Privacy Policy

Information on the Processing of Personal Data

Unless otherwise specified below, the provision of your personal data is neither required by law nor by contract, nor is it necessary for the conclusion of a contract. You are not obligated to provide this data. Failure to provide such data has no consequences. This applies only to the extent that no other information is provided regarding the processing operations described below.

„Personal data“ means any information relating to an identified or identifiable natural person.

Server Log Files

You can visit our website without providing any personal information.

Every time you access our website, your Internet browser transmits usage data to us or our web host/IT service provider, and this data is stored in log files (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred, and the requesting provider. This processing is based on Article 6(1)(f) of the GDPR, grounded in our overriding legitimate interest in ensuring the smooth operation of our website and in improving our services.

Contact

Data Controller/Data Protection Officer

Please contact us if you wish. The data controller is: Armin Schymala, Am Schlag 39, 93138 Lappersdorf, Germany, +49(0)941/298 48 68, Datenschutzbeauftragter@gbs-es.com

You can contact our data protection officer directly at:

Armin Schymala
Datenschutzbeauftragter@gbs-es.com
On the 39th pitch
93138 Lappersdorf

Phone: +49 (0) 941 / 298 48 68
Cell: +49 (0) 151 / 50 03 61 05

Customer initiates contact via email

If you contact us on your own initiative via email, we will collect your personal data (name, email address, message text) only to the extent that you provide it. The purpose of this data processing is to handle and respond to your inquiry.

If the contact is made for the purpose of carrying out precontractual measures (e.g., providing advice regarding a potential purchase, preparing a quote) or relates to a contract already concluded between you and us, this data processing is based on Article 6(1)(b) of the GDPR.

If you contact us for other reasons, this data processing is based on Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6(1)(f) of the GDPR.

We use your email address solely to process your inquiry. Your data will then be deleted in accordance with statutory retention periods, unless you have consented to further processing and use.

Data Collection and Processing When Using the Contact Form

When you use the contact form, we collect your personal data (name, email address, message text) only to the extent that you provide it. The purpose of this data processing is to contact you.

If the contact is made for the purpose of carrying out pre-contractual measures (e.g., providing advice regarding a purchase inquiry, preparing a quote) or relates to a contract already concluded between you and us, this data processing is based on Article 6(1)(b) of the GDPR. If contact is initiated for other reasons, this data processing is based on Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6(1)(f) of the GDPR. We use your email address solely to process your inquiry. Your data will subsequently be deleted in accordance with statutory retention periods, unless you have consented to further processing and use.

Data Collection and Processing When Using the Application Form

When you use the application form, we collect your personal data only to the extent that you provide it. This includes your contact information (e.g., name, email address, phone number), details about your professional qualifications and education, information about professional development, and performance-related documentation.

The purpose of data processing is to contact you and to decide whether to enter into an employment relationship with you. Providing this data is necessary to carry out the application process. The processing of your personal data is based on Article 6(1)(b) of the GDPR in conjunction with Section 26(1) of the BDSG for the purpose of carrying out pre-contractual measures (completing the application process as a preliminary step toward an employment contract).

If you have given us your consent to process your personal data for inclusion in our applicant pool—for example, by checking a box—the processing is based on Article 6(1)(a) of the GDPR. You may withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal.

If, as part of the application process, applicants are asked to provide special categories of personal data as defined in Article 9(1) of the GDPR—such as information regarding the degree of severe disability—this is done on the basis of Article 9(2)(b) GDPR, so that we can exercise the rights arising from labor law and the law on social security and social protection and fulfill our obligations in this regard.

We will store your personal data for as long as necessary to make a decision regarding your application. Your data will then be deleted no later than six months after the application process, unless you have consented to further processing and use. If an employment relationship is established following the application process, the data provided will be further processed on the basis of Art. 6(1)(b) GDPR in conjunction with § 26(1) of the German Federal Data Protection Act (BDSG) for the purposes of carrying out the employment relationship and will subsequently be transferred to your personnel file.

Customer Account

When you open a customer account, we collect your personal data to the extent specified there. The purpose of this data processing is to improve your shopping experience and simplify order processing. Processing is based on Article 6(1)(a) of the GDPR with your consent. You may revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of your consent prior to revocation. Your customer account will then be deleted.

Collection, Processing, and Disclosure of Personal Data in Connection with Orders

When you place an order, we collect and process your personal data only to the extent necessary to fulfill and process your order and to handle your inquiries. Providing this data is necessary for the conclusion of the contract. Failure to provide this data means that a contract cannot be concluded. The processing is based on Article 6(1)(b) of the GDPR and is necessary for the performance of a contract with you.

