Privacy Policy

Thank you for visiting our website www.gessmann.com and for your interest in our company.

The protection of your personal data—such as your date of birth, name, phone number, address, etc.—is important to us.

The purpose of this privacy policy is to inform you about how we process the personal data we collect from you when you visit our website. Our data protection practices comply with the legal requirements of the EU’s General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). The following privacy policy serves to fulfill the information obligations set forth in the GDPR. These can be found, for example, in Articles 13 and 14 et seq. of the GDPR.

Person in Charge

The controller, as defined in Article 4(7) of the GDPR, is the person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

The person responsible for our website is:

W. Gessmann Limited Liability Company
221 Eppinger Street
74211 Leingarten
Germany
Email: sales@gessmann.com
Phone: +49 (0) 7131 / 4067 – 0
Fax: +49 (0) 7131 / 4067 – 10

Contact information for the data protection officer

We have appointed a data protection officer in accordance with Article 37 of the GDPR. You can contact our data protection officer using the following contact information:

Michael Wengert
221 Eppinger Street
74211 Leingarten
Germany
Email: datenschutz@gessmann.com
Phone: 071314067317
Website: http://www.gessmann.com/

Operation of the website and creation of log files

Each time our website is accessed, our system automatically collects data and information from the device (e.g., computer, cell phone, tablet, etc.) used to access it.

What personal data is collected, and to what extent is it processed?

(1) Information about the browser type and version used;
(2) The operating system of the retrieval device;
(3) Host name of the computer accessing the system;
(4) The IP address of the device used to retrieve the information;
(5) Date and time of access;
(6) Websites and resources (images, files, other page content) accessed on our website;
(7) Websites from which the user's system accessed our website (referrer tracking);
(8) Indicate whether the retrieval was successful;
(9) Amount of data transmitted

This data is stored in our system's log files. This data is not stored together with the personal data of a specific user, so individual site visitors cannot be identified.

Legal Basis for the Processing of Personal Data

Art. 6, para. 1, subpara. f of the GDPR (legitimate interest). Our legitimate interest is to ensure that the purpose described below is achieved.

Purpose of Data Processing

The temporary (automated) storage of the data is necessary during a website visit to enable the website to be displayed. Personal data is also stored and processed to ensure that our website remains compatible for as many visitors as possible and to combat misuse and resolve malfunctions. For this purpose, it is necessary to log the technical data of the accessing computer so that we can respond as quickly as possible to display errors, attacks on our IT systems, and/or errors in the functionality of our website. In addition, we use the data to optimize the website and to generally ensure the security of our information technology systems.

Duration of storage

The aforementioned technical data is deleted as soon as it is no longer needed to ensure the website's compatibility for all visitors, but no later than 3 months after accessing our website.

Right to Object and Request Deletion

You may object to the processing at any time in accordance with Article 21 of the GDPR and request the deletion of data in accordance with Article 17 of the GDPR. You can find out what rights you have and how to exercise them at the bottom of this privacy policy.

Special features of the website

Our website offers various features, and when you use them, we collect, process, and store your personal data. Below, we explain what happens to this data:

Application Form

• What personal data is collected, and to what extent is it processed?

  The data you enter in the form fields of the application form and upload, if applicable, will be processed in its entirety to fulfill the purpose stated below.

• Legal Basis for the Processing of Personal Data

  The legal basis for the collection and processing of applicant data is Article 6(1)(b) (contract initiation) and Article 88(1) of the GDPR in conjunction with Section 26 of the BDSG. To the extent that special categories of personal data are collected that are necessary for the fulfillment of legal obligations arising from labor law, social security law, and social protection pursuant to Article 9(2)(b) of the GDPR in conjunction with Section 26(3) of the BDSG, the processing is carried out on this legal basis. To the extent that special categories of personal data are to be processed in addition, we will obtain consent for this in accordance with Article 9(2)(a) of the GDPR.

• Purpose of Data Processing

  The purpose of the data processing is to review and process the application documents you have uploaded via the form.

