In this privacy policy, we inform you about the following topics:

• Section 1: Controller for data processing; scope of application
• Section 2: General principles for the processing of your personal data
• Section 3: Informational use of our WEBSITE
• Section 4: Further functions and offers
• Section 5: Web analysis services
• Section 6: Third-party content
• Section 7: Data security
• Section 8: Your rights
• Section 9: Amendment of these data protection provisions

1. controller for data processing; scope of application

(1) We, Grupp&Stahl GmbH, Steinetsstraße 20, 72336 Balingen-Ostdorf, Germany, phone: +49 7433 955 85-20, fax: +49 7433 955 85-23, e-mail: info@gruppundstahl.de, are the operator of the websites, available at www.gruppundstahl.com (hereinafter also referred to as “WEBSITE”), and responsible for the processing of personal data of you as a user of our WEBSITE (“you”) in accordance with Art. 4 No. 7 of the EU General Data Protection Regulation (“GDPR”).

(2) In the following, we would like to inform you in detail about the processing of your personal data when you visit our WEBSITE and make use of our other offers and functions (hereinafter also referred to as “services”) on our WEBSITE as part of our duty to inform. Furthermore, we would like to inform you about the accompanying protective measures that we have also taken in technical and organizational terms on our WEBSITE, as well as your rights with regard to the processing of personal data concerning you.

2. General principles for the processing of your personal data

(1) Personal data means any information relating to an identified or identifiable natural person. Your personal data therefore includes all data that can be directly or indirectly assigned to your person, such as your name, your address, your telephone number or your e-mail address.

(2) Personal data will only be processed by us primarily if and insofar as

– you have given us your consent to data processing for one or more specific purposes (Art. 6 para. 1 subpara. 1 letter a GDPR);-      die Verarbeitung für die Erfüllung eines Vertrags, dessen Vertragspartei Sie sind, oder zur Durchführung vorvertraglicher Maßnahmen, die auf Ihre Anfrage erfolgen, erforderlich ist (Art. 6 Abs. 1 UAbs. 1 Buchst. b DSGVO);

– the data processing is necessary for compliance with a legal obligation to which we are subject (Art. 6(1)(1)(c) GDPR), or

– data processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data (Article 6(1)(1)(f) GDPR).

(3) In the following provisions of this privacy policy, we will explain to you which of the legal bases listed in para. 2 or other legal bases we use to process your personal data in individual cases.

(4) In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored. Furthermore, we may pass on your personal data to third parties if contracts or similar services are offered by us together with partners. You will receive more detailed information on this when you provide your personal data or in the following provisions of this privacy policy. If our service providers or partners are based in a country outside the European Economic Area (EEA), we will also inform you of the consequences of this circumstance in the following provisions of this privacy policy.

3. informational use of our WEBSITE

3.1 Log data

(1) In connection with the use of our WEBSITE, we collect the data that your Internet browser automatically transmits to our server. The following data is collected:

– IP address of the requesting computer

– Date and time of the request

– Time zone difference to Greenwich Mean Time (GMT)

– Content of the request (specific page)

– Access status/HTTP status code

– Amount of data transferred in each case

– Website from which the request originates

– browser

– Operating system and its interface

– Language and version of the browser software.

(2) This data is technically necessary for us to enable you to use and function our WEBSITE, in particular to display the WEBSITE and to ensure the security and stability of the WEBSITE. A linking of this data with personal data of a specific natural person is not possible. Person erfolgt nicht. In einer funktionierenden Website liegt unser berechtigtes Interesse. Rechtsgrundlage ist Art. 6 Abs. 1 UAbs. 1 Buchst. f DSGVO.

(3) We delete this data as soon as it is no longer required to achieve the purpose for which it was collected. Your IP address will be stored for up to seven days. The temporary storage of the IP address by our system is necessary in order to rectify faults on our WEBSITE and to avert dangers. Otherwise, it will be deleted when the respective session has ended.

3.2 Cookies

(1) We use cookies for our WEBSITE. Cookies are small text files that are stored on your respective storage medium (e.g. hard disk, SSD) assigned to the browser you are using and through which certain information flows to the body that sets the cookie (here by us). A cookie cannot execute programs or independently transfer malware to your computer.

