Privacy statement
→ Information on the processing of your customer/supplier data in accordance with Art. 13 GDPR
Data Protection Statement for the website https://www.gfh-gmbh.de/
The following provides information about the collection of personal data when you are using our website. Personal data include all information about personal or factual circumstances of an identified or identifiable natural person (excluding legal entities, such as a GmbH or AG). The personal data mainly include details such as name, address, email address or professional relationships of a person.
§ 1 Controller and Data Protection Officer:
(1) The controller according to Art. 4(7) of the EU General Data Protection Regulation (GDPR) is GFH GmbH, Großwalding 5, 94469 Deggendorf, Germany, Tel.: 0991290920, email: info@gfh-gmbh.de (see also our Legal notice).
(2) Our data protection officer can be contacted at datenschutz@gfh-gmbh.de, or through our above-mentioned postal address with the addition “To the Data Protection Officer”.
General information on the legal basis for the data processing on this website
If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9 (2)(a) GDPR, if special categories of data are processed according to Art. 9 (1) DSGVO. In the case of explicit consent to the transfer of personal data to third countries, the data processing is also based on Art. 49 (1)(a) GDPR. If you have consented to the storage of cookies or to the access to information in your end device (e.g., via device fingerprinting), the data processing is additionally based on § 25 (1) TDDDG. The consent can be revoked at any time. If your data is required for the fulfillment of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Art. 6(1)(b) GDPR. Furthermore, if your data is required for the fulfillment of a legal obligation, we process it on the basis of Art. 6(1)(c) GDPR. Furthermore, the data processing may be carried out on the basis of our legitimate interest
according to Art. 6(1)(f) GDPR. Information on the relevant legal basis in each individual case is provided in the following paragraphs of this privacy policy.
§ 2 Collection of personal data when you contact us by email or use the contact form:
(1) When you contact us by email, the data provided by you (especially your email address, and possibly, your name and your phone number) are stored by us, in order to reply to your questions.
(2) When you contact us using the contact form on our home page, we also store the data provided by you (name, phone number, email address), in order to respond to your inquiries.
(3) The processing takes place on the legal basis of point (b) of Art. 6(1) of GDPR (pre-contractual measures). The data required in this connection will be deleted by us, after they are no longer required to be retained, or the processing will be restricted, if statutory retention obligations exist.
§ 3 Collection of personal data when you visit our website:
(1) When you use the website merely for informational purposes and if you provide information to us otherwise, we only collect the personal data that your browser sends to our server. If you want to view our website, we collect the following data, which are technically necessary for us to display our site to you and to ensure its stability and security (legal basis is point (f) of Art. 6(1) sentence 1 of GDPR):
• Browser type and browser version
• The operating system used
• Referrer URL
• the sub-sites, which can be controlled on our Internet page through an accessing system
• IP address
• Date and time of the server request
• Internet service provider of the accessing system
However, the IP address is anonymised immediately after the processing and before its storage, so that the respective person can no longer be identified.
(2) In addition to the above-mentioned data, cookies are stored in your computer when you use our website. Cookies are small text files which are stored on your hard disk assigned to the browser you are using and through which certain information will flow to the location that sets the cookie (by us here). Cookies cannot run programs or transmit viruses to your computer. They serve to make the Internet service totally more user-friendly and more efficient.
(3) Cookies
Our websites and pages use what the industry refers to as “cookies.” Cookies are small data packages that do not cause any damage to your device. They are either stored temporarily for the duration of a session (session cookies) or they are permanently archived on your device (permanent cookies). Session cookies are automatically deleted once you terminate your visit. Permanent cookies remain archived on your device until you actively delete them, or they are automatically eradicated by your web browser. Cookies can be issued by us (first-party cookies) or by third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain services of third-party companies into websites (e.g., cookies for handling payment services). Cookies have a variety of functions. Many cookies are technically essential since certain website functions would not work in the absence of these cookies (e.g., the shopping cart function or the display of videos). Other cookies may be used to analyze user behavior or for promotional purposes. Cookies, which are required for the performance of electronic communication transactions, for the provision of certain functions you want to use (e.g., for the shopping cart function) or those that are necessary for the optimization (required cookies) of the website (e.g., cookies that provide measurable insights into the web audience), shall be stored on the basis of Art. 6(1)(f) GDPR, unless a different legal basis is cited. The operator of the website has a legitimate interest in the storage of required cookies to ensure the technically error-free and optimized provision of the operator’s services. If your consent to the storage of the cookies and similar recognition technologies has been requested, the processing occurs exclusively on the basis of the consent obtained (Art. 6(1)(a) GDPR and § 25 (1) TDDDG); this consent may be revoked at any time. You have the option to set up your browser in such a manner that you will be notified any time cookies are placed and to permit the acceptance of cookies only in specific cases. You may also exclude the acceptance of cookies in certain cases or in general or activate the delete-function for the automatic eradication of cookies when the browser closes. If cookies are deactivated, the functions of this website may be limited. Which cookies and services are used on this website can be found in this privacy policy.
