Cookie Policy

We use cookies at www.oscar.auto to provide the best possible service to the visitors to our website.

A cookie is a data file that stores your IT equipment on the website. Here, Google Analytics is used to observe and recognize your IT equipment and thereby see how you use the website. Nowadays, almost all websites use cookies, as it is often a necessity to provide good service. At Oscar, we use the following types of cookies on our website:

First-party Cookies
First-party Cookies are cookies that expire when the Internet browser is closed. This type of cookie has the ability to recognize your IT equipment, remember your choice of language, record the time you are on the page, manage graphics, and identify your queries as a visitor navigating the website.

Persistent Cookies
Persistent cookies are stored for up to two years and record the number of times visitors have been to the website. In addition, they also record the visitor's length of stay, language choices, and how the website is accessed. By extension, the visitor is registered as a returning user of the site.

Google Analytics Cookies
Google Analytics cookies are only used to collect visitor statistics on our website. These types of cookies collect information about your use of the website, including your IP address. You can opt out of Google Analytics cookies by clicking here.

Marketing Cookies
Marketing Cookies are used in conjunction with following your reading and search habits to show you targeted marketing content (for example, ad banners). This type of cookie collects data that may contain personally identifiable information only. Any information stored using this type of cookie may be shared with a third party. If you do not wish to accept the above cookies, you have the option to set your browser to reject this use of cookies via the links below:

The above information is provided in accordance with the Executive Order on Information and Consent Requirements for Storing and Accessing Information in End Users' Terminal Equipment.

If the cookie policies written above give rise to any questions, please feel free to contact [email protected].

Your Rights
The personal data that we process belongs to the person who is registered. Therefore, the registered person also has some rights that are set out in Chapter 3 of the Regulation. The following is an overview of the rights that you always have as a registered user:

1. Obligation to Provide Information
In relation to the collection of personal data, we, as responsible for data collected, must inform the user about several pieces of information. As a user, you can see your rights below.

2. Right of Insight
As a registered user, you have the right to have confirmation of whether personal data about you is processed, and in that case, gain access to that personal data and the following information:

a) The aims of the treatment
b) The categories of personal data concerned
c) The recipients or categories of recipients to whom the personal data is or will be disclosed - in particular, recipients in other countries or international organizations.
d) Where possible, the intended period of time in which personal data is stored or, if not possible, the criteria used to determine that period
e) The right to request that the data controller rectify or delete personal data, limit the processing of personal data concerning the data subject, and object to such processing altogether
f) The right to lodge a complaint with a supervisory authority
g) Available information on where the personal data originate unless collected from the data subject
h) The existence of automatic decisions, including the profiling referred to in Article 22 (1) and (4), and as a minimum, meaningful information on the logic thereof, its meaning, and the expected consequences of such treatment of the data subject.

If personal data is transferred to a third-party country or international organization, the data subject has the right to be informed of the necessary guarantees in accordance with Article 46 in connection with the transfer. At Oscar, we provide a copy of personal information that is processed about you at your request, so long as the copy does not infringe on the rights and freedoms of others. For the delivery of additional copies, a reasonable fee is charged based on administrative costs that such a case may incur. Unless otherwise requested, information will be provided in a commonly used electronic form.

3. Correction
If we have recorded incorrect information about you, then you have the right to have the information corrected.

4. Right to Be Forgotten
You have the right to have your personal data deleted, and we are obliged to delete your personal data without undue delay if any of the following apply:

a) The personal data is no longer necessary for the purposes for which it was collected or otherwise processed.
b) You withdraw the consent that is the basis of the treatment, and there is no other legal basis for the treatment.
c) You object to the processing in accordance with Article 21 (1), and there are no legitimate reasons for processing prior to the objection or that you object to the processing in accordance with Article 21 (2).
d) The personal data has been used illegally
e) The personal data has to be deleted in order to comply with a legal obligation in EU law or the national law of the Member States, to which we at Oscar are subject.
f) The personal data have been collected in connection with the provision of information society services referred to in Article 8 (1).

If we have disclosed personal data and we are therefore obliged to delete data, taking into account the technology available and the cost of implementation, reasonable steps, including technical measures, will be taken to notify the controllers processing the personal data that you have requested those controllers to delete any links to or copies or reproductions of the personal data concerned. However, the above shall not apply to the extent that processing is necessary:

a) to exercise the right to freedom of expression and information
b) to comply with a legal obligation to which we are subject and which requires processing under EU or Member State law, or to carry out a task carried out in the public interest or in the exercise of official authority vested in the controller
c) on grounds of public health in accordance with Article 9 (2) (h) and (i) and Article 9 (3)
d) for archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes in accordance with Article 89 (1), in so far as the right referred to in paragraph 1 is likely to render impossible or seriously impede the performance of such processing; or
e) For legal claims to be established, enforced or defended.