• Duration of storage

  The data is deleted as soon as the application has been processed and there is no longer a legitimate interest in storing the application data. Your application documents will therefore be deleted no later than 6 months from the date of submission if no employment relationship is established.

• Right to Object and Request Deletion

  You can find out what rights you have and how to exercise them at the bottom of this privacy statement.

• Requirement to Provide Personal Data

  The information provided in the application form is not required by contract or by law, but it is necessary for submitting and processing the application. If you do not fill in the required fields or do not fill them in completely, the application you have requested cannot be submitted or processed.

Contact form(s)

• What personal data is collected, and to what extent is it processed?

  We will process the data you have entered in the input fields of our contact forms to fulfill the purpose stated below.

• Legal Basis for the Processing of Personal Data

  Art. 6, para. 1, subpara. a of the GDPR or Art. 9, para. 2, subpara. a of the GDPR (consent through unambiguous affirmative action or behavior, or explicit consent)

• Purpose of Data Processing

  We will use the data collected through our contact form or contact forms solely to process the specific inquiry received via the contact form.

• Duration of storage

  After processing your request, the collected data will be deleted immediately, unless there are legal retention periods.

• Revocation and Deletion Option

  The options for revocation and deletion are based on the general provisions regarding the right to revocation and deletion under data protection law, as described below in this privacy policy.

• Requirement to Provide Personal Data

  The use of the contact forms is voluntary and is not required by contract or law. You are not required to contact us via the contact form; you may also use the other contact options provided on our site. If you wish to use our contact form, you must fill in the fields marked as required. If you do not provide the required information on the contact form, you will either be unable to submit the inquiry, or we will unfortunately be unable to process your inquiry.

Statistical Analysis of Visits to This Website - Webtracker

We collect, process, and store the following data when this website or individual files on the website are accessed: IP address, website from which the file was accessed, file name, date and time of access, amount of data transferred, and a report on the success of the access (so-called web log). We use this access data exclusively in a non-personalized form to continuously improve our website and for statistical purposes. We also use the following web trackers to analyze visits to this website:

• Facebook Connect

  We use the Facebook Connect service on our site, provided by Meta Platforms Ireland Ltd., Merrion Road, D04 X2K5 Dublin 4, Ireland; email: impressum-support@support.facebook.com, website: http://www.facebook.com/. Personal data is also transferred to the U.S. With regard to the transfer of personal data to the U.S., there is an adequacy decision by the European Commission on the EU-U.S. Data Privacy Framework within the meaning of Article 45 of the GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). The service provider is certified under the DPF, so the standard level of protection provided by the GDPR applies to the transfer.

  The legal basis for the processing of personal data is your consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR, which you have provided on our website.

  Through Facebook Connect, users can use their Facebook profile to make it easier to log in to other web services.

  You can view the provider's certification under the EU-U.S. Data Privacy Framework at https://www.dataprivacyframework.gov/list.

  You can revoke your consent at any time. You will find more information on revoking your consent either in the consent form itself or at the end of this privacy policy.

  For more information on how transmitted data is handled, please refer to the provider's privacy policy at https://www.facebook.com/privacy/policy/.

  The provider also offers an opt-out option at https://www.facebook.com/privacy/policy/.

• Google

  On our site, we use the Google service provided by Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, Ireland; email: support-deutschland@google.com, website: https://www.google.com/. Personal data is also transferred to the U.S. With regard to the transfer of personal data to the U.S., there is an adequacy decision by the European Commission on the EU-U.S. Data Privacy Framework within the meaning of Article 45 of the GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). The service provider is certified under the DPF, so the standard level of protection provided by the GDPR applies to the transfer.

  The legal basis for the processing of personal data is your consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR, which you have provided on our website.

  We use Google to enable the website to load additional Google services. This service is used to provide additional Google services, such as the data processing required for the delivery of streams and fonts, as well as relevant Google search content. It is technically necessary to enable the exchange of the site visitor’s information—which is already available to Google—between Google services, and to provide the site visitor with personalized content tailored to their Google account.

