Privacy Policy

I. Responsible party

The person responsible within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:


GERCONA e.K.
Proprietor Gerhard Königseder
Marktplatz 11
94065 Waldkirchen
Germany
Tel.: +49-8581-989501
Fax: +49-8581-989502
E-Mail: office@gercona.com


II. General information on data processing


1. Scope of processing personal data

As a matter of principle, we exclusively process the personal data of our users, interested parties or customers to the extent that this is necessary to provide a functioning website or to provide our services. The processing of personal data takes place regularly only with the consent of the data subject. An exception applies in such cases, in which it is not possible to obtain prior consent for factual reasons and the processing of the data is permitted by statutory provisions.

2. Legal basis for processing personal data

Provided we obtain the consent of the data subject for the processing of personal data, Art. 6 Abs. 1 S 1 lit. a GDPR serves as the legal basis.
Art. 6 Abs. 1 S. 1 lit. b GDPR serves as the legal basis for the processing of personal data required to fulfill a contract to which the contracting party is the data subject. This also applies to processing operations that are necessary to carry out pre-contractual measures. Insofar as processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 Abs. 1 S. 1 lit. c GDPR serves as the legal basis.
In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 Abs. 1 S. 1 lit. d GDPR serves as the legal basis.
If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not prevail the former interest, Art. 6 Abs. 1 S. 1 lit. f GDPR serves as the legal basis for the processing.

3. Data erasure and storage duration

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Storage can also take place if this has been provided for by the European or national legislator in EU regulations, laws or other regulations the data subject is subject to. The data will also be blocked or deleted, if a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.


III. Provisioning of the website and creation of log files


1. Description and scope of data processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.
The following data is collected:

browser type/version of the user;
user's operating system;
IP address/internet service provider of the user;
date/time of access;
websites from which the user's system accesses our website;
websites accessed by the user's system via our website.

The data is stored in the log files of our system. Storage of this data together with other personal data of the user does not take place.

2. Legal basis for data processing

The legal basis for the temporary storage of the data and the log files is Art. 6 Abs. 1 S. 1 lit. f GDPR.

3. Purpose of data processing

The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the IP address of the user must remain stored for the duration of the session.
Storage in log files takes place to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
Our legitimate interest in data processing in accordance with Article 6 Abs. 1 S. 1 lit. f GDPR also lies within these functions.

4. Duration of storage

The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. In the case of data collection for the provisioning of the website, this is the case when the respective session has ended.
If the data is stored in log files, this is the case after seven days at the latest. Storage beyond this period of time is possible. In this case, the IP addresses of the users are deleted or rendered unrecognizable so that it is no longer possible to be assigned to the client.

5. Possibility of objection and elimination

The collection of the data for the provisioning of the website and the storage of the data in log files is essentially necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user.


IV. Use of cookies


1. Description and scope of data processing

Our website uses cookies. These are text files that are stored in the Internet browser or by the Internet browser on the user's end device.
Some of the cookies used are deleted after the end of the browser session, e.g. after closing your browser (session cookies). Other cookies remain on your terminal and enable us or our partner companies (third-party cookies) to recognize your browser the next time you visit (so-called persistent cookies). If cookies are applied, they collect and process certain user information such as browser and location data as well as IP address data to an individual extent. Persistent cookies are automatically deleted after a predefined period depending on the cookie.

2. Legal basis for data processing

If the data subject has given his consent for the use of cookies, Art. 6 Abs. 1 S. 1 lit. a GDPR serves as the legal basis.
Art. 6 Abs. 1 S. 1 lit. b GDPR serves as the legal basis for the processing of personal data required to fulfill a contract to which the data subject is a party. This also applies to processing operations that are necessary to carry out pre-contractual measures.
The legal basis for the processing of personal data using cookies is in particular Art. 6 Abs. 1 S. 1 lit. f GDPR.

3. Purpose of data processing

We use cookies to ensure the best possible functionality of the website and a customer-friendly and effective design of the website.
Our legitimate interest in data processing in accordance with Art. 6 Abs.1 S. 1 lit. f GDPR also lies within these functions.

4. Duration of storage

The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected.
The duration of the respective cookie storage can be found in the overview of the cookie settings of your web browser and in particular in the cookie consent tool implemented on the website.

5. Possibility of objection and elimination

Cookies are stored on the user's computer and transmitted to our website. Therefore, as a user, you also have full control over the use of cookies. By changing the settings in your Internet browser, you are able to deactivate or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically by setting the maximum storage period in your browser settings. If cookies are deactivated for our website, it may no longer be possible to use the entire functions of the website to their full extent.

The following links will help you how to effect settings for denial or acceptance of cookies for most commonly used browsers:

A cookie consent tool implemented on the website gives the user the option of activating/deactivating individual cookies according to personal requirements.
 

 

V. Contact form and email contact


1. Description and scope of data processing

When you contact us via a contact form on our website or by e-mail, the data you provide (your e-mail address and any other data) will be transmitted to us and stored by us. In this context, the data will not be passed on to third parties. The data will only be used to process the conversation.

2. Legal basis for data processing

If the user has given his consent, the legal basis for processing the data is Art. 6 Abs. 1 S. 1 lit. a GDPR.
The legal basis for the processing of the data transmitted in the course of establishing contact is also Art. 6 Abs. 1 S. 1 lit. f GDPR.
If contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 Abs. 1 S. 1 lit. b GDPR.

3. Purpose of data processing

The processing of the personal data from the input mask serves solely to process the contact. Further personal data processed during the sending process of the form serves to prevent misuse of the contact form.

