Privacy Policy

Data Protection Declaration

We appreciate your visit on and your interest in our website www.gse-glass.com. The protection of your private data is self-evident for us. This is why we would like to provide you with the information below on how we process your personal data. The website www.gse-glass.com is an offering of Grenzebach Sorg Engineering GmbH (hereinafter “GS Engineering”).

Personal data is any data that allows to identify your person Here it is of no consequence whether the identification can be made based on a single piece of information. The more information and data can be amalgamated, the more precisely the person can be identified. Personal data includes, in particular, the name, address, age, e-mail address and phone number of a person.

 

1. Responsible for Data Processing

For questions, requests for information, applications, complaints and criticism regarding our data protection, you may approach the following entity:

Grenzebach Sorg Engineering GmbH
Stoltestr. 23
97816 Lohr am Main
Phone: +49 906 982-2862
E-mail: info@gse-glass.com
www.gse-glass.com

If you have questions or queries regarding the processing of your personal data you can contact our data protection organization directly. You can reach our data protection team including our data protection officer via:

E-mail: dataprivacy@grenzebach.com

 

2.Collection, Processing and Retention of Personal Data by GS Engineering

GS Engineering collects, processes and retains your personal data only if this is permitted under legal regulations or you have given your consent. We receive such personal data in two ways: either you communicated the personal data to us or we collect it when you use our services.

 

2.1 Data you communicate to us

As a rule, you may use our website without directly communicating personal information to us. For some services we will ask for personal information from you in order to either handle the respective service quickly and user-friendly or offer the service at all. You can find detailed information of all services offered by GS Engineering on this website under item “Individual services” article 4 of this privacy policy.

2.2 Data we receive by you using our services

Some data accrue automatically and, for technical reason, already when you visit our website. Such data is temporarily retained in a log file. A company commissioned with hosting this website stores this data temporarily in a so-called log file. The following information is collected in this context without any action on your part and retained until its automated erasure:

  • browser type
  • browser version
  • operating system used
  • referrer URL
  • time of the server request
  • IP address
  • HTTP status code
  • size of the transmission
  • access method

We process the aforementioned data for the following purposes:

  • to ensure smooth establishment of a connection to the website,
  • to ensure convenient use of our website,
  • to evaluate system security and stability.

The legal basis for the data processing is point (f) of Art. 6(1) GDPR. Our legitimate interest follows from the purposes of data processing that are listed above. We do not use the collected data to draw conclusions about your person in any case.

In addition, we use cookies when you visit our website. More detailed explanations on this can be found under clause 3 of this Privacy Policy.

2.3 Dissemination of data

During the processing of personal data on our website we sometimes may need to transmit or disclose data to internal or external bodies.  Recipients of this data may, for example, include IT service providers in the context of maintenance measures and administration of services and content. We ensure that the disclosure of personal data complies with the legal requirements. In particular, contracts are concluded with order processing bodies for commissioned processing in accordance with Art. 28 DSGVO.

If we disclose or transmit personal data to third parties, this is expressly indicated in the description within this data protection declaration or in the associated consent that you give us.

2.4 Data transfer to a third country or to an international organisation

Data is transferred to recipients in states outside the European Union (third countries) only where a recognised level of data protection exists or based on special guarantees, permission, certifications or binding internal data protection regulations, cf. Art. 44 – 49 GDPR.

 

3.Use of cookies

We use technologies on our website that are intended to facilitate the use of our website, to improve user-friendliness and to provide various functionalities. Such technologies include especially cookies and scripts.

For more information please refer to our cookie policy. The Cookie Policy explains which cookies we use for which purposes on our websites and what options you have when dealing with cookies.

 

4. Individual Services

The listed services are used by us based either on our legitimate interest as per Art. 6 Abs. 1 S. 1 lit. f DSGVO, your consent as per Art. 6 Abs. 1 S. 1 lit. a DSGVO, or on the basis of a contractual relationship we have with you, in accordance with Art. 6 Abs. 1 S. 1 lit. b DSGVO.