  For the processing itself, the service or we collect the following data: Background data stored in the Google user account or on other Google services about the page visitor, background data for the provision of Google services, such as streaming data or advertising data; data regarding the website user’s use of Google Search; details about the device used; the IP address; the user’s browser; and other data from Google services for the provision of Google services related to our website.

  If the service is activated on our website, our website establishes a connection to the servers of Google Ireland Limited and transmits the required data. As part of order processing, personal data may also be transmitted to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. When using the Google service on our website, Google may transmit and process information from other Google services in order to provide background services for the display and data processing of the services provided by Google. For this purpose, data may also be transferred to the Google services Google APIs, DoubleClick, Google Cloud, Google Ads, and Google Fonts in accordance with the Google Privacy Policy. You can view the provider’s certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list.

  You can revoke your consent at any time. You will find more information on revoking your consent either in the consent form itself or at the end of this privacy policy.

  For more information on how transmitted data is handled, please refer to the provider's privacy policy at https://policies.google.com/privacy.

  The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de.

• Google Ads

  On our site, we use the Google Ads service provided by Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, Ireland; email: support-deutschland@google.com, website: https://www.google.com/. Personal data is also transferred to the U.S. With regard to the transfer of personal data to the U.S., there is an adequacy decision by the European Commission on the EU-U.S. Data Privacy Framework within the meaning of Article 45 of the GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). The service provider is certified under the DPF, so the standard level of protection provided by the GDPR applies to the transfer.

  The legal basis for the processing of personal data is your consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR, which you have provided on our website.

  Google Ads is an advertising system that allows us to place ads on external websites on the Internet to inform our customers about our services. Google Ads displays ads on external websites that are tailored to our target audience and direct users to our website based on parameters we set. If a visitor clicks on a Google Ads ad, they are taken to our website. In order to measure the success and compensation for Google Ads advertisements, Google Ads tracks the effectiveness of the advertising campaign when our website is visited. Our website processes the data provided by Google Ads in order to analyze and improve our advertising campaigns and to calculate any fees that may be due. Your data may also be used for remarketing purposes if you have given your consent.

  For the processing itself, the service or we collect the following data: Data on page visitors' advertising interests, page visitors' interactions with advertisements related to our website, data regarding visits to our website by page visitors who have previously clicked on Google Ads and arrived at our website, data regarding the device used, the IP address, and the user’s browser, as well as additional data from Google services for the delivery and optimization of Google advertisements related to our website.

  If the service is enabled on our website, our website establishes a connection to the servers of Google Ireland Limited and transmits the required data. As part of order processing, personal data may also be transmitted to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. When Google Ads are used on our website, Google may transmit and process information from other Google services in order to provide background services for the improvement and personalization of Google advertising. For this purpose, data may also be processed by other Google services—such as Google APIs, Google Cloud, Google Ads, Google Analytics, Google Tag Manager, Google Marketing Platform, and Google Fonts—in accordance with the Google Privacy Policy, under Google’s own responsibility under data protection law. You can access the provider’s certification under the EU-U.S. Data Privacy Framework at https://www.dataprivacyframework.gov/list. For more information on the responsible handling of business data, please visit https://business.safety.google/privacy/.

  You can revoke your consent at any time. You will find more information on revoking your consent either in the consent form itself or at the end of this privacy policy.

  For more information on how transmitted data is handled, please refer to the provider's privacy policy at https://policies.google.com/privacy.

  The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de.

• Google Analytics

  We use Google Analytics, a service provided by Google Ireland Ltd., Gordon House, 4 Barrow Street, Dublin, Ireland, on our website. Email: support-deutschland@google.com, website: https://www.google.com/. Personal data is also transferred to the U.S. With regard to the transfer of personal data to the U.S., there is an adequacy decision by the European Commission on the EU-U.S. Data Privacy Framework within the meaning of Article 45 of the GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). The service provider is certified under the DPF, so the standard level of protection provided by the GDPR applies to the transfer.

  The legal basis for the processing of personal data is your consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR, which you have provided on our website.