§ 4 Consent with Borlabs Cookie:
Our website uses the Borlabs consent technology to obtain your consent to the storage of certain cookies in your browser or for the use of certain technologies and for their data privacy protection compliant documentation. The provider of this technology is Borlabs GmbH, Rübenkamp 32, 22305 Hamburg, Germany (hereinafter referred to as Borlabs). Whenever you visit our website, a Borlabs cookie will be stored in your browser, which archives any declarations or revocations of consent you have entered. These data are not shared with the provider of the Borlabs technology. The recorded data shall remain archived until you ask us to eradicate them, delete the Borlabs cookie on your own or the purpose of storing the data no longer exists. This shall be without prejudice to any retention obligations mandated by law. To review the details of Borlabs’ data processing policies, please visit https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/ We use the Borlabs cookie consent technology to obtain the declarations of consent mandated by law for the use of cookies. The legal basis for the use of such cookies is Art. 6(1)(c) GDPR.Change privacy settings
§5 Contact form
If you submit inquiries to us via our contact form, the information provided in the contact form as well as any contact information provided therein will be stored by us in order to handle your inquiry and in the event that we have further questions. We will not share this information without your consent. The processing of these data is based on Art. 6(1)(b) GDPR, if your request is related to the execution of a contract or if it is necessary to carry out pre-contractual measures. In all other cases the processing is based on our legitimate interest in the effective processing of the requests addressed to us (Art. 6(1)(f) GDPR) or on your agreement (Art. 6(1)(a) GDPR) if this has been requested; the consent can be revoked at any time. The information you have entered into the contact form shall remain with us until you ask us to eradicate the data, revoke your consent to the archiving of data or if the purpose for which the information is being archived no longer exists (e.g., after we have concluded our response to your inquiry). This shall be without prejudice to any mandatory legal provisions, in particular retention periods.
Request by e-mail, telephone, or fax If you contact us by e-mail, telephone or fax, your request, including all resulting personal data (name, request) will be stored and processed by us for the purpose of processing your request. We do not pass these data on without your consent. These data are processed on the basis of Art. 6(1)(b) GDPR if your inquiry is related to the fulfillment of a contract or is required for the performance of pre-contractual measures. In all other cases, the data are processed on the basis of our legitimate interest in the effective handling of inquiries submitted to us (Art. 6(1)(f) GDPR) or on the basis of your consent (Art. 6(1)(a) GDPR) if it has been obtained; the consent can be revoked at any time. The data sent by you to us via contact requests remain with us until you request us to delete, revoke your consent to the storage or the purpose for the data storage lapses (e.g. after completion of your request). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.
§ 6. Analysis tools and advertising:
IONOS Web Analytics
This website uses IONOS WebAnalytics analysis services. The provider of these services is 1&1 IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. In conjunction with the performance of analyses by IONOS, it is possible to e.g., analyze the number of visitors and their behavior patterns during visits (e.g., number of pages accessed, duration of their visits to the website, percentage of aborted visits), visitor origins (i.e., from which site does the visitor arrive at our site), visitor locations as well as technical data (browser and session of operating system used).
For these purposes, IONOS archives in particular the following data:
- Referrer (previously visited website)
- Accessed page on the website or file
- Browser type and browser version
- Used operating system
- Type of device used
- Website access time
- Anonymized IP address (used only to determine the access location)
According to IONOS, the data recorded are completely anonymized so they cannot be tracked back to individuals. IONOS WebAnalytics does not archive cookies. The data are stored and analyzed pursuant to Art. 6(1)(f) GDPR. The operator of the website has a legitimate interest in the statistical analysis of user patterns to optimize both, the operator’s web presentation as well as the operator’s promotional activities. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TDDDG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TDDDG. This consent can be revoked at any time.
For more information affiliated with the recording and processing of data by IONOS WebAnalytics, please click on the following link of the data policy declaration: https://www.ionos.de/terms-gtc/datenschutzerklaerung/.
Data processing
We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.
§ 7 Hosting:
We are hosting the content of our website at the following provider: IONOS
The provider is the IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany (hereinafter referred to as: IONOS). Whenever you visit our website, IONOS records various logfiles along with your IP addresses. For details, please consult the data privacy policy of IONOS:
https://www.ionos.de/terms-gtc/terms-privacy.
We use IONOS on the basis of Art. 6 (1)(f) GDPR. Our company has a legitimate interest in presenting a website that is as dependable as possible. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TDDDG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TDDDG. This consent can be revoked at any time.
Data processing
We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a
contract mandated by data privacy laws that guarantees that they process personal data of our website
visitors only based on our instructions and in compliance with the GDPR.
