(Status: 24 May 2018)
We are pleased at your visit to our website and your interest in our company. The following information provides a simple overview of what happens to your personal data when you visit our website, www.gefeg.com. Personal data consists of individual details concerning a specific or specifiable natural person with which this person can be identified. This includes information such as one's name, telephone number or date of birth. Detailed information regarding data protection can be found in the Privacy Policy below.
In principle, it is possible to use the GEFEG mbH website without providing personal data. If you use our website for informational purposes only (that is, you do not log in, register, place an order or otherwise provide us with information regarding yourself), we will not process any personal data, except the data transmitted by your browser to facilitate your visit to the website.
If you use our website or pages of our web application GEFEG.Portal solely for informational purposes, we will, to some extent, process the data transmitted by your browser through cookies used for the statistical analysis of the usage of these pages.
If you log on to our website or our GEFEG.Portal pages, register, place an order or otherwise transmit personal data to us or utilise special services of our company, the processing of personal data becomes necessary. If there is no legal basis for such processing, we obtain the consent of the data subject.
Data Controller within the meaning of the General Data Protection Regulation (GDPR)
GEFEG mbH
Storkower Straße 207
10369 Berlin
Email: info(at)gefeg.com
Fax: +49 (0)30 979914 22
Contact details of our Data Protection Officer:
GEFEG mbH
Data Protection Officer
Storkower Straße 207
10369 Berlin
Email: info(at)gefeg.com
Fax: +49 (0)30 979914 22
Our Privacy Policy is intended to be easy to read and understand for the public and for our customers and business partners. In an effort to ensure this, we wish to explain the terms that we use:
a) Personal data "Personal data" means any information relating to an identified or identifiable natural person (hereinafter, "data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. (Article 4(1) GDPR)
b) Processing "Processing" means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, querying, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. (Article 4(2) GDPR)
c) Consent "Consent" of the data subject means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her. (Article 4(11) GDPR)
d) Pages or GEFEG pages By "pages" we mean both the Internet site of GEFEG mbH (website) and GEFEG.Portal pages, including their subpages.
Collection of general data and information
The GEFEG mbH website and the GEFEG.Portal pages collect several types of general data and information upon each retrieval by a data subject or an automated system. These general data and this information are stored in the log files of the server. The following are collected: the browser types and versions used, the operating system used by the accessing system, the website from which an accessing system arrives at our pages, the subpages that are targeted by an accessing system on our pages, the date and time of access to a page, an Internet Protocol (IP) address, the accessing system's Internet service provider, and other similar data and information that serve the purpose of averting risks in the event of any attack on our information technology systems.
When using such general data and information, GEFEG mbH does not draw any conclusions regarding the data subject. Rather, such information is needed to properly deliver the contents of our pages, to optimise the contents of our pages and to advertise them, to ensure the continued functioning of our information technology systems and the technology of our pages, and to provide law enforcement authorities with the information necessary for criminal prosecution in the event of a cyberattack. GEFEG mbH evaluates such data and information collected anonymously both statistically and with the objective of increasing the privacy and data security of our company, in order to ensure the best possible level of protection for the personal data we process. The anonymous data of the server log files are stored separately from all personal data provided by a data subject.
Legal basis
The basis for the processing of data is the protection of our legitimate interests in accordance with Article 6(1) point (f) GDPR in being able to make the pages available to you technically. Our legitimate interest is to provide you with engaging, technically functional and easy-to-use pages, and to take measures to protect our pages from cyber risks and to prevent our pages from posing cyber risks to third parties.
Collection of personal data upon registration / Contact requests via GEFEG pages
In addition to a purely informative retrieval, you can also actively use our website or GEFEG.Portal pages to order or use any of our products or services, register for an event, sign up for our newsletter or contact us. In addition to the processing of your personal data as presented above for a use that is purely informative in nature, in these cases, we will process further items of your personal data that we need to handle your order or to process and answer your request.
Google Analytics on GEFEG.Portal pages
We use Google Analytics on some of our GEFEG.Portal pages, which is a web analysis service provided by Google Inc. Google Analytics uses so-called "cookies”, that is, text files that are stored on your computer and enable analysis of your use of the website. Usually, the information generated by the cookie regarding the use of our website is transmitted to a Google server in the USA where it is stored. Only in exceptional cases will the full IP address be sent to a Google server in the USA and truncated there. On our behalf, Google will use such information to evaluate the use of the website, to compile reports on website activity and to provide other services related to website activity and Internet usage. The IP address transmitted by your web browser in connection with Google Analytics will not be merged with other Google data.
You can prevent the storage of cookies by setting your browser software accordingly; however, we must inform you that in such a case, you may not be able to use all features of our website to the full extent.
You can prevent the recording of the data generated by the cookie and related to your use of our website (including your IP address) as well as the processing of such data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=en-GB
Duration of data storage
When our websites are used for purely informational purposes, we store your personal data on our servers for the duration of your visit to our websites. After you leave our website, your personal data are erased immediately.
