-
Controller and data protection officer
This data protection information applies to data processing by: Controller: GPS Gesellschaft für Produkt und Service GmbH & Co. KG, represented by GPS Verwaltungs GmbH, Managing Director Mario Langethal, Albrechtweg 11, 56462 Höhn, Email: info@gps-germany.com, Phone: +49 (0)2661 - 983770, Fax: +49 (0)2661 - 9837729 You can reach the corporate Data Protection Officer by sending a letter to the address stated above adding c/o Data Protection Officer or by email at datenschutzbeauftragter@gps-germany.com. -
Nature and purpose of processing
We process
- inventory data (e.g. names, postal address, email addresses, phone and fax numbers and further contact details)
- contract data (e.g. contact person details, subject matter, term, customer category);
- payment data (e.g. bank details, payment history)
- performance of contractual services
- implementation of the preliminary e.g., offer preparation) and post-contractual (e.g., warranty)
- measures,
- business correspondence, service and customer support,
- invoicing and claiming eventual damages,
- marketing, advertising and market research.
When contacting us, the information provided by the user to process the contact inquiry and its processing will be managed in accordance with Art. 6 (1) (a) and (b) GDPR.
Data processing occurs at your request and in accordance with Art. 6 (1)(b) GDPR is required for the contractual provision of services. No data shall be transferred to third parties, unless the transfer is required to fulfil the contract in accordance with. Art. 6 (1) (b) GDPR or to pursue our claims, for business analysis and market research purposes in accordance with Art. 6 (1) (f) GDPR, or there is a legal obligation in accordance with. Art. 6 (1) (c) GDPR, or you have consented to it in accordance with Art. 6 (1) (a) GDPR.
In the context of contract performance, technical drawings will have to be provided to third parties on a regular basis; no other data will be communicated on a regular basis.
No data shall be transferred to a third country outside the European Union (EU) or the European Economic Area (EEA) directly by us or in the context of commissioning third party services or transmitting data to third parties, unless this is necessary for the fulfilment of the contract or a legal obligation or based on your consent and our legitimate interests. The requirements of Art. 44 et seq. GDPR must be met.
Subject to legal or contractual authorizations, we only process the data in a third country or have the data processed in a third country if the specific requirements of Art. 44 et seq. GDPR are met. This means, for example, processing is carried out on the basis of special guarantees, such as the officially recognized determination of a data protection level corresponding to the EU (e.g. for the USA by the "Privacy Shield") or compliance with officially recognized special contractual obligations (called "standard contractual clauses").
We process data within the scope of administrative tasks, financial accounting and in the context of compliance with legal obligations (such as archiving obligations). In this regard, the data processing is based on Art. 6 (1) (c) GDPR and Art. 6 (1) (f) GDPR. Data are processed for the administration, financial accounting, office organization, archiving tasks, as well as other activities for maintaining our business, performing our duties, and providing our services. The data can be transmitted to the revenue service, professional consultants (such as tax consultants, lawyers) and to payment service providers.
The statutory retention obligations apply to the erasure of data. It will be deleted as soon as the data is no longer required for the fulfilment and processing of any guarantee or similar obligations or for the fulfilment of legal obligations. The enquiries will be deleted as soon as they are no longer required. No deletion takes place if further storage has been approved in accordance with Art. 6 (1) (a) GDPR. The necessity of the retention of the data is reviewed every three years. In accordance with Article 6 (1) (c) GDPR we may be obligated to store data for a longer period of time due to the tax and commercial storage and documentation obligations. For operational reasons, we store data on suppliers, organizers and other business partners, in particular for future reference, permanently.
-
Website
When you visit our website, the data from the respective device are automatically transmitted to our website's server. This information is temporarily stored in a log file. The following information is recorded without your intervention and stored until it is automatically deleted:- IP address of the accessing computer,
- date and time of access
- name and URL of the retrieved file,
- website from which access is made (referrer URL),
- browser used and, if applicable, the operating system of your computer, as well as the name of your
- Internet access provider.
