Data Protection Statement
In its role as controller, GEUTEBRÜCK GmbH, Im Nassen 7 – 9, 53578 Windhagen, Germany, safeguards your privacy. We are aware that you trust us to deal responsibly with the personal data that have been entrusted to us. With that in mind, this data protection statement provides you with information on the collection and processing of personal data on this website. Its goal is to explain to you how we deal with your personal data and what you can expect when you use our Web services.
I. Collection, processing, and use of personal data
Personal data are automatically collected and processed every time a user visits the website accessible at www.geutebrueck.com. For the purpose of ensuring smooth connection to the website, generating user statistics on the use of this website, improving the website, and ensuring system security and stability, the following data are collected:
- Date and visit to the URL the visitor is visiting
- URL the visitor visited immediately beforehand (referrer URL)
- Browser used
- Operating system used
- IP address of requesting computer
The legal basis for the data processing is Article 6 para. 1, (1) (f) GDPR. Our legitimate interest follows the abovementioned purposes of data collection.
The data are erased as soon as they are no longer necessary to achieve the purpose for which they were collected. In the event of storage of data in logfiles, this is the case after seven days at the latest. Storage beyond that is possible. In this case, the IP addresses of users are erased or anonymized in such a way that it is no longer possible to attribute them to the client accessing the site.
III. Website analysis/tracking
The Web analysis and tracking tools that we use as listed below are used on the basis of Article 6 para. 1 (1) (f) GDPR. The intention of the analysis and tracking measures we use is to ensure demand-driven design and ongoing optimization of our website. We also utilize these measures to track the use of our website in statistical terms and for analysis for the purpose of optimizing our offerings for you. These interests should be viewed as legitimate within the meaning of the provision mentioned above. For information on the purposes of data processing and the data categories of the tools used in each case, please read the paragraphs below.
Google will use this information on our behalf to analyze the use of our website by users, compile reports on activities within this website, and provide us with further services associated with the use of this website and Internet use. Pseudonymous use profiles of users may be generated based on the data processed.
We use Google Analytics only with activated IP anonymization. This means Google truncates the user’s IP address within Member States of the European Union or in other states that are signatories to the Agreement on the European Economic Area (EEA). Only in exceptional cases is the full IP address transmitted to a Google server in the United States and shortened there.
The IP address transmitted by the user’s browser will not be combined with other Google data. Users can prevent cookies from being saved by adjusting the settings of their browser software accordingly; we do, however, point out that in this case, it may not be possible to use all of the functions of this website in full. You can also prevent the information generated by the cookie with regard to your use of the website from being collected and provided to Google and from being processed by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=en.
For further information on how Google uses your data for advertising purposes and on setting and objection options, please consult Google’s websites: https://policies.google.com/technologies/partner-sites?hl=en (use of data by Google when you use websites or apps of our partners), http://www.google.com/settings/ads (use of data for advertising purposes), http://www.google.com/settings/ads (managing information that Google uses to show advertising to you) and http://www.google.com/ads/preferences (decide what ads Google shows to you). Google Analytics is configured in such a way that the data collected are erased after 14 months.
We also use the analysis software Matomo (formerly PIWIK) on various subpages (for example, shop.geutebrueck.com) for marketing and optimization purposes. The software places a cookie on users’ computers (see point II.). These cookies have a retention period of one week. If single pages of our website are visited, then two bytes of the IP address of the user, the URL on which the visitor is located, the URL that the visitor has visited immediately before, the length of stay on the website, and the frequency of the requests from the user’s IP are collected.
By shortening the IP address, identification of individual users is not possible. With the use of Matomo, we want to ensure a needs-based design and the continuous optimization of our website. On the other hand, we also use Matomo to statistically record the use of our website and to evaluate it for the purpose of optimizing our offers to you. Matomo runs on the company’s own servers. The processing of the users’ personal data takes place on the basis of article 6, paragraph 1, subparagraph 1, lit. f of the GDPR. In this regard, our legitimate interest derives from our published purposes for collecting data.
We offer our users the possibility to opt out of the analysis process on our website. To do this, please click on the following link:
In this case, an opt-out cookie is stored in your browser that prevents the collection of session data. If you delete your cookies, you automatically delete the opt-out cookie. The opt-out cookie must then be reset.
