DATA PROTECTION INFORMATION

Thank you for visiting our website. We take compliance with data protection regulations very seriously. The aim of this Data Protection Statement is to explain to you, as a website user, the nature, scope and purpose of processing of personal data and the rights you have as a data subject as defined in Article 4, no. 1 of the General Data Protection Regulation (GDPR).


1. Controller

This website and service offering is provided by:

H. von Gimborn GmbH
Albert-Einstein-Str. 6
46446 Emmerich am Rhein

Telephone: +49 (0) 2822-964-0
Fax: +49 (0) 2822-964-113

E-mail: info@gimborn.de

Managing Director and authorised representative: Jan Beckschäfer

 

2. General

We have developed the website so that we collect as little data as possible from you. Basically, it is possible to visit our website without providing personal data. Only when you decide to use specific services (e.g. use the contact form) will it be necessary to process personal data. In so doing, we always ensure that we process your personal data only in accordance with the law, or on the basis of your consent. We abide by the rules contained in the General Data Protection Regulation (GDPR), which has been in force since 25 May 2018 and the respective applicable national provisions, such as the German Federal Data Protection Act, the German Telemedia Act, or other, more specific data protection laws.

 

3. Intended use and legal basis for processing personal data

We always process your personal data for a specific purpose.
In summary, we process your personal data for the following purposes:

  • a) so that we can deal with your enquiry when you contact us (e.g. e-mail address, first name, last name)
  • b) so that we can send you a quote in response to your request for a quote (quotation form)
  • c) so that we can receive and process an application by you in response to one of our job vacancies
  • d) so that we can provide the technical features of our website and provide you with our information on this website (e.g. IP address, cookies, browser information)
  • e) for participation in prize draws or photo competitions

The specific purposes are described for each type of processing mentioned here (e.g. contact form, web analysis, order process etc.)

With regard to the legal basis for the processing of your data, the following applies:
We process personal data required for substantiating, rendering or implementing our services (contract processing) on the basis of Article 6 (1) b GDPR. If we obtain your consent to the processing of your personal data, in accordance with Art. 6 (1) a GDPR, that consent forms the legal basis for the processing of your data. Data processing is also permitted if we are processing your data in order to pursue our legitimate interests and your interests or fundamental rights and freedoms with regard to the processing of personal data do not override our legitimate interests. If we use external service providers within the scope of data processing, processing is carried out on the basis of Article 28 GDPR.

 

4. Collected and processed personal data

As part of our web offering, we collect and process certain personal data concerning you. Specifically, we process the data you have to provide when filling in forms on the website (e.g. contact form or order form) and the data pertaining to each of the processing operations described here.

In summary, we collect and process the following data about you via our website:

General contact details:

  • Last name, first name
  • E-mail address
  • Content of message

Media enquiries:

  • Last name, first name
  • E-mail address
  • Content of message

Online application by e-mail:

  • Last name, first name
  • Street, house number
  • Postcode
  • Town
  • E-mail address
  • Message
  • Application documents

We will collect and process your data only for the purposes mentioned in this Data Protection Statement. Your express consent is required for use that exceeds the stated purpose. The same applies also to transfer and transmission of your data to third parties.

5. Collection of personal data when visiting our website

If you use our website solely to gather information, i.e. if you do not register or otherwise share information with us, we only collect the personal data that your browser transmits to our server. If you would like to browse our website, we collect the following data which we require for technical purposes in order to show you our website and ensure its stability and security (on the legal basis of Art. 6(1)f GDPR):

  • IP address
  • date and time of enquiry
  • time zone difference compared with Greenwich Mean Time (GMT)
  • content of the enquiry (specific page)
  • access status/HTTP status code
  • volume of data transmitted each time
  • website from which the request was received
  • browser
  • operating system and its interface
  • access status/HTTP status code
  • language and version of the browser software

In addition to the abovementioned data, when you use our website cookies are stored on your computer. More information about this can be found under the “Cookies” heading in this Data Protection Statement.