  Google Analytics is a web tracking tool that analyzes the behavior of website visitors and their interactions with our website, and provides us with evaluations and forecasts regarding the content and products on our website and their popularity (so-called tracking). We have integrated Google Analytics so that the service can compile an analysis of website visitors' browsing behavior. For this purpose, Google collects data on how visitors interact with our website and, where applicable, existing information derived from cookies or other storage technologies, and processes this data statistically on our behalf. Google Analytics uses data processing technologies that make it possible to track individual visitors and their interactions with other Google services, such as the Google Ads advertising network. Data from other Google services is also used to fill data gaps and to generate comprehensive statistics on the content of our website using machine learning technologies, modeled statistics, and forecasting functions. If Google Analytics is enabled on our website, the data collected by Google Analytics is transmitted to servers operated by Google Ireland Limited. As part of order processing, personal data may also be transmitted to the servers of the parent company, Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. We conduct the analysis via Google Analytics in order to continuously optimize our website and improve its accessibility. This is what is known as reach measurement.

  For the purposes of processing itself, the service, or we collect the following data: Data on how visitors to the site interact with the website’s content, data on the use of the services presented on our website, data from external Google services, to the extent that they interact with our website, such as advertising data or data regarding advertising behavior, data on the general geographic origin, the browser used, the operating system, and other information about the device used.

  Google Analytics will store the data relevant to web tracking for as long as necessary to fulfill the contracted web service. Data collection and storage are anonymized. To the extent that individual interactions by site visitors make it possible to subsequently establish a personal link to specific actions, we will delete the collected data once the purpose has been fulfilled. The data will be deleted at the latest when it is no longer subject to any statutory retention requirements. As a rule, we will delete this data after 12 months at the latest. You can access the provider’s certification under the EU-U.S. Privacy Shield Framework at https://www.dataprivacyframework.gov/list.

  You can revoke your consent at any time. You will find more information on revoking your consent either in the consent form itself or at the end of this privacy policy.

  For more information on how transmitted data is handled, please refer to the provider's privacy policy at https://policies.google.com/privacy.

  The provider also offers an opt-out option at https://tools.google.com/dlpage/gaoptout?hl=de.

• Google Tag Manager

  We use the Google Tag Manager service on our site, provided by Google Ireland Ltd., Gordon House, 4 Barrow Street, Dublin, Ireland; email: support-deutschland@google.com, website: https://www.google.com/. Personal data is also transferred to the U.S. With regard to the transfer of personal data to the U.S., there is an adequacy decision by the European Commission on the EU-U.S. Data Privacy Framework within the meaning of Article 45 of the GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). The service provider is certified under the DPF, so the standard level of protection provided by the GDPR applies to the transfer.

  The legal basis for the processing of personal data is your consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR, which you have provided on our website.

  Google Tag Manager provides a technical platform for executing and bundling other web tools and web tracking programs using so-called "tags." In this context, Google Tag Manager stores cookies on your computer and analyzes your browsing behavior (so-called "tracking"), to the extent that web tracking tools are executed using Google Tag Manager. The data generated by the "tags" is compiled, stored, and processed by Google Tag Manager through a unified user interface. All integrated "tags" are listed separately in this privacy policy. When you use our website with Google Tag Manager "tags" enabled, data such as your IP address and, in particular, your user activities are transmitted to Google’s servers. The tracking tools used in Google Tag Manager ensure that the IP address is anonymized by Google Tag Manager prior to transmission through IP anonymization in the source code. With Tag Manager, metrics from different service providers (Google and third-party providers) can be linked and analyzed using what is known as tag management. Google Tag Manager helps us generate reports on website activity and manage the web tools on our website.

  For the processing itself, the service or we collect the following data: Cookies, web tracking data, outgoing or incoming links, and information generated by the integration and activation of JavaScript code on the website via Google Tag Manager and the web tools triggered by Google Tag Manager.

  You can access the provider's certification under the EU-U.S. Data Privacy Framework at https://www.dataprivacyframework.gov/list.

  You can revoke your consent at any time. You will find more information on revoking your consent either in the consent form itself or at the end of this privacy policy.