5. Limitation of Treatment
You have the right to restrict our processing of your information if any of the following applies:

a) You dispute the accuracy of the personal data before we have been able to determine whether the personal data is correct
b) The processing is illegal, and you oppose the deletion of personal data and instead request that its use be restricted
c) We no longer need the personal data for processing, but they are necessary for a legal claim to be established, enforced, or defended
d) You have objected to the processing pursuant to Article 21 (2). 1, during the period, while checking whether our legitimate interests precede your legitimate interests.

If processing has been restricted in accordance with the foregoing terms, such personal data, except for retention, may only be processed with your consent or for the purpose of establishing, asserting, or defending a legal claim or to protect another natural or legal person, or for the sake of important social interests of the Union or a Member State. If you have obtained a treatment restriction, you will be notified by us before the treatment restriction is lifted.

6. The Notification Obligation in Connection with Deletion or Rectification

We will notify each recipient to whom your personal data has been disclosed of any rectification or deletion of the personal data or limitation of processing performed in accordance with sections 1.3, 1.4, or 1.5 unless this proves impossible or disproportionately difficult. We will inform you of these recipients if requested.

7. Data Portability

You have the right to receive personal information about yourself that you have provided to us in a structured, commonly used, and machine-readable format. You also have the right to transmit this information to another data controller without hindrance from us when:

a) The processing is based on your consent or on our contract and
b) The treatment is performed automatically.

When you exercise your right to data portability in accordance with the above, you have the right to have the personal data transmitted directly from us to another, when technically possible. This right does not affect the Right to Be Forgotten. Furthermore, this right of data portability does not apply to processes that are necessary for the performance of a task in the public interest or that falls under the exercise of public authority with which we have been charged, nor does this right of data portability infringe on the rights or freedoms of others.

8. Right to Object

You have the right at any time, for reasons related to your particular situation, to object to the processing of your personal data, which is based on Article 6 (2). (F) on our legitimate interest, including profiling based on these provisions.

If you object, we will no longer process your personal data unless we establish important legitimate grounds for the processing that precedes your interests, rights, and freedoms or unless the processing is necessary for legal claims to be established, enforced, or defended. If you object to our processing for direct marketing purposes, personal data may no longer be processed for this purpose. At the time of the initial communication with you, you must be explicitly made aware of the above right. Information thereof must be clearly and separately disclosed from all other information.

If your personal data is processed for scientific or historical research or for statistical purposes pursuant to Article 89 (2) of Regulation 1, you have the right to object to the processing of your personal data for reasons relating to your particular situation, unless the processing is necessary to perform a task in the public interest.

9. Automatic Decisions, Including Profiling

You have the right not to be subject to a decision based solely on automatic processing - including profiling that has legal effect, or similarly, significantly affects you. However, this does not apply if the decision:

a) Is necessary for the conclusion or performance of a contract between the data subject and a data controller
b) Is governed by EU law or the national law of the Member States to which we are subject, and which also establishes appropriate measures to protect your rights and freedoms and legitimate interests; or
c) Is based on your explicit consent.

If we apply automatic decisions in the cases referred to in (b) and (c), we will take appropriate measures to protect your rights, freedoms, and legitimate interests – and at least, your rights to human intervention on our part, to make your views known, and to contest the decision. The automatic decisions must not be based on sensitive personal data unless Article 9 (2). 2. Paragraph 2 (a) or (g) applies, and appropriate measures have been put in place to protect your rights, freedoms, and legitimate interests.

10. Limitations

EU law or German law, which the data processor or we are subject to, may (by legislative measures) limit the scope of the obligations and rights that you have under the above when such restriction respects the essential content of fundamental rights and freedoms and is a necessary and proportionate measure in a democratic society, in the interests of:

a) State security
b) The defense
c) Public security
d) The prevention, investigation, detection, or prosecution of criminal offenses or enforcement of criminal sanctions, including protection against and prevention of threats to public safety
e) Other important objectives related to the protection of the general societal interests of the Union or a Member State, in particular, the essential economic or financial interests of the Union or a Member State including [KJ4] monetary, budgetary and fiscal affairs, public health and social security
f) Protection of judicial independence and litigation
g) Prevention, investigation, detection, and prosecution of violations of ethical rules for regulated professions
h) Control, oversight, or regulation functions, including duties of a temporary nature linked to the exercise of public authority in the cases referred to in Article 23 (2) of the Regulation; 1 (a) -e) and g)
i) Protection of the rights and freedoms of the data subject or of the data subject
j) Enforcement of civil law requirements