Data protection
The Orthelligent® ACADEMY is operated by OPED GmbH. The protection of your data is the focus here.
Below you can find out how your personal data is processed and what data protection rights you have.
1. Who is the person responsible?
Responsible for the processing of your personal data under data protection law is
OPED GmbH
Medical Park 1
83626 Valley/ Oberlaindern
Phone: +49 (0) 8024 / 60818-210
Fax: +49 (0) 8024 / 60818-299
e-mail: This email address is being protected from spambots. You need JavaScript enabled to view it.
You can reach our data protection officer at:
OPED GmbH
Medical Park 1
DE-83626 Valley/ Oberlaindern
e-mail: This email address is being protected from spambots. You need JavaScript enabled to view it.
2. Which processing activities are carried out?
2.1 User registration
Purpose, legal basis and legitimate interest
When you register on our training platform, we collect and process personal data to provide a user account for the use of our training platform. Your first and last name, email address and password for logging into the training platform are required and stored. At the time of registration, the date and time of registration are also stored. As soon as you are registered, you can access the modules provided by consisting of videos, interactive exercises, case studies and exam questions.
As registration and attendance of the modules are free of charge, we process your data on the basis of our legitimate interest (Art. 6 para. 1 lit. f GDPR), which is to ensure the practicable and user-friendly implementation of the webinar, including a positive user experience for the purpose of presenting the company to the outside world.
Recipient of the data
The website is operated by OPED GmbH and additionally maintained by other technical service providers who act as processors.
OPED GmbH and all service providers are contractually obliged to treat your data confidentially.
Storage duration
Your personal data is stored until your account is deleted.
After termination of the user account (e.g. by deregistration or deletion), your data will be deleted, provided that there are no statutory retention obligations to the contrary.
Provision prescribed or required
The provision of your personal data is necessary for the registration and use of the training platform. It is not possible to use the training platform without providing this data. There is no legal obligation to provide the data.
Contradiction
Please read the information on your right to object under Art. 21 GDPR below.
2.2 Accessing the website (server log files)
Purpose, legal basis and legitimate interest
When you access our website and training platform, i.e. even if you do not register or otherwise transmit information, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your internet service provider, your IP address and similar.
They are processed for the following purposes in particular:
- Ensuring a smooth connection to the website and training platform,
- Ensuring the smooth use of our website,
- Ensuring and evaluating system security and stability, in particular to detect misuse,
- Ensuring an error-free presentation and optimization of our website and training platform.
We do not use your data to draw conclusions about your person. However, we reserve the right to check the server log files retrospectively if there are concrete indications of unlawful use.
Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of the legitimate interest in improving the stability and functionality of the website as well as ensuring system security and detecting misuse.
Recipient of the data
We use service providers for the operation and maintenance of our website who act as our processors.
OPED GmbH and all service providers are contractually obliged to treat your data confidentially.
Storage duration
Data is stored in log files in a form that makes it possible to identify the data subjects for a maximum period of 7 days, unless a security-relevant event occurs (e.g. a DDoS attack).
In the event of such an incident, log files are stored until the security-relevant incident has been rectified and fully clarified.
Provision prescribed or required
The provision of the aforementioned personal data is neither legally nor contractually required. However, without the data, the service and functionality of the website cannot be guaranteed. In addition, individual services may not be available or may be restricted.
Contradiction
Please read the information on your right to object under Art. 21 GDPR below.
2.3 Issue of a certificate
Purpose, legal basis and legitimate interest
Your personal data is processed in order to be able to issue and send you a personalized certificate of participation after successful participation in an online training course.
To issue the certificate, we process your first and last name, e-mail address, the module attended and the date of participation.
The processing is carried out on the basis of legitimate interest (Art. 6 para. 1 lit. f GDPR), as the issuance of a certificate is part of the free training program offered to you.
Recipient of the data
Your data will be processed exclusively within OPED GmbH.
Storage duration
Your personal data will only be stored for the period required to issue the certificate and beyond that only if statutory retention periods require longer storage.
