Privacy policy

We are pleased that you visit our website and thank you for your interest. Below we inform you about the handling of your personal data when using our website. Personal data is all data that personally identifies you. Your data is protected within the framework of legal regulations, in particular the General Data Protection Regulation (DSGVO) and the Federal Data Protection Act (BDSG). Below you will find information about which data is collected during your visit to the homepage and how it is used:

Datenschutzerklärung
I. Scope

With this document, the data controller wishes to fulfil its information obligations towards data subjects in accordance with Article 13 of the General Data Protection Regulation (GDPR). This data protection information is published at http://g-o-friedrich.com/datenschutz and has been valid since September 2021. Due to the further development of our Internet presence or due to changed legal or official requirements, it may become necessary to change this data protection information. The amended version will be announced to you here.

II. Who is responsible for data processing?

The data controller according to Art. 4 No. 7 DSGVO is:

Georg + Otto Friedrich GmbH, Waldstraße 73, 64846 Groß-Zimmern,

Telephone: 06071 492-0, Fax: 06071 492-39, E-mail: mail@g-o-friedrich.com

The complete imprint is available at the following link: https://g-o-friedrich.com/impressum

III. Is there a data protection officer?

The data controller has appointed the following company data protection officer:

Boris Koppenhöfer, Tel: 06123 921361, Mail: bk@ko-we.de

IV. What do we process your data for?

IV.1. Logfiles / Hosting

If you visit our website without registering or otherwise transmitting information to us, we only collect the following data that your browser transmits to our server (so-called “server log files”):

  • The individual pages of our website (URL)
  • Date and time at the time of access
  • Amount of data sent in bytes
  • Source/reference from which you accessed the page
  • Browser used
  • Operating system used
  • IP address used (if applicable, in anonymised form)

Our internet presence is stored with a hosting provider and kept available for retrieval. The web server used stores the aforementioned server log files.

  • Purpose of the processing: Hosting of the internet presence
  • Legal basis and legitimate interests: The processing is carried out on the basis of our overriding legitimate interest (Art. 6 para. 1 lit. f DSGVO) in the security and stability of our internet presence by commissioning a service provider to provide infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services.
  • Data recipient: IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, https://www.ionos.de/
  • Storage period: 7 days

IV.2. Cookies

IV.2.a. General

a) Definitions

Below you will find extensive information on so-called “cookies”. These are pieces of information that are often stored in databases on your terminal device. The following terms may be used in the following:

  • First-party cookie: This cookie is stored or modified by the website you are currently browsing.
  • Third-party cookie: This cookie is stored or modified by third parties with whom the website operator is associated (e.g. an advertising network, a social media platform, etc.).
  • Session cookie: this cookie is deleted from your terminal device when you close the browser. Often, a session cookie stores only one session ID in order to assign several requests of a user on a page to his session.
  • Persistent cookie: This cookie is stored on your terminal device until its validity expires or you delete it manually or automatically in the browser.
  • Essential: Without this cookie and web storage, the service you requested cannot be provided
  • Optional: This cookie and web storage enables us to use more advanced functions and will only be used if you give your consent
  • Local Storage: Belongs to the so-called “Web Storage”. This information is also stored in your web browser until you delete it manually.
  • Session Storage: Belongs to the so-called “web storage”. This information is also stored in your web browser until you close the browser window.

b) Legal basis

  • Mandatory cookies and web storage: The storage of information and access to these are based on the legal basis of § 25 (2) No. 2 TTDSG.
  • Optional cookies and web storage: The storage of information and access to these are based on the legal basis of your individual personal and voluntary consent in accordance with § 25 (1) TTDSG in conjunction with. Art. 6 (1) lit. a DSGVO. You can revoke your consent at any time with effect for the future. The data processing remains lawful until the revocation. Please note that if you do not accept optional cookies, individual functions of our website may be limited.

c) Data recipient / access possibility

  • First-party cookies: Only we, as the data controller and site operator, have access to these.
  • Third-party cookies: Only the third party that has set these cookies itself has access to them. For example, only Google has access to a cookie set by Google and can read or change it.
  • Web storage: Only we, as the data controller and site operator, have access to this.

d) Storage period / deletion options

  • Session cookies: These remain stored in your browser only temporarily until the end of the browser session or can be deleted by you beforehand.
  • Persistent cookies: These remain stored on your terminal device for as long as specified for the respective cookie or can be deleted by you beforehand.
  • Local storage: This remains stored until you delete it manually.
  • Session-Storage: This remains stored until the browser window is closed.

The exact storage period is specified under “Cookies used and web storage”.

e) Deletion options / objection

Please note that you can set your browser in such a way that you are informed about the setting of cookies and can decide individually about their acceptance or can exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find this for each browser at the following links:

  • Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
  • Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
  • Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
  • Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
  • Opera: https://help.opera.com/de/latest/web-preferences/

A general objection to the use of cookies used for online marketing purposes can be declared for a large number of the services, especially in the case of tracking, via the U.S. site https://www.aboutads.info/choices/ or the EU site https://www.youronlinechoices.com.