Your data may be shared, for example, with the shipping companies and dropshipping providers you have selected, payment service providers, order processing service providers, and IT service providers. In all cases, we strictly comply with legal requirements. The scope of data transfer is kept to a minimum.

Use of Your Personal Data for Sending Direct Mail

We use your personal data (name, address), which we have received in connection with the sale of a product or service, to send you direct mail, unless you have objected to this use. Providing this data is necessary for the conclusion of the contract. Failure to provide this data means that a contract cannot be concluded.

Processing is carried out on the basis of Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in direct marketing. You may object to this use of your address information at any time by notifying us. The contact information for exercising your right to object can be found in the legal notice.

Use of the Email Address to Send Newsletters

We use your email address—regardless of the fulfillment of the contract—exclusively for our own promotional purposes to send you our newsletter, provided you have expressly consented to this. The processing is based on Article 6(1)(a) of the GDPR with your consent. You may withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent prior to withdrawal. To do so, you may unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the mailing list.

Your data will be shared with an email marketing service provider as part of data processing on our behalf. Your data will not be shared with any other third parties.

Use of the Email Address for Sending Direct Marketing Materials

We use your email address—which we received in connection with the sale of a product or service—to send you electronic advertisements for our own products or services that are similar to those you have already purchased from us, provided you have not objected to this use. Providing your email address is necessary for the conclusion of the contract. Failure to provide it means that no contract can be concluded. Processing is based on Article 6(1)(f) of the GDPR, based on our legitimate interest in direct marketing. You may object to this use of your email address at any time by notifying us. The contact information for exercising your right to object can be found in the legal notice. You may also use the link provided for this purpose in the promotional email. No costs other than the transmission costs according to the standard rates will be incurred for this.

Using CleverReach

We use the services of CleverReach GmbH & Co. KG (Schafjückenweg 2, 26180 Rastede; „CleverReach“) to send our newsletter under a data processing agreement. We share the information you provide when signing up for the newsletter (email address, first and last name if applicable) with CleverReach. The data is processed for the purpose of sending the newsletter and analyzing its statistics.

To evaluate newsletter campaigns, the newsletters we send out contain a 1×1-pixel image (tracking pixel) or a tracking link. This allows us to determine whether you opened the newsletter and, if applicable, whether you clicked on any links included in it. Conversion tracking allows us to analyze, for example, whether a purchase was made after clicking a link in the newsletter or whether you registered on our website. In this context, we collect your personal data, such as your IP address, browser type, device, and the time of the event. Usage profiles may be created from this data under a pseudonym. The collected data is not used to identify you personally. The collected data is used solely for statistical analysis to improve newsletter campaigns.

Your personal data is processed on the basis of Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in a targeted, effective, and user-friendly newsletter system. You have the right to object at any time to the processing of your personal data for reasons arising from your particular situation.

For more information and Cleverreach's privacy policy, please visit: www.cleverreach.com/de-de/datenschutz/ and www.cleverreach.com/de-de/newsletter-tool/newsletter-reporting/.

Cookies

Our website uses cookies. Cookies are small text files that are stored in or by the web browser on a user’s computer system. When a user visits a website, a cookie may be stored on the user’s operating system. This cookie contains a unique string of characters that allows the browser to be uniquely identified when the user visits the website again.

Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting the appropriate technical settings in your web browser, you can be notified before cookies are set, decide on a case-by-case basis whether to accept them, and prevent cookies from being stored and the data they contain from being transmitted. Cookies that have already been stored can be deleted at any time. However, please note that doing so may prevent you from fully utilizing all features of this website.

The links below provide information on how to manage (including disabling) cookies in the most common browsers:

Chrome: support.google.com/accounts/answer/61416

Microsoft Edge: support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge

Mozilla Firefox: support.mozilla.org/de/kb/allow-and-block-cookies

Safari: support.apple.com/de-de/guide/safari/manage-cookies-and-website-data

Technically Necessary Cookies

Unless otherwise specified in the Privacy Policy below, we use only these technically necessary cookies for the purpose of making our website more user-friendly, effective, and secure. Furthermore, cookies enable our systems to recognize your browser even after you navigate to another page and to provide you with services. Some features of our website cannot be provided without the use of cookies. For these features, it is necessary for the browser to be recognized even after you navigate to another page.

The use of cookies or similar technologies is based on Section 25(2) of the TTDSG. The processing of your personal data is based on Article 6(1)(f) of the GDPR, in accordance with our overriding legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our services.

