Privacy Policy
1. The Controller in the sense of the data protection laws, in particular the EU General Data Protection regulation (GDPR), is:
Gelbau GmbH & Co. KG
Grandkaule 8-10
53859 Niederkassel
Telefon: +49 (0) 22 08/94 55-0
Telefax: +49 (0) 22 08/94 55-51
E-Mail: info@gelbau.com
2. Your rights as a data subject
You can exercise the following rights at any time by contacting our data protection officer:
- Information about your data that we store and its processing (Article 15 of the GDPR,
- Rectification of incorrect personal data (Article 16 of the GDPR,
- Deletion of your data that we store (Article 17 of the GDPR,
- Restriction of data processing, provided that we are not yet allowed to delete your data as a result of legal obligations (Article 18 of the GDPR),
- Opposition to the processing of your data by us (Article 21 of the GDPR, and
- Data transferability, insofar as you have consented to data processing or have concluded a contract with us (Article 20 of the GDPR).
If you have given us your consent, you can revoke it at any time with effect for the future.
You may, at any time, submit a complaint to a supervisory authority, e.g., the competent supervisory authority of the federal state in which you live, or the authority responsible for us as the competent administration.
A list of the supervisory authorities (for the non-public sector) with their addresses can be found at:
List of supervisory authorities
3. Collection of general information when visiting our website
3.1. The nature and purpose of the processing:
When you access our website, i.e., when you do not register or otherwise submit information, information of a general nature is automatically collected. This information (server log files) includes the type of web browser and operating system you are using, the domain name of your Internet service provider, your IP address and similar information.
They are processed in particular for the following purposes:
- Ensuring that the website can be connected to without experiencing problems,
- Ensuring our website is easy to use and problem-free,
- Evaluation of system security and stability, and
- for other administrative purposes.
We do not use your data to draw conclusions about you as a person. Information of this kind is statistically evaluated by us, if necessary, in order to optimise our online presence and the technology driving it.
3.2. Legal basis:
Processing is carried out in accordance with Article 6 (1) (f) of the GDPR on the basis of our justified interest in improving the stability and functionality of our website.
3.3. Recipient:
Recipients of the data may be technical service providers who act as contract processors for the operation and maintenance of our website.
3.4. Storage period:
The data will be deleted as soon as it is no longer required for the purpose of collection. This is generally 30 days after the end of the respective session in respect of data used in the provision of the website.
3.5. Necessary or required provision of data:
The provision of personal data is neither required by law nor by contract. Without the IP address, however, the service and functionality of our website cannot be guaranteed. In addition, individual services may not be available or may be restricted. For this reason an objection is excluded.
4. Applicant’s duty to provide information under Articles 13 and 14 of the Data Protection Regulation (GDPR)
We collect and process your personal data as part of the process for managing applications when applying by e-mail or post. Personal data is all data that relates to you personally, for example, your name, address, email address and telephone number.
4.1. Purpose
The data is collected, stored and, if necessary, passed on by us to the extent necessary to process an application that represents an offer to establish a working or training relationship made by a job seeker to an employer based in commerce. This is sent by the applicant to the company by e-mail or by post. The collection, storage and disclosure is therefore carried out for the purpose of pre-contractual measures at the request of the data subject on the basis of Article 6 (1)(1)(b) of the GDPR. Failure to provide such data may result in the applicant not being able to be recruited.
We only transmit personal data to our personnel department, administration team and management.
Further processing will only take place if you have given your consent or legal permission.
We maintain up-to-date technical measures to ensure the protection of personal data. These are adapted to the current state of the art.
4.2. Transfer to third parties:
Personal data will not be passed on to third parties.
4.3. Transfer to third countries:
Personal data is not passed on to third countries.
4.4. Storage period:
To the extent that we do not process your contact data for operational purposes, we store the data collected in respect of the application until the expiry of a period of 6 months after the application procedure has been completed. After this period has expired, the data collected in relation to the application will be deleted or locked if deletion is not possible.
You can find further information in the data protection declaration on our Company website.
4.5. Legal Basis
You have the right to request information from us at any time about the personal data we have stored about you (Article 15 of the GDPR). This also concerns the recipients, or categories of recipients, to whom the data is disclosed and the purpose of the data storage. You also have the right to request the rectification of data under the conditions of Article 16 of the GDPR and/or deletion under the conditions of Article 17 of the GDPR and/or restriction of processing under the conditions of Article 18 of the GDPR. Furthermore, you can request the transmission of data at any time under the conditions of Article 20 of the GDPR insofar as the data is still stored by us.
In the event of processing personal data for the performance of tasks in the public interest (Article 6 (1)(1)(e) of the GDPR) or for the protection of legitimate interests (Article 6 (1)(1)(f) of the GDPR), you may object to the processing of such personal data relating to you at any time and with effect for the future. In the event of an objection being made, we must refrain from any further processing of your data for the aforementioned purposes, unless there are compelling legitimate reasons for processing which are worthy of protection and outweigh your interests, rights and freedoms, or the processing is necessary for the assertion, exercise or defence of legal claims.
