Privacy Policy

We are pleased that you are visiting our website www.gessmann.com and your interest in our company.

The protection of your personal data—such as your date of birth, name, phone number, address, etc.—is very important to us.

The purpose of this Privacy Policy is to inform you about the processing of your personal data that we collect when you visit our website. Our data protection practices comply with the legal provisions of the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). The following Privacy Policy serves to fulfill the information obligations arising from the GDPR. These can be found, for example, in Articles 13 and 14 et seq. of the GDPR.

Person in Charge

The controller, as defined in Article 4(7) of the GDPR, is the person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

With regard to our website, the data controller is:

W. Gessmann Limited Liability Company
221 Eppinger Street
74211 Leingarten
Germany
Email: sales@gessmann.com
Phone: +49 (0) 7131 / 4067 – 0
Fax: +49 (0) 7131 / 4067 – 10

Contact Information for the Data Protection Officer

We have appointed a Data Protection Officer in accordance with Article 37 of the GDPR. You can contact our Data Protection Officer using the contact information below:

Michael Wengert
221 Eppinger Street
74211 Leingarten
Germany
Email: datenschutz@gessmann.com
Phone: 071314067317
Website: http://www.gessmann.com/

Hosting the Website and Creating Log Files

Every time our website is accessed, our system automatically collects data and information about the device used to access it (e.g., computer, cell phone, tablet, etc.).

What personal data is collected, and to what extent is it processed?

(1) Information about the browser type and version used;
(2) The operating system of the access device;
(3) Hostname of the accessing computer;
(4) The IP address of the device used to access the content;
(5) Date and time of access;
(6) Websites and resources (images, files, other page content) accessed on our website;
(7) Websites from which the user's system accessed our website (referrer tracking);
(8) Indication of whether the retrieval was successful;
(9) Amount of data transferred

This data is stored in our system's log files. This data is not stored together with the personal data of any specific user, so individual site visitors cannot be identified.

Legal Basis for the Processing of Personal Data

Art. 6(1)(f) of the GDPR (legitimate interest). Our legitimate interest is to ensure that the purpose described below is achieved.

Purpose of Data Processing

The temporary (automated) storage of data is necessary for the website visit to proceed and to enable the website to be displayed. The storage and processing of personal data also serve to ensure that our website remains compatible for as many visitors as possible, as well as to combat misuse and resolve technical issues. To this end, it is necessary to log the technical data of the accessing computer so that we can respond as quickly as possible to display errors, attacks on our IT systems, and/or malfunctions in our website’s functionality. In addition, we use this data to optimize the website and to generally ensure the security of our IT systems.

Duration of Storage

The aforementioned technical data will be deleted as soon as it is no longer needed to ensure the website’s compatibility for all visitors, but no later than 3 months after the website is accessed.

Right to Object and Right to Erasure

You may object to the processing of your data at any time in accordance with Article 21 of the GDPR and request the erasure of your data in accordance with Article 17 of the GDPR. You can find information about your rights and how to exercise them at the bottom of this Privacy Policy.

Special Features of the Website

Our website offers various features, and when you use them, we collect, process, and store personal data. Below, we explain what happens to this data:

Application Form

• What personal data is collected, and to what extent is it processed?

  The data you enter into the fields of the application form—and any data you upload—will be processed in its entirety for the purpose specified below.

• Legal Basis for the Processing of Personal Data

  The legal basis for the collection and processing of applicant data is Article 6(1)(b) (pre-contractual measures) and Article 88(1) of the GDPR in conjunction with Section 26 of the BDSG. To the extent that special categories of personal data are collected that are necessary to fulfill legal obligations under labor law, social security law, and social protection law pursuant to Article 9( 2(b) of the GDPR in conjunction with Section 26(3) of the BDSG, processing is carried out on this legal basis. To the extent that special categories of personal data are to be processed beyond this, we will obtain consent for this in accordance with Article 9(2)(a) of the GDPR.

• Purpose of Data Processing

  The purpose of data processing is to review and process the application documents you have uploaded via the form.

• Duration of Storage

  The data will be deleted as soon as your application has been processed and there is no longer a legitimate interest in retaining your application data. Therefore, if an employment relationship is not established, your application documents will be deleted no later than 6 months from the date of processing.

• Right to Object and Right to Erasure

  You can find information about your rights and how to exercise them at the bottom of this Privacy Policy.

