Privacy Notice

I. Preliminary remark

This data protection declaration applies to the internet presence of GUDE Systems GmbH. Other data protection declarations may be applicable to other servers and websites of third parties.

GUDE Systems GmbH takes the protection of personal data very seriously. For this reason, we would like to inform the users of our website about which data is stored and how this data is used. The data protection regulations oblige us to handle users’ data properly and for the intended purpose. We will not use their data for purposes other than those stated.

GUDE Systems GmbH is subject to the provisions of the European General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG) and the Telemedia Act (TMG) and has taken appropriate technical and organisational measures to ensure that the regulations on data protection are observed.

II. Name and address of the person responsible

The responsible person in terms of the basic data protection regulation and other national data protection laws of the member states and other data protection regulations is the:

GUDE Systems GmbH
Von-der-Wettern-Str. 23
51149 Koeln
Germany

Managing Director: Dr. Michael Gude, Andreas Böttcher, Philipp Gude
Tel.: +49 (0) 221 985 925 0
Fax: +49 (0) 221 985 925 97
E-mail: info(at)gude-systems.com

III. General information on data processing

  1. The scope of processing of personal data

As a matter of principle, we process personal data of our users only to the extent necessary to provide a functional website and our contents and services. The processing of personal data of our users regularly only takes place with the user’s consent. An exception is made in cases where prior consent cannot be obtained for factual reasons and the processing of data is permitted by legal regulations.

  1. Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for processing of personal data, Art. 6 para. 1 a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.

In the processing of personal data which is necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 b) GDPR serves as the legal basis. This also applies to processing operations necessary for the performance of pre-contractual measures.

Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 c) GDPR serves as the legal basis.

If the processing is necessary to safeguard a legitimate interest of our company or of a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 f) GDPR serves as the legal basis for the processing.

  1. Data deletion and storage period

The personal data of the person concerned will be deleted or blocked as soon as the purpose of the storage is no longer applicable. Furthermore, data may be stored if this has been provided for by the European or national legislator in Union regulations, laws or other regulations to which the person responsible is subject. Data is also blocked or deleted when a storage period prescribed by the aforementioned standards expires, unless there is a need to continue storing the data for the purpose of concluding or fulfilling a contract.

IV. Provision of the website and creation of log files

  1. Description and scope of data processing

Whenever you visit our website, our system automatically collects data and information from the computer system of the calling computer. The following data is collected:

  1. information about the browser type and the version used
    2. the user’s operating system
    3. the Internet service provider of the user
    4. the IP address of the user
    5. date and time of access
    6. websites from which the user’s system accesses our website
    7. websites that are called up by the user’s system via our website

The data is stored in the log files of our system. This data is not stored together with other personal data of the user.

  1. Legal basis for the data processing

The legal basis for the temporary storage of data and log files is Art. 6 para. 1 f) GDPR.

  1. Purpose of the data processing

The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.

The storage in log files is done to ensure the functionality of the website. In addition, the data is used to optimise the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

These purposes also include our legitimate interest in data processing in accordance with Art. 6 para. 1 f) GDPR.

  1. Duration of storage

The data will be deleted as soon as they are no longer necessary for the purpose of their collection. In the case of the collection of data for the provision of the website, this is the case when the respective session is ended.

In the case of data stored in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible.

  1. Possibility of opposition and removal

The collection of data for the provision of the website and the storage of the data in log files is mandatory for the operation of the website. There is therefore no possibility of objection on the part of the user.

V. Use of cookies

  1. Description and scope of data processing

Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user’s computer system. If a user calls up a website, a cookie can be stored on the user’s operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.

We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change. The following data is stored and transmitted in the cookies:

  1. Language settings
  2. Articles in a shopping cart
  3. Log-in information

We also use cookies on our website, which enable us to analyse the surfing behaviour of the users. In this way the following data can be transmitted:

  1. Search terms entered
  2. Frequency of page views
  3. Use of website functions

The data is not stored together with other personal data of the users. When accessing our website, users are informed about the use of cookies. In this context, reference is also made to this data protection declaration.

  1. Legal basis for the data processing

The legal basis for the processing of personal data using cookies is Art. 6 para. 1 f) GDPR or Art. 6 para. 1 a) GDPR.

  1. Purpose of data processing

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these it is necessary that the browser is recognized even after a page change. We require cookies for the following applications:

  1. shopping cart
  2. adoption of language settings
  3. remembering search terms

The user data collected through technically necessary cookies is not used to create user profiles.

The analysis cookies are used for the purpose of improving the quality of our website and its contents. Through the analysis cookies we learn how the website is used and can thus constantly optimise our offer and our Internet presence.