After 180 days, the data of each user will be deleted.
To support our online marketing activities, we use the marketing automation service of ClickDimensions LLC (6849 Peachtree Dunwoody Road, Building B-1, Suite 200, Sandy Springs, GA 30328, United States of America). In the process, cookies (see Sec. II) are temporarily placed on your device. The IP address, referrer URL, browser and operating system used, and the amount of time spent on a website are typically processed using the cookies. The service transmits the data to ClickDimensions servers in the United States, where they are stored. ClickDimensions is certified under the Privacy Shield agreement and has thus pledged to comply with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000TNmmAAG&status= Active). The personal data are collected on our behalf to enable demand-driven design and ongoing optimization of our website.
The personal data collected are erased as soon as the specified purposes of processing no longer apply, and in any event after 14 months at the latest.
If you do not agree to the processing of your data by ClickDimensions, you can object to the use thereof by clicking the opt-out in the cookie banner.
Google AdWords conversion tracking
We use Google AdWords and, within the scope of Google AdWords, conversion tracking. Google conversion tracking is an analytics service of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). When you click on an ad placed by Google, a cookie is temporarily placed on your computer for 30 days for conversion tracking. The conversion cookie notifies both Google and us that a user has clicked on the ad and been redirected to our website. At no time is it possible for us to identify a user personally. The information collected using the conversion cookie is merely used to generate conversion statistics, which include the total number of users who have clicked on our ads and may show whether they were redirected to a page of our website that is equipped with a conversion tag. These statistics are used to optimize our website and the ads placed.
If you do not wish to participate in tracking, you can object to this use by adjusting your browser settings to prevent the installation of conversion cookies (deactivation option). You will then no longer be included in the conversion tracking statistics. Alternatively, you can also adjust the Google ad settings or deactivate interest-related ads.
For further information and Google’s privacy statement, please visit:
IV. White papers
Our website offers white papers, which we can send to you upon request. To do this, we need your e-mail address.
If you would like further information from one of our experts in your region on the topic of the whitepaper, you will also be required to provide your address and contact details. You can voluntarily provide us with further information. You can withdraw your consent at any time by sending an e-mail to firstname.lastname@example.org. Your data and the IP address, date, time, and declaration of consent, along with information on the communication received will be stored for documentation purposes.
The legal basis for transmitting the white paper is Article 6(1)(a) and Article 7 GDPR. Records are kept as documentation of consent on the basis of Article 6(1)(f) GDPR. Our legitimate interest is derived from keeping documentation of consent that has been granted. For this purpose, we may store the data for up to three years after consent is withdrawn.
V. Social media
In addition to this website, we also maintain a presence in various social media channels. When you visit such a presence, your personal data may be transferred to the provider of the social network. It is possible that in addition to the storage of the data you have specifically entered in this social network, the provider of the social network also collects, processes, or uses further information.
Beyond that, the provider of the social network may collect, process, and use key information on the computer system from which you visit it, such as your IP address and the processor type and browser version used, including plugins.
If you are logged in using your personal user account for the relevant medium when you visit a social network, this medium can attribute the visit to that account. If you do not wish this information to be attributed to your account, you must log out of your account before visiting our presence.
For information on the purpose and scope of collection of data by the relevant medium and the further processing and use of your data there, along with your rights in this regard, please see the relevant medium’s specific policies:
VI. Training / Courses
Through our website, you can sign up for training courses (e.g., G-core training or G-SIM training) that we offer free of charge. As part of the registration, we will need your first and last name, address and contact information, and position and we will need you to select a date. Your data will be processed solely for the purposes of conducting the training. The legal basis for data processing is Art. 6, Para. 1, Clause 1, Letter b of the GDPR. After participating in the training, we will delete the data once the commercial and fiscal retention obligations have expired.
We offer our customers and partners the option of using certain services via a personal WebClub account. We use the contact and address information you provide in order to provide you with industry-specific and/or country-specific materials such as handouts via the WebClub and to answer open questions. The legal basis for the data processing is Article 6 para. 1 (1) (b) GDPR. If the WebClub account is deleted or the contractual relationship is terminated, the data with regard to the WebClub account are erased. This does not apply if obligations of storage under tax or commercial law conflict with the erasure thereof.