As a rule, cookies that we install are also deleted after our website is exited. However, this does not apply to log-in cookies. These cookies remain stored for a period of 24 hours after you have logged out. However, this does not apply to cookies set by the web analytics tool, Google Analytics. These cookies can be stored on your device for up to 2 years. You have the option to delete installed cookies yourself at any time.
Collection of personal data for contact requests apart from GEFEG pages
When you send us a contact request (for example, by telephone, mail or to our email address), we process the personal data you provide in this connection in order to be able to process and answer your request. In any event, this includes your name and email address in order to give you an answer, along with any other information we receive as part of your message. Registered persons are free to have the personal data that was provided when establishing contact completely erased from our database.
Legal basis
The basis for the processing of data is the protection of our legitimate interests in accordance with Article 6(1) point (f) GDPR; our legitimate interest is the proper answering of contact requests.
Conclusion of a contract
If you order any of our products or services or enter into contractual negotiations with us, we will process your personal data in order to fulfil our contractual obligations, for example, to accept the order, to process it and to provide you with the products or services that have been ordered.
What personal data is thereby transmitted depends on the respective input mask used for the registration when you contact us through our pages.
For other types of contact, we need at least the name and email address of the data subject to be able to respond. The personal data provided by the data subject are collected and stored solely for internal use and for our own purposes.
In individual cases, we will process your personal data in order to engage in direct advertising. If you do not want to receive advertising, you have the right to object to this at any time. We will take such an objection into account for the future.
Your data will no longer be processed for purposes of direct advertising if you object to processing for such purposes.
Legal basis
The basis for the processing of data is the fulfilment of a contract or the implementation of pre-contractual measures pursuant to Article 6(1) point (b) GDPR.
Provision of services
To the extent necessary within the framework of the fulfilment of the contract, we will process your personal data for the provision of services, for example in order to contact you, coordinate appointments, clarify questions and furnish services.
Legal basis
The basis for the processing of data is the fulfilment of a contract or the implementation of pre-contractual measures pursuant to Article 6(1) point (b) GDPR.
Payment
We use payment service providers and banks to handle payments.
Legal basis
The basis for the processing of data is the fulfilment of a contract or the implementation of pre-contractual measures pursuant to Article 6(1) point (b) GDPR.
Compliance with statutory regulations
We also process your personal data in order to fulfil other statutory duties that we have in connection with carrying out the contract. Such duties include, in particular, retention periods under commercial, trade or tax law.
Legal basis
The basis for the processing of data is the fulfilment of a legal obligation that we are subject to in accordance with Article 6(1) point (c) GDPR, particularly in connection with the provisions of commercial, trade or tax law.
Assertion of rights
In addition, we process your personal data in order to assert our rights and enforce our legal claims. We will also process your personal data in order to defend ourselves against legal claims. Finally, we will process your personal data to the extent necessary to defend against or prosecute criminal acts.
Legal basis
The basis for the processing of data is the protection of our legitimate interests in accordance with Article 6 (1) point (f) GDPR, to the extent that we assert legal claims or defend ourselves in legal disputes, or we prevent or clarify criminal offences.
Free services on GEFEG.Portal pages
GEFEG mbH offers free services on some GEFEG.Portal pages (validation portals).
The same rules for the handling of personal data that apply for the paid services furnished by GEFEG mbH apply for the services of GEFEG mbH that are offered for free.
Duration of data storage
In the case of the active use of our pages and upon any contact request, conclusion of a contract or registration for an event outside of these pages, we will initially store your personal data for the duration of your request. If this results in a business relationship and/or a contract, we will store your personal data for the duration of our business relationship or for the duration of the contractual relationship. This also includes the initiation of a contract (pre-contractual legal relationship) and the handling of a contract.
In addition, we will store your personal data until the expiration of the statute of limitations of any legal claims arising from the relationship with you, in order to, where necessary, use them as evidence.
Upon expiration of the statute of limitations, we will erase your personal data, unless there is a statutory retention duty, for example that arising from the German Commercial Code (Handelsgesetzbuch, § 238, § 257, para. 4) or from the German Tax Code (Abgabenordnung, § 147, para. 3, 4). Such retention obligations may amount to two to ten years.
Data processing when registering for the email newsletter
If you subscribe to our newsletter, we will process the data required for this or data communicated separately from you in order to send you our regular email newsletter.
Data usage for email advertising
If we receive your email address in connection with the conclusion of a contract and the provision of our products or services, and you have not objected to this, we reserve the right to send you offers of similar products or services from our range by email. You may object to the use of your email address at any time by sending a message to the contact option specified above or via the link provided for this purpose in the promotional email.
Legal basis
In these specified cases, the basis for the processing of data is the protection of our legitimate interests in accordance with Article 6(1) point (f) GDPR in conjunction with § 7 (3) German Act against Unfair Competition (Gesetz gegen den unlauteren Wettbewerb); our legitimate interest is the direct advertising of our products and services.
Registration and (free) use
If you register on one of our GEFEG.Portal pages to use the free service therein, we will process the personal information you provide in order to handle and respond to your request. In any event, this includes your name and email address in order to provide you with an answer, along with the other information that you provide to us during the course of your registration. Registered persons are free to have the personal data provided when registering completely erased from our database, as soon as they no longer wish to use our service and no statutory retention duties conflict with this.