• Requirement to Provide Personal Data

  The information on the application form is not required by contract or by law, but it is necessary for submitting and processing your application. If you do not fill out the required fields—or do not fill them out completely—your application cannot be submitted or processed.

Contact Form(s)

• What personal data is collected, and to what extent is it processed?

  We will process the data you have entered into our contact forms—specifically, the information you have provided in the contact form’s input fields—for the purpose described below.

• Legal Basis for the Processing of Personal Data

  Art. 6(1)(a) of the GDPR or Art. 9(2)(a) of the GDPR (consent through a clear affirmative action or conduct, or explicit consent)

• Purpose of Data Processing

  We will use the data collected through our contact form(s) solely to process the specific inquiry submitted via the contact form.

• Duration of Storage

  Once your request has been processed, the collected data will be deleted immediately, unless there are any statutory retention periods.

• Right to Withdrawal and Deletion

  The options for revocation and deletion are governed by the general provisions regarding the right of revocation and the right to deletion under data protection law, as described below in this Privacy Policy.

• Requirement to Provide Personal Data

  Use of the contact forms is voluntary and is not required by contract or law. You are not obligated to contact us via the contact form; you may also use the other contact options listed on our website. If you wish to use our contact form, you must fill out the fields marked as required. If you do not provide the necessary information in the contact form, you will either be unable to submit your inquiry, or we will unfortunately be unable to process it.

Statistical Analysis of Visits to This Website – Web Tracker

When you access this website or individual files on the website, we collect, process, and store the following data: IP address, the website from which the file was accessed, the name of the file, the date and time of access, the amount of data transferred, and a notification of whether the access was successful (so-called web log). We use this access data exclusively in a non-personalized form to continuously improve our website and for statistical purposes. We also use the following web trackers to analyze visits to this website:

• Google Analytics

  We use the Google Analytics service on our website, provided by Google Ireland Ltd., Gordon House, Barrow Street, 4 Dublin, Ireland, email: support-deutschland@google.com, Website: https://www.google.com/. Personal data is also transferred to the United States. With regard to the transfer of personal data to the United States, there is an adequacy decision by the European Commission on the EU-U.S. Data Privacy Framework pursuant to Article 45 of the GDPR (hereinafter: DPF – https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). The service provider is certified under the DPF, so the standard level of protection under the GDPR applies to the transmission of data.

  The legal basis for the processing of personal data is your consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR, which you provided on our website.

  Google Analytics is a web tracking tool that analyzes the behavior of website visitors and their interactions with our website, and provides us with reports and forecasts regarding the content and products on our website and their popularity (known as tracking). We have integrated Google Analytics so that the service can compile an analysis of site users’ browsing behavior. To this end, Google collects data on site visitors’ interactions with our website and, where applicable, existing information derived from cookies or other storage technologies, and processes this data statistically for us. Google Analytics uses data processing technologies that enable the tracking of individual site visitors and their interactions with other Google services, such as the Google Ads advertising network. Data from other Google services is also used to fill data gaps and generate comprehensive statistics on the content of our website using machine learning technologies, modeled statistics, and forecasting functions. If Google Analytics is active on our website, the data collected by Google Analytics is transferred to servers operated by Google Ireland Limited. As part of data processing on our behalf, personal data may also be transferred to the servers of the parent company, Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. We use Google Analytics to continuously optimize our website and improve its availability. This is known as audience measurement.

  For the processing itself, the service—or rather, we—collect the following data: data on site visitors’ interactions with the website’s content; data on the use of the services displayed on our website; and data from external Google services, provided they interact with our website, such as advertising data or data regarding advertising behavior, data on approximate geographic location, the browser and operating system used, as well as additional information about the device used.

  Google Analytics will store the data relevant to web tracking for as long as necessary to fulfill the web service that has been booked. Data collection and storage are anonymized. To the extent that individual interactions by site visitors make it possible to subsequently link specific actions to a specific individual, we will delete the collected data once the purpose has been fulfilled. The data will be deleted at the latest when it is no longer subject to any statutory retention requirements. As a general rule, we will delete this data no later than 12 months after collection. You can view the provider’s certification under the EU-U.S. Data Privacy Framework at https://www.dataprivacyframework.gov/list retrieve.

  You may withdraw your consent at any time. For more information on how to withdraw your consent, please refer either to the consent form itself or to the end of this Privacy Policy.