Under the conditions of Article 21 (1) of the GDPR, data processing may be objected to for reasons arising from specific circumstances relating to the data subject.
4.6. Revocation of consent:
If you have consented to the processing of your data (Article 6 (1)(a) or Article 9 (2)(a) of the GDPR) you have the right to revoke your consent at any time. This does not affect the legality of the data processing until the point of revocation. All information requirements, requests for information, revocations or objections to data processing should be addressed by e-mail to our data protection officer.
You can find a summary of the duty to provide information in respect of managing applications here.
5. Cookies
5.1. The nature and purpose of the processing:
Like many other websites, we also use so-called "cookies". Cookies are small text files that are stored on your end device (laptop, tablet, Smartphone or similar) when you visit our website.
This provides us with certain data such as your IP address, the browser and the operating system you are using.
Cookies cannot be used to start programs or transfer viruses to a computer. We can use the information contained in cookies to make navigation easier for you and to enable our web pages to be displayed correctly.
Under no circumstances will the data we collect be passed on to third parties or linked to personal data without your consent.
Of course, you can also view our website without cookies. Internet browsers are regularly set to accept cookies. In general, you can deactivate the use of cookies at any time via the settings for your browser. Please use the help functions of your web browser to find out how to change these settings. Please note that individual functions of our website may not work if you have deactivated the use of cookies.
5.2. Storage duration and cookies used:
If you allow us to use cookies through your browser settings or by providing consent, the following cookies may be used on our websites:
Cookie request: Storage period 100 days
_gat_UA-17227323-1
_gid
_gat_gtag_UA_17227323_1
_ga cookie-agreed
Insofar as these cookies can (also) affect personal data, we will inform you about this in the following sections.
You can delete individual cookies or the entire cookie history via your browser settings. You will also receive information and instructions on how to delete these cookies or block their storage in advance. Depending on your individual browser, you will find the necessary information under the following links:
6. Use of Google Analytics
6.1. The nature and purpose of processing:
This website uses Google Analytics, a web analysis service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA (hereinafter referred to as Google Analytics): Google Google Analytics uses so-called ‘cookies’, which are text files placed on your computer, to help the website analyse how people use the site. The information produced by the cookie concerning your usage of this website is generally transmitted to a Google server in the United States and stored there. On the basis that IP anonymisation has been activated on these websites, your IP address will be truncated by Google within Member States of the European Union and other contracting states in an agreement with the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be combined with other Google data.
The purposes of the data processing are to evaluate the use of the website and to compile reports on activities on the website. Based on the use of the website and the Internet, further related services will then be provided.
6.2. Legal basis
The processing of data is based on the consent of the user (Article 6 (1)(a) of the GDPR).
6.3. Recipient:
The recipient of the data is Google as the processor of the order. For this purpose, we have concluded the corresponding contract processing agreement with Google.
6.4. Storage period:
The data will be deleted as soon as they are no longer required for the purpose of keeping records.
6.5. Transfer to third countries:
Google processes your data in the USA. Since the EU-US Privacy Shield was overturned by the European Court of Justice on 16 July 2020, a data transfer to an uncertain third country has been taking place. For this reason, according to Art. 49 (1) a GDPR, as part of the cookie prombt, an explicit declaration of consent for the continued processing of your personal data is requested. Google has taken these circumstances as an opportunity to make an organisational and data protection-friendly changeover, and to switch this processing activities for the transfer of online advertising and the measurement of personal data from European Economic Area, Switzerland and Great Britain to the standard contractual clauses (SCCs). The changes apply subsequent to 12 August 2020.
For further information, please visit: https://privacy.google.com/intl/en/businesses/compliance/.
6.6. Necessary or required provision of data:
The provision of your personal data is voluntary and is solely based on your consent. If you prevent access, this may result in functional restrictions on the website.
6.7. Revocation of consent:
You can adjust the settings of your browser to prevent cookies being saved; by doing this, however, we would like to point out to you that in this case, you may not be able to fully use all of the functions of this website. In addition, you can prevent the collection of data of generated by the cookie related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google by downloading and installing the browser plug-in available at the following link:
https://tools.google.com/dlpage/gaoptout?hl=en
In addition to, or as an alternative to the browser add-on, you can prevent tracking by Google Analytics on our webpages by clicking this link. An opt-out cookie is then installed on your device. This will prevent Google Analytics from recording data for this website and for this browser in the future as long as the cookie remains installed in your browser.
For more information on how Google Analytics uses user data, please see Google's privacy policy:
https://support.google.com/analytics/answer/6004245?hl=en.
7. Profiling:
With the help of the Google Analytics tracking tool, the way in which visitors behave when using the website can be evaluated and their interests analysed. For this purpose we create a pseudonymised user profile.