§ 8 SSL and/or TLS encryption:
For security reasons and to protect the transmission of confidential content, such as purchase orders or inquiries you submit to us as the website operator, this website uses either an SSL or a TLS encryption program. You can recognize an encrypted connection by checking whether the address line of the browser switches from “http://” to “https://” and also by the appearance of the lock icon in the browser line. If the SSL or TLS encryption is activated, data you transmit to us cannot be read by third parties.
§ 9 Google Ads
The website operator uses Google Ads. Google Ads is an online promotional program of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. Google Ads enables us to display ads in the Google search engine or on third-party websites, if the user enters certain search terms into Google (keyword targeting). It is also possible to place targeted ads based on the user data Google has in its possession (e.g., location data and interests; target group targeting). As the website operator, we can analyze these data quantitatively, for instance by analyzing which search terms resulted in the display of our ads and how many ads led to respective clicks. The use of these services occurs on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. You may revoke your consent at any time. Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here:
https://policies.google.com/privacy/frameworks and https://business.safety.google/controllerterms/.
The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link:
https://www.dataprivacyframework.gov/participant/5780.
§ 10 Plugins and Tools:
Google Fonts (local embedding)
This website uses so-called Google Fonts provided by Google to ensure the uniform use of fonts on this site. These Google fonts are locally installed so that a connection to Google’s servers will not be established in conjunction with this application. For more information on Google Fonts, please follow this link: https://developers.google.com/fonts/faq and consult Google’s Data Privacy Declaration under: https://policies.google.com/privacy?hl=en.
Font Awesome (local embedding)
This website uses Font Awesome to ensure the uniform use of fonts on this site. Font Awesome is locally installed so that a connection to Fonticons, Inc.’s servers will not be established in conjunction with this application. For more information on Font Awesome, please and consult the Data Privacy Declaration for Font Awesome under: https://fontawesome.com/privacy.
§ 11 Custom Services:
Handling applicant data
We offer website visitors the opportunity to submit job applications to us (e.g., via e-mail, via postal services on by submitting the online job application form). Below, we will brief you on the scope, purpose and use of the personal data collected from you in conjunction with the application process. We assure you that the collection, processing, and use of your data will occur in compliance with the applicable data privacy rights and all other statutory provisions and that your data will always be treated as strictly confidential
Scope and purpose of the collection of data
If you submit a job application to us, we will process any affiliated personal data (e.g., contact and communications data, application documents, notes taken during job interviews, etc.), if they are required to make a decision concerning the establishment or an employment relationship. The legal grounds for the aforementioned are § 26 BDSG according to German Law (Negotiation of an Employment Relationship), Art. 6(1)(b) GDPR (General Contract Negotiations) and – provided you have given us your consent – Art. 6(1)(a) GDPR. You may revoke any consent given at any time. Within our company, your personal data will only be shared with individuals who are involved in the processing of your job application
If your job application should result in your recruitment, the data you have submitted will be archived on the grounds of § 26 BDSG and Art. 6(1)(b) GDPR for the purpose of implementing the employment relationship in our data processing system.
Data Archiving Period
If we are unable to make you a job offer or you reject a job offer or withdraw your application, we reserve the right to retain the data you have submitted on the basis of our legitimate interests (Art. 6(1)(f) GDPR) for up to 6 months from the end of the application procedure (rejection or withdrawal of the application). Afterwards the data will be deleted, and the physical application documents will be destroyed. The storage serves in particular as evidence in the event of a legal dispute. If it is evident that the data will be required after the expiry of the 6-month period (e.g., due to an impending or pending legal dispute), deletion will only take place when the purpose for further storage no longer applies. Longer storage may also take place if you have given your agreement (Article 6(1)(a) GDPR) or if statutory data retention requirements preclude the deletion.
§ 12 Data Protection:
In addition, we use technical and organisational security measures in order to protect personal data, in particular against accidental or intentional manipulation, loss, destruction or against hacking by unauthorised persons. Our security measures are continuously adapted in line with technological developments.
§ 13 Changes to this Data Protection Statement:
If it is necessary to adapt security and data protection measures due to technical or legal development, we will also modify this data protection statement accordingly. Please pay attention to the latest version of our data protection statement.
§ 14 Your Rights:
(1) You have the following rights against us in respect of the personal data concerning you:
– Right to obtain access to the personal data,
– Right to request rectification or erasure,
– Right to request restriction of processing,
– Right to object to the processing,
– Right to data portability.
(2) You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.
(3) If you have any questions about the collection, processing or use of your personal data, you can just send an email to: info@gfh-gmbh.de or contact our data protection officer: datenschutz@gfh-gmbh.de. The same applies to information requests and requests for rectification, blocking or erasure of data, as well as for the withdrawal of any granted consent or objection to a particular use of data.
Last updated: 25.11.24