The respective data processing purposes and data categories can be found in the following descriptions of the used services:

4.1 Google Analytics

This website uses Google Analytics, a web analysis service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter “Google”). Google Analytics uses marketing cookies, which allow for an analysis of your use of the website. The information regarding your use of this website which is generated by the cookie is generally transferred to a server of Google in the USA and retained there. We enabled the IP anonymisation on this website so that your IP address will first be shortened by Google within the member states of the European Union or in other contracting states to the Agreement on the European Economic Area.

Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to analyse your use of the website, to compile reports about the website activities and to provide further services relating to the use of the website use and the Internet to the website operator. The IP address transferred by your browser in connection with Google Analytics will not be amalgamated with other Google data.

You may prevent the installation of the cookies by changing the settings of the browser software accordingly; however, we would like to draw your attention to the fact that, in this case, it might not be possible to use all functions of this website to the fullest extent.
In addition, you may prevent the collection of the data created by the cookie and related to your use of the website (incl. your IP address) as well as the processing of such data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=en-GB.

Before we set the relevant cookies on our homepage we will ask for your consent using our cookie banner. The legal basis for the processing is therefore given with your consent as per Art. 6 Abs. 1 S. 1 lit. a DSGVO.

4.2 Google Tag Manager

This website uses Google Tag Manager of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter “Google”). Google Tag Manager allows to manage website tags via an interface. The Tag Manager tool itself (which implements the tags) is a cookie-free domain and does not capture personal data. The tool triggers the implementation of other tags that may collect data on their part. Google Tag Manager does not access such data. In case of any deactivation on domain or cookie level, it remains in effect for all tracking tags that were implemented using Google Tag Manager.

4.3 GA Audiences

On this website, GA Audiences, a web analysis service of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”) collects and stores data to create usage profiles using pseudonyms. With this technology, users having already visited our websites and online services will be shown targeted advertising from us on other external websites of the Google Partner Network. For this purpose, a cookie is set on your computer, which is used to analyze user behavior when visiting the website and can then be used for targeted product recommendations and interest-based advertising. If you do not want to receive interest-based advertising you can deactivate the use of these cookies for this purpose by Google following the instructions on https://www.google.de/settings/ads/onweb#display_optout 

Before we set the relevant cookies on our homepage we will ask for your consent using our cookie banner. The legal basis for the processing is therefore given with your consent as per Art. 6 Abs. 1 S. 1 lit. a DSGVO.

 

4.4 Contact form and e-mail contact

If you send us enquiries using the contact form or by e-mail, we retain your data from the enquiry form including the contact data specified there by you or from your e-mail for processing the enquiry and in case follow-up questions arise. We will not pass such data on to others without your consent.

The data entered into the contact form is thus exclusively processed based on your consent (point (f) of Article 6(1) GDPR). You may withdraw such consent at any time.. To do so, sending us an informal message by e-mail is sufficient. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

The data entered into the contact form by you remains with us until you request its erasure, withdraw your consent to its retention or the purpose for the data retention no longer applies (e.g., when your enquiry has been dealt with). Imperative legal provisions, in particular retention periods, remain unaffected.

The data provided by you are coded by your browser and are transmitted to our server, where they are re-coded into an e-mail which is then sent to us. Please note that the E-mails sent to us are not coded, your information will be sent similar to a post card.

 

Registration as a customer

On our website, you have the option to register as a customer in order to make even better use of our services. You can initiate registering as a user via our contact form. Upon registration, in addition to information on the respective business partner, we also collect personal data on the contact person, the details of which can be found in the registration mask. Required information is marked accordingly. Provided you agree, we will merge the data from the browser profile with your customer data in order to provide you with even more suitable offers.

We use the Microsoft Dynamics 365 customer relationship management (“CRM”) system to manage your customer account. Microsoft Dynamics 365 is provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Irland.

For more information about how Microsoft Dynamics 365 operates, please see Microsoft’s privacy policy, available at: https://privacy.microsoft.com/de-de/privacystatement.