- to ensure that a connection can be established smoothly,
- to ensure user-friendly navigation
- to assess the system safety and stability as well as
- for other administrative purposes.
If data is needed for evidence purposes due to a specific incident, it will be exempted from the deletion until the end of incident-related processing.
When using the contact form provided on our website, you must provide your contact details, but at least a valid e-mail address. We require this information in order to be able to assign and respond to the contact query. The processing of this data is based on your voluntarily granted consent in accordance with Art. 6 (1) (a) GDPR. The personal data collected by us for the use of the contact form will be erased after completion of your query.
-
Newsletter
If you have consented to the storage and usage of the e-mail address, we will use your e-mail address for the regular transmission of a newsletter. For this purpose, we require your valid e-mail address as well as information that enables us to verify that you are the owner of the given e-mail address and that you agree to receive the newsletter. The newsletter registration data (e-mail address, registration and confirmation time, IP address) is stored in order to be able to prove the registration in accordance with the legal requirements. Similarly, changes to your stored data are logged.
You can de-register at any time, for example, via a link at the end of each newsletter. The removed e-mail addresses shall be stored for up to three years in order to prove the consent granted. The processing of this data is limited to the purpose of defense against claims. The data may be erased at the express request beforehand, if at the same time the previously granted consent is acknowledged.
The data storage and the sending of the newsletter is based on Art. 6 (1) (a), Art. 7 GDPR in conjunction with Section 7 (2) no. 3, para. 3 UWG (German Unfair Competition Act).
The logging shall take place based on our legitimate interest pursuant to Art. 6 (1) (f) GDPR.
-
Cookies
We use cookies on our website. These are small files that your Internet browser automatically creates and saves on your end device when you visit our website. The cookie stores information that arise in accordance with the specific end device used. This, however, does not mean that we can trace back your identity.
The use of cookies serves to make the use of our website more user-friendly. The session cookies, for example, help recognize that individual pages of the website have been visited previously. These session cookies are automatically deleted when the session expires.
In addition, we also use temporary cookies to make our website more user-friendly, which are stored on the user's end device for a defined period of time. When you visit our website again, it will be recognized automatically that you have already visited our website and which entries and settings you have specified so that you are not required to re-enter them.
Furthermore, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer. When you visit our website again, these cookies allow us to recognize automatically that you have visited our website before. These cookies are automatically deleted when the predefined period of time expires.
The data processed by cookies are therefore necessary for the specified purposes in order to protect our legitimate interests and those of third parties pursuant to Art. 6 (1) (f) GDPR.
Most browsers accept cookies automatically. However, you can configure your browser to prevent the storage of cookies on your computer or to display a message before a new cookie is created. Please note that by completely deactivating cookies, you may not be able to use all of the website’s features to their fullest extent.
Cookie-Settings for www.gps-germany.com can be adjusted using this link: change Cookie-Settings -
Analysis und tracking tools
The tracking measures listed below are carried out on the basis of Art. 6 (1) (f) GDPR. The tracking measures are implemented to ensure user-friendly design and continuous optimization of our website. Furthermore, we use the tracking measures to record the use of our website statistically and to evaluate it for the purpose of optimizing our offer. The respective data processing purposes and data categories can be found in the corresponding description of the tracking tool.
a) Google Analytics
To ensure user-friendly design and continuous optimization of our website, we use Google Analytics, a Web analytics service provided by Google Inc., (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google”). In this context, pseudonymized user profiles are created and cookies (see point 4) are used. The information generated by the cookies about your use of this website, such as
- browser type/version,
- operating system used,
- referrer URL (the page visited before),
- host name of the accessing computer (IP address),
- time of the server request,
Sie können die Installation der Cookies durch eine entsprechende Einstellung der Browser-Software verhindern; wir weisen jedoch darauf hin, dass in diesem Fall gegebenenfalls nicht sämtliche Funktionen dieser Internetseite vollumfänglich genutzt werden können.