Statistical evaluation
We use cookies for the purpose of statistical analysis of the use of our GEFEG.Portal pages. This allows us to improve the quality of our websites and their content. We learn how the website is used, and can thus continuously optimise our offer.
The information obtained within the framework of the statistical analysis of our website will not be merged with any other of your data collected through the website.
Legal basis
The basis for the processing of data is Article 6(1) point (b) GDPR, which allows for the processing of data for the fulfilment of a contract or pre-contractual measures.
We transmit personal data to third parties only to the extent that this is necessary within the framework of a contract, such as banks entrusted with the processing of payments. There is no further transmission of data, or this does take place only if you have expressly consented to the transmission. There will be no forwarding of your data to third parties, such as for advertising purposes, without your explicit consent.
In the following, we state for you the categories of recipients of your personal data: - Payment service providers and banks, for the settlement of payments, - Possibly, collection agencies and legal advisers when asserting our claims.
Legal basis
The basis for the processing of data is Article 6(1) point (b) GDPR, which allows for the processing of data for the fulfilment of a contract or pre-contractual measures.
As a service provider, GEFEG mbH makes websites or GEFEG.Portal pages available for third parties.
Collection of general data and information
Upon each retrieval by a data subject or an automated system on these pages, general data and information is collected through the page. Such general data will be processed and used in the same manner as the data on our own GEFEG pages.
Statistical evaluation
We use cookies for the purpose of statistical analysis of the use of these pages. This allows us to improve the quality of these pages and their content. We learn how the pages are used, and can thus continuously optimise our offer.
The information obtained within the framework of the statistical analysis of these pages will not be merged with any general data concerning you collected through the website.
Legal basis
The basis for the processing of data is - the preservation of our legitimate interests in accordance with Article 6(1) point (f) GDPR in being able to make the website available to you technically. In doing so, our legitimate interest is to provide you with an engaging, technically functional and easy-to-use website, and to take measures to protect our website from cyber risks and to prevent our website from posing cyber risks to third parties. - article 6(1) point (b) GDPR allows for the processing of data for the fulfilment of a contract or pre-contractual measures.
Subject to the statutory conditions, you are entitled to the following rights as the data subject, which you can assert against us:
Right of access:
Within the framework of Article 15 GDPR, you are entitled at any time to request confirmation from us as to whether we are processing personal data relating to you; if this is the case, you are also entitled within the framework of Article 15 GDPR to obtain information regarding such personal data and certain other information (including processing purposes, categories of personal data, categories of recipients, planned storage period, your rights, the source of the data, the use an automated decision-making process and, in the case of a third country transfer, the suitable guarantees) and a copy of your data.
Right to rectification:
According to Article 16 GDPR, you are entitled to demand from us that we rectify the personal data stored about you if such data is inaccurate or incorrect.
Right to erasure:
Under the conditions of Article 17 GDPR, you are entitled to demand that we erase your personal data without delay. There is no right to erasure, among other reasons, if the processing of the personal data is required for (i) the exercise of the right to freedom of expression and information, (ii) the fulfilment of a legal obligation to which we are subject (for example, statutory retention duties) or (iii) the assertion, exercise or defence of legal claims.
Right to restriction of processing:
Under the conditions of Article 18 GDPR, you are entitled to demand that we restrict the processing of your personal data.
Right to data portability:
Under the conditions of Article 20 GDPR, you are entitled to require us to deliver to you the personal data relating to you that you have provided to us in a structured, commonly used and machine-readable format.
Right to revocation:
You have the right to revoke your granted consent to the processing of personal data at any time, effective for the future.
Right to object:
Under the conditions of Article 21 GDPR, you are entitled to object to the processing of your personal data, such that we must stop the processing of your personal data. The right to object exists only within the limits provided for in Article 21 GDPR. In addition, our interests may preclude the termination of processing, such that we are entitled to process your personal data despite your objection.
The objection requires no special form and is to be directed whenever possible to:
GEFEG mbH
Storkower Straße 207
10369 Berlin or
unsubscribe(at)gefeg.com
Right to lodge a complaint with a supervisory authority
Under the conditions of Article 77 GDPR, you are entitled to lodge a complaint with a supervisory authority, in particular in the Member State of your place of residence, your place of work or the place of alleged infringement, if you believe that the processing of personal data relating to you violates the GDPR. The right to lodge a complaint exists without prejudice to any other administrative or judicial remedy.
The supervisory authority responsible for us is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Friedrichstrasse 219
10969 Berlin
Tel.: +49 30 13889-0
Fax: +49 30 2155050
Email: mailbox@datenschutz-berlin.de
However, we recommend that you first always direct a complaint to our Data Protection Officer.
We also recommend that you address requests regarding the exercise of your rights in writing to the address indicated above, or directly to our Data Protection Officer.
In principle, you are not obligated to provide us with your personal data. However, if you fail to do so, we will not be able to provide you with our pages, or will not be able to do so to the full extent, we will not be able to answer your requests and we will not be able to enter into a contract with you. Personal data that is mandatory for the processing purposes set forth above are marked by an asterisk.