  For more information on how the transferred data is handled, please see the provider's privacy policy at https://policies.google.com/privacy.

  The provider offers under https://tools.google.com/dlpage/gaoptout?hl=de It also offers an opt-out option.

• Google Tag Manager

  We use the Google Tag Manager service on our website, provided by Google Ireland Ltd., Gordon House, Barrow Street, 4 Dublin, Ireland, email: support-deutschland@google.com, Website: https://www.google.com/. Personal data is also transferred to the United States. With regard to the transfer of personal data to the United States, there is an adequacy decision by the European Commission on the EU-U.S. Data Privacy Framework pursuant to Article 45 of the GDPR (hereinafter: DPF – https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). The service provider is certified under the DPF, so the standard level of protection under the GDPR applies to the transmission of data.

  The legal basis for the processing of personal data is your consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR, which you provided on our website.

  Google Tag Manager provides a technical platform for running other web tools and web tracking programs using so-called „tags“ and for managing them collectively. In this context, Google Tag Manager stores cookies on your computer and, to the extent that web tracking tools are executed via Google Tag Manager, analyzes your browsing behavior (known as „tracking“). The data generated by the „tags“ is consolidated, stored, and processed by Google Tag Manager within a unified user interface. All integrated „tags“ are listed separately in this Privacy Policy. When you use our website with Google Tag Manager „tags“ enabled, data—including, in particular, your IP address and your user activities—is transmitted to Google’s servers. The tracking tools used in Google Tag Manager ensure, through IP anonymization of the source code, that your IP address is anonymized by Google Tag Manager prior to transmission. Tag Manager allows us to link and analyze metrics from various service providers (Google and third parties) based on what is known as “tag management.” Google Tag Manager helps us compile reports on website activity and manage the web tools on our website.

  For the processing itself, the service—or rather, we—collect the following data: cookies, web tracking data, outgoing or incoming links, and information generated during the integration and activation of JavaScript code on the website by Google Tag Manager and the web tools triggered by Google Tag Manager.

  You can view the provider's certification under the EU-U.S. Data Privacy Framework at https://www.dataprivacyframework.gov/list retrieve.

  You may withdraw your consent at any time. For more information on how to withdraw your consent, please refer either to the consent form itself or to the end of this Privacy Policy.

  For more information on how the transferred data is handled, please see the provider's privacy policy at https://policies.google.com/privacy.

  The provider offers under https://policies.google.com/privacy It also offers an opt-out option.

• Leadinfo

  On our website, we use the Leadinfo service provided by Leadinfo / Team.Blue GmbH, Bunsenstr. 19, 40215 Düsseldorf, Germany, email: privacy@leadinfo.com, Website: https://www.leadinfo.com/. Personal data is transmitted exclusively to servers located in the European Union.

  The legal basis for the processing of personal data is your consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR, which you provided on our website.

  Our website uses the Leadinfo service to collect information about visitors to our website. With the help of Leadinfo, we gain insights into the companies that visit our website, as well as their interests and behavior on the site. This enables us to identify potential customers and target them specifically. This is B2B lead generation—that is, the generation of potential business contacts.

  You may withdraw your consent at any time. For more information on how to withdraw your consent, please refer either to the consent form itself or to the end of this Privacy Policy.

  For more information on how the transferred data is handled, please see the provider's privacy policy at https://www.leadinfo.com/de/rechtliches/datenschutz/.

Integration of External Web Services and Processing of Data Outside the EU

On our website, we use active content from external providers, known as web services. When you visit our website, these external providers may receive personal information about your visit to our website. This may involve the processing of data outside the EU. You can prevent this by installing an appropriate browser plugin or by disabling the execution of scripts in your browser. This may result in limited functionality on the websites you visit.

We use the following external web services:

• Amazon

  On our website, we use the Amazon service provided by Amazon Digital Germany GmbH (Domagkstr. 28, 80807 Munich), as well as the following companies: Amazon Europe Core S.à.r.l., Amazon EU S.à.r.l., Amazon Services Europe S.à.r.l., and Amazon Media EU S.à.r.l., all four located at: 38, avenue John F. Kennedy, L-1855 Luxembourg, Luxembourg; email: privacyshield@amazon.com, Website: https://amazon.com/. Personal data is transmitted exclusively to servers located in the European Union.

