Data Protection

Data Protection

Privacy Statement

We appreciate your visit to our internet presence and thank you for your interest. In accordance with the statutory regulations we are obligated to inform about the processing of your personal data. Please read the following information carefully:

  1. I. Name and address of the Data Controller

The Data Controller, in the meaning of the General Data Protection Regulation (GDPR), other member states’ national data protection laws and additional data protection regulations, is the service provider for this internet presence, named in the imprint:

Gelamor GmbH
Orhan Dag
Hansestr. 7
59590 Geseke
o.dag@gelamor.de

  1. II. Provision of the website and the creation of log files
  2. 1. Definition and scope of data processing

Every time our website is accessed, our system automatically collects data and information from the computer system of the computer accessing the site.

The following data is collected:

(1)          Information regarding the browser type and version
(2)          User’s operating system
(3)          User’s internet service provider
(4)          User’s IP address
(5)          Date and time of access
(6)          Websites from which the User’s system accesses our website
(7)          Websites accessed by the User’s system from our website

The data is stored in our system log files for 30 days.

  1. Legal basis for data processing

The legal basis for temporary data storage is Article 6 Section 1 lit. f GDPR.

  1.  Purpose of data processing

Temporary storage of the IP address by the system is required to deliver the website to the User’s computer. The User’s IP address must be stored for the duration of the session, and for an additional 30 days to detect and prevent cyberattacks.

These reasons also constitute our legitimate interest in data processing pursuant to Article 6 Section 1 lit. f GDPR.

  1.  Storage duration

The data will be deleted as soon it is no longer required to serve the purpose for which it has been collected. For data collection that serves the provision of the website, this term is 30 days.

  1.  Rights to objection and erasure

The collection of data for the provision of the website and data storage in log files is imperative for the operation of the website. Consequently, the User does not have the right to object.

III.          Using cookies

  1. Definition and scope of data processing  

Our website uses cookies. Cookies are text files which are stored in the internet browser, or by the internet browser on the User’s operating system. If a User accesses a website, a cookie may be saved on the User’s operating system. This cookie contains an distinctive character string that enables a definitive browser identification when the website is accessed again.

We use cookies to make our website more user-friendly. Certain elements of our website require the continued identification of the accessing browser, even after a change of pages.

Currently, we mainly use session cookies which are automatically deleted once the session on our website ends.

Exception:

(1)          The cookie notification text on our website places a cookie which is deleted automatically after 1 day.  

  1.  Legal basis for data processing  

The legal basis for the processing of personal data with the use of cookies is Article 6 Section 1 lit. f GDPR.

  1.  Purpose of data processing

The purpose of using technically necessary cookies, is to simplify the use of the website for Users. Certain functions of our website cannot be offered without the use of cookies. For these functions it is necessary that the browser can be identified after a change of pages as well.

We require cookies for the following applications:

(1)          Cookie notification text

The User data collected by technically necessary cookies is not utilised for the creation of User profiles.

These reasons also constitute our legitimate interest in data processing pursuant to Article 6 Section 1 lit. f GDPR.

  1.  Storage duration, rights to objection and erasure

The cookies are stored on the User’s computer and are transmitted to our page by the computer. You, as the User, have full control over the use of cookies.  You can deactivate or limit the transfer of cookies by changing your browser settings. Previously saved cookies can be deleted at any time. This can also be performed automatically. If the cookies for our website are deactivated, you may not be able to use every function of our website to the full extent.

  1. IV. Contact Form and E-Mail Contact
  2. 1. Definition and scope of data processing

Our website features a contact form which can be used to contact us electronically. If a User makes use of this function, the data entered in the input mask will be transmitted to us and stored. This data includes:

(1)          Form of address

(2)          First name + last name

(3)          Telephone number

(4)          E-Mail address

(5)          Your message

Your consent will be requested within the course of the transmission process and you will be advised to read this Privacy Statement.

Alternatively, you may contact us via the e-mail address provided. In this case the User’s personal data transmitted via e-mail will be stored.

The data is not forwarded to third parties in this context. The data is used exclusively to process the conversation.

  1. Legal basis for data processing

The legal basis for processing personal data with the User’s consent is Article 6 Section 1 lit. a GDPR.

If e-mail contact takes place in pursuit of the execution of a contract, the legal basis for processing in accordance with Article 6 Section 1 lit. b GDPR shall additionally apply.

  1.  Purpose of data processing

The processing of personal data derived from the entry screen serves the exclusive purpose of contacting you. If you contact us via e-mail, this will constitute our legitimate interest in data processing.

  1. Storage duration

The data will be deleted as soon it is no longer required to serve the purpose for which it was collected. With regard to personal data provided in the entry screen, and/or disclosed via e-mail, this will be the case after the respective conversation with the User has been concluded. The conversation is considered to be concluded when it can be inferred from the circumstances that the respective issue has been conclusively resolved.