You can prevent cookies from being installed by modifying a browser setting; note that if you disable cookies, you may not be able to fully utilize the website functionality. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) as well as from processing this data by downloading and installing the browser add-on available under the following link: (https://tools.google.com/dlpage/gaoptout?hl=de).
As an alternative to the browser add-on, especially for browsers on mobile devices, you can prevent Google Analytics from collecting personal data by clicking on this link. An opt-out cookie is set that will prevent your data from being recorded when you visit this website in future. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.
For further information about privacy in connection with Google Analytics, please refer to (https://support.google.com/analytics/answer/6004245?hl=de). -
Google Maps
We use maps from the Google Maps service provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA on our website. IP addresses and location data of the users are processed. Such consent has usually been granted by you when you set up your device. The data can be processed in the USA. Please refer to the provider's Privacy Policy at (https://www.google.com/policies/privacy/) erlauben wir zu verweisen. -
Rights of the data subject, right to revocation and right to object
The data subject is entitled:- In accordance with Art. 15 GDPR, you have the right to request information about your personal data which is being processed by us. In particular, you have a right to information about the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipients to whom your data has been or will be disclosed, planned storage period, the right of rectification, erasure, limitation of processing, objection to the processing, complaint to a supervisory authority, the origin of your data, if they were not collected by us, the existence of automated decision-making, including profiling and, where applicable, meaningful information about their specifics;
- Pursuant to Art. 16 GDPR, you are entitled to demand the rectification of inaccurate personal data or the completion of your personal data stored by us without delay;
- Pursuant to Art. 17 GDPR, you are entitled to request the erasure of your personal data stored with us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
- Pursuant to Art. 18 GDPR, you are entitled to demand the restriction of the processing of your personal data if you dispute the accuracy of the data, if the processing is unlawful but you refuse its deletion and we no longer require the data, but you require it to assert, exercise or defend legal claims or you have filed an objection against the processing in accordance with Art. 21 GDPR;
- Pursuant to Art. 20 GDPR, you are entitled to receive the personal data you have provided to us in a structured, commonly used and machine-readable format or to request its transfer to another controller;
- Pursuant to Art. 7 (3) GDPR you are entitled to revoke your data processing consent to us at any time. As a result, we are no longer permitted to continue processing your data based on this consent in the future, and
- Pursuant to Art. 77 GDPR, you are entitled to file a complaint with a supervisory authority. As a rule, you can contact the supervisory authority at your usual place of residence or workplace or at our subsidiary.
Should we process your personal data on the basis of legitimate interests pursuant to Art. 6 (1) (f) GDPR, you are entitled to object to the processing of your personal data in accordance with Art. 21 GDPR.
If you wish to exercise your right of revocation or right to object, simply send an e-mail to:
info@gps-germany.com -
Data security
Taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons, we shall implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk in accordance with Art. 32 GDPR. Furthermore, we already observe the protection of personal data through the principles of data protection by design and by default (Art. 25 GDPR). -
11. Legal bases / Terminology and status
The legal basis governing the legality of data processing is Article 6 (1) (a) and Art. 7 GDPR, the legal basis for the processing for the performance of our services and the execution of contractual measures as well as responding to enquiries is Art. 6 (1) (b) (GDPR), the legal basis for processing in order to fulfil our legal obligations is Art. 6 (1) (c) GDPR, and the legal basis for processing in order to safeguard our legitimate interests is Article 6 (1) (f) GDPR. Article 6 (1) (d) GDPR shall serve as the legal basis if the vital interests of the data subject or another natural person render the processing of personal data necessary.
The terms used, such as "Controller", are used within the meaning of Article 4 of the General Data Protection Regulation (GDPR).
This Privacy Policy can be accessed and printed on our website.
Stand: Mai 2018