log files for the purpose of ensuring the functionality of the website and the security of the information technology systems by our web hosting provider.

3.2 On what legal basis is this data processed? The data from section 3.1 is collected and processed by our web hosting provider for the aforementioned temporary storage purpose and also for the further storage purpose under Article 6(1)(f) GDPR. In these purposes lies the legitimate interest in data processing. This legitimate interest is the interest of our web hosting provider, but also our legitimate interest in a functioning website.

3.3 Are there any recipients other than the data controller of the aforementioned data? Our web hosting provider, as our data processor, has technical access to the data mentioned in section 3.1.

3.4 How long will the data be stored? The data from 3.1.1 will be deleted as soon as it is no longer necessary for the purpose of its collection. This is the case when the respective session ends during the provision of the website. The log files are kept for a maximum of 7 days, unless a security incident requires longer retention.

3.5 Is there an obligation to provide the data? You must provide the data from 3.1 to our web hosting provider. Otherwise, you cannot use our website technically, and our web hosting provider cannot guarantee secure technical operation.

4 Procedure: Use of Email Address and Contact Form
4.1 What data is processed for what purpose?

To the extent that we provide you with an email address and a contact form with input fields, this is for the purpose of contacting us. If you transmit personal data to us, it will be stored and processed by us for the purpose of contacting you.

4.2 On what legal basis is this data processed?

The data from section 4.1 is processed based on Article 6(1)(f) GDPR (legitimate interest of us as the data controller). If your request aims at the conclusion of a contract, Article 6(1)(b) GDPR is an additional legal basis (initiation, conclusion, and performance of a contract).

4.3 Are there any recipients other than the data controller of the aforementioned data?

Our web hosting provider, as our data processor, has technical access to the data mentioned in section 4.1.

4.4 How long will the data be stored?

The data from section 4.1 will be deleted as soon as it is no longer necessary for the purpose of its collection. For personal data sent to us by email or the contact form, this is the case when the respective correspondence with the user

 is ended and storage is no longer necessary for other reasons. The conversation is considered ended when it can be inferred from the circumstances that the matter concerned has been finally clarified.

4.5 Is there an obligation to provide the data?

You are not obliged to provide us with data from section 4.1. You do not have to communicate with us.

5 Cookies and Usage Tracking
5.1 Cookies are text files that are stored in the internet browser or by the internet browser on the user's computer system. When a user visits a website, a cookie may be stored on the user's operating system. A cookie contains a characteristic string that enables unique identification of the browser when the website is accessed again.

5.1.1 Technically necessary cookies are processed by us based on Article 6(1)(f) GDPR (legitimate interest). Technically necessary cookies help make a website usable by enabling basic functions such as accessing secure areas of the website or using contact forms. A website cannot function properly without technically necessary cookies. We do not use cookies that are set only based on your consent under Article 6(1)(a) GDPR (e.g., preference cookies, statistics cookies, marketing cookies).

5.1.2 Removal option: The user can prevent the installation of cookies by adjusting their browser settings accordingly or delete already stored cookies at any time. The settings for this depend on the respective browser. However, if the user prevents or restricts the installation of cookies, this may result in not all functions of the website being fully usable.

5.1.3 Technically necessary cookie "wbk_sid": If a login form or a contact form is set up on our website, this HTTP cookie is stored on the user's operating system. This cookie contains a long alphanumeric combination ("ID"). The purpose of this cookie is to recognize the user in case of sending login data or contact information and to distinguish them from abusive users (e.g., SPAM bots). If the user closes the browser, the cookie on the user's operating system is automatically deleted. It is therefore only valid for the duration of the visit to our websites (session cookie).

5.2 Usage Tracking: Analysis programs and other techniques for evaluating user behavior during your visit to our websites (so-called "tracking") are not used.

6 Technical Measures
6.1 For security reasons and to protect the transmission of confidential content, such as requests that you send to us as the website operator, our websites are equipped with active SSL or TLS encryption. An encrypted connection can be recognized by the fact that the address line of the browser changes from "http://" to "https://" and a lock symbol appears in the browser line. As a result of this encryption, data that you transmit to us cannot be read by third parties.

6.2 If you contact us via email addresses provided on our websites, the transport of the content of the email to us is not end-to-end encrypted. This means that the emails are generally encrypted during transport by the involved email providers, but are stored unencrypted on the servers there. Contacting us via the provided contact form is technically a secure communication.

6.3 To the extent that you can watch videos on our websites, this is exclusively done through the technique of linking to the respective video portal of a third-party provider, where videos are stored under the data protection responsibility of the portal operator. The respective video portal is thus not directly embedded in our websites. This ensures that information about the user is not transmitted to the portal when loading the website on which the video is integrated. It is also ensured that cookies of the portals or their advertising partners cannot be set on your end device simply through the link. Only after your conscious click on the video preview image is a connection established to the third-party portal and the associated data processing triggered. However, the data processing triggered by this and the possible data processing of your user data on the linked portal are solely based on your desire to watch the video there. The data processing triggered by this is beyond our control and is the responsibility of these portals, which inform more or less extensively about their data processing. If you do not agree with the data processing by the third-party provider, please do not click on the video preview image.

B Special Information
Special Right to Object under Article 21(1) GDPR

You have the right to object, for reasons arising from your particular situation, at any time to the processing of your personal data which is based on Article 6(1)(f) GDPR, pursuant to Article 21(1) GDPR.

We will no longer process the personal data, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves the establishment, exercise or defense of legal claims.

C Notes on B
Regarding the procedure under A section 3.1: The collection of data for the provision of the website and the storage of log files are necessary for the operation of the website. Consequently, there are no interests of the data subject that outweigh our interests.

Regarding the procedure under A section 4.1: You must explain your possibly existing interests (your "particular situation") in detail so that we can carry out a new balancing of interests. If our interests in further storage do not outweigh, the personal data stored as part of the contact will be deleted.