 

6. Inclusion of third-party services

Our website uses content and services from other providers, such as services for the statistical evaluation of usage of and visits to our website, or in order to embed videos from video platforms such as YouTube or Vimeo. It is essential for the user’s IP address to be transmitted to these third-party providers so that this data can be retrieved and displayed in the user’s browser.

Even if we strive to only use third-party providers who need the IP address solely to be able to supply content or who work with anonymised IP addresses, we are unable to influence whether or not the IP address is stored. Information about the third-party providers used can be found below in this Data Protection Statement.

 

7. Cookies

Our website collects and stores information by using what are known as browser cookies. Cookies are little text files that are stored on your computer and store specific settings and data for exchange with our system via your browser. In general, a cookie contains the name of the domain that sent the cookie data, as well as information about the cookie’s age and an alphanumeric identification code.

Cookies make it possible for our system to identify the user’s device and potentially to make preferences available immediately. A cookie is transmitted to the hard drive of the user’s computer as soon as a user accesses the platform. Cookies help us to improve our website and to offer you a better, more customised service. They let us recognise your computer or (mobile) end device if you return to our website and, as a result:

  • save information about your preferred activities on the website and thus tailor our website to your individual interests
  • accelerate the speed with which we process your enquiries.

We use third-party services that help us to make the internet offering and website more interesting for you. When you visit the website, cookies from these partner companies (third-party providers) are also stored on your hard drive. These are cookies that are automatically erased after the specified time.

The table below lists the cookies we place on your computer:

Cookie name First-party cookie or third-party cookie? For third-party cookies: Who is the agent? Description/Position Standard elapse time
IDE Third party .doubleclick.net Used by Google DoubleClick to register and report the user’s actions on the website after the advert or clicking on one of the provider’s adverts, with the aim of measuring an advertisement’s effectiveness and displaying targeted advertising for the user. approx. 1 year
test_cookie Third party .doubleclick.net Used to check whether the user’s browser supports cookies. Expires when the session ends
_ga First party .gimborn.eu Used to identify a user 2 years
_gat First party .gimborn.eu This cookie limits the request rate Session
_gat_UA-85356378-1  First party .gimborn.eu This cookie additionally contains the identity number (_gat_ < ***>) of the Google Analytics account or website to which the cookie relates. 1 year
_gid First party .gimborn.eu This cookie distinguishes users. 1 day
GPS Third party .youtube.com Registers a unique ID on mobile devices to enable tracking based on geographical GPS location. Session
PREF Third party .youtube.com Registers a unique ID which is used by Google to keep statistics on how the user uses YouTube videos on various websites. 8 months
VISITOR_INFO1_LIVE Third party .youtube.com Tries to estimate user bandwidth on pages with embedded YouTube videos. 179 days
YSC Third party .youtube.com Registers a unique ID to keep statistics on the YouTube videos watched by the user. Session
remote_sid Third party .youtube.com To embed and safeguard the functionality of YouTube videos 1 year

If you do not want us to store browser cookies on your device, you can adjust your browser’s settings to prevent this. Please note that in this case you may have only restricted use of our website, or not be able to use it at all. If you only want to accept our cookies, but not those of our service providers and partners, you can choose the ‘Block third-party cookies’ setting in your browser. We do not assume any responsibility for use of third-party cookies.

8.     Contact (contact forms, e-mail)

You can contact us by e-mail or by using our contact forms. In this case, we save the personal data you send to deal with your enquiry and to contact you to resolve your query. If we request information on our contact form, we have marked the required fields in order to contact us (asterisk). We use the voluntary information to gain a better understanding of your enquiry and to enable us to resolve your query more efficiently. You send the requested data to us on a purely voluntary basis.
Depending on the type of enquiry, the legal basis for this processing is Art. 6(1)b GDPR for enquiries which you make yourself as part of steps prior to entering into a contract or Art. 6(1)f GDPR if your enquiry is of a different nature. Our legitimate interest is based on the purposes stated in 3a.). If personal data is requested which we do not need in order to perform a contract or pursue legitimate interests, that data is sent to us on the basis of consent given by you in accordance with Art. 6(1) a GDPR.

