Privacy Policy

Thank you for visiting our website www.gedore-automotive.com and for your interest in our company.

The protection of your personal data, such as date of birth, name, telephone number, address, etc., is important to us.

The purpose of this privacy statement is to inform you about the processing of your personal data that we collect from you when you visit our website. Our data protection practice is in line with the legal regulations of the EU's General Data Protection Regulation (DSGVO) and the Federal Data Protection Act (BDSG). The following data protection declaration serves to fulfil the information obligations resulting from the DSGVO. These can be found, for example, in Art. 13 and Art. 14 ff. DSGVO.

1. Person responsible

The controller within the meaning of Art. 4 No. 7 DSGVO is the person who alone or jointly with others determines the purposes and means of the processing of personal data.

With regard to our website, the following companies are joint controllers within the meaning of Art. 26 DSGVO:

GEDORE Automotive GmbH
Breslauer Str. 41
78166 Donaueschingen

2. Contact details of the data protection officer

We have appointed a data protection officer in accordance with Art. 37 DSGVO. You can reach our data protection officer under the following contact details:

Andreas Langendonk
EggSec GmbH
Dohmenstraße 28a
47807 Krefeld

E-mail: dsb@eggsec.de
Phone: +49-2151-200855
Website: https://eggsec.de

3. Provision of the website and creation of log files

Each time our website is accessed, our system automatically collects data and information from the respective retrieving device (e.g. computer, mobile phone, tablet, etc.).

What personal data is collected and to what extent is it processed?
(1) Information about the browser type and the version used;
(2) The operating system of the accessing device;
(3) Host name of the accessing computer;
(4) The IP address of the retrieval device;
(5) Date and time of access;
(6) Websites and resources (images, files, other page content) that were accessed on our website;
(7) Websites from which the user's system accessed our website (referrer tracking);
(8) Message as to whether the retrieval was successful;
(9) amount of data transferred
This data is stored in the log files of our system. This data is not stored together with the personal data of a specific user, so that individual site visitors cannot be identified.

Purpose of data processing
The temporary (automated) storage of data is necessary for the course of a website visit in order to enable the delivery of the website. The storage and processing of personal data is also carried out to maintain the compatibility of our website for as many visitors as possible and to combat abuse and eliminate malfunctions. For this purpose, it is necessary to log the technical data of the accessing computer in order to be able to react as early as possible to display errors, attacks on our IT systems and/or errors in the functionality of our website. In addition, we use the data to optimise the website and to generally ensure the security of our information technology systems.

Legal basis for the processing of personal data
Art. 6 para. 1 sentence 1 lit. f DSGVO (legitimate interest). Our legitimate interest is the proper provision of the website.

Duration of storage
The deletion of the aforementioned technical data takes place as soon as they are no longer required to ensure the compatibility of the website for all visitors, but no later than 3 months after visiting our website.

Possibility of objection and deletion
You can object to the processing at any time in accordance with Art. 21 DSGVO and request the deletion of data in accordance with Art. 17 DSGVO. You can find out which rights you have and how to exercise them at the bottom of this privacy policy.

4. Special functions of the website

Our site offers you various functions, the use of which involves the collection, processing and storage of personal data by us. Below we explain what happens to this data:

Contact form(s):

What personal data is collected and to what extent is it processed?
The data you enter in our contact form.

Purpose of data processing
We will only use the data recorded via our contact form(s) to process the specific contact request received through the contact form. Please note that in order to fulfil your contact request, we may also send you e-mails to the address provided. The purpose of this is so that you can receive confirmation from us that your enquiry has been correctly forwarded to us. However, the sending of this confirmation e-mail is not obligatory for us and is only for your information.

Legal basis for the processing of personal data
Art. 6 para. 1 sentence 1 lit. a DSGVO (consent through clear confirming action or behaviour).

Duration of storage
After processing your request, the collected data will be deleted immediately, unless there are legal retention periods.

Possibility of revocation and deletion
You can revoke your consent to the processing of your personal data at any time without disadvantages with effect for the future. In addition, you may have the right to have your personal data deleted in accordance with Art. 17 DSGVO.

Necessity of providing personal data
The use of the contact forms is on a voluntary basis and is neither contractually nor legally required. You are not obliged to contact us via the contact form, but can also use the other contact options provided on our website. However, if you decide to use our contact form, you must fill in the fields marked as mandatory. Without this minimum information, it is unfortunately not possible to process your enquiry.

