1. General information and mandatory information Data protection

​

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

When you use this website, various personal data is collected. Personal data is data that can be used to identify you personally. This privacy policy explains which data we collect and what we use it for. It also explains how and for what purpose this happens.

We point out that data transmission over the Internet (e.g., when communicating via email) may have security gaps. Complete protection of data from access by third parties is not possible.

​

Privacy Policy

Represented by g + p GmbH & Co. KG, Stephanopeler Str. 40, 58675 Hemer.
Mr. Dirk Graewe can be reached at the business address.
Telephone +49 (0)2372 966 133, Fax +49 (0)2372 966 233

​

Data Protection Officer
René Rautenberg GmbH
Hauptstrasse 28
15806 Zossen
Website: www.er-secure.de
Email: datenschutzbeauftragter@gp-werkzeuge.de

​

The existence of a right to information from the controller about the personal data concerned, as well as to rectification or erasure or restriction of processing or a right to object to processing, as well as the right to data portability; in accordance with the EU General Data Protection Regulation, we hereby draw your attention to your rights:

​

Right of access of the data subject
(1) The data subject has the right to request confirmation from the controller, g + p GmbH & Co. KG, Stephanopeler Str. 40, 58675 Hemer, as to whether personal data concerning him or her are being processed. If so, you have the right to information about those personal data and the following information:
a) the purposes of the processing;
b) the categories of personal data being processed;
c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;
d) where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
e) the existence of a right to rectification or erasure of the personal data concerning him or her or to restriction of processing by the controller or a right to object to such processing;
f) the existence of the right to lodge a complaint with a supervisory authority;
g) where the personal data are not collected from the data subject, all available information as to their source;
h) the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for the data subject.

​

(2) If personal data are transferred to a third country or to an international organization, the data subject shall have the right to be informed of the appropriate safeguards pursuant to Article 46 relating to the transfer.

(3) The controller shall provide a copy of the personal data undergoing processing. For any further copies requested by the data subject, the controller may charge a reasonable fee based on administrative costs. If the data subject submits the request electronically, the information shall be provided in a commonly used electronic format, unless the data subject indicates otherwise.

(4) The right to receive a copy pursuant to paragraph 1b shall not adversely affect the rights and freedoms of others.

Right to rectification
The data subject has the right to obtain from the controller, g + p GmbH & Co. KG, Stephanopeler Str. 40, 58675 Hemer, without undue delay, the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to request the completion of incomplete personal data, including by means of providing a supplementary statement.

​

Right to erasure ("right to be forgotten")
(1) The data subject has the right to request the controller, g + p GmbH & Co. KG, Stephanopeler Str. 40, 58675 Hemer, to erase personal data concerning him or her without undue delay. The controller is obliged to erase personal data without undue delay where one of the following grounds applies:
a) The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
b) The data subject withdraws consent on which the processing is based according to point (a) of Article 6(1) or point (a) of Article 9(2), and there is no other legal ground for the processing.
c) The data subject objects to the processing pursuant to Article 21(1) and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2).
d) The personal data were processed unlawfully.
e) The erasure of the personal data is necessary to comply with a legal obligation under Union or Member State law to which the controller is subject.
f) The personal data were collected in relation to the provision of information society services pursuant to Article 8(1).

​

(2) Where the controller has made the personal data public and is obliged pursuant to paragraph 1 to erase the personal data, the controller shall take appropriate measures, including technical ones, taking into account available technology and the cost of implementation, to inform controllers which process the personal data that a data subject has requested the erasure by such controllers of all links to, or copies or replications of, those personal data.

(3) Paragraphs 1 and 2 shall not apply to the extent that processing is necessary:
a) for exercising the right of freedom of expression and information;
b) for compliance with a legal obligation required by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
c) for reasons of public interest in the area of ​​public health pursuant to points (h) and (i) of Article 9(2) and Article 9(3);
(d) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Article 89(1), insofar as the right referred to in paragraph 1 is likely to make impossible or seriously compromise the achievement of the objectives of that processing; or
e) for the establishment, exercise or defense of legal claims.
​

Right to Restriction of Processing
(1) The data subject has the right to request the controller, g + p GmbH & Co. KG, Stephanopeler Str. 40, 58675 Hemer, to restrict processing if one of the following conditions applies:
a) the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;
b) the processing is unlawful and the data subject opposes the erasure of the personal data and instead requests the restriction of their use;
c) the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject to assert, exercise, or defend legal claims; or
d) the data subject has objected to processing pursuant to Article 21(1), pending the verification whether the legitimate grounds of the controller override those of the data subject.