Provision prescribed or required
The provision of your personal data is necessary for the issue and transmission of certificates to you. No certificate can be issued without the provision of your data. There is no legal obligation to provide the data.
Contradiction
Please read the information on your right to object under Art. 21 GDPR below.
2.4 Further contact/support
Purpose, legal basis and legitimate interest
We process your personal data (first and last name, email address) in order to inform you about our offers, services and news. The processing takes place on the basis of your consent (Art. 6 para. 1 lit. a GDPR).
In addition, you may be contacted or supported in order to answer your questions about the modules offered and to provide support in the event of technical problems. The processing of your personal data in this context is based on the legitimate interest (Art. 6 para. 1 lit. f GDPR). The legitimate interest here lies in ensuring optimal use of the website and providing a smooth user experience.
Recipient of the data
The website is operated by OPED GmbH, whereby the training platform is provided by a technical service provider.
Storage duration
After your request has been processed, your data will be deleted, provided there are no statutory retention obligations to the contrary.
Provision prescribed or required
Giving your consent to be contacted for marketing purposes is voluntary.
The provision of your personal data is necessary in the context of support for questions about the modules offered or in the event of technical problems.
Your questions cannot be answered without the provision of your data. There is no legal obligation to provide the data.
Objection and revocation
If the processing of your personal data is based on your consent, you can withdraw your consent at any time with effect for the future. This will not result in any disadvantages for you.
Insofar as the processing of your personal data is based on legitimate interest, we hereby refer you to the information on your right to object pursuant to Art. 21 GDPR below.
2.5 Technically necessary cookies
Purpose, legal basis and legitimate interest
We use cookies to make our website more user-friendly. Some elements of our website require that the accessing browser can be identified even after a page change.
The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary for the browser to be recognized even after a page change. For this reason, we process your data via consent management and language selection.
The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in a user-friendly design of our website.
Recipient of the data
Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.
Provision prescribed or required
The provision of the aforementioned personal data is neither legally nor contractually required. However, without the data, the service and functionality of the website cannot be guaranteed. In addition, individual services may not be available or may be restricted.
Storage duration
The data is stored for up to 7 days.
Contradiction
Please read the information on your right to object under Art. 21 GDPR below.
What data protection rights do you have?
Every data subject has the right to
- Information in accordance with Art. 15 GDPR,
- Rectification in accordance with Art. 16 GDPR,
- Erasure in accordance with Art. 17 GDPR,
- Restriction of processing in accordance with Art. 18 GDPR,
- Objection under Art. 21 GDPR,
- Data portability from Art. 20 GDPR.
The restrictions under Sections 34 and 35 BDSG (Federal Data Protection Act) apply to the right to information and the right to erasure.
In addition, you have the right to lodge a complaint with a competent data protection supervisory authority (Art. 77 GDPR in conjunction with Section 19 BDSG). A list of supervisory authorities (for the non-public sector) with addresses can be found at: https://www.bfdi.bund.de/DE/Service/Anschriften/anschriften_table.html
Data security
Insofar as personal data is stored or processed, this takes place within a high-security data center. To protect the security of your data during transmission, encryption methods (e.g. SSL) are used via HTTPS. All servers are protected by firewalls and virus protection. Back-up and recovery procedures as well as role and authorization concepts are a matter of course.
Amendment of the data protection provisions
This privacy policy can be adapted so that it always complies with current legal requirements or to reflect changes to services in the privacy policy, e.g. when new services are introduced. The new privacy policy will then apply to your next visit.
The version dated 20.01.2025 currently applies
Information about your right to object in accordance with Art. 21 GDPR
Individual right of objection
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (f) of Article 6(1) GDPR (data processing on the basis of a balancing of interests). If you object, your personal data will no longer be processed unless compelling legitimate grounds for the processing can be demonstrated which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.
Recipient of an objection
The objection can be made informally with the subject "Objection", stating your name, address or other identifying features, to the person or department responsible for data protection in your company.