Controller and data protection officer
This data protection information applies to data processing by:
Controller: GPS Gesellschaft für Produkt und Service GmbH & Co. KG, represented by GPS Verwaltungs GmbH,
Managing Directors Benjamin Nicodemus and Mario Langethal, Albrechtweg 11, 56462 Höhn, Email: email@example.com, Phone: +49 (0)2661 - 983770, Fax: +49
(0)2661 - 9837729
You can reach the corporate Data Protection Officer by sending a letter to the address stated above adding
c/o Data Protection Officer or by email at firstname.lastname@example.org.
Nature and purpose of processing
from our customers, prospects and business partners to ensure
- inventory data (e.g. names, postal address, email addresses, phone and fax numbers and further
- contract data (e.g. contact person details, subject matter, term, customer category);
- payment data (e.g. bank details, payment history)
The nature and extent, purpose and necessity of the processing, are determined by the respective contact or
the respective contractual relationship.
- performance of contractual services
- implementation of the preliminary e.g., offer preparation) and post-contractual (e.g., warranty)
- business correspondence, service and customer support,
- invoicing and claiming eventual damages,
- marketing, advertising and market research.
When contacting us, the information provided by the user to process the contact inquiry and its processing
will be managed in accordance with Art. 6 (1) (a) and (b) GDPR.
Data processing occurs at your request and in accordance with Art. 6 (1)(b) GDPR is required for the
contractual provision of services. No data shall be transferred to third parties, unless the transfer is
required to fulfil the contract in accordance with. Art. 6 (1) (b) GDPR or to pursue our claims, for
business analysis and market research purposes in accordance with Art. 6 (1) (f) GDPR, or there is a legal
obligation in accordance with. Art. 6 (1) (c) GDPR, or you have consented to it in accordance with Art. 6
(1) (a) GDPR.
In the context of contract performance, technical drawings will have to be provided to third parties on a
regular basis; no other data will be communicated on a regular basis.
No data shall be transferred to a third country outside the European Union (EU) or the European Economic
Area (EEA) directly by us or in the context of commissioning third party services or transmitting data to
third parties, unless this is necessary for the fulfilment of the contract or a legal obligation or based on
your consent and our legitimate interests. The requirements of Art. 44 et seq. GDPR must be met.
Subject to legal or contractual authorizations, we only process the data in a third country or have the data
processed in a third country if the specific requirements of Art. 44 et seq. GDPR are met. This means, for
example, processing is carried out on the basis of special guarantees, such as the officially recognized
determination of a data protection level corresponding to the EU (e.g. for the USA by the "Privacy Shield")
or compliance with officially recognized special contractual obligations (called "standard contractual
We process data within the scope of administrative tasks, financial accounting and in the context of
compliance with legal obligations (such as archiving obligations). In this regard, the data processing is
based on Art. 6 (1) (c) GDPR and Art. 6 (1) (f) GDPR. Data are processed for the administration, financial
accounting, office organization, archiving tasks, as well as other activities for maintaining our business,
performing our duties, and providing our services. The data can be transmitted to the revenue service,
professional consultants (such as tax consultants, lawyers) and to payment service providers.
The statutory retention obligations apply to the erasure of data. It will be deleted as soon as the data is
no longer required for the fulfilment and processing of any guarantee or similar obligations or for the
fulfilment of legal obligations. The enquiries will be deleted as soon as they are no longer required. No
deletion takes place if further storage has been approved in accordance with Art. 6 (1) (a) GDPR. The
necessity of the retention of the data is reviewed every three years. In accordance with Article 6 (1) (c)
GDPR we may be obligated to store data for a longer period of time due to the tax and commercial storage and
documentation obligations. For operational reasons, we store data on suppliers, organizers and other
business partners, in particular for future reference, permanently.
When you visit our website, the data from the respective device are automatically transmitted to our
website's server. This information is temporarily stored in a log file. The following information is
recorded without your intervention and stored until it is automatically deleted:
The aforementioned data will be processed by us for the following purposes:
- IP address of the accessing computer,
- date and time of access
- name and URL of the retrieved file,
- website from which access is made (referrer URL),
- browser used and, if applicable, the operating system of your computer, as well as the name of your
- Internet access provider.