VIII. Communication channels
1. Contact form
To contact us, the contact form provided also collects the following personal data:
- First and last name
- e-mail address
- Your message
You can voluntarily provide us with further information, such as your company name, address, contact information, industry, and country, to the extent necessary in order to respond to your inquiries. The personal data collected are used exclusively to respond to your inquiry. After your inquiry is processed, we will delete the data unless we are obligated to keep them for a longer period for reasons of documentation, ongoing customer care or relevant statutory storage periods. For the purpose of establishing contact with us, data is processed according to Art. 6, Para. 1, Clause 1, Letter b of the GDPR or according to Art. 6, Para. 1, Letter f of the GDPR.
2. Feedback form
Feedback is highly important to us, which is why we offer you the option of sharing criticism and suggestions with us via our feedback form. To ensure that our service focuses on customers and solutions, and especially to follow up effectively on complaints, we collect the following data:
- First and last name
- Customer number
- Company name
- Contact information
- Your feedback message
- Type of complaint
The personal data collected are exclusively used to respond appropriately to the feedback, especially to follow up on complaints and resolve issues. After your inquiry is processed, we will erase the data unless we are obligated to keep them for a longer period for reasons of documentation, ongoing customer care or statutory storage periods. For the purpose of establishing contact with us, data is processed according to Art. 6, Para. 1, Clause 1, Letter b of the GDPR or according to Art. 6, Para. 1, Letter f of the GDPR.
3. Sticky teaser
In addition to the usual contact form, we also offer you the option to contact us quickly and easily via a short contact form (“sticky teaser”). The following data are collected when you use this form:
- First and last name
- Company name
- Your brief message
- Choice of contact channel (phone or e-mail)
- Depending on the choice of contact channel, the phone number or e-mail address
The personal data collected are used exclusively to respond to your inquiry. After your inquiry is processed, we will erase the data unless we are obligated to keep them for a longer period for reasons of documentation, ongoing customer care or statutory storage periods. For the purpose of establishing contact with us, data is processed according to Art. 6, Para. 1, Clause 1, Letter b of the GDPR or according to Art. 6, Para. 1, Letter f of the GDPR.
You can register on our website to receive our newsletter on the subject of value imaging news. This newsletter provides regular tips, studies, and information having to do with various aspects of this subject area. Your e-mail address is definitely required in order to register. You can voluntarily provide us with additional information such as your name so that we can address you personally. When you order our newsletter, you will receive an e-mail asking you to confirm your newsletter order (double opt-in procedure). Your newsletter subscription will not be activated until you click the confirmation link contained in this e-mail. If you do not click the link, your data will automatically be erased after 30 days. This allows us to ensure that no third parties have abused your personal data. Issuance of the declaration of consent is voluntary. You can withdraw your consent at any time with effect for the future by visiting www.geutebrueck.de/widerruf or clicking the link provided at the end of each newsletter. Alternatively, you can also send your unsubscribe request to email@example.com at any time. We store your opt-in information for documentation reasons. Your e-mail address, IP address, the date and time, declaration of consent, and information on the communication received are stored for documentation.
The legal basis for transmitting the newsletter is Article 6(1)(a) and Article 7 GDPR. Records are kept as documentation of consent on the basis of Article 6(1)(f) GDPR. Our legitimate interest is derived from keeping documentation of consent that has been granted. For this purpose, we may store the data for up to three years after you unsubscribe from the newsletter.
IX. Online applications
We publish current job openings on our website, where you are welcome to apply for these jobs. The “Career” section offers an online application system (“career board”) for applicants to apply online to work at Geutebrück GmbH. This system is operated by softgarden e-recruiting GmbH, Tauentzienstraße 14, 10789 Berlin, Germany, on behalf of Geutebrück GmbH in accordance with Article 28 GDPR. The information you provide and the file attachments you include are transferred via a secure connection. To process your application, we process the personal data you transfer when you submit your application documents. The legal basis for this data processing is Sec. 26 of the German Federal Data Protection Act (BDSG). If an employment agreement is signed between the applicant and us, processing takes place in order to implement the employment relationship, in observance of the statutory obligations of storage. If we decline the applicant’s application, we keep the application documents provided for another six months and then delete them in accordance with Article 6(1)(f) GDPR. This is done in order to allow us to justify the selection of candidates in objective terms even after the application process is complete, for example in possible court proceedings. To the extent that storage beyond that is intended, the applicant’s express consent is obtained pursuant to Article 6(1)(a) GDPR. The applicant can withdraw such consent at any time by sending an e-mail to firstname.lastname@example.org. For details regarding data processing in the online application system, please click here.