  The legal basis for the processing of personal data is your consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR, which you provided on our website.

  Data from our Amazon account is loaded onto our website via the Amazon REST API.

  You may withdraw your consent at any time. For more information on how to withdraw your consent, please refer either to the consent form itself or to the end of this Privacy Policy.

  For more information on how the transferred data is handled, please see the provider's privacy policy at https://www.amazon.de/gp/help/customer/display.html/ref=footer_privacy?ie=UTF8&nodeId=201909010.

• Amazon AWS

  On our website, we use the Amazon AWS service provided by Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, 1855 Luxembourg, Luxembourg, email: privacyshield@amazon.com, Website: http://aws.amazon.com/. Personal data is also transferred to the United States. With regard to the transfer of personal data to the United States, there is an adequacy decision by the European Commission on the EU-U.S. Data Privacy Framework pursuant to Article 45 of the GDPR (hereinafter: DPF – https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). The service provider is certified under the DPF, so the standard level of protection under the GDPR applies to the transmission of data.

  The legal basis for the processing of personal data is our legitimate interest, in accordance with Article 6(1)(f) of the GDPR. Our legitimate interest lies in achieving the purpose described below.

  Amazon AWS is a cloud computing service provided by Amazon that is used to load our website and its individual elements. The separate AWS cloud enables us to host our website and its services on faster servers.

  You can view the provider's certification under the EU-U.S. Data Privacy Framework at https://www.dataprivacyframework.gov/list retrieve.

  With regard to the processing of your data, you have the right to object as set forth in Article 21. You can find more information at the end of this Privacy Policy.

  For more information on how the transferred data is handled, please see the provider's privacy policy at https://aws.amazon.com/de/privacy/?nc1=f_pr.

• EasyHR

  On our website, we use the EasyHR service provided by Fravis GmbH, Sonnenhalde 10, 73489 Jagstzell, Germany, email: info@fravis.de, Website: https://www.easyhr.de/. Personal data is transmitted exclusively to servers located in the European Union.

  The legal basis for the processing of personal data is your consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR, which you provided on our website.

  This service is a plugin that we need in order to display all of the content on our website to you. The plugin makes our website more appealing and enhances the user experience for our visitors.

  You may withdraw your consent at any time. For more information on how to withdraw your consent, please refer either to the consent form itself or to the end of this Privacy Policy.

  For more information on how the transferred data is handled, please see the provider's privacy policy at https://www.easyhr.de/.

• Legal Text Snippets and Modules

  On our website, we use the Rechtstextsnippet service and modules provided by Website-Check GmbH, Beethovenstraße 24, 66111 Saarbrücken, Germany, email: support@website-check.de, Website: https://www.website-check.de/. Personal data is transmitted exclusively to servers located in the European Union.

  The legal basis for the processing is Article 6(1)(c) of the GDPR. Using this service helps us comply with our legal obligations.

  This service is used to load the content of our legal texts onto our website. The integration on our site ensures that the most current legal texts are loaded. This integration may also be used to load additional technical modules related to the legal texts or legally required elements, as needed.

  You can find information about your rights regarding the processing of your data at the end of this Privacy Policy.

  For more information on how the transferred data is handled, please see the provider's privacy policy at https://www.website-check.de/datenschutzerklaerung/.

• Website Check Seal

  On our site, we use the "Website-Check" seal service provided by Website-Check GmbH, Beethovenstraße 24, 66111 Saarbrücken, Germany, email: support@website-check.de, Website: https://www.website-check.de/. Personal data is transmitted exclusively to servers located in the European Union.

  The legal basis for the processing of personal data is our legitimate interest, in accordance with Article 6(1)(f) of the GDPR. Our legitimate interest lies in achieving the purpose described below.

  The Website-Check GmbH script is used to technically integrate the Website-Check seal. We use this seal to demonstrate that we take data protection very seriously. Data is transmitted to Website-Check GmbH for the purpose of delivering and displaying the seal on our site.

  With regard to the processing of your data, you have the right to object as set forth in Article 21. You can find more information at the end of this Privacy Policy.

  For more information on how the transferred data is handled, please see the provider's privacy policy at https://www.website-check.de/datenschutzerklaerung/.