  For more information on how transmitted data is handled, please refer to the provider's privacy policy at https://policies.google.com/privacy.

  The provider also offers an opt-out option at https://policies.google.com/privacy.

• Gstatic

  On our site, we use the Gstatic service provided by Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, Ireland, email: support-deutschland@google.com, website: https://www.google.com/. Personal data is also transferred to the U.S. With regard to the transfer of personal data to the U.S., there is an adequacy decision by the European Commission on the EU-U.S. Data Privacy Framework within the meaning of Article 45 of the GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). The service provider is certified under the DPF, so the standard level of protection provided by the GDPR applies to the transfer.

  The legal basis for the processing of personal data is your consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR, which you have provided on our website.

  Gstatic is a background service used by Google to retrieve static content in order to reduce bandwidth usage and preload required catalog files. Specifically, the service loads background data for Google Fonts and Google Maps.

  As part of the order processing, personal data may also be transmitted to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. You can view the provider's certification under the EU-U.S. Privacy Shield at https://www.dataprivacyframework.gov/list.

  You can revoke your consent at any time. You will find more information on revoking your consent either in the consent form itself or at the end of this privacy policy.

  For more information on how transmitted data is handled, please refer to the provider's privacy policy at https://policies.google.com/privacy.

  The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de.

• YouTube

  On our site, we use the YouTube service provided by Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, Ireland, email: support-deutschland@google.com, website: https://www.google.com/. Personal data is also transferred to the U.S. With regard to the transfer of personal data to the U.S., there is an adequacy decision by the European Commission on the EU-U.S. Data Privacy Framework within the meaning of Article 45 of the GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). The service provider is certified under the DPF, so the standard level of protection provided by the GDPR applies to the transfer.

  The legal basis for the processing of personal data is your consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR, which you have provided on our website.

  Videos from YouTube are embedded on our website via the YouTube service. This integration allows us to display videos directly on our website. This way, visitors to our website can view information about our services without having to visit YouTube.

  For the processing itself, the service or we collect the following data: Data for displaying the stream, data on videos clicked on, playlists created, ratings and comments, information about the device used, the IP address, and the user's browser, as well as additional data from Google services for providing the video in accordance with Google's privacy policy

  If YouTube is enabled on our website and a video is played, our website establishes a connection to the servers of Google Ireland Limited and transmits the data required to display the stream or video. As part of order processing, personal data may also be transmitted to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. Personal data is also transferred to the United States. With regard to the transfer of personal data to the United States, there is an adequacy decision by the European Commission on the EU-U.S. Data Privacy Framework within the meaning of Article 45 of the GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en). The service provider is certified under the GDPR, so the standard level of protection provided by the GDPR applies to the data transfer. When YouTube videos are displayed on our website, YouTube may transmit and process information from other Google services in order to provide background services for the video, such as streaming data. For this purpose, data may also be transferred to the Google services Google Fonts, Google APIs, Google Video, and DoubleClick. You can view the provider’s certification under the EU-US Privacy Shield Framework at https://www.dataprivacyframework.gov/list.

  You can revoke your consent at any time. You will find more information on revoking your consent either in the consent form itself or at the end of this privacy policy.

  For more information on how transmitted data is handled, please refer to the provider's privacy policy at https://policies.google.com/privacy.

  The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de.

Integration of external web services and processing of data outside the EU

On our website, we use active content from external providers, known as web services. When you visit our website, these external providers may receive personal information about your visit to our website. This may involve the processing of data outside the EU. You can prevent this by installing an appropriate browser plug-in or disabling the execution of scripts in your browser. This may result in limited functionality on the websites you visit.

We use the following external web services:

• Amazon

  We use the Amazon service on our site, provided by Amazon Digital Germany GmbH (Domagkstr. 28, 80807 Munich), as well as the following companies: Amazon Europe Core S.à.r.l., Amazon EU S.à.r.l., Amazon Services Europe S.à.r.l., and Amazon Media EU S.à.r.l., all four located at: 38, avenue John F. Kennedy, L-1855 Luxembourg, Luxembourg; email: privacyshield@amazon.com, website: https://amazon.com/. Personal data is transmitted exclusively to servers in the European Union.