As our client, you can give us your consent to designate your company as a reference. To that end, we will provide you with a corresponding form upon request, which we will use to collect and store your first and last name, the company name, your position, your contact information and address, and, where applicable, a brief message. For reference purposes, data is processed based on Art. 6, Para. 1, Clause 1, Letter b of the GDPR.
Upon termination of the contractual relationship, we will delete the data once the commercial and fiscal retention obligations have expired.
XI. Disclosure of personal data
Beyond the above, personal data are not disclosed without your express consent pursuant to Article 6 para. 1 (1) (a) GDPR unless there is a statutory obligation pursuant to Article 6 para. 1 (1) (c) GDPR, this is required by law pursuant to Article 6 para. 1 (1)(b) GDPR for the handling of contractual relationships, or the disclosure thereof is necessary pursuant to Article 6 para. 1(1) (f) GDPR for the establishment, exercise or defense of legal claims and there is no reason to assume you have an overriding legitimate interest in the non-disclosure of your data.
XII. Data security
The website is protected by means of technical and organizational measures against loss or destruction of, access to, and modification or dissemination of your data by unauthorized parties. Within your visit, we use the widespread SSL (Secure Sockets Layer) protocol in connection with the highest level of encryption supported by your browser in each case. This is typically 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can see whether an individual page of our website is transmitted with encryption by checking whether the key or lock symbol in the bottom status bar of your browser is shown as closed. Despite regular checks, it is not possible to provide full protection against all risks. Nonetheless, our security measures are subject to continuous improvement in line with technological developments.
XIII. Rights of data subjects
You have the following rights:
1. pursuant to Article 15 GDPR, the right to obtain information from us regarding the personal data concerning you that we process. In particular, you can obtain information regarding the purposes of processing, the category of personal data processed, the categories of recipient to whom the personal data have been or will be disclosed, the envisaged period for which the personal data will be stored, the existence of the right to rectification or erasure or restriction of processing or to object to such processing, the existence of a right to complain, the source of your data to the extent that they were not collected by us, and the existence of automated decision-making, including profiling, and, where applicable, meaningful information about the details thereof;
2. pursuant to Article 16 GDPR, the right to obtain without undue delay the rectification of inaccurate personal data concerning you that are stored by us and to have incomplete personal data concerning you that are stored by us completed;
3. pursuant to Article 17 GDPR, the right to obtain the erasure of personal data concerning you that are stored by us without undue delay, provided that processing is not necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defense of legal claims;
4. pursuant to Article 18 GDPR, the right to obtain restriction of processing of your personal data where you contest the accuracy of the data, the processing is unlawful and you oppose the erasure of the data, and we no longer need the data, but they are required by you for the establishment, exercise or defense of legal claims or you have objected to processing pursuant to Article 21(1) GDPR;
5. pursuant to Article 20 GDPR, the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and to obtain the transmission of those data to another controller;
6. pursuant to Article 7(3) GDPR, the right to withdraw your consent, once granted, toward us at any time. This will result in our no longer being permitted to continue the data processing based on this consent for the future; and
7. pursuant to Article 77 GDPR, the right to lodge a complaint with a supervisory authority. You can typically contact the supervisory authority in the location of your habitual residence or place of work or the place of our company registered office to do this.
XIV. Right to object
To the extent that your personal data are processed based on legitimate interests pursuant to Article 6 para. 1(1) (f) GDPR, you have the right to object pursuant to Article 21 GDPR to the processing of your personal data on grounds relating to your particular situation or if the objection is aimed at direct marketing. In the latter case, you have a general right to object that we will honor without any indication of a particular situation. If you wish to exercise your right to withdraw consent or right to object, an e-mail to email@example.com is sufficient.
XV. Contact person for data protection; contact information for the data protection officer
If you have questions regarding the collection, processing or use of your personal data or regarding existing rights of data subjects, please contact us at + 49 (0) 2645 137 0 or firstname.lastname@example.org or directly contact our external data protection officer by e-mail at email@example.com.