Privacy policy of GuN Holding GmbH & Co KG
Person responsible
The controller pursuant to Art. 4 (7) of the General Data Protection Regulation (GDPR) is :
GuN Holding GmbH & Co. KG
Versmannstraße 2
20457 Hamburg
Register court: Hamburg Local Court, HRA 113729
Sales tax identification number: DE296139174
This is represented by the general partner:
GuN Verwaltungs GmbH, AG Hamburg, HRB 119844
which in turn are represented by their managing directors
Lars Hammerschmidt
Christopher Garbe
Phone +49 40 – 35 61 3-0
Fax +49 40 – 35 61 3-2810
E-mail: info@garbe.de
Processing of personal data
1. informational visit to our website
Each time our website is accessed, our system automatically collects data (so-called server log files) and information from the computer system of the accessing computer. The following data is collected:
- Visited website
- Date and time at the time of access
- Amount of data sent in bytes
- Source/reference from which you reached the page (referrer URL)
- Browser used
- Operating system used
- IP address used
- Enquiry details and destination address
This data is not merged with other data sources.
Data is stored in log files to ensure the functionality of the website. We also use the data to optimise the website and to ensure the security of our information technology systems. The data is not analysed for marketing purposes in this context. The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.
The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in the optimisation of our website in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.
2. use of cookies
The website uses so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies are used to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.
Both session cookies and persistent cookies are used on our website. Session cookies are temporary cookies that are stored in the user’s Internet browser until the browser window is closed and the session cookies are deleted. Persistent cookies are used for repeated visits and are stored in the user’s browser for a certain period of time (usually up to 1 year, sometimes 2 years). These cookies are not deleted when the browser is closed. This type of cookie is used to reuse a user’s preferences when they return to the site. We have a legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR in the storage of cookies for the technically error-free and optimised provision of our services (technically necessary cookies).
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.
Cookies that are used for reach measurement (tracking) and advertising purposes are only used if you have consented to the use of cookies. The legal basis for the use of these cookies is Art. 6 para. 1 sentence 1 lit. a) GDPR. In the cookie settings of our website, you have the option to give your voluntary consent to the use of cookies for analysis and marketing cookies individually or in general and to revoke this consent at any time for the future (see §9 of this privacy policy).
Change cookie settings:
3. data processing when contacting us via the homepage
If you contact us by e-mail, e.g. via the e-mail address provided on our website, telephone or letter, the personal data transmitted to us (e.g. name, e-mail address, postal address, etc.) will be processed in order to respond to your enquiry. If you contact us via the contact form provided on our website, you consent to the processing of your personal data. The processing of the personal data (title, first name, surname, company, telephone, e-mail, type of enquiry, your message) from the input mask serves us solely to process the contact. The processing is carried out in accordance with Art. 6 para. 1 sentence 1 lit. a and f GDPR. If the registration relates to the fulfilment of a contract or pre-contractual measures, the processing is carried out in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR.
Sources
We receive personal data from our contractual partners as part of our business relationships. In addition, we process personal data that we receive directly from our customers, agents, service providers, employees and applicants. Furthermore, we process – to the extent necessary for the provision of a service – personal data that we have received from other Group companies or from other third parties (e.g. SCHUFA, Creditreform) in a permissible manner (e.g. for the performance of services, for the fulfilment of contracts or on the basis of consent given by you). Furthermore, we process personal data that we have legitimately obtained from publicly accessible sources (e.g. debtor directories, land registers, commercial and association registers, press, media, Internet) and are authorised to process.
Processing purposes and legal bases
We process your personal data in accordance with Art. 6 EU GDPR, namely Art. 6 para. 1 sentence 1 lit. a for consent, Art. 6 para. 1 lit. b GDPR to fulfil a contract, Art. 6 para. 1 sentence 1 lit. c GDPR to fulfil a legal obligation, Art. 6 para. 1 sentence 1 lit. d GDPR for vital interests of the data subjects, Art. 6 para. 1 sentence 1 lit. f GDPR for a legitimate interest of our company or a third party. In addition, we process your personal data in accordance with the Federal Data Protection Act.
Disclosure of personal data
We will not disclose your personal data to third parties unless you consent to the disclosure, there is a legal obligation to disclose, this serves the fulfilment of a contract or we can invoke legitimate interests in the economic and effective operation of our business operations with regard to this disclosure.
Within the Garbe Group, we exchange data within the Group if and to the extent that a legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR arises in an intra-Group transfer.
External service providers have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored by us. Recipients of personal data may be, for example Banks, advertising agencies, PR agencies, credit agencies, payroll agencies, lawyers, IT service providers, employers’ liability insurance associations and government agencies (e.g. tax authorities, courts, public prosecutors and police).
Transmission of personal data
Data will only be transferred to countries outside the EU or the EEA (so-called third countries) if this is necessary to fulfil your orders, is required by law (e.g. tax reporting obligations), if you have given us your consent or as part of commissioned data processing.