IV.2.b. Cookies in use

The cookies we use are listed in our cookie consent tool. You can access this via the link “Change privacy settings.

We use the consent tool “Real Cookie Banner” to manage the cookies and similar technologies (tracking pixels, web beacons, etc.) used and the related consents. Details on how “Real Cookie Banner” works can be found at https://devowl.io/knowledge-base/real-cookie-banner-data-processing.

The legal basis for the processing of personal data in this context is Art. 6 para. 1 lit. c DS-GVO and Art. 6 para. 1 lit. f DS-GVO. Our legitimate interest is the management of the cookies and similar technologies used and the related consents.

The provision of the personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide the personal data. If you do not provide the personal data, we will not be able to manage your consents.

IV.3. Contact

Personal data is collected when you contact us (e.g. via contact form, e-mail, telephone, fax). Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of answering your request or for contacting you and the associated technical administration. Without this mandatory information, we cannot process your request. All other information is voluntary.

  • Purpose of processing: Answering your request.
  • Legal basis: Art. 6 para. 1 lit. b DSGVO for pre- or contractual matters. Art. 6 para. 1 lit. a DSGVO for your voluntary information.
  • Recipients of the data: Email service provider for emails, hosting provider for contact form requests.
  • Storage period: your data will be deleted after final processing of your request. This is the case if it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary. In the case of pre-contractual and contractual matters, your inquiry will be stored until the termination of the contract and then limited in processing. If there is no longer a legal reason to store the data, it will be deleted.

IV.4 Data processing in connection with our interested parties

  • Purpose of processing: As an interested party, you will be stored in our systems with your contact details in order to be able to establish a business relationship with you.
  • Legal basis: Art. 6 para. 1 lit. b DSGVO in the case of preliminary or contractual matters. Art. 6 para. 1 lit. a DSGVO for your voluntary information.
  • Duration of storage: Data of interested parties are stored as long as it can be assumed that there is still an interest in a cooperation with us. If we assume that there is no longer any interest, we delete the prospect data.

IV.5 Data processing in connection with our customers, suppliers and other business partners.

  • Purpose of processing: As a customer, supplier or other business partner, you and your contact details are stored in our systems in order to manage the business relationship with you.
  • Legal basis: Art. 6 para. 1 lit. b DSGVO for pre- or contractual matters. Art. 6 para. 1 lit. a DSGVO for your voluntary information that is not mandatory for the execution of the contract.
    Recipients of the data: In the context of a project implementation, those project participants receive your personal data that are necessarily required for the project implementation.
  • Storage period: We delete your data three years after the end of the business relationship, unless there is a legal reason for further processing (e.g. retention obligations).

IV.6. Web analysis

Google Analytics

Our website uses Google Analytics, a web analytics service provided by Google Ireland Ltd. (Google). Google Analytics uses so-called “cookies”. These are pieces of information that are often stored in databases on your terminal device and which enable an analysis of your use of the website. The information generated by the cookie about the use of this website by the user is usually transmitted to the parent company of Google in the USA and stored there.

Our website uses Google Analytics exclusively with the extension “_anonymizeIp()”, which ensures anonymisation of the IP address by shortening it and excludes direct personal reference. The extension means that your IP address is shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to Google’s parent company in the USA and shortened there.

  • Purposes of processing: tracking (e.g. interest/behavioural profiling), visit action evaluation, interest-based and behavioural marketing, profiling (creating user profiles), conversion measurement (measuring the effectiveness of marketing measures), reach measurement (e.g. access statistics, recognising returning visitors). These purposes apply to us as well as to Google and its parent company.
  • Legal basis: For the use of Google Analytics, you may give us your consent in accordance with Art. 6 (1) p. 1 lit. a DSGVO, which you can revoke at any time with future effect by deselecting “Marketing” or “Google Analytics” in the cookie settings on our site.
  • Storage period: We store the anonymised data determined in this way for a maximum period of 14 months. After that, the data is automatically deleted. Regarding the storage period by Google, we refer to their data protection statement.
  • Objection / Opt-Out: You can object to the collection of your data by installing a browser add-on to deactivate Google Analytics: https://tools.google.com/dlpage/gaoptout?hl=de
  • Data Recipient: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
    Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
  • Privacy policy of Google: https://policies.google.com/privacy
  • Data protection information from Google for Google Analytics: https://policies.google.com/technologies/partner-sites
  • Third-country transfer: To the extent that non-anonymized data is transferred to Google LLC, data processing also takes place in the USA.
  • We have concluded the following agreement with Google Ireland Ltd. as a processor: https://business.safety.google/adsprocessorterms/ This also contains the EU standard contractual clauses, which are to be regarded as appropriate safeguards pursuant to Art. 46 (2) c DSGVO.

Google Tag Manager

We use the Google Tag Manager from Google on our website.  The Google Tag Manager is an online tool with which we can integrate and manage website tags centrally and via a user interface. Tags are small sections of code that, for example, record your activities on our website. For this purpose, JavaScript code sections are inserted into the source code of our internet presence. The tags come from Google Ads or Google Analytics, for example, but tags from other companies can also be integrated and managed via the manager. Such tags perform different tasks. They can collect browser data, integrate buttons, set cookies and also track users across several websites. In the account settings of the Tag Manager, we have allowed Google to receive anonymised data from us. However, this is only the use and usage of our tag manager and not your data that is stored via the code sections.

