Data Protection Information (“Privacy Notice”)

Gissler & Pass GmbH takes protecting your personal data (data) very seriously. In the cases described below, we process such data within the framework of the General Data Protection Regulation (GDPR) (EU) 2016/679. Personal data is any information relating to a natural person.
1. Controller within the meaning of data protection legislation

Responsible for processing your data is
Gissler & Pass GmbH
Dürener Straße 12
52428 Jülich
kontakt@gissler-pass.de
+49 (0)2461-684-0

2. Visiting our website

You can visit our website without having to input any data. Data input is on a strictly voluntary basis. At the same time data will be automatically processed as described below.

a) General points

When using our website, your IP address, the state from which you have accessed our website, the date, time and length of time spent on our website and the subpages you visited, information about the browser and operating system you used, including the display resolution and language settings will be processed. This data will be saved in log files for 14 days.

This data will be processed on the basis of points (b) and (f) of Article 6(1) of the GDPR and points (a) and (c) of Article 8(1) of the ePrivacy Regulation and solely for the purpose of facilitating your visit to our website as well as, in accordance with point (c) number 1, for statistical purposes. Whereas the collection of this data is neither a statutory nor a contractual requirement, this website cannot be used without this data being collected due to technical reasons.

b) Cookies

We also use session cookies and permanent cookies. Cookies are small files which contain an identification number assigned by us. When you use our website, cookies are saved onto your computer or mobile device. Thanks to cookies, when you revisit our website, we can recognise your computer or mobile device through this identification number. Cookies help you navigate our website and help us meet your expectations in terms of the layout and content of our website.

We are entitled to use session cookies in accordance with point (f) of Article 6(1) of the GDPR and points (a) and (d) of Article 8(1) of the ePrivacy Regulation. Session cookies are deleted once the browser has been closed. Permanent cookies are used in accordance with point (f) of Article 6(1) of the GDPR and points (b) and (d) of Article 8(1) of the ePrivacy Regulation. Permanent cookies are valid for up to 24 months and are then deleted.

You can visit our website without cookies. It is, however, possible, that you may not be able to use all the functions of the website. There is neither a legal nor contractual obligation regarding the implementation of cookies. Most browsers accept cookies automatically. To stop this, you need to change your browser settings accordingly. You must make these changes for each browser and each computer you use individually.

c) Google Analytics

This website uses Google Analytics, a web analysis service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (Google). Google uses cookies (see above). The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored and evaluated there. This accordingly applies to your anonymised IP address. Moreover, Google Analytics processes the data in the log files, the address of the website that you were on before visiting our site (referrer URL) and the search term that you entered into a search machine to find our website.

Google will process this data on our behalf to evaluate the usage of our website, compile reports on the activities on our website and to provide us with further services connected to the usage of our website. Google Analytics uses the data in the log files, e.g. to produce statistics on the frequency of visitors to our website. The processed data can be used to create pseudonymous user profiles for visitors to this website.

We only use Google Analytics with activated IP anonymisation. This means that Google will shorten your IP address within European Union member states or in the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and abbreviated there. The IP address which is transmitted by your browser will not be combined with other data from Google.

You can prevent cookies being saved on your computer in your browser settings, as described above. You can also prevent the data generated by cookies from being processed by downloading and installing the plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=en. Alternatively, or from a browser on a mobile device, you can click on the following link: deactivate Google Analytics. This will place an opt-out cookie in the browser you are using, which will work on our website. If you delete the cookies in this browser, then you must click again on this link. If you use multiple devices or browsers, you must click on this link from every device in every browser individually.

For the exceptional cases in which personal data is transferred by Google to the USA, Google has agreed to comply with the “EU-US Privacy Shield”. The European Commission has decided in its adequacy decision (EU) 2016/1250 of 12 July 2016 that this creates an adequate level of data protection.

The data is processed on the basis of point (f) of Article 6(1) of the GDPR and, provided you are a Google customer, where appropriate, on the basis of points (a) or (b) of Article 6(1) of the GDPR. We have a legitimate economic interest in evaluating the above statistics in order to adapt our website to the requirements of our visitors and in using these statistics for internal marketing purposes. The issuing of this data is not mandatory and is not necessary for a contract to be concluded with us.

Further information on Google Analytics can be found on the following Google page: https://support.google.com/analytics/answer/6004245?hl=en.