Newsletter registration form

What personal data is collected and to what extent is it processed?
By registering for a newsletter on our website, we receive the e-mail address entered by you in the registration field and, if applicable, further contact data, provided that you communicate this to us via the newsletter registration form. You can register on our website for various newsletters, some of which are also provided by other companies in the GEDORE Group.

Legal basis for the processing of personal data
Art. 6 para. 1 lit. a DSGVO (consent through clear confirming action or behaviour).

Purpose of data processing
The data recorded in the registration mask of our newsletter will be used by us exclusively for sending the newsletter, in which we inform you about all our services and our news. After registration, we will send you a confirmation e-mail containing a link that you must click to complete the registration for our newsletter (double opt-in).

Duration of storage
You can unsubscribe from our newsletter at any time by clicking on the unsubscribe link, which is also included in every newsletter. Your data will be deleted by us immediately after unsubscribing, unless there is a legal obligation to retain it. Likewise, your data will be deleted by us immediately in the event that your subscription is not completed. We reserve the right to delete your data without giving reasons and without prior or subsequent information.

Possibility of revocation and deletion
You can revoke your consent to the processing of your personal data at any time without disadvantages for the future. To do so, please use the unsubscribe link provided in the newsletter.

Necessity of providing personal data
If you would like to use our newsletter, you must fill in the fields marked as mandatory and confirm your e-mail address by clicking on the double opt-in link. The information provided for newsletter registration is neither necessary to enter into a contract with us nor legally binding. They are used exclusively for sending our newsletter. If you do not fill in the mandatory fields, we will unfortunately not be able to provide you with our newsletter service.

Call-me-back button

On our website, we offer you the opportunity to contact us quickly and easily. For this purpose, you can click on the "call-me-back button" displayed on the sub-pages, which will show you various contact options.

Legal basis for the processing of personal data
The legal basis for the processing is Art. 6 (1) UAbs. 1 lit. a DSGVO (consent), or Art. 6 (1) UAbs. 1 lit. b DSGVO (implementation of pre-contractual measures that take place at the request of the data subject), if you contact us to conclude a contract with us.

Purpose of the data processing
The data is processed in order to be able to identify you as a person and thus to be able to help you quickly with your request. Furthermore, the data is required in order to be able to get back to you. If you use the call-back service, this cannot be used without processing your data; the purpose of the processing here is also the provision of the service itself.

Duration of storage
The data is stored for as long as it is required to fulfil the purpose. Accordingly, your data will be regularly deleted after we have answered your enquiry. If you give us your consent, longer-term storage may also be possible.

Revocation
Insofar as the legal basis for processing your personal data is consent, you have the right to revoke your consent at any time with effect for the future. If you revoke, we will no longer process your data. The lawfulness of the past processing is not affected by the revocation.

Necessity of providing personal data
The provision of your personal data is voluntary and is neither contractually nor legally required. You are not obliged to contact us using the call-me-back button. Insofar as information is requested for the call-back service, this is necessary in order to be able to provide you with the service.

5. Information on the use of cookies

Scope of the processing of personal data
On various pages, we use cookies and plugins to enable the use of certain functions on our website. Plugins are additional software that can enable further functions on the website. So-called 'cookies' are small text files that your browser can store on your computer. These text files contain a characteristic string of characters that enable the browser to be uniquely identified when our website is called up again. The process of placing a cookie file is also called 'setting a cookie'.

Legal basis for the processing of personal data
Art. 6 para. 1 sentence 1 lit. f DSGVO (legitimate interest). Our legitimate interest is to maintain the full functionality of our website, to increase usability and to enable a more individualised customer approach. We are only able to identify individual site visitors with the help of cookie technology if the site visitor has previously provided us with corresponding personal data on the basis of separate consent. The legal basis for data processing for some cookies and plug-ins is also your consent in accordance with Art. 6 para. 1 sentence 1 lit. a, Art. 49 para. 1 sentence 1 lit. a DSGVO in our information banner regarding the use of cookies, plug-ins and web tracking (consent through clear confirming action or behaviour).

Please refer to the clear table below to see which cookies and plugins are associated with which legal bases.