 

5.Processing of business partner data

GS Engineering concludes various contracts (e.g. contracts with customers, suppliers, system partners, service agencies, repair processing and other business partners), in order to meet their economic purposes. The data collection as well as the data processing are used for the establishment, execution and termination of the contractual relationship. If necessary, the data are processed within the scope of fullfilment of the legal obligations of the state import and export control. The priority legal basis for this are Article 6, par. 1b and c) GDPR. As far as required we process your data based on Art. 6 par. 1 f) GDPR, in order to respect the interest of GS Engineeringor third parties (e.g. authorities). This particularly applies in the company for the purpose of Inter-company control, the internal communication and other management purposes, but also for the respect of internal and world-wide compliance standards. Besides, the processing of personal data can be based on your consent as per Article 6, par. 1a) GDPR.

5.1 Which data categories are used by GS Engineering

The categories of personal data processed include especially your contact data (name of the company, address, first and last name of a contact person, mobile number, e-mail address of the corresponding partner, function and department of the contact partners), as well as the bank details depending on the purpose as well as the required VAT ID number. Should you request the shipping of spare parts to another location, you can inform us about the additional contact data, which we will then also collect and process for this purpose.

We should like to inform you that within the scope of the respective contractual relationship you will have to provide those personal and company data, which are needed for the establishment, the execution and the termination of the contractual relationship or the performance promise and their respective fulfilment or the collection of which we are legally obliged.

5.2 How long will your data be retained

We will erase your personal data as soon as they are no longer needed for the above-mentioned purposes or when you have made use of your right of objection. At the end of the contractual relationship, your personal data will be retained, as long as we are legally obliged to retain them. This is regularly the result to legal proof and obligations to retention, which are regulated, among other things, in the German Commercial Code (HGB) and the German Fiscal Code (AO). The retention periods after this time amount to up to ten years. Besides it can happen, that personal data are stored for the future, in which demands can be asserted to us.

 

6.Your rights

Of course, you retain control over any and all personal data you provide to us when visiting our website and using our services. You have the following rights and may exercise them free of charge:

6.1 Right of access

You have the right to obtain access at any time to your personal data retained with us.

6.2 Right to withdraw given consents

You have the right to withdraw a consent once given to the processing of personal data at any time with effect for the future. In the case of withdrawal, we will erase the relevant data without delay where any further processing cannot be based on a legal basis for processing. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

6.3 Right to object

Where we process your personal data based on our outweighing legitimate interest in the context of balancing interests, you have the right to object, on grounds relating to your particular situation, at any time to such processing with effect for the future.

If you exercise your right to objection, we will cease processing the relevant data. Further processing remains reserved, however, if we have proof of compelling legitimate grounds for the processing which prevail over your interests, fundamental rights and freedoms or where the processing serves the establishment, exercise or defence of legal claims.

If your personal data is processed by us for the purposes of direct marketing, you have the right to object to the processing of personal data concerning you for the purposes of such kind of marketing at any time.

6.4 Right to data portability

You have the right to request that your personal data be transferred by us to a different entity.

6.5 Right to rectification, erasure or restriction of processing

You have the right to have your personal data be rectified, erased or its processing be restricted.

6.6 Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority or our company to the extent that you have a reason for objection. To exercise rights towards our company, please approach the contact persons specified at the end of this Privacy Policy.

 

7.Duration of retention

The criterion for the duration of retention of personal data is the respective legal retention period. After expiry of the period, the corresponding data will be routinely erased, unless it is still required to achieve the necessary purposes.

 

8.Automated decision-making

There will be no automated decision-making based on the collected personal data.

 

9.Data security

We use the common SSL (Secure Socket Layer) procedure in combination with the respective highest degree of encryption that is supported by your browser. You can see whether an individual site of web presence is transmitted in encrypted form by the ‘closed’ icon of the key or lock symbol in the lower status line of your browser.

Apart from the above, we use appropriate technical and organisational security measures to protect your data against accidental or deliberate manipulations, partial or complete loss, destruction or access by unauthorised third parties. Our security measures are subject to continuous improvement in line with technological developments.