3. Using our contact form

For data that you enter into our contact form and which is necessary for the performance of a contract between your company and us or to take steps prior to entering into a contract, number 4 applies exclusively. Moreover, we may process the data you have entered into our contact form (e.g. e-mail address, if applicable, data in the field “message”) in accordance with point (a) of Article 6(1) without contractual relations, provided that you have consented to this data being processed by checking the box “I have read and accept the privacy policy”.

The data is processed to enable us to process the requests entered into the contact form. The data will be deleted 24 months after a request has been made. The provision of this data is neither a statutory or contractual requirement nor a requirement necessary to enter into a contract. The use of a contact form does, however, require you to give your e-mail address. Without this, we cannot respond to your request. Any further information given is so given on a voluntary basis.

4. Data processing in the framework of a business relationship

On the basis of point (b) of Article 6(1) of the GDPR, we may process data provided that this is necessary for the performance of a contract between you and us or in order to take steps at your request prior to entering into a contract. In this respect, we process your data, in particular for the following purposes: communication with you and order processing (offers, confirmations of orders, invoicing, etc.).

This data includes name, first name, address, e-mail address and, where appropriate, your telephone number, fax number and, if applicable, payment details such as account details (customer data).

The provision of personal data is neither a statutory nor contractual requirement. However, for you to be able to enter into a contract with us, we need to process your name or your company name, e-mail address and postal address. Without these details, we would not be able to send you an e-mail, e.g. regarding the delivery of a translation, an invoice or, where applicable, an assertion of justified claims.

We may process this data for the above purposes up to the final settlement of the respective contract and within the periods of limitation or warranty periods. If we are required to save data to fulfil our legal obligations in accordance with point (c) of Article 6(1) of the GDPR in connection with Section 257 of the Commercial Code or Section 147 of the Tax Code, we are entitled to save the data until the retention periods expire. The periods account for up to 10 years.

If you have been a customer of ours in the last two years and shared with us your e-mail address, then we have processed your data for e-mail marketing of our services, provided that you did not object to your data being used for marketing purposes. The data processing takes place on the basis of point (f) of Article 6(1) of the GDPR. We have a legitimate economic interest in sending direct marketing to our existing customers by e-mail.

5. Data recipient

Personal data shall not be disclosed to third parties without your consent. We will, however, use so-called processors. Processors process data only according to instructions, on our behalf and not for their own purpose. This includes the following controllers:

  • Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (Google Analytics)
  • Gerasch Communication GmbH & Co. KG, Osannstraße 11, 64285 Darmstadt (hosting and maintenance company)
6. Information about your rights

You have the right to obtain communication whether and, if so, which personal data (data) concerning you is processed by us. The scope and form of the communication is stipulated in Article 15 of the GDPR.

You have the right to receive the data concerning you submitted to us in a structured, commonly used and machine-readable format and to transmit it to a third party, provided that the processing is based on consent or a contract and the processing is automated. If you wish to do so, and this is technically possible, we can also transmit this data directly to a third party.

You may request the rectification of inaccurate data concerning you. To the extent necessary for the purpose of the processing, you may request that we complete incomplete data.

You can request that we erase your data, provided that the conditions for this are met in accordance with Article 17 of the GDPR. Under the conditions of Article 18 of the GDPR, you may request that we block your data.

Insofar as we process data to safeguard our interests exclusively on the basis of point (f) of Article 6(1) of the GDPR, you have the right to object, on grounds relating to your particular situation, to processing of your data. If you exercise your right to object, we shall no longer process your personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the enforcement of legal claims.

In addition, you may object to our processing of your data for marketing purposes at any time, without incurring any costs other than the transmission costs according to the basic tariffs.

If you have consented to the processing of data, you have the right to withdraw your consent at any time. You can withdraw your consent by sending an e-mail to datenschutzbeauftragter@gissler-pass.de. Following the withdrawal of consent, we will stop processing the relevant data. The lawfulness of the processing based on consent before its withdrawal shall remain unaffected. Likewise, processing remains possible despite the withdrawal of consent, insofar as we are entitled or obliged to do so due to a statutory provision.

You have the right to lodge a complaint with regard to data protection, e.g. with the Data Protection Commissioner of North Rhine-Westphalia, Kavalleriestraße 2-4, D-40213 Düsseldorf.

7. Data Protection Officer

Should you have any questions regarding data protection, you can get in touch with our Data Protection Officer by e-mail (datenschutzbeauftragter@gissler-pass.de).

Version from: May 2018