You have the right to object at any time to the processing of your personal data for reasons related to your particular situation.

Use of Google Analytics

We use Google Analytics, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; „Google“), on our website.

Data processing is used to analyze this website and its visitors, as well as for marketing and advertising purposes. To this end, Google will use the information collected on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity, and to provide the website operator with other services related to website and internet usage. The following information, among others, may be collected: IP address, date and time of the page view, click path, information about the browser and device you are using, pages visited, referrer URL (the website from which you accessed our website), location data, and purchase activities. The IP address transmitted by your browser as part of Google Analytics is not combined with other data held by Google.

Google Analytics uses technologies such as cookies, browser-based web storage, and tracking pixels, which enable an analysis of your use of the website. The information generated in this way regarding your use of this website is generally transmitted to a Google server in the United States and stored there. There is no adequacy decision by the European Commission for the United States. Data transfer is based, among other things, on Standard Contractual Clauses as appropriate safeguards for the protection of personal data, which can be viewed at: policies.google.com/privacy/frameworks and business.safety.google/adsprocessorterms/. Both Google and U.S. government agencies have access to your data. Google may link your data to other information, such as your search history, your personal accounts, your usage data from other devices, and any other data Google has about you.

IP anonymization is enabled on this website. This means that Google truncates your IP address beforehand within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the United States and truncated there.

The use of cookies or similar technologies is based on your consent pursuant to Section 25(1), sentence 1 of the TTDSG in conjunction with Article 6(1)(a) of the GDPR. The processing of your personal data is based on your consent pursuant to Article 6(1)(a) of the GDPR. You may withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal.

For more information on the Terms of Service and Privacy Policy, please visit www.google.com/analytics/terms/de.html, www.google.de/intl/de/policies/, or policies.google.com/technologies/cookies.

Using Matomo

We use the Matomo analytics tool from InnoCraft Ltd. (150 Willis St, 6011 Wellington, New Zealand; „Matomo“) on our website.

Data processing is carried out for the purpose of analyzing this website and its visitors. Cookies may be used for this purpose, which enable the recognition of the Internet browser. The following information, among other things, may be collected: IP address, information about the browser and device you are using, files you have clicked on or downloaded, clicks on links to third-party websites, referrer URL (the website from which you accessed our website), URL of our website, number of your visits, time of your first visit, date and time of the visit, time zone, location data. Usage profiles may be created from this data under a pseudonym. The data collected using Matomo technologies will not be used to personally identify visitors to this website without the data subject’s separate consent, nor will it be combined with personal data about the person behind the pseudonym.

In this process, your data will be transferred to a third country outside the European Union for which the European Commission has issued an adequacy decision.

Your personal data is processed on the basis of Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in designing the website in a way that meets your needs and is tailored to your interests. You have the right to object at any time to the processing of your personal data for reasons arising from your particular situation.

The use of Matomo and the associated data collection and storage can be disabled at any time with future effect:

Use of Google Ads Conversion Tracking

We use the online advertising program „Google Ads“ on our website and, as part of this, conversion tracking (visitor action analysis). Google Conversion Tracking is an analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland).

When you click on an ad served by Google, a conversion tracking cookie is stored on your computer. These cookies have a limited validity period, do not contain any personal data, and therefore cannot be used to identify you personally. If you visit certain pages on our website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to that page. Each Google Ads customer receives a different cookie. This means it is not possible to track cookies across the websites of Ads customers.

The information collected using the conversion cookie is used to generate conversion statistics. This allows us to determine the total number of users who clicked on one of our ads and were redirected to a page tagged with a conversion tracking tag. However, we do not receive any information that can be used to personally identify users.

Your data may be transferred to Google LLC’s servers in the United States. There is no adequacy decision by the European Commission for the United States. The data transfer is based, among other things, on standard contractual clauses as appropriate safeguards for the protection of personal data, which can be viewed at: policies.google.com/privacy/frameworks and business.safety.google/adscontrollerterms/.

The processing of your personal data is based on Article 6(1)(f) of the GDPR, in accordance with our overriding legitimate interest in targeting website visitors with interest-based advertising. You have the right to object at any time to the processing of your personal data for reasons arising from your particular situation.

You can turn off personalized ads in Google's ad settings. For instructions on how to do this, visit support.google.com/ads/answer/2662922

Alternatively, you can prevent third-party cookies from being used by visiting the Network Advertising Initiative’s opt-out page at www.networkadvertising.org/choices/ and following the opt-out instructions provided there. You will then not be included in the conversion tracking statistics.

