Privacy
GeBE Elektronik und Feinwerktechnik GmbH - Note on Data Protection
| General Information | |
| Name and address: | |
| GeBE Elektronik und Feinwerktechnik GmbH
Industriestrasse 9 | Phone: +49 89 894141-0
E-Mail: info@gebe.net |
| Contact external Datenschutzbeauftragten
Mr Oliver Kunert | Phone:
e-mail: aneid@gebe.net |
| General Information on Data Processing | |
| Scope of Processing Personal Data
We process personal data as necessary for the provision of services, quotation preparation, or the execution of orders, purchases, or projects. The processing of personal data is based on consent or legal requirements. Personal data of customers and suppliers are generally processed within Europe. Customer and supplier data, as well as inquiries from third countries outside the scope of the GDPR, are also processed by us in accordance with the provisions of the GDPR. Furthermore, we generally process personal data of users of our website only to the extent necessary for the provision of a functional website and our content and services. The processing of personal data of our users is based on consent or legal requirements. | |
| Purpose and Legal Basis for Processing Personal Data If we obtain the consent of the data subject for processing personal data, Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR, if special categories of data are processed pursuant to Article 9(1) of the GDPR, serves as the legal basis. If you have consented to the storage of cookies or access to information on your device, the data processing is additionally based on Section 25(1) of the TTDSG (German Telemedia Act). Consent can be revoked at any time. For the processing of personal data necessary for the performance of a contract, the implementation of pre-contractual measures, or the initiation of a contract, Article 6(1)(b) of the GDPR serves as the legal basis. If the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Article 6(1)(c) of the GDPR serves as the legal basis. If the processing of personal data is necessary to protect the vital interests of the data subject or another natural person, Article 6(1)(d) of the GDPR serves as the legal basis. If the processing is necessary for the purposes of the legitimate interests pursued by our company or a third party, and if the interests, fundamental rights, and freedoms of the data subject do not outweigh the first-mentioned interest, Article 6(1)(f) of the GDPR serves as the legal basis for the processing. | |
| Data Erasure and Storage Duration
Personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply or the data subject objects to further processing. For general data categories, we have provided the following deadlines for the deletion of personal data or their anonymization: • Employee and personnel data will be deleted no later than 10 years after leaving the company, unless deletion is contrary to legal obligations. • Personal customer data will be deleted or anonymized no later than 3 years after the last contact, provided that deletion is not contrary to legal obligations. • Prospect data and contact persons at customers will be deleted or anonymized no later than 3 years after the last contact, provided that deletion is not contrary to legal obligations. For the handling of specific data (e.g., applicant data, newsletters, etc.), please refer to the relevant sections of our privacy policy. | |
| Rights of the Data Subject | |
| If your personal data is processed, you are a data subject within the meaning of the GDPR, and you have the following rights against the data controller: | |
| Right to Information
You have the right to obtain confirmation from the data controller as to whether personal data concerning you is being processed. If such processing is taking place, you can request the following information from the data controller: • The purposes for which the personal data are processed. • The categories of personal data that are processed. • The recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed. • The envisaged duration of storage of the personal data concerning you. | |
| Right to Rectification
You have the right to obtain from the data controller the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement. | |
| Right to Restriction of Processing
You have the right to obtain from the data controller restriction of processing where one of the following applies: • The accuracy of the personal data is contested by you, for a period enabling the data controller to verify the accuracy of the personal data. • The processing is unlawful, and you oppose the erasure of the personal data and request the restriction of their use instead. • The data controller no longer needs the personal data for the purposes of the processing, but they are required by you for the establishment, exercise, or defense of legal claims. • You have objected to processing pursuant to Article 21(1) of the GDPR, pending the verification whether the legitimate grounds of the data controller override your grounds. | |
| Right to Erasure (Right to be Forgotten)
a) You have the right to obtain from the data controller the erasure of personal data concerning you without undue delay, and the data controller shall have the obligation to erase personal data without undue delay if one of the following grounds applies: • The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed. • You withdraw your consent on which the processing is based, and there is no other legal ground for the processing. • You object to the processing pursuant to Article 21(1) of the GDPR, and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) of the GDPR. • The personal data concerning you have been unlawfully processed. • The personal data concerning you have to be erased for compliance with a legal obligation in Union or Member State law to which the data controller is subject. • The personal data concerning you have been collected in relation to the offer of information society services referred to in Article 8(1) of the GDPR. | |
| Right to Data Portability
You have the right to receive the personal data concerning you, which you have provided to the data controller, in a structured, commonly used, and machine-readable format. You also have the right to transmit those data to another data controller without hindrance from the data controller to which the personal data have been provided, where: • The processing is based on consent pursuant to point (a) of Article 6(1) of the GDPR or point (a) of Article 9(2) of the GDPR or on a contract pursuant to point (b) of Article 6(1) of the GDPR, and • The processing is carried out by automated means. | |
| Right to Object
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you, which is based on point (e) or (f) of Article 6(1) of the GDPR, including profiling based on those provisions. The data controller shall no longer process the personal data unless the data controller demonstrates compelling legitimate grounds for the processing which override your interests, rights, and freedoms or for the establishment, exercise, or defense of legal claims. | |
| Right to Lodge a Complaint
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement if you consider that the processing of personal data concerning you infringes the GDPR. Automated Individual Decision-Making and Profiling You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision: • Is necessary for the conclusion or performance of a contract between you and the data controller, • Is authorized by Union or Member State law to which the data controller is subject, and that law contains suitable measures to safeguard your rights, freedoms, and legitimate interests, or • Is based on your explicit consent. However, these decisions must not be based on special categories of personal data referred to in Article 9(1) of the GDPR, unless Article 9(2)(a) or (b) of the GDPR applies, and suitable measures to safeguard your rights, freedoms, and legitimate interests have been taken. In cases referred to in points 1 and 3 above, the data controller shall implement suitable measures to safeguard your rights, freedoms, and legitimate interests, including at least the right to obtain human intervention on the part of the data controller, to express your point of view, and to contest the decision. | |