These purposes also include our legitimate interest in the processing of personal data in accordance with Art. 6 para. 1 f) GDPR.

  1. Duration of storage, possibility of objection and removal

Cookies are stored on the user’s computer and transmitted by the user to our site. Therefore, you as a user also have full control over the use of cookies. By changing the settings in your Internet browser, you can deactivate or restrict the transmission of cookies. Cookies already stored can be deleted at any time. This can also be done automatically. If cookies for our website are deactivated, it is possible that not all functions of the website can be used to their full extent.

VI. Newsletter

  1. Description and scope of data processing

On our website you have the possibility to subscribe to a free newsletter. When registering for the newsletter, the data from the input mask is transmitted to us:
Name, e-mail address

In addition, the following data is collected during registration: IP address of the calling computer, date and time of registration

For the processing of the data, your consent will be obtained during the registration process and reference will be made to this privacy policy.

If you purchase goods or services on our website and enter your e-mail address, we may subsequently use it to send you a newsletter. In such a case, the newsletter will only be used to send direct advertising for our own similar goods or services.

In connection with the data processing for the dispatch of newsletters, the data is not passed on to third parties. The data will be used exclusively for sending the newsletter.

  1. Legal basis for the data processing

The legal basis for the processing of the data after registration for the newsletter by the user is Art. 6 para. 1 a) GDPR, if the user has given his consent’.

The legal basis for sending the newsletter as a result of the sale of goods or services is § 7 para. 3 UWG.

  1. Purpose of data processing

The collection of the user’s e-mail address and name is used to deliver the newsletter. The collection of other personal data during the registration process serves to prevent misuse of the services or the e-mail address used.

  1. Duration of storage

The data will be deleted as soon as they are no longer necessary for the purpose of their collection. The user’s e-mail address is therefore stored as long as the subscription to the newsletter is active. The other personal data collected during the registration process are usually deleted after a period of seven days.

  1. Possibility of objection and removal

The subscription to the newsletter can be cancelled by the user concerned at any time. For this purpose there is a corresponding link in every newsletter. This also enables a revocation of the consent to store the personal data collected during the registration process.

VII. Webshop Registration

  1. Description and scope of data processing

On our website we offer users the possibility to register by entering personal data. The advantage is that you can, for example, view the order history and that the data you have entered is stored for the order form. Registration is therefore necessary either for the fulfilment of a contract with you via our web shop or for the implementation of pre-contractual measures. The data is entered into an input mask, transmitted to us and stored. The following data is collected during the registration process (* mandatory fields):
e-mail address *, password *, company *, VAT ID *, department, first name, last name, address supplement, street and house no. *, postcode *, city *, country *, position, telephone company, fax, e-mail address *, e-mail company, GUDE customer number, public institution (yes/no)

At the time of registration, the following data is also stored: The IP address of the user, date and time of registration

During the registration process, the user’s consent to the processing of this data is obtained.

  1. Legal basis for the data processing

The legal basis for the processing of the data is Art. 6 para. 1 a) GDPR, if the user has given his consent. If the registration serves the fulfilment of a contract to which the user is a party or the implementation of pre-contractual measures, the additional legal basis for the processing of the data is Art. 6 para. 1 b) GDPR.

  1. Purpose of the data processing

A registration of the user is required for the fulfilment of a contract with the user or for the implementation of pre-contractual measures. In our web shop at www.shop.gude.info you can order our goods and services as a user. Contact data, your address and payment data are required for order and payment processing. You can pay here by advance payment, on account or by PayPal. For this purpose, the respective payment-relevant data is collected in order to be able to process your order and payment.

In the course of contract fulfilment we are supported by external service providers. These are in particular service companies such as parcel service providers and forwarding agents, which take over the transport and dispatch of the goods, as well as financial companies, which support us in checking order-relevant data.

Note on payment on invoice: If you select the payment method invoice in our webshop, we will carry out a credit check. For this purpose, the data relevant to creditworthiness is transmitted to the commercial credit insurance company Euler Hermes SA to determine credit or default risks.

Note on PayPal: PayPal is a company of PayPal (Europe) S.à r.l. et Cie, S.C.A. 22-24 Boulevard Royal, L-2449 Luxembourg. If the person concerned selects “PayPal” as a payment option during the order process in our webshop, data of the person concerned is automatically transmitted to PayPal. By selecting this payment option, the data subject agrees to the transfer of personal data required for the payment process. The personal data transmitted to PayPal is usually first name, last name, address, e-mail address, IP address, telephone number, mobile phone number or other data necessary for payment processing. Details about PayPal’s privacy policy can be found at: https://www.paypal.com/de/webapps/mpp/ua/privacy-prev

The principle of data economy and data avoidance is observed, in that you only have to provide us with the data that we absolutely need for the execution of the order and payment processing and thus for the execution of the contract or that we are legally obliged to collect.