4. Duration of storage

We delete the data arising in this context after the storage is no longer necessary, or restrict the processing if there are statutory storage obligations.

5. Possibility of objection and elimination

The user has the option to revoke his consent to the processing of personal data or to object to the storage of his personal data at any time. In this case all personal data that was saved in the course of establishing contact will be deleted.


VI. Plugins and tools


1. Google Fonts

1.1 On this website we use Google Fonts for the uniform display of fonts provided by Google. This serves to present our website in an appealing manner and represents a legitimate interest in terms of Art. 6 Abs. 1 S. 1 lit. f GDPR.

1.2 By visiting the website, Google receives information that you have accessed the corresponding sub-page of our website. Furthermore, the data referred to in III. of this declaration are transferred. This takes place regardless of whether Google provides a user account through which you are logged in or whether there is no user account. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish to be associated with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and uses them for advertising, market research and/or customized design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide customized advertising and to inform other users of the social network about your activities on our website. You have the right of objection to the creation of these user profiles. To exercise this right, you have to contact Google.

1.3 Further information on the purpose and scope of the data collection and its processing by the provider are stated in the privacy policy of the provider. There you will also find further information on your rights in this regard and setting options to protect your privacy: http://www.google.de/intl/de/policies/privacy.

2.Google Maps

2.1 On this website we use Google Maps. This enables us to show interactive maps directly on the website and enables you to conveniently use the map function. This represents a legitimate interest in terms of Art. 6 Abs. 1 S.1 lit. f GDPR.

2.2 By visiting the website, Google receives information that you have accessed the corresponding sub-page of our website. Furthermore, the data referred to in III. of this declaration are transferred. This takes place regardless of whether Google provides a user account through which you are logged in or whether there is no user account. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish to be associated with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and uses them for advertising, market research and/or customized design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide customized advertising and to inform other users of the social network about your activities on our website. You have the right of objection to the creation of these user profiles. To exercise this right, you have to contact Google.

2.3 Further information on the purpose and scope of the data collection and its processing by the plug-in provider are stated in the privacy policy of the provider. There you will also find further information on your rights in this regard and setting options to protect your privacy: http://www.google.de/intl/de/policies/privacy.

3.Google Tag Manager

3.1 This website uses Google Tag Manager. This service allows website tags to be managed via an interface. The Google Tool Manager solely implements tags. This means: No cookies are used and no personal data is recorded. Google Tag Manager triggers other tags, which may collect data. However, Google Tag Manager does not access this data. If a deactivation has been carried out at domain or cookie level, it remains in place for all tracking tags, provided they are implemented with Google Tag Manager. For more information about Google Tag Manager, see:
www.google.de/tagmanager/faq.html and www.google.de/tagmanager/use-policy.html.

3.2 By visiting the website, Google receives information that you have accessed the corresponding sub-page of our website. Furthermore, the data referred to in III. of this declaration are transferred. This takes place regardless of whether Google provides a user account through which you are logged in or whether there is no user account. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish to be associated with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and uses them for advertising, market research and/or customized design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide customized advertising and to inform other users of the social network about your activities on our website. You have the right of objection to the creation of these user profiles. To exercise this right, you have to contact Google.

3.3 Further information on the purpose and scope of the data collection and its processing by the provider are stated in the privacy policy of the provider. There you will also find further information on your rights in this regard and setting options to protect your privacy: http://www.google.de/intl/de/policies/privacy .


VII. Data processing for contract execution

1. Purpose of data processing

As a matter of principle, we solely process personal data of our customers (in particular name, address, e-mail address, telephone number) as this is necessary for the provision of our services (contractual and pre-contractual obligations).

2. Legal basis for processing personal data

Art. 6 Abs. 1 S. 1 lit. b GDPR serves as the legal basis for the processing of personal data required to fulfill a contract to which the contracting party is the data subject. This also applies to processing operations that are necessary to carry out pre-contractual measures.

Insofar as processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 Abs. 1 S. 1 lit. c GDPR serves as legal basis.

If the processing is necessary to safeguard a legitimate interest of our company (enforcement of contractual claims) or a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not prevail the former interest, Art. 6 Abs. 1 S. 1 lit. f GDPR serves as the legal basis for the processing.
Providing we obtain the consent of the data subject for the processing of personal data, Art. 6 Abs. 1 S 1. lit. a GDPR serves as the legal basis.

3. Data Transfer

Personal data will only be transmitted to third parties on your behalf and/or with your consent. We may pass on personal data as part of the service contract to the following recipients, for example: Processors (hosting providers, IT service providers, etc.) whose services we use. The legal basis for this transmission is Art. 6 Abs. 1 S. 1 lit. b, Art. 6 Abs. 1 S. 1 lit. f and Art. 6 Abs. 1 S. 1 lit. a GDPR.

4. Storage duration

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Storage can also take place if this has been provided for by the European or national legislator in EU regulations, laws or other regulations to which the person responsible is subject. The data will also be blocked or deleted, if a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.

 

VIII. Rights of the data subject

If personal data is processed by you, you are the data subject as defined by the GDPR and you have the following rights vis-à-vis the person responsible:

Right to information (Art. 15 GDPR)
Right to rectification (Arti. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right of objection (Art. 21 GDPR)
Right to revoke the declaration of consent under data protection law (Article 7 (3) GDPR); the revocation of the consent does not affect the legality of the processing carried out on the basis of the consent up to the point of revocation.
Right to file a complaint with a supervisory authority (Art. 77 GDPR)