 

9.     Application process

We publish job vacancies on our website for which you can apply by e-mail. If you decide to apply for a vacancy, we process the personal data you provide and send to us solely for the purposes of conducting the application process.

If your application is unsuccessful, we erase your data as soon as a retention period of 6 months required by employment law has elapsed. This period commences when we send you the rejection. If you have expressly consented to the further use of your data in order for us to subsequently contact you about jobs which may be of interest to you, we will retain your data in accordance with your consent. We will not share your personal data with third parties who are not involved in the specific application process without your express consent or a legal basis.

In the application process, we do not require information about “special categories of personal data” in order to assess an application. Special categories are data from which racial and ethnic origin (including your photo), political views, religious or philosophical beliefs or trade union membership can be deduced, as well as genetic data, biometric data which clearly identify a natural person, health data or data about a natural person’s sex life or sexual orientation. We strongly advise you not to include any information about such data in your stored data. If the data you provide contains such information, we can only process your application if you send us your explicit consent to storing these special categories of personal data. We would have to obtain this consent separately from you and this would cause a delay in the application process.

Please note that applications that you e-mail to us are transmitted unencrypted. There is therefore a risk that unauthorised persons could intercept and use this data.

The legal basis for the processing of your personal data in the application process is Section 26(1) in conjunction with (2) German Federal Data Protection Act.

DATA PROTECTION INFORMATION FOR APPLICANTS

  1. Which sources and data do we use?

We process personal data which we receive from you as part of the application process.

Type of data:

In particular, relevant personal data includes:
personal details (name, address and other contact details, date and place of birth, nationality),
bank details (for reimbursement of travel expenses),
identification data (e.g. ID card details)
health data (e.g. information about disability/severe disability),
qualification papers (e.g. certificates, assessments and other training certificates) photographs (only provided voluntarily).

 

  1. For what purpose do we process your data (purpose of processing) and on what legal basis?

We process your personal data in compliance with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and sectoral data protection standards which may apply to the application process (Social Insurance Code, Telecommunications Act, Works Constitution Act, etc.).

 
2.1 In order to carry out the application process

Personal data (Art. 4(2) GDPR) is processed in order to carry out the application process, having due regard for Art. 88 GDPR and Section 26 BDSG. There is no contractual obligation.

2.2 In pursuit of legitimate interests

To the extent necessary, we also process your data to pursue our legitimate interest or legitimate interests of third parties. For example: establishing legal claims and defence in legal disputes, measures involved in managing the business and development measures.

2.3 On the basis of your consent:

If you have given us your consent to the processing of personal data for certain purposes (e.g. sharing application data with affiliated companies), the lawfulness of this processing is based on your consent. Consent given can be withdrawn at any time. Please be aware that withdrawal applies only for the future. Processing undertaken prior to the withdrawal is unaffected. If you withdraw consent to the processing of personal data collected, the purpose for which that data was collected can no longer be fulfilled or implemented.

2.4 On the basis of legal requirements:

As a company, we are also subject to various legal obligations (e.g. tax laws, social legislation). The purposes of processing include measures in fulfilment of monitoring and reporting obligations.

 

  1. 3. Who receives my data?

Within the company, the parties who require your data in order to complete the application process and fulfil legal obligations have access to that data. Processors used by us may also receive data for these purposes. As well as companies belonging to the group, these include companies in the IT services category. With regard to the transmission of data to recipients outside the company, it must first be noted that we abide by the applicable data protection rules. We are only permitted to share information about you if legal provisions require us to do so, you have consented or we are authorised to share information. Under these conditions, recipients of personal data can include affiliated companies (for the purposes of the application process for other jobs). Other potential recipients of data are the parties to whom we may transmit data based on your consent.

 

  1. 4. For how long will my data be stored?

