PRIVACY POLICY
I. Name and Address of the Controller
The controller within the meaning of the EU General Data Protection Regulation (hereinafter referred to as the GDPR) and other national data protection laws of the Member States, as well as other data protection provisions, is:
Gossmann & Cie. GmbH
Hohe Bleichen 8
20345 Hamburg
Tel.: +49 40 210 91 61 10
E-Mail: info@gossmann-cie.com
III. General Information on Data Processing
As a user, we generally process your personal data only to the extent necessary to provide a functional website as well as our content and services. Exceptions apply in cases where you have given us prior consent for certain processing activities or where the processing of the data is permitted by statutory provisions.
IV. Data Collection on the Website
1. Description and Scope of Data Processing
Each time our website is accessed, our system automatically collects data and information from the computer system of the calling device. The following data is collected:
- Browser type and version
- Operating system used
- Referrer URL
- Hostname of the accessing computer
- Time of the server request
- IP address
This data is not combined with other data sources.
2. Purpose of Data Processing and Legal Basis
The temporary storage of the IP address by the system is necessary to enable the delivery of the website to your computer. For this purpose, your IP address must remain stored for the duration of the session.
Data is stored in log files to ensure the functionality of the website. In addition, the data serves us to ensure the security of our information technology systems.
Regarding the evaluation of website usage, the legal basis pursuant to Art. 6(1)(f) GDPR is established by weighing our legitimate interests against your interests requiring protection. Our legitimate interests pursued in this respect lie in increasing the efficiency of our website, evaluating the success of presentations and descriptions of our products, and examining and improving the user-friendliness of the website.
3. Duration of Storage
The data is stored as long as it is necessary to achieve the legitimate purposes. In the case of data collection for the provision of the website (so-called "session-based data"), this is stored until the respective session has ended.
V. E-mail Contact
1. Description and Scope of Data Processing
When contacting us via the e-mail address provided on our website, personal data is processed and stored for the purpose of handling your request. We will not pass on this data without your consent.
2. Purpose of Data Processing and Legal Basis
The processing of this data is based on Art. 6(1)(b) GDPR if your request is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on your consent (Art. 6(1)(a) GDPR) and/or on our legitimate interests (Art. 6(1)(f) GDPR), as we have a legitimate interest in the effective handling of enquiries addressed to us.
3. Duration of Storage
The data is generally deleted as soon as it is no longer required to achieve the purpose for which it was collected. In addition, data stored on the basis of your consent will only be stored on that basis until you withdraw your consent.
To the extent that data is no longer required for the fulfilment of contractual or legal obligations—including commercial and tax law retention periods—or for the pursuit of legitimate interests (i.e. the preservation of evidence within the scope of statutory limitation periods), it will be routinely deleted.
VI. Rights of the Data Subject
If personal data concerning you is processed, the respective data subject must be informed of the following rights.
1. Right of Access (Art. 15 GDPR)
You may request confirmation from the controller as to whether personal data concerning you is being processed by us.
2. Right to Rectification (Art. 16 GDPR)
You have a right to rectification and/or completion vis-à-vis the controller if the processed personal data concerning you is inaccurate or incomplete. The controller shall carry out the rectification without undue delay.
3. Right to Erasure (Art. 17 GDPR)
You can request the controller to delete the personal data concerning you without undue delay, and the controller is obliged to delete this data without undue delay, provided that one of the exceptions regulated in the GDPR applies or other statutory retention obligations do not require us to retain the data in question.
4. Right to Restriction of Processing (Art. 18 GDPR)
Under the conditions set out in the GDPR, you may request the restriction of processing of the personal data concerning you.
5. Right to Data Portability (Art. 20 GDPR)
You have the right to receive the personal data concerning you which you have provided to the controller in a structured, commonly used and machine-readable format. Furthermore, under the conditions set out in the GDPR, you have the right to transmit this data to another controller without hindrance from the controller to which the personal data was provided.
In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one controller to another, where technically feasible. The freedoms and rights of other persons must not be adversely affected by this.
6. Right to Object (Art. 21 GDPR)
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6(1)(e) or (f) GDPR; this also applies to profiling based on these provisions.
If personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing; this also applies to profiling to the extent that it is related to such direct marketing. In the event of an objection, the personal data concerning you will no longer be processed for these purposes.
7. Right to Withdraw Consent (Art. 7(3) GDPR)
You have the right to withdraw your data protection declaration of consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. This also applies to the withdrawal of declarations of consent given to us before the GDPR came into force, i.e. before 25 May 2018. All personal data stored on the basis of the respective consent given will be deleted in this case, unless another legal basis for further storage exists under law.
Please contact the details provided in Section I to withdraw your consent.
VII. Right to Lodge a Complaint
In the event of infringements of the GDPR, data subjects shall have the right to lodge a complaint with a supervisory authority for data protection, in particular in the Member State of their habitual residence, place of work or place of the alleged infringement. The right to lodge a complaint is without prejudice to any other administrative or judicial remedy.
Our competent data protection supervisory authority is:
Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit
(The Hamburg Commissioner for Data Protection and Freedom of Information)
Ludwig-Erhard-Str. 22, 7. OG
20459 Hamburg
Tel.: 040 / 428 54 - 4040
Fax: 040 / 428 54 - 4000
E-Mail: mailbox@datenschutz.hamburg.de
The contact details of other data protection supervisory authorities can be found at the following link:
https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html