| Right to Lodge a Complaint with a Supervisory Authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or the place of the alleged infringement if you consider that the processing of personal data concerning you violates the GDPR. The supervisory authority with which the complaint has been lodged shall inform the complainant about the progress and the outcome of the complaint, including the possibility of a judicial remedy pursuant to Article 78 of the GDPR. The supervisory authority responsible for our company is the Bavarian Data Protection Authority (BayLDA), which can be contacted at the following address: Postfach 1349 / 91504 Ansbach (postal address), by phone at +49 (0) 981 180093-0, by fax at +49 (0) 981 180093-800, and by email at poststelle@lda.bayern.de. You can access the complaint form of BayLDA at https://www.lda.bayern.de/de/beschwerde.html However, you also have the option to submit your complaint to the supervisory authority responsible for your place of residence. The supervisory authority responsible for your place of residence and its contact details can be found at https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html | |
| Contact via the Website | |
| Description and Scope of Data Processing
Our website contains a contact form that can be used for electronic communication. If a user chooses this option, the data entered in the input mask will be transmitted to and stored by us. | |
| Purpose and Legal Basis for Data Processing
The processing of personal data from the input mask is solely for the purpose of processing the contact request. The legal basis for data processing is Article 6(1)(a) of the GDPR if the user has given consent. | |
| Storage Duration
The personal data collected during the submission process will be deleted once they have been transmitted to the company and will not be stored on the website. | |
| Right to Object and Erasure
The user has the right to revoke their consent to the processing of personal data at any time. In such cases, all personal data stored as part of the contact request will be deleted. | |
| Use of Cookies | |
| Our website uses cookies. When accessing the website, the user can make their cookie selection and thereby decide on the processing of their personal data during their use of the website. | |
| We use cookies to store your login data, ensure secure login, gather statistical data, optimize website functions, as well as for online Marketing and remarketing purposes to provide you with an overall pleasant experience. | |
| Objection and removal option
Click on 'Accept All' to accept cookies or click on 'Manage Cookie Settings' to obtain detailed information about the types of cookies used here and their respective providers. Here, you can also access the currently set preferences and deselect them at any time. | |
| Newsletter subscription | |
| Description and scope of data processing
By subscribing to our newsletter via the newsletter registration form on our website, the user agrees to receive information via the newsletter. When you register for the newsletter, the data you enter during the newsletter registration will be stored and processed for this purpose. The personal data collected during the newsletter registration on the website will be deleted after transmission to us and will not be stored on the website. Only the transmitted email address will be used for the double opt-in procedure and, upon confirmation by the email address owner, exclusively for newsletter distribution. | |
| Purpose and legal basis of data processing
The collection of data is intended to deliver the newsletter(s). The legal basis for processing the data after the user has registered for the newsletter, provided there is consent from the user, is Art. 6(1)(a) of the GDPR. | |
| Storage duration, objection, and removal option
The data will be stored and evaluated for each individual ordered newsletter until the processing of the data is objected to. If you do not confirm your registration within 14 days (opt-in), your data will also be deleted. After unsubscribing or objecting to the use of your data, your data will be deleted within a maximum of 7 days but immediately blocked for further dispatch of the corresponding newsletter. | |
| Company presence on social or professional networks | |
| Description and scope of data processing
As a company, we have accounts on Facebook, Instagram, and LinkedIn. Reports on user activities are created by the mentioned providers. By accessing our company data and the content presented by us on the mentioned social and professional networks, the user decides on the processing of their personal data by the mentioned operators. | |
| Purpose and legal basis of data processing We use these mentioned accounts to present our company and transmit various corporate content, including for advertising purposes. These portals provide access to our website through a link. The legal basis for processing the data, provided there is consent from the user, is Art. 6(1)(a) of the GDPR. | |
| Storage duration
The personal data collected by social and professional networks is not stored by us. | |
| Objection and removal option
The user of our company presence on the mentioned social and professional networks agrees to the use of their personal data by the mentioned third-party providers and services. | |
| Processing of personal data by social or professional networks
| |
| Usage and web analysis of the website | |
| Description and scope of data processing
We use Google Analytics to evaluate our website. This enables reports to be created about your activities on our website and made accessible to us. | |
| Purpose and legal basis of data processing
We use these transmitted reports to continuously optimize our online advertising and our website. The legal basis for processing the data, provided there is consent from the user, is Art. 6(1)(a) of the GDPR. | |
| Storage duration
Personal data transmitted via Google Analytics is deleted upon termination of its use and is not stored by us. | |
| Objection and removal option
The user of our company presence on the mentioned social and professional networks agrees to the use of their personal data by the mentioned third-party providers and services. The user of our website can prevent the collection, transmission, and processing of their data and IP address by Google. For this purpose, they can download and install a plugin for their internet browser. | |
| This plugin is available [insert URL]. | |
| Use of third-party providers | |
| Description and scope of data processing
We use Google Ads, Google Business, and YouTube. User activities are recorded and utilized by these third-party providers, and partly made accessible to us. | |
| Storage duration
The personal data collected during the use of our website is not stored by us. | |
| Objection and removal option
The user of our company presence on the mentioned social and professional networks agrees to the use of their personal data by the mentioned third-party providers and services. The user of our website can prevent the collection, transmission, and processing of their data and IP address by Google. For this purpose, they can download and install a plugin for their internet browser. This plugin is available [insert URL]." | |