The legal basis for the processing of your personal data is Art. 6 (1) (f) GDPR. Log file data are stored as
evidence for a maximum of 7 days and then erased.
- to ensure that a connection can be established smoothly,
- to ensure user-friendly navigation
- to assess the system safety and stability as well as
- for other administrative purposes.
If data is needed for evidence purposes due to a specific incident, it will be exempted from the deletion
until the end of incident-related processing.
When using the contact form provided on our website, you must provide your contact details, but at least a
valid e-mail address. We require this information in order to be able to assign and respond to the contact
query. The processing of this data is based on your voluntarily granted consent in accordance with Art. 6
(1) (a) GDPR. The personal data collected by us for the use of the contact form will be erased after
completion of your query.
If you have consented to the storage and usage of the e-mail address, we will use your e-mail address for
the regular transmission of a newsletter. For this purpose, we require your valid e-mail address as well as
information that enables us to verify that you are the owner of the given e-mail address and that you agree
to receive the newsletter. The newsletter registration data (e-mail address, registration and confirmation
time, IP address) is stored in order to be able to prove the registration in accordance with the legal
requirements. Similarly, changes to your stored data are logged.
You can de-register at any time, for example, via a link at the end of each newsletter. The removed e-mail
addresses shall be stored for up to three years in order to prove the consent granted. The processing of
this data is limited to the purpose of defense against claims. The data may be erased at the express request
beforehand, if at the same time the previously granted consent is acknowledged.
The data storage and the sending of the newsletter is based on Art. 6 (1) (a), Art. 7 GDPR in conjunction
with Section 7 (2) no. 3, para. 3 UWG (German Unfair Competition Act).
The logging shall take place based on our legitimate interest pursuant to Art. 6 (1) (f) GDPR.
saves on your end device when you visit our website. The cookie stores information that arise in accordance
with the specific end device used. This, however, does not mean that we can trace back your identity.
example, help recognize that individual pages of the website have been visited previously. These session
cookies are automatically deleted when the session expires.
In addition, we also use temporary cookies to make our website more user-friendly, which are stored on the
user's end device for a defined period of time. When you visit our website again, it will be recognized
automatically that you have already visited our website and which entries and settings you have specified so
that you are not required to re-enter them.
purpose of optimizing our offer. When you visit our website again, these cookies allow us to recognize
automatically that you have visited our website before. These cookies are automatically deleted when the
predefined period of time expires.
The data processed by cookies are therefore necessary for the specified purposes in order to protect our
legitimate interests and those of third parties pursuant to Art. 6 (1) (f) GDPR.
Most browsers accept cookies automatically. However, you can configure your browser to prevent the storage
of cookies on your computer or to display a message before a new cookie is created. Please note that by
completely deactivating cookies, you may not be able to use all of the website’s features to their fullest
Analysis und tracking tools
The tracking measures listed below are carried out on the basis of Art. 6 (1) (f) GDPR. The tracking
measures are implemented to ensure user-friendly design and continuous optimization of our website.
Furthermore, we use the tracking measures to record the use of our website statistically and to evaluate it
for the purpose of optimizing our offer. The respective data processing purposes and data categories can be
found in the corresponding description of the tracking tool.
a) Google Analytics
To ensure user-friendly design and continuous optimization of our website, we use Google Analytics, a Web
analytics service provided by Google Inc., (https://www.google.de/intl/de/about/)
(1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google”). In this context,
pseudonymized user profiles are created and cookies (see point 4) are used. The information generated by the
cookies about your use of this website, such as
is transmitted to a Google server in the USA and stored there. The information is used to evaluate the use
of the website, to compile reports regarding website activity and to provide other services related to
website activity and Internet usage for the purposes of market research and user-friendly design of these
Web pages. Google may also pass this information to third parties if this is legally prescribed or if third
parties process this information on Google's behalf. Google will not associate your IP address with any
other data held by Google. The IP addresses are anonymized in such a way that no attribution is possible (IP
- browser type/version,
- operating system used,
- referrer URL (the page visited before),
- host name of the accessing computer (IP address),
- time of the server request,
Sie können die Installation der Cookies durch eine entsprechende Einstellung der Browser-Software
verhindern; wir weisen jedoch darauf hin, dass in diesem Fall gegebenenfalls nicht sämtliche Funktionen
dieser Internetseite vollumfänglich genutzt werden können.