For more information and Google's privacy policy, please visit: www.google.de/policies/privacy/

Use of Google Inc.„s remarketing or “Similar Audiences" feature.

On our website, we use the remarketing or „Similar Audiences“ feature provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland).

The purpose of this application is to analyze visitor behavior and interests. Google uses cookies to analyze website usage, which serves as the basis for creating interest-based advertisements. These cookies track visits to the website and collect anonymized data about website usage. No personal data of website visitors is stored. If you subsequently visit another website in the Google Display Network, you will see ads that are highly likely to be based on the product and information sections you previously viewed.

Your data may be transferred to servers operated by Google LLC in the United States. There is no adequacy decision by the European Commission for the United States. The data transfer is based, among other things, on standard contractual clauses as appropriate safeguards for the protection of personal data, which can be viewed at: policies.google.com/privacy/frameworks.

You can permanently disable Google's use of cookies by following the link below and downloading and installing the plug-in provided there: support.google.com/ads/answer/7395996

Alternatively, you can prevent third-party cookies from being used by visiting the Network Advertising Initiative's opt-out page at www.networkadvertising.org/choices/ and following the opt-out instructions provided there.

For more information about Google Remarketing and the associated privacy policy, please visit: www.google.com/privacy/ads/

Using Google Tag Manager

We use Google Tag Manager from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; „Google“) on our website.

This application manages JavaScript and HTML tags used to implement tracking and analytics tools, among other things. The data is processed for the purpose of tailoring our website to user needs and optimizing it.

Google Tag Manager itself does not store cookies, nor does it process personal data. However, it enables the triggering of other tags that may collect and process personal data.

For more information on the Terms of Use and Privacy Policy, please visit www.google.com/intl/de/tagmanager/use-policy.html.

Use of Google Maps

We use the feature that embeds Google Maps from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; „Google“) on our website.

This feature enables the visual display of geographic information and interactive maps. When users visit pages that include Google Maps, Google also collects, processes, and uses data from website visitors.

Your data may also be transferred to the United States. There is no adequacy decision by the European Commission for the United States. The data transfer is based, among other things, on standard contractual clauses as appropriate safeguards for the protection of personal data, which can be viewed at: policies.google.com/privacy/frameworks.

For more information about how Google collects and uses data, please see Google's Privacy Policy at www.google.com/privacypolicy.html. There, in the Privacy Center, you can also change your settings so that you can manage and protect the data Google processes about you.

Using YouTube

We use the YouTube video embedding feature provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; „YouTube“) on our website. YouTube is an affiliate of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; „Google“).

This feature displays videos hosted on YouTube in an iFrame on the website. The „Enhanced Privacy Mode“ option is enabled. As a result, YouTube does not store any information about website visitors. Only when you watch a video is information about it transmitted to YouTube and stored there. Your data may be transferred to the United States. There is no adequacy decision by the European Commission for the United States. The data transfer is based, among other things, on Standard Contractual Clauses as appropriate safeguards for the protection of personal data, which can be viewed at: policies.google.com/privacy/frameworks.

For more information about how YouTube and Google collect and use data, your rights in this regard, and ways to protect your privacy, please see YouTube's Privacy Policy at www.youtube.com/t/privacy.

Duration of Storage

Once the contract has been fully executed, the data will initially be stored for the duration of the warranty period; thereafter, it will be stored in accordance with statutory retention periods—particularly those under tax and commercial law—and then deleted upon expiration of those periods, unless you have consented to further processing and use.

Rights of the Data Subject

Provided that the legal requirements are met, you have the following rights under Articles 15 through 20 of the GDPR: the right of access, the right to rectification, the right to erasure, the right to restriction of processing, and the right to data portability.

In addition, pursuant to Article 21(1) of the GDPR, you have the right to object to processing based on Article 6(1)(f) of the GDPR, as well as to processing for the purposes of direct marketing.

Right to File a Complaint with the Supervisory Authority

Pursuant to Article 77 of the GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that your personal data is not being processed lawfully.

Right to Object

If the processing of personal data described here is based on our legitimate interest pursuant to Article 6(1)(f) of the GDPR, you have the right to object to such processing at any time, with effect for the future, for reasons arising from your particular situation.

Once an objection has been filed, the processing of the data in question will be discontinued, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing is necessary for the establishment, exercise, or defense of legal claims.

If personal data is processed for direct marketing purposes, you may object to this processing at any time by notifying us. Once you have objected, we will cease processing the relevant data for direct marketing purposes.

Last updated: November 29, 2022