To the extent necessary, we process and store your personal data for the duration of the application process. Your personal data will be erased once the purpose has been fulfilled (application process) but at the latest after 6 months. As soon as the storage of the data is no longer necessary in order to carry out the application process and there are no statutory retention periods or you have not given your consent to longer storage (e.g. for future application processes), your data will be deleted without undue delay.

 

  1. 5. Is data transmitted to a third country or to an international organisation?

Data is not transmitted to third states (states outside the European Economic Area, EEA).

 

  1. 6. What are my data protection rights?

Every data subject has the right by law to information about the processing of their personal data, the right to rectification, the right to erasure, the right to restriction of processing, the right to object to processing and the right to data portability. The restrictions in accordance with Sections 3 and 35 BDSG apply to the right to information and the right to erasure. There is also a right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR in conjunction with Section 19 BDSG).

 

  1. 7. Do I have an obligation to provide data?

As part of the application process, you have only to provide the personal data necessary for the application process. There is no obligation to provide us with this data. Normally, we cannot carry out the application process without this data.
If you apply to us for an internship or training course and are not yet 16 years of age, please ask the person who is your legal guardian to complete the consent provided via the link below. Otherwise, we are unfortunately unable to process your application.

Consent pursuant to Article 8 GDPR for minors up to age 16

Download: Consent pursuant to Article 8 GDPR for minors

  1. To what extent does automated decision-making take place in individual cases?

We do not use any automated processing operations to reach a decision on the substantiation and conduct of the application process.

 

  1. To what extent is my data used for profiling (scoring)?

We do not use any data for profiling (scoring) for the purposes of substantiating and conducting the application process.

 

Information about your right to object:
You have the right to object at any time to the processing of your personal data. If you object, we will no longer process your personal data unless we can demonstrate compelling reasons for such processing which override your interests, rights and freedoms, or if the processing is in order to establish, exercise or defend legal claims. The objection is not subject to any formal requirements and should preferably be sent to:

H. von Gimborn GmbH
Albert-Einstein-Str. 6
46446 Emmerich am Rhein
datenschutz@gimborn.de

10. Use of Google Maps

Our website uses the Google Maps map service to integrate and display map content. This service is provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Your IP address is recorded when you download a page with an integrated map from Google Maps. This information is generally transferred to a Google server in the USA and stored there. Google learns the IP address that you used to log in, even if you do not have a user account. If you have logged in to your user account, Google is able to attribute your browsing behaviour directly to your personal profile. You can prevent this if you log out first. The provider of this page does not influence this transmission of data.

Google Maps is used in the interests of appealing presentation of our online offering and ease of locating us at the sites we list on the website. This represents a legitimate interest within the meaning of Article 6 (1) f GDPR.

Details about handling of user data can be found in Google’s Privacy Policy:
https://www.google.de/intl/de/policies/privacy/.

 

11. Use of YouTube

Our website uses plugins from YouTube, the site operated by Google, to integrate and display video content. The video portal provider is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
When you download a page with an integrated YouTube plugin, this establishes a connection to YouTube’s servers. This tells YouTube which of our pages you have downloaded.
If you have logged in to your YouTube account, YouTube is able to attribute your browsing behaviour directly to your personal profile. You can prevent this if you log out first.
YouTube is used in the interests of appealing presentation of our online offering. This represents a legitimate interest within the meaning of Article 6 (1) f GDPR.
Details on how user data is handled can be found in YouTube’s Privacy Policy at: https://www.google.de/intl/de/policies/privacy/.

 

12. Use of DoubleClick

Our website uses Google’s online marketing tool, DoubleClick. This service is provided by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

DoubleClick uses cookies to insert advertisements relevant to the user, to optimise performance reports, or to prevent the user seeing identical advertisements several times. Cookies are little text files that your web browser stores on your end device. By means of a cookie ID, Google captures which adverts are activated in which browser and in this way can prevent the adverts being displayed multiple times. Optimum marketing of our website represents a legitimate interest within the meaning of Article 6 (1) f GDPR.