8. Use of Google Maps
8.1. The nature and purpose of the processing:
On this website we use a service provision from Google Maps. Google Maps is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter "Google"). This allows us to display interactive maps directly on the website and enables you to conveniently use the map function.
You can find more detailed information about data processing carried out by Google in the Google Privacy Notice. This is where you can also change your personal data protection settings in the data protection centre.
Detailed instructions for managing your own data in connection with Google products can be found here.
8.2. Legal basis:
Google processes your data in the USA. Since the EU-US Privacy Shield was overturned by the European Court of Justice on 16 July 2020, a data transfer to an uncertain third country has been taking place. For this reason, according to Art. 49 (1) a GDPR, as part of the cookie prombt, an explicit declaration of consent for the continued processing of your personal data is requested. Google has taken these circumstances as an opportunity to make an organisational and data protection-friendly changeover, and to switch this processing activities for the transfer of online advertising and the measurement of personal data from European Economic Area, Switzerland and Great Britain to the standard contractual clauses (SCCs). The changes apply subsequent to 12 August 2020.
For further information, please visit: https://privacy.google.com/intl/en/businesses/compliance/.
The legal basis for the integration of Google Maps and any associated data transfer to Google is your consent (Article 6 (1)(a) of the GDPR). In addition, the use of Google Maps and the information obtained via Google Maps is based on the Google Terms of Use and the Terms and Conditions for Google Maps.
Furthermore, Google offers further information at:
8.3. Recipient:
By visiting the website, Google receives information that you have called up the corresponding subpage of our website. This happens regardless of whether Google provides a user account through which you are logged in or whether a user account even exists. If you are logged in to Google, your information is directly associated with your account.
If you do not want this link to appear on your profile on Google, you must log out of Google before activating the button. Google stores your data as user profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. This type of evaluation is particularly carried out (even for those users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have a right of objection to the creation of these user profiles; you must contact Google to exercise this right.
8.4. Storage period:
We do not collect any personal data through the integration of Google Maps.
8.5. Transfer to third countries:
Google processes your data in the USA. Since the EU-US Privacy Shield was overturned by the European Court of Justice on 16 July 2020, a data transfer to an uncertain third country has been taking place. For this reason, according to Art. 49 (1) a GDPR, as part of the cookie prombt, an explicit declaration of consent for the continued processing of your personal data is requested. Google has taken these circumstances as an opportunity to make an organisational and data protection-friendly changeover, and to switch this processing activities for the transfer of online advertising and the measurement of personal data from European Economic Area, Switzerland and Great Britain to the standard contractual clauses (SCCs). The changes apply subsequent to 12 August 2020.
For further information, please visit: https://privacy.google.com/intl/en/businesses/compliance/.
8.6. Revocation of consent:
If you do not want Google to collect, process or use data about you via our website, you can deactivate JavaScript in your browser settings. However, that will mean that you will not be able to use our website, or only to a limited extent.
8.7. Necessary or required provision of data:
The provision of your personal data is voluntary and is solely based on your consent. If you prevent access, this may result in functional restrictions on the website.
9. Periods of retention of data
We process and store personal data as long as it is necessary for the fulfilment of our contractual and legal obligations. Should the data no longer be necessary for the fulfilment of these contractual and legal obligations, it will be periodically deleted, unless further processing is necessary for the following purposes:
- Fulfilment of commercial and tax law retention periods with a 10 year retention period, e.g.: Invoices or copies of invoices, wage and salary data, pay slips, contractual documents, money orders, receipts, account statements, cash reports, cheques, booking instructions, annual accounts lists, travel expense statements, notices of taxes, fees and contributions, workshop invoices, original documents (price lists, control slips), lists of account balances, or account confirmations, interest invoices, debit and credit notes, etc.
- Fulfilment of retention periods under commercial and tax law with a 6 year retention period, e.g.: commercial or business letters that are received and their reproduction, as well as other documents insofar as they are important in relation to taxation.
- Fulfilment of internal retention periods within the scope of our activities with a retention period of 10 years after the last contact with the customer or a contractual relationship that no longer exists.
10. SSL encryption
To protect the security of your data during transmission, we use state-of-the-art encryption procedures (e.g. SSL) via HTTPS.
11. Changes to our data protection provisions
We reserve the right to adapt this data protection declaration so that it always meets the current legal requirements, or to implement changes to our services in the data protection declaration, e.g., when introducing new services. The new data protection declaration will then apply to any further visits.
12. Questions for the Data Protection Officer
If you have any questions regarding data protection, please send us an e-mail or directly contact the person responsible for data protection in our organisation:
Data Protection Officer:
Jacqueline Rossi
Engineering office Peschel GmbH
datenschutz@gelbau.com
Source: The data protection declaration was created with the help of activeMind AG, experts in external data protection officers (Version #2019-04-10).