If a transfer to a third country takes place, the personal data is protected by one of the mechanisms described in Art. 44 et seq. GDPR (adequacy decisions or suitable or appropriate safeguards).
Use of analysis tools, plug-ins and tracking
1. social media plug-ins
Social media plug-ins from the following social networks are used on our websites. After clicking on the integrated text/image link, you will be redirected to the page of the respective provider. Only after you have been redirected will user information be transmitted to the respective provider and information about you collected by the respective network. With the help of this solution, you can decide for yourself whether and when data is transmitted to the operators of the respective social networks.
You can deactivate interest-based advertising via the cookie setting (see section 4 (2)). If you are logged into your user account of the respective network during this time, the network operator may be able to assign the information collected from the specific visit to your personal account. If you wish to prevent the information collected from being assigned to your user account, you must log out of the social network before clicking on the graphic. It is also possible to configure the respective user account accordingly.
We use the following social media plug-ins on our website:
LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
Further information on interest-based advertising on LinkedIn and data protection can be found at
https://www.linkedin.com/help/linkedin/answer/65446/anzeigeneinstellungen-verwalten?lang=de
2. other plug-ins and embedded functions and content
We use functional and content elements on our website that are obtained from the servers of the respective providers (hereinafter referred to as “third-party providers”). These may be, for example, graphics, videos or city maps (hereinafter uniformly referred to as “content”).
Note: Transmission to the USA
The appropriate level of data protection when using service providers and processors outside the European Union (EU/EEA) is ensured by compliance with Art. 44 et seq. GDPR is ensured.
YouTube
Our website uses plugins from the YouTube site operated by Google. The operator of the pages is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA.
When you visit one of our pages equipped with a YouTube plugin, a connection to the YouTube servers is established. The YouTube server is informed which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.
The use of YouTube is in the interest of an appealing presentation of our online offers, provided that you have consented to the setting of the plugins and thus on the basis of Art. 6 para. 1 lit. a GDPR.
We only record the extent to which the YouTube videos integrated on our website are accessed and delete this data after two years.
Further information on the handling of user data can be found in YouTube’s privacy policy at: www.google.de/intl/de/policies/privacy.
3. analysis tools
(a) Google Analytics
We use Google Analytics, a web analytics service provided by Google Ireland Ltd, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043 (hereinafter “Google”). Google Analytics uses cookies to identify the frequency of use of certain areas of our website and preferences. The information generated by the cookies about your use of our website (including your shortened IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of our website, compiling reports on website activity for us and providing other services relating to website activity and internet usage.
We only use Google Analytics with activated IP anonymisation. This means that the IP address of users is truncated by Google within member states of the European Union (EU) or in other signatory states to the Agreement on the European Economic Area (EEA). Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. The IP address transmitted by your internet browser will not be merged with other Google data. If you do not want Google Analytics to analyse and measure your reach, you can deactivate the use of Google Analytics cookies using an Internet browser add-on as an alternative to the options described in section 4 (2). You can download this here: http://tools.google.com/dlpage/gaoptout?hl=de . This stores so-called “opt-out” information on your end device, which is used to assign your deactivation of Google Analytics. Please note that this opt-out information only deactivates Google Analytics for the device and the Internet browser from which it was set. You may also have to set it again if you delete cookies from your device. The opt-out cookie is only valid for the Internet browser used when it is set and only for our website and is stored on your end device. If you delete the cookies in the Internet browser, you must set the opt-out cookie again.
Further information on the use of data by Google, setting and objection options can be found on the Google website at
(b) Google Ads
(aa) We use the online advertising programme “Google Ads” on our website and, in this context, conversion tracking (visit action evaluation). Google Conversion Tracking is an analysis service of Google Ireland Ltd, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043 (hereinafter “Google”).
If you consent to the use of this service, a cookie for conversion tracking will be stored on your computer when you click on an advert placed by Google. These cookies have a limited validity, do not contain any personal data and are therefore not used for personal identification. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognise that you have clicked on the ad and have been redirected to this page. Each Google Ads customer receives a different cookie. It is therefore not possible for cookies to be tracked via the websites of Ads customers. The information obtained with the help of the conversion cookie is used to create conversion statistics. Your data may be transmitted to the USA.
You can find more information and Google’s privacy policy at :
(bb). We use the remarketing function within the Google Ads service on our website (see paragraph (a)).
For this purpose, the interaction of users on our website is analysed, e.g. which offers the user was interested in, in order to be able to display targeted advertising to users on other sites even after they have visited our website. For this purpose, Google stores a number in the browsers of users who visit certain Google services or websites in the Google Display Network. This number, known as a “cookie”, is used to record the visits of these users. This number is used to uniquely identify a web browser on a specific end device and not to identify a person; personal data is not stored.