Cookie IDs also help DoubleClick to record what are known as ‘conversions’, with regard to advertising enquiries. This happens, for example, if you see a DoubleClick advert and, at a later date, make a purchase from the advertiser’s website using the same web browser. According to Google, DoubleClick cookies do not store any personal information.

Because of the marketing tools used, your browser automatically creates a direct link to Google’s server. We have no influence over the scope and use of the data Google collects using this tool. To the best of our current knowledge, from DoubleClick Google learns which areas of our website you have accessed, or on which of our adverts you have clicked. If you are logged in to your Google account, Google can attribute your visit to our website to your account. Even if you are not logged in, it cannot be precluded that the provider identifies and stores your IP address.

A modern web browser lets you monitor, restrict and prevent the installation of cookies. You therefore have the possibility of objecting to the tracking process. Deactivating cookies may limit our website’s functionality. Google, as a company, is certified according to the EU-US Privacy Shield data protection agreement. This data protection agreement is intended to ensure compliance with the level of data protection applying in the EU.

Details of DoubleClick by Google’s data protection provisions can be found at: http://www.google.de/policies/privacy/

 

13. Use of Google Analytics

Our website uses functions from web analysis service Google Analytics. The web analysis service provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses cookies. These are little text files that your web browser stores on your device and that facilitate analysis of website use. Information about your use of our website generated by these cookies is transmitted to a Google server and stored there. The servers are usually located in the USA.
Google Analytics cookies are stored on the basis of Article 6 (1) f GDPR. As this website’s operator, we have a legitimate interest in analysing user behaviour, in order to optimise our web offering and advertising as applicable.

We use Google Analytics in conjunction with the IP anonymisation function. It ensures that Google abbreviates your IP address within EU Member States or in other states that are party to the European Economic Area treaty, before transmission of your IP address to the USA. In some cases, however, Google may transmit the full IP address to a server in the USA and abbreviate it there. Google will use this information on our behalf to analyse your use of the website, to generate reports about website activities and to provide us with other services associated with website and internet use. The IP address transmitted by Google Analytics is not combined with other Google data.

You can prevent cookies being placed by your web browser. This may, however, restrict some of our website’s functions. You can also prevent data about your website use, including your IP address, being collected and subsequently processed by Google. This can be done by downloading and installing the browser plugin via the following link: https://tools.google.com/dlpage/gaoptout?hl=de..

Details about Google Analytics’ handling of user data can be found in Google’s Privacy Policy: https://support.google.com/analytics/answer/6004245?hl=de#.

We have concluded an agreement with Google concerning processing in order to meet statutory data protection regulations in full.

Our website uses Google Analytics’ ‘Demographics’ feature. It generates reports containing information about the age, gender and interests of website visitors. This data is generated by Google’s interest-related advertising and also obtained from visitor data from Third-Party Providers. It is not possible to attribute data to a specific person. You can deactivate this function at any time. You can do this via the advertising settings in your Google account, or by generally prohibiting collection of your data by Google Analytics as explained under ‘Object to data collection’.

Alternatively, you can prevent data collection by Google Analytics by installing what is known as an “opt-out cookie”, by clicking here. If you delete cookies from your browser, you will have to click on this link again.

Google’s Privacy Policy can be found at: https://policies.google.com/technologies/partner-sites?hl=de

 

14. Use of Google Tag Manager

Our website uses the Google Tag Manager. This service allows website tags to be managed via an interface. The Google Tool Manager only implements tags. This means that: No cookies are used and no personal data is recorded. The Google Tag Manager causes other tags to be activated which, in turn, record data. However, the Google Tag Manager does not access this data. If recording has been deactivated on domain or cookie level, this setting will remain in place for all tracking tags implemented with Google Tag Manager. Deactivation of recording on domain or cookie level will remain in place for all tracking tags implemented with Google Tag Manager. Google’s Privacy Policy can be found at: https://policies.google.com/privacy/partners?hl=de.