Purpose of data processing
Cookies are set by our website to maintain the full functionality of our website and to improve usability. The same purpose is served by the plugins which are installed on the website. In addition, cookie technology enables us to recognise individual visitors through pseudonyms, e.g. an individual, arbitrary ID, so that it is possible for us to offer more individualised services. In addition, we use information from the cookies to evaluate your visit to this website, to compile reports on website activities and to provide us with other services related to website and internet use. In particular, if you have consented to the processing, the success of our advertising measures in connection with LinkedIn will be measured. In this context, we record when you arrive at our website from LinkedIn and which subpages you subsequently view on our website. We also need the web tracking for security reasons. Web tracking allows us to track whether third parties are attacking our website. The information from the web tracker allows us to take effective countermeasures and protect the personal data we process from these cyber-attacks.

The purpose of each cookie and plugin can be found in the table below.

Duration of storage
Please refer to the table for the storage period of each cookie and plugin.

Possibility of objection and removal
You can set your browser yourself according to your wishes so that the setting of cookies is generally prevented. You can then decide on a case-by-case basis whether to accept cookies or accept cookies in principle. Cookies can be used for various purposes, e.g. to recognise that your PC has already had a connection to our website (persistent cookies) or to save recently viewed offers (session cookies). We use cookies to provide you with increased user comfort. In order to use our comfort functions, we recommend that you allow the acceptance of cookies for our web offer. The options for objection and removal are also based on the general regulations on the right of objection and deletion under data protection law described below in this data protection declaration.

Third country transfer
Some cookies and plugins may also transfer your data to servers outside the European Union. These are the cookies and plugins of the company Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; website: https://marketingplatform.google.com/intl/de/about/analytics/; privacy policy: https://policies.google.com/privacy), as well as LinkedIn Ireland Unlimited Company, 70 Sir John Rogerson's Quay, Dublin 2, Dublin, D02r296, Ireland (service provider: LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA; website: https://www.linkedin.com; privacy policy: https://www.linkedin.com/legal/privacy-policy, cookie policy: https://www.linkedin.com/legal/cookie_policy). These are marked with "*" in the table. We strive to ensure the greatest possible protection of your personal data, especially with regard to international transfers. In particular, the data in the cookies is processed pseudonymously in order to disguise a clear personal reference and thus make it difficult to draw conclusions about your person.

As far as we are able, we will assist you in obtaining a copy of the personal data processed about you from Google or LinkedIn. As far as we are able, we have concluded order processing contracts or contracts concerning joint responsibility.

Cookie Declaration

6. Data security and data protection, communication by e-mail

GEDORE takes all necessary technical and organisational measures to protect your personal data from unauthorised access. In the case of unencrypted communication by e-mail, we cannot guarantee complete data security on the transmission path to our IT systems, so we recommend encrypted communication or the postal service for information requiring a high level of confidentiality.

Automatic e-mail archiving

Scope of the processing of personal data
We expressly point out that our mail system has an automated archiving procedure. All incoming and outgoing e-mails are digitally archived in an audit-proof manner.

Legal basis for the processing of personal data
Art. 6 para. 1 sentence 1 lit. c DSGVO (legal obligation). The legal obligation consists of compliance with tax and commercial law requirements (e.g. §§ 146, 147 AO, §§ 238, 257 HGB).

Purpose of data processing
The purpose of archiving is to comply with tax law requirements (e.g. §§ 146, 147 AO obligation to retain e-mails of relevance to tax law) and commercial law requirements (e.g. §§ 238, 257 HGB obligation to archive business correspondence).

Duration of storage
Our mail communication is stored until the expiry of retention obligations under tax and commercial law. The storage period can be up to 10 years.

Possibility of objection and deletion
Under certain circumstances, you can request the deletion of data in accordance with Art. 17 DSGVO. You can find out which rights you have and how to exercise them in the lower section of this data protection declaration.

Communication by e-mail

Scope of the processing of personal data
When you send an e-mail to GEDORE, we process at least your e-mail address. In addition, we may also process your name and the information you provide to us in your e-mail.

Legal basis for the processing of personal data
Art. 6 para. 1 sentence 1 lit. a, b DSGVO (consent, implementation of pre-contractual measures). If you write us an e-mail, we assume your consent to the data processing by conclusive behaviour. Otherwise, please point this out to us.
If you contact us for the conclusion of a contract, the implementation of a pre-contractual measure is the legal basis of the processing.

Purpose of data processing
The purpose of the communication is to respond to enquiries about services, products or general.

Duration of storage
Our mail communication is stored until the expiry of retention obligations under tax law and commercial law. The storage period can be up to 10 years.