In addition to the option of deactivating tracking, you can prevent participation in this tracking process in the following ways: a) by setting your browser software accordingly, in particular by suppressing third-party cookies so that you do not receive any ads from third-party providers; b) by installing the plug-in provided by Google at the following link: https://www.google.com/settings/ads/plugin ; c) by deactivating the interest-based ads of the providers that are part of the “About Ads” self-regulation campaign via the link http://www.aboutads.info/choices , whereby this setting is deleted when you delete your cookies; d) by permanently deactivating it in your Firefox, Internet Explorer or Google Chrome browsers under the link.
Further information on data protection at Google can be found here:
(d) LinkedIn Insight
On our website, we use the LinkedIn Insight tag of the social network LinkedIn, which is operated by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA (LinkedIn).
LinkedIn Insight is a JavaScript code that is integrated into our website. This is used to record visits to our website by LinkedIn members. LinkedIn receives the information that you have visited our website and combines this with your profile data on LinkedIn in order to show you targeted adverts about our company on LinkedIn. This allows us to measure the performance of our adverts.
If you consent to the use of this service (see section 4 (2)), a cookie will be stored on your device. If you subsequently log in to LinkedIn or are logged in to LinkedIn when you visit our website, your visit to our website will be noted in your LinkedIn profile. The data collected about you in this way is anonymous to us. It does not allow us to draw any conclusions about you. However, we would like to point out that this data is also stored and processed by LinkedIn and thus a connection to the respective user profile is possible. LinkedIn may use this information for its own market research and advertising purposes. If you wish to prevent the information collected from being associated with your user account, you must log out of the social network before clicking on the graphic.
The LinkedIn Data Usage Policy applies to data processing by LinkedIn https://www.linkedin.com/legal/privacy-policy. You can find more information about LinkedIn Insight and how it works at https://business.linkedin.com/de-de/marketing-solutions/insight-tag.
Social Media
We operate company presences in the social network LinkedIn.
We cannot track which user data the social networks collect. We have no influence on the data processing that takes place for this purpose, cannot prevent it and do not have access to the underlying data. We also do not have full access to your profile data. We can only see the public information in your profile. You decide on the specific public information in your social network settings.
We receive anonymous statistics (e.g. followers) from the social networks on the use and utilisation of our company page. The legal basis for the transmission of your data within the respective social networks is your consent, which can be revoked informally at any time, Art. 6 para. 1 sentence 1 lit. a) GDPR. The legal basis for the use of statistical data is Art. 6 para. 1 sentence 1 lit. f) GDPR. We cannot link the statistical data with the profile data of our visitors.
We receive your personal data via the social networks if you actively communicate this to us via a personal message. We use your data (e.g. first name, surname, user name, email address) to respond to your request. Your data will be stored until this purpose has been fulfilled. The legal basis for processing when you actively contact us is your consent within the meaning of Art. 6 para. 1 sentence 1 lit. a) GDPR. If your message is in connection with a (pre-)contractual relationship with us, the legal basis for data processing is Art. 6 para. 1 sentence 1 lit. b) GDPR.
If we receive personal data from you via a social network, this data is processed under joint responsibility with the respective social network.
Information about data collection and further processing by the respective social network can be found in the links below.
LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, a subsidiary of LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA,
Processing and storage duration
We process and store your personal data for as long as it is necessary for the purposes for which it is collected or otherwise processed, in particular for as long as it is necessary for the fulfilment of our contractual and legal obligations.
Automated decision making
In principle, no fully automated decision-making (including profiling) takes place in the context of the use of our website in accordance with Art. 22, Art. 13 para. 2 lit. f), Art. 14 para. 2 lit. g) GDPR. Should we use these procedures in individual cases, we will inform you of this separately if this is required by law.
Rights of data subjects
You have the following rights against us as the controller within the meaning of the GDPR:
-
- Information about your personal data processed by us, Art. 15 GDPR;
- Correction of incorrect or completion of your personal data stored by us, Art. 16 GDPR;
- erasure of your personal data stored by us, unless processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims, Art. 17 GDPR;
- Restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer need the data, but you need it for the assertion, exercise or defence of legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR, Art. 18 GDPR;
- to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format and to request the transmission to another controller, Art. 20 GDPR;
- Revocation of your consent given to us, Art. 21 GDPR. If you object, we will no longer process your personal data in the future. This does not apply if the processing is permitted on the basis of other regulations (e.g. Art. 6 para. 1 sentence 1 f. GDPR).
- In the case of an automated decision (profiling), the right to state your own position and to challenge the decision, Art. 22 para. 3 GDPR;
- Complaint to a supervisory authority, Art. 77 GDPR.
Up-to-dateness and amendment of the privacy policy
This privacy policy is dated 01.10.2024 and is valid as of this date. Due to the further development of our website and due to changes in legal or official requirements, it may become necessary to amend this privacy policy. We reserve the right to do so at any time.