Google, as a company, is certified according to the EU-US Privacy Shield data protection agreement. This data protection agreement is intended to ensure compliance with the level of data protection applying in the EU.

 

15. Use of Google Inc.’s remarketing function

We use Google Inc.’s remarketing function on our website (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; ‘Google’). This function is used to analyse visitor behaviour and visitor interests.

Google uses cookies in order to analyse website use, which serves as a basis for generating interest-based advertising. The cookies record visits to the website as well as anonymous data about the use of the website. The personal data of visitors to the website is not stored. If you subsequently visit another website in the Google Display Network, you will be shown pop-ups that are very likely to take account of product and information areas previously viewed.

This may mean that your data is also transmitted to the USA. There is a European Commission adequacy decision in place for data transmission to the USA.

Processing takes place on the basis of Article 6 (1) (f) GDPR as a result of the legitimate interest in targeting visitors to the website with advertising by displaying to visitors to the provider’s website personalised, interest-based advertising when they visit other websites in the Google Display Network.

You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you pursuant to Article 6 (1) (f) GDPR.

You can also permanently disable the use of cookies by Google by clicking on the following link and downloading and installing the plug-in provided: https://support.google.com/ads/answer/7395996?hl=de.

Alternatively, you can disable the use of cookies from third-party providers by visiting the opt-out page of the Network Advertising Initiative at https://www.networkadvertising.org/choices/ and implementing the additional information provided there on opting out.

Further information about Google remarketing and the corresponding data protection statement can be found at: https://www.google.com/privacy/ads/.

16. Use of Google Adwords conversion tracking

On our website we use the online advertising programme ‘Google AdWords’, which also entails the use of conversion tracking. Google Conversion Tracking is an analysis service of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; ‘Google’). When you click on an ad displayed by Google, a code for conversion tracking is placed on your computer. These cookies are valid for a limited period of time, do not contain any personal data and therefore cannot be used to personally identify visitors to our website. If you visit certain pages of our website and the cookie has not yet expired, we and Google can recognise that you have clicked on the ad and been forwarded to that page. Every Google AdWords customer receives a different cookie. Therefore, it is possible that cookies about the websites of AdWords customers can be tracked.

The information obtained with the aid of the conversion cookie is used to generate conversion statistics. These statistics tell us the total number of users who have clicked on one of our ads and were forwarded to a page with a conversion tracking tag. However, we do not receive any information which can be used to personally identify users. Processing takes place on the basis of Article 6 (1) (f) GDPR as a result of the legitimate interest in targeted advertising and the analysis of the impact and efficiency of that advertising.

You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you pursuant to Article 6 (1) (f) GDPR.

To do this you can prevent the storage of cookies by selecting the appropriate technical settings on your browser software. However, please be aware that, if you do this, you may no longer be able to use all of the functions of this website. You will then not be included in the conversion tracking statistics.

You can also disable advertising personalised to you in the settings for advertising in Google. Instructions on how to do this can be found at https://support.google.com/ads/answer/2662922?hl=de. Alternatively, you can disable the use of cookies from third-party providers by visiting the opt-out page of the Network Advertising Initiative at https://www.networkadvertising.org/choices/ and implementing the additional information provided there on opting out.

Further information and Google’s Privacy Policy can be found at: https://www.google.de/policies/privacy/.

 

17. Data subjects’ rights

You have the right:

  • in accordance with Art. 15 GDPR to obtain information about your personal data which we process. In particular, you can obtain information about the purposes of the processing, the category of personal data concerned, the categories of recipient to whom your personal data have been or will be disclosed, the envisaged period for which the personal data will be stored, the existence of the right to rectification or erasure, restriction of processing or the right to object, the source of your data if not collected by us and the existence of automated decision-making including profiling and, in those cases, meaningful information about the logic involved;
  • in accordance with Art. 16 GDPR, to obtain without undue delay the rectification of inaccurate personal data concerning you stored by us;
  • in accordance with Art. 17 GDPR, to obtain the erasure of personal data concerning you stored by us, provided the processing is not necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
  • in accordance with Art. 18 GDPR, to obtain the restriction of the processing of your personal data, if the accuracy of the data is contested by you, the processing is unlawful but you oppose its erasure and we no longer need the data but you require the data for the establishment, exercise or defence of legal claims or you have objected to processing pursuant to Art. 21 GDPR;
  • in accordance with Art. 20 GDPR to receive your personal data which you have provided to us, in a structured, commonly used and machine-readable format or to have that data transmitted to another controller (data portability);
  • in accordance with Art. 7(3) GDPR, to withdraw the consent you gave to us at any time. If you do this, we will not be able to continue the data processing to which such consent related in future and
  • in accordance with Art. 77 GDPR to lodge a complaint with a supervisory authority. As a rule, you can lodge a complaint with the supervisory authority for your habitual residence or place of work or for our registered office.
  • Right to object If your personal data is processed on the basis of legitimate interests in accordance with Art. 6(1) f GDPR, you have the right, pursuant to Art. 21 GDPR, to object to the processing of your personal data provided there are grounds to do so relating to your particular situation or the objection relates to direct marketing. In the latter case, you have a general right to object, which we will implement without you telling us about a particular situation.

To exercise your right to withdraw consent or to object, simply send an e-mail to datenschutz@gimborn.de

 

18. Forwarding of your personal data

Your personal data is forwarded as described below.

The website is hosted by an external service provider in Germany. We will ensure that data processing takes place in Germany only. This is required in order to operate the website and to substantiate, execute and implement the existing licence agreement and is also possible without your consent.

Your data may also be forwarded if, due to statutory provisions and/or official or court orders, we are authorised or obliged to forward data. In particular, this may be a question of provision of information for the purposes of prosecution, to avert risks, or to enforce intellectual property rights.

If your data is forwarded to service providers to the extent necessary, they have access to your personal data only insofar as is necessary for fulfilment of their duties. These service providers are obliged to handle your personal details in accordance with the applicable data protection laws, in particular the GDPR.

Over and above these circumstances, in principle we do not transmit your data to third parties without your consent. In particular, we do not pass personal data on to an agency in a third country or to an international organisation.

19. Data security

Unfortunately, transmission of data via the internet is never 100% secure, which is why we are unable to guarantee security of the data transmitted to our website via the internet.
We use technical and organisational measures, however, to secure our website against loss, destruction, access, modification or dissemination of your data by unauthorised persons.
In particular, we transfer your personal data in encrypted form. We use the SSL/TLS (Secure Sockets Layer/Transport Layer Security) coding system. We continually improve our security measures in accordance with technological developments.

 

20. Duration of personal data storage

With regard to storage duration, we erase personal data as soon as we no longer need to store it to fulfil the original purpose and all statutory periods of retention have elapsed. The statutory periods of retention ultimately are the criterion for the final duration of personal data storage. The corresponding data is routinely erased after the period has expired. Data processing is restricted by blocking the data if statutory retention periods have to be observed.

 

21. References and links

If you visit websites that are referred to on our website, you may be asked to provide information such as your name, address, e-mail address, browser properties, etc again. This Data Protection Statement does not govern the collection, forwarding or handling of personal data by third parties.

Third-party service providers may have their own provisions on collecting, processing and using personal data that differ from ours. We therefore advise that before inputting personal data, you visit the third party’s website to learn how they handle personal data.

 

22. Amendment of Data Protection Statement

We are continually developing our website in order to provide you with a continuously improved service. We will always keep this Data Protection Statement up to date and adapt it accordingly, if and insofar as this should become necessary.

You can view the latest version of our data protection provisions at any time online at www.gimborn.eu.

 

23. Data Protection Officer

We have appointed a Data Protection Officer.

Philipp Herold
www.mein-datenschutzbeauftragter.de

Hafenstraße 1a
23568 Lübeck, Germany

E-mail: datenschutz[at]gimborn.de

Status: June 2018