  The legal basis for the processing of personal data is your consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR, which you have provided on our website.

  Data from our Amazon account is reloaded on our website via the Amazon REST API.

  You can revoke your consent at any time. You will find more information on revoking your consent either in the consent form itself or at the end of this privacy policy.

  For more information on how transmitted data is handled, please refer to the provider's privacy policy at https://www.amazon.de/gp/help/customer/display.html/ref=footer_privacy?ie=UTF8&nodeId=201909010.

• Amazon AWS

  We use the Amazon AWS service on our site, provided by Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, 1855 Luxembourg, Luxembourg; email: privacyshield@amazon.com, website: http://aws.amazon.com/. Personal data is also transferred to the U.S. With regard to the transfer of personal data to the U.S., there is an adequacy decision by the European Commission on the EU-U.S. Data Privacy Framework within the meaning of Article 45 of the GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). The service provider is certified under the DPF, so the standard level of protection provided by the GDPR applies to the transfer.

  The legal basis for the processing of personal data is our legitimate interest pursuant to Article 6(1)(f) of the GDPR. Our legitimate interest lies in achieving the purpose described below.

  Amazon AWS is a cloud computing service provided by Amazon that is used to reload our site or individual elements of our site. The separate AWS cloud allows us to host our website and its services on faster servers.

  You can view the provider's certification under the EU-U.S. Data Privacy Framework at https://www.dataprivacyframework.gov/list.

  With regard to the processing, you have the right to object as set forth in Article 21. You can find more information at the end of this privacy policy.

  For more information on how transmitted data is handled, please refer to the provider's privacy policy at https://aws.amazon.com/de/privacy/?nc1=f_pr.

• EasyHR

  On our website, we use the EasyHR service provided by Fravis GmbH, located at Sonnenhalde 10, 73489 Jagstzell, Germany. Email: info@fravis.de, website: https://www.easyhr.de/. Personal data is transmitted exclusively to servers in the European Union.

  The legal basis for the processing of personal data is your consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR, which you have provided on our website.

  This service is a plugin that we need in order to display all the content on our website to you. The plugin makes our website more appealing and enhances the user experience for our visitors.

  You can revoke your consent at any time. You will find more information on revoking your consent either in the consent form itself or at the end of this privacy policy.

  For more information on how transmitted data is handled, please refer to the provider's privacy policy at https://www.easyhr.de/.

• Google Cloud APIs

  On our site, we use the Google Cloud APIs service provided by Google Ireland Limited, Gordon House, Barrow Street, 4 Dublin, Ireland; email: support-deutschland@google.com, website: https://www.google.com/. Personal data is also transferred to the U.S. With regard to the transfer of personal data to the U.S., there is an adequacy decision by the European Commission on the EU-U.S. Data Privacy Framework within the meaning of Article 45 of the GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). The service provider is certified under the DPF, so the standard level of protection provided by the GDPR applies to the transfer.

  The legal basis for the processing of personal data is your consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR, which you have provided on our website.

  We use Google APIs to load additional Google services on the website. Google APIs is a collection of interfaces that enable communication between the various Google services used on your website. The service is used in particular to display Google Fonts and to provide the Google Maps map.

  For the processing itself, the service or we collect the following data: IP address

  If the service is activated on our website, our website establishes a connection to the servers of Google Ireland Limited and transmits the required data. As part of order processing, personal data may also be transmitted to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. When using the Google service on our website, Google may transmit and process information from other Google services in order to provide background services for the display and data processing of the services provided by Google. For this purpose, data may also be transferred to the Google services Google Cloud, Google Maps, Google Ads, and Google Fonts in accordance with Google’s privacy policy, under Google’s responsibility under data protection law. You can access the provider’s certification under the EU-U.S. Data Privacy Framework at https://www.dataprivacyframework.gov/list.

  You can revoke your consent at any time. You will find more information on revoking your consent either in the consent form itself or at the end of this privacy policy.