Without the necessary data, we will have to refuse to conclude the contract, as we will not be able to execute it.

  1. Duration of storage

The data will be deleted as soon as they are no longer necessary for the purpose of their collection.

This is the case for the data collected during the registration process for the fulfilment of a contract or for the implementation of pre-contractual measures if the data are no longer necessary for the implementation of the contract. Even after conclusion of the contract, it may still be necessary to store personal data of the contractual partner in order to comply with contractual or legal obligations.

  1. Possibility of objection and removal

As a user you have the possibility to cancel the registration at any time. You can have the data stored about you deleted at any time. For this purpose, it is sufficient to send an e-mail to mail(at)gude.info for a revocation via our contact form.

If the data is required for the fulfilment of a contract or for the implementation of pre-contractual measures, an early deletion of the data is only possible if there are no contractual or legal obligations that prevent a deletion.

VIII. Contact form and e-mail contact

  1. Description and scope of data processing

There is a contact form on our website which can be used for electronic contact. If a user takes advantage of this possibility, the data entered in the input mask is transmitted to us and stored. These data are (* mandatory fields): Subject *, message to us *, first name, last name, telephone number, e-mail address*

At the time the message is sent, the following data is also stored: The IP address of the user, date and time of registration

Alternatively, it is possible to contact us via the provided e-mail address. In this case the personal data of the user transmitted with the e-mail will be stored. In this context, the data will not be passed on to third parties. The data will be used exclusively for processing the conversation.

  1. Legal basis for the data processing

The legal basis for the processing of the data is Art. 6 para. 1 a) GDPR, if the user has given his consent.

The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 para. 1 f) GDPR. If the e-mail contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 b) GDPR.

  1. Purpose of data processing

The processing of the personal data from the input mask serves us only for the processing of the establishment of contact. In the case of contacting us by e-mail, this is also the necessary legitimate interest in the processing of the data.

The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

  1. Duration of storage

The data will be deleted as soon as they are no longer necessary for the purpose of their collection. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is terminated when it can be concluded from the circumstances that the matter in question has been finally clarified.

The personal data additionally collected during the sending process will be deleted after a period of seven days at the latest.

  1. Possibility of objection and removal

The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In such a case the conversation cannot be continued. For this purpose an e-mail to mail(at)gude.info or a revocation via our contact form is sufficient.
All personal data stored in the course of the contact will be deleted in this case.

IX. Google Analytics

  1. Description and scope of data processing

This website uses Google Analytics, a web analysis service of Google Inc. (“Google”). Google Analytics uses cookies, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website such as Browser type/version, operating system used, referrer URL (the previously visited page), host name of the accessing computer (IP address), time of the server request are usually transferred to a Google server in the USA and stored there. The IP address transmitted by your browser within the scope of Google Analytics is not merged with other Google data.

  1. Legal basis for the data processing

The legal basis for the processing of the data is Art. 6 para. 1 a) GDPR, if the user has given his consent.

  1. Purpose of data processing

On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on the website activities and to provide further services to the website operator in connection with website and Internet use.

  1. Duration of the storage

The data sent by us and linked to cookies, user IDs or advertising IDs are automatically deleted after 14 months. Data whose retention period has been reached is automatically deleted once a month.

  1. Possibility of objection and removal

You can prevent the storage of cookies by adjusting your browser software accordingly. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by using the available browser plugin download and install. We also offer you the option to opt-out of having your site usage information collected for this site by clicking on the link below: Click here to deactivate Google Analytics tracking for this website.

In this case, a special opt-out cookie is set, which prevents the future collection of your usage data when you visit this website. For more information on terms of use and privacy, please visit http://www.google.com/analytics/terms/de.html or rather at https://policies.google.com/?hl=de.

X. LinkedIn

  1. Description and scope of data processing

For promotional purposes we use the Conversion Tracking feature of the LinkedIn business network (Wilton Plaza, Wilton Place, Dublin 2, Ireland; “LinkedIn”). This enables us to statistically evaluate the use of our website in order to continuously optimize it. We learn, for example, which LinkedIn ad or interaction on LinkedIn brought you to our website. This allows us to show you as a user of our website targeted interest-relevant ads about our website and our offers on LinkedIn in the future.

For this purpose, we use cookies/pixels (LinkedIn Insight tag) on our websites, which reveal that you have visited our website. These cookies enable LinkedIn to recognize you as a user of our website within the LinkedIn network.