(2) Where processing has been restricted pursuant to paragraph 1, such personal data shall, with the exception of storage, only be processed with the consent of the data subject or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State

​

(3) A data subject who has obtained a restriction of processing pursuant to paragraph 1 shall be informed by the controller before the restriction is lifted.

Notification obligation in connection with the rectification or erasure of personal data or the restriction of processing
The controller, g + p GmbH & Co. KG, Stephanopeler Str. 40, 58675 Hemer, shall notify each recipient to whom the personal data have been disclosed of any rectification or erasure of the personal data or restriction of processing pursuant to Article 16, Article 17(1) and Article 18, unless doing so proves impossible or involves disproportionate effort. The controller shall inform the data subject of these recipients upon request from the data subject.
​
Right to data portability
(1) The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, g + p GmbH & Co. KG, Stephanopeler Str. 40, 58675 Hemer, in a structured, commonly used, and machine-readable format, and shall have the right to transmit those data to another controller without hindrance from the controller to which the personal data were provided, provided that:
a) the processing is based on consent pursuant to point (a) of Article 6(1) or point (a) of Article 9(2) or on a contract pursuant to point (b) of Article 6(1); and
b) the processing is carried out by automated means.

​

(2) When exercising their right to data portability pursuant to paragraph 1, the data subject shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible.
​
(3) The exercise of the right under paragraph 1 of this Article shall be without prejudice to Article 17. This right shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
​
(4) The right under paragraph 2 shall not adversely affect the rights and freedoms of others.

​

Right of objection
(1) The data subject has the right to object at any time to the processing of personal data concerning him or her which is based on Article 6(1)(e) or (f), for reasons related to his or her particular situation; this also applies to profiling based on these provisions. The controller, g + p GmbH & Co. KG, Stephanopeler Str. 40, 58675 Hemer, shall no longer process the personal data unless he or she can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defense of legal claims.
​
(2) If personal data are processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning him or her for such marketing; this also applies to profiling insofar as it is related to such direct marketing.
​
(3) If the data subject objects to processing for direct marketing purposes, the personal data will no longer be processed for these purposes.
​

(4) The data subject must be explicitly informed of the right referred to in paragraphs 1 and 2 at the latest at the time of the first communication with him or her; this information must be provided in an intelligible form and separate from other information.
​
(5) In the context of the use of information society services, the data subject may, notwithstanding Directive 2002/58/EC, exercise his or her right of objection by means of automated procedures using technical specifications.

(6) The data subject shall have the right to object, on grounds relating to his or her particular situation, to processing of personal data concerning him or her for scientific or historical research purposes or for statistical purposes pursuant to Article 89(1), unless the processing is necessary for the performance of a task carried out in the public interest.
​
Existence of a right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with the competent data protection authority at any time. If you wish to exercise your right to complain, you can do so with the following authority:
​
North Rhine-Westphalia
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia

​

Helga Block
Kavalleriestraße 2-4
40213 Düsseldorf
Phone: +49 2 11 384 24-0
Fax: +49 2 11 384 24-10
Email: poststelle@ldi.nrw.de
Homepage: http://www.ldi.nrw.de
​
The following data processing procedures are in place at our company:
Warnings, employment contracts, attendance lists, certificates of incapacity for work, employment references, training applications, training reports, training programs, operational data collection, aptitude tests, driver's license validation, birthday and anniversary lists, wage garnishment, global address book, internal processes, intranet, calendar, payroll, employee surveys, employee assessments, personnel training plans, personnel management software, personnel notifications, seminar management, certificates of study, talent management, telephone database of private numbers, vacation planning, suggestion scheme. Reintegration management, time recording, personnel plans / duty rosters / shift schedules, employee expenses / invoices, credit checks, booking of company trips, electronic payment transactions, financial accounting, credit card payments, travel expense accounting, contract management, accident reports to the employers' liability insurance association, offers, general training, CRM without inventory management, document management, electronic signature, website contact form, business partner contact details, customer service and support, newsletter distribution, product registration, invoices, complaints, damage reports, sales statistics, insurance comparisons, sales to business customers, visitor registration, rental agreements, key management, transponder management, archiving of receipts, GPS system, customs clearance

​

SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the browser's address bar changing from "http://" to "https://" and by the lock symbol in your browser's address bar.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

​

Objection to advertising emails
The use of contact details published in accordance with the imprint obligation to send unsolicited advertising and information materials is hereby prohibited. The operators of these pages expressly reserve the right to take legal action in the event of unsolicited advertising information being sent, for example, through spam emails.