(2) Our WEBSITE uses the following types of cookies, the scope and function of which are explained below:

– Transient cookies (see a)

– Persistent cookies (see b).

1. a) Transient cookies are automatically deleted when you close the browser. These include session cookies in particular. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This allows your computer to be recognized when you return to a page on our WEBSITE. The session cookies are deleted when you log out or close the browser.
2. b) Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie.

(3) Our WEBSITE uses “Necessary” cookies. Some cookies are placed by third parties that appear on our pages. Necessary cookies help us to make our WEBSITE usable by enabling basic functions such as page navigation and access to secure areas of the website. Our WEBSITE cannot function properly without these cookies.

(4) You can also prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of our WEBSITE to their full extent.

(5) If personal data is processed by individual cookies, the necessary cookies are processed in accordance with Art. 6 para. 1 subpara. 1 letter f GDPR to safeguard our legitimate interests in the best possible functionality of our WEBSITE.

4. other functions and offers on our WEBSITE

In connection with various services on our WEBSITE, which you can use if you are interested, you must generally provide further personal data. In detail:

4.1 Contact/feedback

(1) If you contact us, for example to give us your feedback, the contact data you provide (e.g. first and last name, email address, telephone number) will be processed to answer your inquiries and/or suggestions made via the contact form or by email. The processing of your data serves to process the contact [as well as to prevent misuse and ensure the security of our information technology systems].

(2) The legal basis for the processing of the data is Art. 6 para. 1 subpara. 1 letter f GDPR. If your message is aimed at the conclusion of a contract, the additional legal basis for the processing of your data is Art. 6 para. 1 subpara. 1 letter b GDPR.

(3) Insofar as no statutory or contractual retention periods prevent the erasure of your personal data, we will erase it as soon as it is no longer required to achieve the purpose for which it was collected.

5. web analysis services

Point 5 is currently being processed. If you have any questions, please contact Grupp&Stahl GmbH.

Consentmanager

(1) Our WEBSITE uses the consent management platform “Consentmanager” of consentmanager GmbH (Eppendorfer Weg 183 – 20253 Hamburg, Germany) to obtain, document and manage your consent to the storage of cookies on your end device.

(2) When you access our WEBSITE, the following data is collected and transmitted to Consentmanager:

– Consent data (consent or revocation of consent)

– Your IP address

– Information about your browser

– Information about your end device

– Time of your visit to our WEBSITE

– Content of the request (specific page)

– Website from which the request comes.

(3) The data referred to in paragraph 2 will be stored on the servers of Consentmanager and in the local memory of your browser in order to be able to assign the consent settings you have made to you. Consentmanager’s servers are located exclusively in the EU.

(4) The storage of your data is also necessary in order to be able to prove your consent in accordance with Art. 7 para. 1 GDPR. The legal basis for the use of Consentmanager is therefore the fulfillment of our legal obligations pursuant to Art. 6 para. 1 subpara. 1 lit. c GDPR.

(5) Your data will be deleted as soon as it is no longer required for logging and there are no legal retention periods to the contrary.

(6) Further information on the processing of your data by Consentmanager can be found in Consentmanager’s privacy policy . There you will also find further information on your rights and setting options to protect your privacy: https://www.consentmanager.de/datenschutz. 

6. Third-party content

Within our online offer, we use on the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. GDPR) content or service offers. GDPR) content or service offers from third-party providers in order to integrate their content and services, such as fonts (hereinafter uniformly referred to as “content”).

This assumes that the third-party providers of this content are aware of the IP address of the user, as they would not be able to send the content to their browser without the IP address. The IP address is therefore required to display this content. We endeavor to only use content whose respective providers only use the IP address to deliver the content. Third-party providers may also use so-called pixel tags for statistical or marketing purposes. By using “pixel tags”, information about visitor traffic on the pages of this website can be analyzed. In addition, the pseudonymous information may be stored in cookies on the user’s device and contain technical information such as browser, operating system, referring websites, visitor time and other information on the use of our online offer, as well as being linked to such information from other sources.

7. Data security

(1) We use technical and organizational security measures to protect personal data that is generated or collected, in particular against accidental or intentional manipulation, loss, destruction or against attacks by unauthorized persons. Our security measures are continuously improved in line with technological developments.