Possibility of objection and deletion
Insofar as the processing is based on your consent, you can revoke this consent at any time with effect for the future. However, this does not affect the lawfulness of the processing that has taken place up to that point. Under certain circumstances, you may also be entitled to have your personal data deleted in accordance with Art. 17 DSGVO.

Handling of application documents
If you have any questions regarding our e-mail archiving system, please contact our data protection officer. In addition, we would like to point out that we only consider application documents in PDF file format. Zipped files (WinZip, WinRAR, 7Zip, etc.) are filtered out by our security systems and will not be delivered. We do not consider applications in Word file format and other file formats and delete them unread. Please note that application documents sent by e-mail without encryption may be opened by third parties before they reach our IT systems. We assume that we may also reply to unencrypted application e-mails unencrypted. If you do not wish this, please let us know in your application e-mail.

7. Data subject rights

Right to information
You have the right to request confirmation as to whether we are processing personal data about you. If this is the case, you have the right to be informed about the information named in Art. 15 (1) DSGVO, insofar as the rights and freedoms of other persons are not affected (cf. Art. 15 (4) DSGVO). We will also be happy to provide you with a copy of the data.

Right to rectification
Pursuant to Art. 16 DSGVO, you have the right to have any incorrect personal data (e.g. address, name, etc.) stored with us corrected at any time. You can also request that the data stored with us be completed at any time. A corresponding adjustment will be made immediately.

Right to deletion
Pursuant to Art. 17 para. 1 DSGVO, you have the right to demand that we delete the personal data we have collected about you if the data is either no longer required;

• the legal basis for the processing has ceased to exist without substitution due to the withdrawal of your consent;
• you have objected to the processing and there are no legitimate grounds for the processing;
• your data is processed unlawfully;
• a legal obligation requires this or a collection pursuant to Art. 8 (1) DSGVO has taken place.

According to Art. 17 (3) of the GDPR, this right does not exist if

• processing is necessary for the exercise of the right to freedom of expression and information;
• your data have been collected on the basis of a legal obligation;
• the processing is necessary for reasons of public interest;
• the data are necessary for the assertion, exercise or defence of legal claims.

Right to restriction of processing
Pursuant to Art. 18 (1) DSGVO, in individual cases you have the right to request the restriction of the processing of your personal data.
This is the case if

• the accuracy of the personal data is disputed by you;
• the processing is unlawful and you do not consent to its erasure;
• the data is no longer needed for the purpose of processing, but the collected data is used for the assertion, exercise or defence of legal claims;
• an objection to the processing has been lodged pursuant to Art. 21 (1) DSGVO and it is still unclear which interests prevail.

Right of revocation
If you have given us express consent to process your personal data (Art. 6 para. 1 lit. a DSGVO or Art. 9 para. 2 lit a DSGVO), you may revoke this consent at any time. Please note that the lawfulness of the processing carried out on the basis of the consent up to the revocation is not affected by this.

Right of objection
In accordance with Art. 21 DSGVO, you have the right to object at any time to the processing of personal data relating to you which has been collected on the basis of Art. 6 (1) (f) (in the context of a legitimate interest). You only have this right if there are special circumstances against the storage and processing.

Right to data portability
Pursuant to Art. 20 DSGVO, you have a right to the transfer of personal data relating to you. We will provide the data in a structured, common and machine-readable format. The data can be sent either to you or to a person responsible named by you.

We will provide you with the following data upon request pursuant to Art. 20 (1) DSGVO:

• Data collected on the basis of express consent pursuant to Art. 6 Para. 1 lit. a DSGVO or Art. 9 Para. 2 lit. a DSGVO;
• Data that we have received from you in accordance with Art. 6 Para. 1 lit. b DSGVO within the framework of existing contracts;
• Data that has been processed within the framework of an automated procedure.

We will transfer the personal data directly to a responsible party of your choice, insofar as this is technically feasible. Please note that we are not allowed to transfer data that interfere with the freedoms and rights of other persons pursuant to Art. 20 (4) DSGVO.
How do I exercise my rights?

You can exercise your rights at any time by contacting us using the contact details below:

GEDORE Automotive GmbH
Breslauer Street 41
DE-78166 Donaueschingen

Tel.: +49 (0) 771 / 8 32 23-0
Fax: +49 (0) 771 / 8 32 23-90
E-mail: info.gam@gedore.com

8. right of complaint to the supervisory authority pursuant to Art. 77 I DSGVO

If you believe that the processing of personal data concerning you violates data protection law, you have the right to lodge a complaint with a competent data protection supervisory authority.