You can prevent cookies from being installed by modifying a browser setting; note that if you disable
cookies, you may not be able to fully utilize the website functionality.
You can also prevent Google from collecting the data generated by the cookie and relating to your use of the
website (including your IP address) as well as from processing this data by downloading and installing the
browser add-on available under the following link: (https://tools.google.com/dlpage/gaoptout?hl=de).
As an alternative to the browser add-on, especially for browsers on mobile devices, you can prevent Google
Analytics from collecting personal data by clicking on this link. An
opt-out cookie is set that will prevent your data from being recorded when you visit this website in future.
The opt-out cookie is only valid in
this browser and only for our website and is stored on your device. If you delete the cookies in this
browser, you must set the opt-out cookie again.
For further information about privacy in connection with Google Analytics, please refer to (https://support.google.com/analytics/answer/6004245?hl=de).
We use maps from the Google Maps service provided by Google LLC, 1600 Amphitheater Parkway, Mountain View,
CA 94043, USA on our website. IP addresses and location data of the users are processed. Such consent has
usually been granted by you when you set up your device. The data can be processed in the USA. Please refer
Rights of the data subject, right to revocation and right to object
The data subject is entitled:
In addition, you are entitled to revoke consent once granted in accordance with Art. 7 (3) GDPR at any time
with future effect.
- In accordance with Art. 15 GDPR, you have the right to request information about your personal data
which is being processed by us. In particular, you have a right to information about the purposes of
the processing, the categories of personal data concerned, the recipients or categories of
recipients to whom your data has been or will be disclosed, planned storage period, the right of
rectification, erasure, limitation of processing, objection to the processing, complaint to a
supervisory authority, the origin of your data, if they were not collected by us, the existence of
automated decision-making, including profiling and, where applicable, meaningful information about
- Pursuant to Art. 16 GDPR, you are entitled to demand the rectification of inaccurate personal data
or the completion of your personal data stored by us without delay;
- Pursuant to Art. 17 GDPR, you are entitled to request the erasure of your personal data stored with
us, unless the processing is necessary to exercise the right to freedom of expression and
information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or
defend legal claims;
- Pursuant to Art. 18 GDPR, you are entitled to demand the restriction of the processing of your
personal data if you dispute the accuracy of the data, if the processing is unlawful but you refuse
its deletion and we no longer require the data, but you require it to assert, exercise or defend
legal claims or you have filed an objection against the processing in accordance with Art. 21 GDPR;
- Pursuant to Art. 20 GDPR, you are entitled to receive the personal data you have provided to us in a
structured, commonly used and machine-readable format or to request its transfer to another
- Pursuant to Art. 7 (3) GDPR you are entitled to revoke your data processing consent to us at any
time. As a result, we are no longer permitted to continue processing your data based on this consent
in the future, and
- Pursuant to Art. 77 GDPR, you are entitled to file a complaint with a supervisory authority. As a
rule, you can contact the supervisory authority at your usual place of residence or workplace or at
Should we process your personal data on the basis of legitimate interests pursuant to Art. 6 (1) (f) GDPR,
you are entitled to object to the processing of your personal data in accordance with Art. 21 GDPR.
If you wish to exercise your right of revocation or right to object, simply send an e-mail to:
Taking into account the state of the art, the costs of implementation and the nature, scope, context and
purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of
natural persons, we shall implement appropriate technical and organizational measures to ensure a level of
security appropriate to the risk in accordance with Art. 32 GDPR. Furthermore, we already observe the
protection of personal data through the principles of data protection by design and by default (Art. 25
11. Legal bases / Terminology and status
The legal basis governing the legality of data processing is Article 6 (1) (a) and Art. 7 GDPR, the legal basis for the processing for the performance of our services and the execution of contractual measures as well as responding to enquiries is Art. 6 (1) (b) (GDPR), the legal basis for processing in order to fulfil our legal obligations is Art. 6 (1) (c) GDPR, and the legal basis for processing in order to safeguard our legitimate interests is Article 6 (1) (f) GDPR. Article 6 (1) (d) GDPR shall serve as the legal basis if the vital interests of the data subject or another natural person render the processing of personal data necessary.
The terms used, such as "Controller", are used within the meaning of Article 4 of the General Data Protection Regulation (GDPR).
Stand: Mai 2018