(2) Our WEBSITE is encrypted using SSL technology to prevent access by unauthorized third parties. You can recognize the secure transmission by the protocol designation “https://” in the URL line.

8. your rights

(1) With regard to the processing of personal data concerning you, you are entitled to the rights listed below under letters a – h vis-à-vis us under the legal requirements. Please contact us for this purpose. You will find the contact details under point 1.

1. a) Right to information

In accordance with Art. 15 GDPR, you can request confirmation from us as to whether personal data concerning you is being processed by us. In this case, you have a right to information about the processing purposes, the categories of personal data processed, the recipients or categories of recipients to whom we have disclosed or will disclose the personal data, the planned storage period or criteria for determining the storage period, the existence of a right to data portability in accordance with Art. 15 para. 1 GDPR. the criteria for determining the storage period, the existence of a right to rectification or erasure of your personal data and to restriction of processing or objection to processing, the existence of a right of appeal to a supervisory authority, the origin of the data if we have not collected your data from you, the existence of automated decision-making including profiling and, pursuant to Art. 15 para. 2 GDPR, the right to be informed of the appropriate safeguards pursuant to Art. 46 GDPR in the context of the transfer of personal data to third countries.

1. b) Right to rectification

In accordance with Art. 16 GDPR, you have the right to obtain from us without undue delay the rectification and/or, taking into account the purposes of the processing, the completion of your personal data if your data is inaccurate or incomplete.

1. c) Right to erasure

In accordance with Art. 17 GDPR, you can demand that we erase your personal data without undue delay if there is a reason in accordance with Art. 17 (1) (a-f) GDPR. However, the right to erasure of your personal data does not exist in particular if processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims (Art. 17 para. 3 GDPR).

1. d) Right to restriction of processing

You can demand that we restrict the processing of your personal data in accordance with Art. 18 GDPR as long as we verify the accuracy of your data that you dispute, if you refuse to delete your data due to unlawful processing and instead demand the restriction of the use of your data, if you need your data to assert, exercise or defend legal claims, or if you have lodged an objection to the processing as long as it is not yet clear whether our legitimate reasons prevail.

1. e) Right to information

We will inform all recipients to whom your personal data has been disclosed of any rectification or erasure of your personal data or restriction of processing in accordance with Art. 16, 17 (1) and 18 GDPR, unless this proves impossible or involves disproportionate effort. According to Art. 19 p. 2 GDPR, you have the right to be informed about these recipients upon request.

1. f) Right to data portability

In accordance with Art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format and to transmit this data to another controller, provided that the other requirements of Art. 20 GDPR are met, in particular if this is technically feasible.

1. g) Right to object

Insofar as we base the processing of your personal data on the legitimate interests pursuant to Art. 6 para. 1 subpara. 1 letter f GDPR, you may object to the processing pursuant to Art. 21 GDPR. This is the case if the processing is not necessary in particular for the performance of a contract with you, which is described by us in each case in the above description of the offers. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and, in accordance with Art. 21 para. 1 sentence 2 GDPR, either no longer process the personal data or provide you with evidence of our compelling legitimate grounds for processing that outweigh your interests, rights and freedoms. We also reserve the right to further processing if the processing serves the assertion, exercise or defense of legal claims.

Of course, you can object to the processing of your personal data for advertising and profiling purposes in connection with direct advertising at any time in accordance with Art. 21 para. 2 GDPR.

You can inform us of your objection using the contact details provided in section 1.

1. h) Right to withdraw consent

In accordance with Art. 7 (3) GDPR, you have the right to withdraw any data protection consent you may have given us at any time with effect for the future. However, this does not affect the lawfulness of the processing that took place on the basis of your consent up to the time of withdrawal.

(2) If you are of the opinion that the processing of your data violates data protection regulations, you also have the right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. Please contact a supervisory authority in the member state of your place of residence, your place of work or the place of the potential infringement.

9. amendment of these data protection provisions

We reserve the right to amend this privacy policy at any time with effect for the future. A current version is available on our WEBSITE. Please visit the WEBSITE regularly and inform yourself about the applicable data protection provisions.