  1. Legal basis for the data processing

The legal basis for the processing of the data is Art. 6 para. 1 a) GDPR, if the user has given his consent.

  1. Purpose of data processing

On behalf of the operator of this website, LinkedIn will use this information to evaluate your use of the website, to compile reports on website activity and to provide further services to the website operator in connection with website and Internet use.

  1. Duration of the storage

This data collected by LinkedIn is encrypted, anonymized within seven days and the anonymized data is deleted within 90 days.

  1. Possibility of objection and removal

You can prevent the storage of cookies by adjusting your browser software accordingly. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. In addition, you may object to LinkedIn advertising based on your usage pattern at any time by rejecting the LinkedIn advertising cookie here:
https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

For more information on terms of use and data protection, please visit: https://www.linkedin.com/legal/privacy-policy

XI. Data Security

We secure our website and other systems by technical and organizational measures against loss, destruction, access, modification or distribution of your data by unauthorized persons. In particular, your personal data will be transmitted in encrypted form. We use the common SSL (Secure Socket Layer) procedure when visiting our website. Unfortunately, however, the transmission of information via the Internet is not completely secure, which is why we cannot guarantee the security of the data transmitted to our website via the Internet.

XII. Passing on of data

We do not pass on your personal data to third parties unless you have consented to the data transfer or we are entitled or obliged to transfer data due to legal regulations and/or official or court orders. This may in particular involve the provision of information for the purposes of criminal prosecution, danger prevention or the enforcement of intellectual property rights.

XIII. Data protection and third-party websites

The website may contain hyperlinks to and from third-party websites. If you follow a hyperlink to one of these websites, please note that we cannot accept any responsibility or guarantee for third-party content or data protection conditions. Please make sure you are aware of the applicable data protection conditions before you submit personal data to these websites.

XIV. Rights of the person concerned

If your personal data is processed, you are a data subject within the meaning of the GDPR and you are entitled to the following rights against the person responsible (GUDE Systems GmbH):

  1. Right of information

According to art. 15 of the GDPR, you have the right to request information about your personal data processed by us. In particular, you may request information on the purposes of the processing, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right of rectification, erasure, restriction of processing or opposition, the existence of a right of appeal and the origin of your data if it has not been collected by us.

  1. Right of rectification

In accordance with art. 16 of the GDPR, you have the right to ask the data controller to correct or complete any inaccurate or incomplete personal data processed concerning you. The person responsible must make the correction without delay.

  1. Right of deletion

In accordance with Art. 17 GDPR, you have the right to request the deletion of your data, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.

  1. Right to restrict processing

In accordance with Art. 18 GDPR, you have the right to request limitation of the processing of your personal data if you dispute the accuracy of the data, if the processing is unlawful but you refuse to have it deleted and we no longer need the data, but you need it to assert, exercise or defend legal claims or if you have lodged an objection to the processing in accordance with Art. 21 GDPR.

  1. Right to data transferability

In accordance with Art. 20 GDPR, you have the right to receive personal data that you have communicated to us in a structured, common and machine-readable format or to request that it be communicated to another responsible party.

  1. Right to withdraw consent

In accordance with Art. 7 para. 3 GDPR you have the right to revoke your consent to us at any time. After revocation of the consent, we may no longer continue the data processing based on this consent for the future. For this purpose an e-mail to mail(at)gude.info or a revocation via our contact form is sufficient. In addition, to unsubscribe from our newsletter, there is a corresponding link in every newsletter, which you can use to unsubscribe from the newsletter subscription.

  1. Right of objection

Pursuant to Art. 21 GDPR, if your personal data are processed on the basis of legitimate interests pursuant to Art. 6, para. 1 f) GDPR, you have the right to object to the processing if there are reasons for doing so that arise from your particular situation or if the objection is directed against direct advertising. In the case of direct advertising, you have a general right of objection, which is implemented without specifying a special situation. For this purpose, an e-mail to mail(at)gude.info or a revocation via our contact form is sufficient.

  1. Automated decision making / profiling

An automated decision making / profiling does not take place.

  1. Right to appeal to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State in which you are domiciled, your place of work or the place where the alleged infringement occurred, if you consider that the processing of personal data relating to you is in breach of the GDPR.

The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Art. 78 GDPR.

The contact details of the competent supervisory authority are:

Landesbeauftragte für Datenschutz und Informationsfreiheit
Nordrhein-Westfalen
Kavalleriestr. 2-4
40213 Duesseldorf

Tel.: + 49 (0) 211 38424-0
Fax: + 49 (0) 211 38424-10
E-mail: poststelle(at)ldi.nrw.de