  For more information on how transmitted data is handled, please refer to the provider's privacy policy at https://policies.google.com/privacy.

  The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de.

• Google Fonts

  On our site, we use the Google Fonts service provided by Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, Ireland; email: support-deutschland@google.com, website: https://www.google.com/. Personal data is also transferred to the U.S. With regard to the transfer of personal data to the U.S., there is an adequacy decision by the European Commission on the EU-U.S. Data Privacy Framework within the meaning of Article 45 of the GDPR (hereinafter: DPF - https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en ). The service provider is certified under the DPF, so the standard level of protection provided by the GDPR applies to the transfer.

  The legal basis for the processing of personal data is your consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR, which you have provided on our website.

  We use the Google Fonts service to integrate attractive fonts on our website so that we can present our website to you in a more visually appealing way. The service may also be used on our website if other Google services are loaded on our website that require Google Fonts to function. This is the case, for example, if our website uses Google services that rely on Google Fonts.

  For the processing itself, the service or we collect the following data: Data on fonts, the page visitor's IP address, statistics on font usage, and other data from Google services related to our website.

  If the service is enabled on our website, our website establishes a connection to the servers of Google Ireland Limited and transmits the required data. As part of order processing, personal data may also be transmitted to the servers of Google LLC, 1600 Amphitheatre Parkway, 94043 Mountain View, United States. When using the Google service on our website, Google may transmit and process information from other Google services in order to provide background services for the display and data processing of the services provided by Google. For this purpose, data may also be transferred to the Google services Google APIs, Google Cloud, and Google Ads in accordance with the Google Privacy Policy. You can view the provider’s certification under the EU-US Data Privacy Framework at https://www.dataprivacyframework.gov/list.

  You can revoke your consent at any time. You will find more information on revoking your consent either in the consent form itself or at the end of this privacy policy.

  For more information on how transmitted data is handled, please refer to the provider's privacy policy at https://policies.google.com/privacy.

  The provider also offers an opt-out option at https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=de.

• Legal Text Snippets and Modules

  We use the "Rechtstextsnippet" service and modules provided by Website-Check GmbH, located at Beethovenstraße 24, 66111 Saarbrücken, Germany, email: support@website-check.de, website: https://www.website-check.de/. Personal data is transmitted exclusively to servers in the European Union.

  The legal basis for the processing is Article 6(1)(c) of the GDPR. The use of the service helps us comply with our legal obligations.

  With the help of this service, the content of our legal texts is updated on our website. The most current versions of the legal texts are updated through the integration on our page. This integration may also be used to update other technical modules related to the legal texts or legally required elements.

  You can find out what rights you have regarding data processing at the end of this privacy policy.

  For more information on how transmitted data is handled, please refer to the provider's privacy policy at https://www.website-check.de/datenschutzerklaerung/.

• Website Check Seal

  We use the "Website-Check Siegel" service on our site, provided by Website-Check GmbH, Beethovenstraße 24, 66111 Saarbrücken, Germany; email: support@website-check.de, website: https://www.website-check.de/. Personal data is transmitted exclusively to servers in the European Union.

  The legal basis for the processing of personal data is our legitimate interest pursuant to Article 6(1)(f) of the GDPR. Our legitimate interest lies in achieving the purpose described below.

  The Website-Check GmbH script is the technical implementation of the Website-Check seal. With this seal, we want to demonstrate that we take data protection very seriously. Data is transmitted to Website-Check GmbH for the purpose of delivering and displaying the seal on our site.

  With regard to the processing, you have the right to object as set forth in Article 21. You can find more information at the end of this privacy policy.

  For more information on how transmitted data is handled, please refer to the provider's privacy policy at https://www.website-check.de/datenschutzerklaerung/.

Data Security and Data Protection, Communication via Email

Your personal data is protected by technical and organizational measures during collection, storage, and processing to ensure that it is not accessible to third parties. In the case of unencrypted email communication, we cannot guarantee complete data security during transmission to our IT systems; therefore, we recommend using encrypted communication or the postal service for information requiring a high level of confidentiality.

