Access
Ask us whether and what personal data we hold about you, and request a copy.
How we handle your data
We take the protection of your personal data seriously and process it only in accordance with the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
This page tells you what we collect when you visit oh–so.com, why we collect it, how long we keep it, and what rights you have. If anything here is unclear, write to privacy@oh-so.com.
The controller responsible for the processing of personal data on this website within the meaning of Art. 4 (7) GDPR is:
OH–SO Digital GmbH
Email
hi@oh-so.com
You can reach our data protection officer at:
Hannes Oenning
WPP Deutschland Holding GmbH & Co. KG
When you visit our website, our hosting provider automatically collects and stores information that your browser transmits. This data is technically necessary to display the site to you and to ensure stability and security.
The data collected includes:
Legal basis: Art. 6 (1) lit. f GDPR — legitimate interest in the secure and stable operation of our website.
When you contact us by email or via a contact form, we collect your name, email address, and the content of your message in order to respond to your enquiry.
We do not pass this information on to third parties unless we are legally obliged to do so or you have given us your explicit consent. Where we use service providers to help process your enquiry, they are strictly bound by our instructions under a data processing agreement.
Legal basis: Art. 6 (1) lit. b and lit. f GDPR.
If you apply for a position with us, we process the contact details and all data related to your application — including CV, certificates, qualifications, and, where relevant, bank details for reimbursement of travel expenses.
We use this data exclusively for the purpose of the application process. If your application is unsuccessful, we generally delete your data no later than six months after the conclusion of the process, unless you have consented to a longer storage period or statutory retention obligations require otherwise.
Legal basis: § 26 (1) BDSG and Art. 6 (1) lit. b GDPR.
Our website uses cookies and similar technologies. Strictly necessary cookies are required for the website to function. Optional cookies for analytics or embedded media are only set with your consent, which you can withdraw at any time.
We embed media and tools from third-party providers (for example video players such as Vimeo or YouTube, and web fonts). When you load a page that includes such content, your browser establishes a connection to the provider’s servers, which may receive your IP address and information about the page you are viewing.
Legal basis: § 25 (1) TTDSG and Art. 6 (1) lit. a GDPR for consent-based cookies; Art. 6 (1) lit. f GDPR for strictly necessary cookies.
We do not pass your personal data on to third parties except where this is necessary to fulfil a contract, where we are legally obliged to do so, or where you have given us your consent.
Where personal data is transferred to recipients outside the European Economic Area, we ensure an adequate level of data protection — for example through EU Standard Contractual Clauses or an adequacy decision of the European Commission.
We store personal data only for as long as it is needed for the purpose for which it was collected, or for as long as required by statutory retention obligations. Once these purposes no longer apply, the data is deleted or anonymised.
Under the GDPR you have a number of rights with respect to the personal data we hold about you. To exercise any of them, write to privacy@oh-so.com.
Ask us whether and what personal data we hold about you, and request a copy.
Have inaccurate data corrected and incomplete data completed.
Request deletion of your personal data where one of the legal grounds applies.
Have the processing of your data restricted in defined situations.
Receive your data in a structured, machine-readable format and transmit it.
Object to processing based on our legitimate interests, including profiling.
Withdrawing consent
Withdrawal does not affect the lawfulness of processing carried out before the withdrawal. To withdraw consent for cookies and embedded services, adjust your settings via the consent banner on this site. For all other processing, write to privacy@oh-so.com.
Right to lodge a complaint
For us, the competent authority is the Hamburg Commissioner for Data Protection and Freedom of Information (Hamburgischer Beauftragter für Datenschutz und Informationsfreiheit). You may also contact the supervisory authority of your usual place of residence or workplace.
Updates to this notice
The version published on this page is always the current one. Please check back from time to time to stay informed about how we handle your personal data.
Privacy questions?
Write to privacy@oh-so.com →