Data Security and Privacy, Email Communication

Your personal data is protected through technical and organizational measures during collection, storage, and processing to ensure that it is not accessible to third parties. In the case of unencrypted email communication, we cannot guarantee complete data security during transmission to our IT systems; therefore, we recommend encrypted communication or sending information by mail for information requiring a high level of confidentiality.

Right to Access Information and Requests for Correction – Deletion and Restriction of Data – Withdrawal of Consent – Right to Object

Right to Information

You have the right to request confirmation as to whether we process your personal data. If this is the case, you have the right to access the information specified in Article 15(1) of the GDPR, provided that this does not infringe upon the rights and freedoms of others (see Article 15(4) of the GDPR). We would also be happy to provide you with a copy of the data.

Right to Correction

Pursuant to Article 16 of the GDPR, you have the right to have us correct any personal data we may have stored incorrectly (such as your address, name, etc.) at any time. You may also request that we complete any data we have stored about you at any time. We will make the necessary corrections without delay.

Right to Erasure

Pursuant to Article 17(1) of the GDPR, you have the right to have us erase the personal data we have collected about you if

• the data is no longer needed;
• the legal basis for the processing has ceased to exist without replacement due to the withdrawal of your consent;
• You have objected to the processing and there are no legitimate grounds for the processing;
• Your data is being processed unlawfully;
• a legal obligation requires it, or data has been collected in accordance with Article 8(1) of the GDPR.

Pursuant to Article 17(3) of the GDPR, this right does not apply if

• the processing is necessary for the exercise of the right to freedom of expression and information;
• Your data has been collected based on a legal obligation;
• the processing is necessary for reasons of public interest;
• the data is necessary for the assertion, exercise, or defense of legal claims.

Right to Restriction of Processing

Pursuant to Article 18(1) of the GDPR, you have the right, in certain cases, to request that the processing of your personal data be restricted.

This is the case when

• you dispute the accuracy of your personal data;
• the processing is unlawful and you do not consent to its erasure;
• the data is no longer needed for the purpose for which it was processed, but the collected data is necessary for the assertion, exercise, or defense of legal claims;
• an objection to the processing has been filed pursuant to Article 21(1) of the GDPR, and it is still unclear which interests prevail.

Right of Withdrawal

If you have given us your explicit consent to the processing of your personal data (Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR), you may revoke this consent at any time. Please note that this does not affect the lawfulness of the processing carried out on the basis of your consent up until the time of revocation.

Right to Object

Pursuant to Article 21 of the GDPR, you have the right to object at any time to the processing of your personal data that was collected on the basis of Article 6(1)(f) (in the context of a legitimate interest). You are entitled to this right only if there are specific circumstances that preclude the storage and processing of such data.

How do you exercise your rights?

You can exercise your rights at any time by contacting us using the contact information below:

W. Gessmann Limited Liability Company
221 Eppinger Street
74211 Leingarten
Germany
Email: sales@gessmann.com
Phone: +49 (0) 7131 / 4067 – 0
Fax: +49 (0) 7131 / 4067 – 10

Right to Data Portability

Pursuant to Article 20 of the GDPR, you have the right to receive the personal data concerning you. We will provide the data in a structured, commonly used, and machine-readable format. The data may be sent either to you or to a data controller designated by you.

Upon request, we will provide you with the following data in accordance with Article 20(1) of the GDPR:

• Data collected on the basis of explicit consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR;
• Data that we have received from you pursuant to Article 6(1)(b) of the GDPR in connection with existing contracts;
• Data that has been processed as part of an automated procedure.

We will transfer your personal data directly to the data controller of your choice, to the extent that this is technically feasible. Please note that, pursuant to Article 20(4) of the GDPR, we are not permitted to transfer data that would infringe upon the freedoms and rights of other individuals.

Right to lodge a complaint with the supervisory authority pursuant to Article 77(1) of the GDPR

If you suspect that your data is being processed unlawfully on our website, you may, of course, seek a judicial resolution of the matter at any time. In addition, you may pursue any other legal remedies available to you. Regardless of this, pursuant to Article 77(1) of the GDPR, you have the option to contact a supervisory authority. You have the right to lodge a complaint under Article 77 of the GDPR in the EU Member State where you reside, where you work, and/or where the alleged infringement occurred; that is, you may choose the supervisory authority to which you wish to turn from among the locations listed above. The supervisory authority to which the complaint was submitted will then inform you of the status and outcome of your complaint, including the possibility of a judicial remedy under Article 78 of the GDPR.