Right to information and requests for correction - Deletion and restriction of data - Withdrawal of consent - Right to object

Right to Information

You have the right to request confirmation as to whether we are processing your personal data. If this is the case, you have the right to be informed of the information specified in Article 15(1) of the GDPR, provided that the rights and freedoms of others are not affected (see Article 15(4) of the GDPR). We will also be happy to provide you with a copy of the data.

Right to Rectification

In accordance with Article 16 of the GDPR, you have the right to have any incorrect personal data we hold about you (e.g., address, name, etc.) corrected at any time. You may also request that the data we hold about you be supplemented at any time. The necessary changes will be made immediately.

Right to erasure

Pursuant to Article 17(1) of the GDPR, you have the right to request that we delete the personal data we have collected about you if

• the data is either no longer needed;
• the legal basis for the processing has ceased to exist and has not been replaced due to the withdrawal of your consent;
• You have objected to the processing, and there are no legitimate grounds for processing;
• Your data is being processed unlawfully;
• a legal obligation requires it, or data has been collected pursuant to Article 8(1) of the GDPR.

Pursuant to Article 17(3) of the GDPR, this right does not apply if

• processing is necessary for the exercise of the right to freedom of expression and information;
• Your data has been collected based on a legal obligation;
• processing is necessary for reasons of public interest;
• The data are necessary for the assertion, exercise, or defense of legal claims.

Right to restriction of processing

According to Article 18(1) of the GDPR, you have the right, in certain cases, to request that the processing of your personal data be restricted.

This is the case when

• you dispute the accuracy of the personal data;
• the processing is unlawful and you do not consent to its erasure;
• the data is no longer needed for the purpose of processing, but the collected data is used to assert, exercise, or defend legal claims;
• An objection to the processing has been filed pursuant to Article 21(1) of the GDPR, and it is still unclear which interests take precedence.

Right of Withdrawal

If you have given us express consent to process your personal data (Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR), you may revoke this consent at any time. Please note that this does not affect the lawfulness of the processing carried out on the basis of your consent prior to its revocation.

Right to Object

In accordance with Article 21 of the GDPR, you have the right to object at any time to the processing of your personal data that has been collected on the basis of Article 6(1)(f) (in the context of a legitimate interest). You have this right only if there are specific circumstances that preclude the storage and processing of your data.

How do you exercise your rights?

You can exercise your rights at any time by contacting us using the contact information below:

W. Gessmann Limited Liability Company
221 Eppinger Street
74211 Leingarten
Germany
Email: sales@gessmann.com
Phone: +49 (0) 7131 / 4067 – 0
Fax: +49 (0) 7131 / 4067 – 10

Right to Data Portability

Pursuant to Article 20 of the GDPR, you have the right to receive a copy of your personal data. We will provide the data in a structured, commonly used, and machine-readable format. The data can be sent either to you or to a designated recipient of your choice.

We provide you with the following information upon request in accordance with Article 20(1) of the GDPR:

• Data collected on the basis of explicit consent pursuant to Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR;
• Data that we have received from you in accordance with Article 6(1)(b) of the GDPR within the scope of existing contracts;
• Data that has been processed as part of an automated procedure.

We will transfer the personal data directly to a data controller of your choice, provided that this is technically feasible. Please note that we are not permitted to transfer data that infringes on the freedoms and rights of other individuals pursuant to Article 20(4) of the GDPR.

Right to appeal to the supervisory authority pursuant to Article 77(1) of the GDPR

If you suspect that your data is being processed unlawfully on our site, you may, of course, seek a ruling from the courts at any time. In addition, you may pursue any other legal remedies available to you. Regardless of this, you have the option of contacting a supervisory authority in accordance with Article 77(1) of the GDPR. You may exercise your right to lodge a complaint under Article 77 of the GDPR in the EU Member State where you reside, where you work, and/or where the alleged infringement occurred; that is, you may choose which supervisory authority to contact from among the aforementioned locations. The supervisory authority to which the complaint has been submitted will then inform you of the status and outcome of your submission, including the possibility of a judicial remedy pursuant to Article 78 of the GDPR.