2. Data collection on our website
Cookies
Some of our websites use so-called cookies. Cookies do not harm your computer and do not contain viruses. Cookies serve to make our service more user-friendly, effective, and secure. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called "session cookies." They are automatically deleted after your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognize your browser the next time you visit.

You can configure your browser to inform you about the use of cookies and to only accept cookies on a case-by-case basis, to exclude cookies for specific cases or in general, and to automatically delete cookies when you close your browser. Disabling cookies may limit the functionality of this website.

​

Cookies that are necessary to carry out electronic communication or to provide certain functions you have requested (e.g., shopping cart function) are stored on the basis of Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in storing cookies to ensure the technically error-free and optimized provision of its services. If other cookies (e.g., cookies for analyzing your browsing behavior) are stored, these are treated separately in this privacy policy.

Server log files
The website provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

• Browser type and version

• Operating system used

• Referrer URL

• Hostname of the accessing computer

• Time of the server request

• IP address

This data cannot be assigned to specific individuals. This data will not be merged with other data sources. We reserve the right to subsequently review this data if we become aware of concrete evidence of unlawful use.

The basis for data processing is Art. 6 (1) (f) GDPR, which permits the processing of data to fulfill a contract or to take pre-contractual measures.

Contact form
If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We will not share this data without your consent.

The data entered into the contact form is therefore processed exclusively on the basis of your consent (Art. 6 (1) (a) GDPR). You can revoke this consent at any time. An informal email notification to us is sufficient. The legality of the data processing operations carried out up to the time of revocation remains unaffected by the revocation.

​

​The data you enter in the contact form will remain with us until you request its deletion, revoke your consent to storage, or the purpose for storing the data no longer applies (e.g., after your request has been processed). Mandatory legal provisions – in particular retention periods – remain unaffected.

3. Advertising
Google AdWords and Google Conversion Tracking
This website uses Google AdWords. AdWords is an online advertising program provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”).

Within Google AdWords, we use so-called conversion tracking. When you click on an ad placed by Google, a cookie is set for conversion tracking. Cookies are small text files that the internet browser stores on the user's computer. These cookies expire after 30 days and are not used to personally identify users. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page.

​

Each Google AdWords customer receives a different cookie. These cookies cannot be tracked across AdWords customers' websites. The information collected using the conversion cookie is used to compile conversion statistics for AdWords customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. If you do not wish to participate in tracking, you can opt out of this use by easily deactivating the Google Conversion Tracking cookie in your internet browser's user settings. You will then not be included in the conversion tracking statistics.

Conversion cookies are stored on the basis of Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising.

​

For more information about Google AdWords and Google Conversion Tracking, please see Google's privacy policy: https://www.google.de/policies/privacy/.

You can configure your browser to inform you about the use of cookies and to only accept cookies on a case-by-case basis, to exclude cookies for specific cases or generally, and to automatically delete cookies when closing the browser. Disabling cookies may limit the functionality of this website.

​

4. Plugins and Tools
OpenStreetMap
We integrate the maps of the "OpenStreetMap" service (https://www.openstreetmap.org), which are offered by the OpenStreetMap Foundation (OSMF) under the Open Data Commons Open Database License (ODbL). Privacy Policy: wiki.openstreetmap.org/wiki/Privacy_Policy.

To the best of our knowledge, OpenStreetMap uses user data exclusively for the purpose of displaying map functions and caching the selected settings. This data may include, in particular, users' IP addresses and location data, which, however, are not collected without their consent (usually obtained through the settings of their mobile devices).

YouTube
Our website uses plugins from the YouTube site operated by Google. The site is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

​

When you visit one of our pages equipped with a YouTube plug-in, a connection to YouTube's servers is established. The YouTube server is informed of which of our pages you have visited.

If you are logged into your YouTube account, you allow YouTube to directly associate your browsing behavior with your personal profile. You can prevent this by logging out of your YouTube account.

YouTube is used in the interest of an appealing presentation of our online offerings. This constitutes a legitimate interest within the meaning of Art. 6 (1) (f) GDPR.

Further information on the handling of user data can be found in YouTube's privacy policy at: https://www.google.de/intl/de/policies/privacy.

5. Legal Validity
If parts or individual formulations of this text do not, no longer, or not completely comply with the applicable legal situation, the content and validity of the remaining parts remain unaffected.

​