  1. Rights to objection and erasure

The User has the right to revoke their consent to the processing of their personal data at any time. If the User contacts us via e-mail they may object to the storage of their personal data at any time. In this case, however, the conversation cannot be continued.

All personal data saved within the context of the establishment of contact shall be deleted.

This does not apply if we are required by tax or commercial law to store such messages. If this is the case, the messages will not be deleted, but will be retained exclusively for the purposes of storage.

  1. V. Newsletter
  2. 1. Definition and scope of data processing

Our website offers Users the opportunity to subscribe to a free newsletter. Upon subscription to the newsletter the data entered in the input mask will be transmitted to us.

(1)          Name

(2)          E-mail address

Within the course of the registration process we will obtain your consent and advise you to refer to this Privacy Statement

  1.  Legal basis for data processing

The legal basis for the processing of the User’s data following subscription to the newsletter, is the their consent in accordance with Article 6 Section 1 lit. a GDPR.

  1. Purpose of data processing

The collection of the User’s e-mail address serves the purpose of delivering the newsletter.

  1.  Storage duration

The data will be deleted as soon it is no longer required to serve the purpose for which it has been collected. The User’s e-mail address will, therefore, be stored for the duration of the subscription to the newsletter.  

  1. Rights to objection and erasure

The respective User may cancel the newsletter subscription at any time. Each newsletter contains a corresponding link for this purpose.

This link also enables you to revoke your consent to the storage of the personal data you provided during the registration process.

  1. VI. Integrating third party data

This website utilises contents contributed by third parties. This especially includes the usage of fonts or videos on our pages.

For technical reasons, this means it is necessary for the third party providing these contents to be able to view the User’s IP address. They are unable to forward the contents to the browser in the absence of an IP address. The IP address is, therefore, required for displaying the contents.

These contents are integrated in accordance with Article 6 Section 1 lit. f GDPR. Our legitimate interest is to provide an attractively designed website.

VII.         Rights of the parties involved

According to GDPR, if your personal data is processed, you are the data subject and you have the following rights against the responsible entity:

  1. Right to information

Pursuant to Article 15 GDPR, you may exercise your right, at any time, to obtain confirmation as to whether or not we process personal data concerning you.

  1.  Right to rectification

Pursuant to Article 16 GDPR you may exercise your right to rectification, and request the rectification of incorrect data concerning you at any time.  

  1.  Right to restriction of processing

Pursuant to Article 18 GDPR you may exercise your right to restrict data processing and request that processing be restricted at any time, provided the applicable statutory requirements have been met.

  1.  Right to erasure

Pursuant to Article 17 GDPR, you are entitled to obtain from us the erasure of personal data concerning you immediately, if this data is no longer required for the purpose for which it has been collected or otherwise processed, at any time.

 

  1. Right to notification

Pursuant to Article 19 GDPR you may exercise your right to notification by us at any time. If you have exercised your right to obtain rectification, erasure or restricted processing of your data by us, we must notify  each recipient, to whom the personal data has been disclosed, of your request to rectify, erase or restrict processing, unless it is impossible or would require an unfeasible effort. You are entitled to be notified of these recipients’ identities.

  1. Right to data transferability

Pursuant to Article 20 GDPR you may exercise your right to request data to be transferred by us at any time. You are entitled to receive the personal data you have provided to us in a structured, traditional and machine-readable format and/or request that we transfer the data to another responsible entity, provided it is technically possible.

  1. Right to Objection

You have the right to object to the collection and processing of personal data concerning you in certain circumstances, pursuant to Article 6 Section 1 lit. e or f GDPR; this shall also apply to profiling based on these provisions.

The Data Controller will no longer process the personal data concerning you, unless they can prove compelling legitimate grounds, that supersede your interests, rights and freedoms, for processing the data, or if it is necessary to process the data to establish, exercise or defend legal claims.

If personal data concerning you is processed for the purposes of direct advertising, you have the right to object to the processing of personal data concerning you for the purpose of such advertising at any time; this shall also apply to profiling, if it is connected to direct advertising

If you object to processing for advertising purposes, the personal data concerning you will no longer be processed for these purposes.

In connection with the use of the information society’s services – notwithstanding directive 2002/58/EG – you have the option to exercise your right to object using automated procedures, utilising technical specifications.

  1. 8. Right to revoke your consent to the Privacy Statement

You have the right to revoke your consent to the Privacy Statement at any time. Revoking your consent shall not affect the legality of data processing performed on the basis of your consent, prior to the date of revocation.

  1. 9. Right to file a complaint with a supervisory authority

Regardless of any other administrative or judicial remedy, you have the right to file a complaint with a supervisory authority, particularly with a supervisory authority in your member state of residence, where your workplace is, or the place of the alleged violation, if in your opinion, processing the personal data concerning you is in violation of the GDPR.

The supervisory authority with which the complaint has been filed shall notify the complainant of the status and outcome of the complaint, including the right to judicial remedies pursuant to Article 78 GDPR.