  • Purposes of processing: Tracking (e.g. interest/behavioural profiling), visit action evaluation, interest-based and behavioural marketing, profiling (creation of user profiles), conversion measurement (measurement of the effectiveness of marketing measures), reach measurement (e.g. access statistics, recognition of returning visitors). These purposes apply to us as well as to Google and its parent company. As far as we are aware, Google also uses the data collected in this way (anonymised) for its own purposes. In this respect, we refer to the data protection declaration of Google.
  • Legal basis and legitimate interests: For the integration of the Google Tag Manager on our website, this processing is carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate interest in the statistical analysis of user behaviour for optimisation and marketing purposes. The use of the various tags then takes place in accordance with the separately described sections with the express consent of the user.
  • Storage period: With regard to the storage period by Google, we refer to their privacy policy.
  • Data recipient: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

  • Privacy policy of Google: https://policies.google.com/privacy
  • Third-country transfer: Insofar as non-anonymised data is transferred to Google LLC, the data processing takes place in the USA.

IV.7. Newsletter

We send newsletters by e-mail to registered users with information about our company, products, services, promotions and offers. The newsletter is sent out a maximum of 2 times per month.

  • Double opt-in procedure: Registration for our newsletter is always carried out using a so-called double opt-in procedure. After registration, you will receive an e-mail in which you are asked to confirm your registration. This confirmation is necessary to check the accuracy of your e-mail address. Registrations for the newsletter are logged in order to be able to prove the registration process in accordance with legal requirements. This includes the storage of the registration and confirmation time as well as the IP address.
  • Purpose of processing: direct marketing, customer communication.
  • Legal basis: When registering for our newsletter, the registrant gives his/her consent (Art. 6 para. 1 p. 1 lit. a DSGVO).
  • Right of withdrawal/ opt-out: You can cancel receipt of our newsletter at any time, i.e. withdraw your consent, by informing us by e-mail (see above under Person responsible) or by clicking on the link that can be found at the end of each newsletter. The revocation does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
  • Obligation to provide: To send the newsletter, we need at least your valid e-mail address. Otherwise it will not be possible to send it.
  • Storage period: Your data will be stored until you revoke your consent. After that, they will be restricted in processing and stored for up to three years in order to be able to prove a previously granted consent in a legally compliant manner. This is done on the basis of our legitimate interests (Art. 6 para. 1 p. 1 lit. f. DSGVO) in proving data protection compliance.

If named below, we use the following service provider for this purpose:

CleverReach

  • Data recipient: CleverReach GmbH & Co. KG, //CRASH Building, Schafjückenweg 2, 26180 Rastede, Germany
  • Privacy policy of CleverReach: https://www.cleverreach.com/en-de/privacy-policy/
  • Legal basis and legitimate interests: The data transfer is based on our overriding legitimate interest (Art. 6 para. 1 lit. f DSGVO) in the security and stability of a legally compliant newsletter system incl. automated double opt-in and verifiability of user registrations.
  • Transfer to third countries: none
  • Storage period: Your data will be stored until you revoke it. After that, they will be restricted in processing and stored for up to three years in order to be able to prove a previously granted consent in a legally compliant manner.

IV.8. Online maps

Our internet presence uses online map services provided by Openstreetmap. When you call up a page, your browser first loads a placeholder image. Only when you confirm that you want to use the online map services and click on the “Load map” button, network connections to Openstreetmap are established and the required maps are loaded into your browser cache.

For this purpose, the browser you are using must connect to Openstreetmap’s servers. Through this, Openstreetmap obtains knowledge that our website was accessed via your IP address.

  • Purpose of processing: User-friendly graphical display of address data and navigation.
  • Legal basis: The integration is based on your voluntary consent according to Art. 6 para. 1 p. 1 lit. a. DSGVO.
  • Data recipient: OpenStreetMap Foundation (OSMF) on the basis of the Open Data Commons Open Database License (ODbL), https://www.openstreetmap.de/
  • Privacy policy of OpenStreetMap: https://wiki.osmfoundation.org/wiki/Privacy_Policy

IV.9. Online videos

Vimeo videos

Our internet presence uses the embedding function of Vimeo. When you visit a website with embedded Vimeo video, a connection to Vimeo servers is established. This tells Vimeo which pages you are visiting. If you are logged into your Vimeo account, Vimeo can assign your surfing behavior to you personally. You can prevent this by logging out of your Vimeo account beforehand. If a Vimeo video is started, Vimeo uses cookies that collect information about user behavior. For more information on the purpose and scope of data collection and its processing by Vimeo, please see Vimeo’s privacy policy.

  • Purposes of processing: provision of a comprehensive and professional online offer, including videos. User-friendly playback option without changing the website. Speed of video playback.
  • Legal basis: For the use of Vimeo, you may give us your consent pursuant to Art. 6 (1) p. 1 lit. a DSGVO, which you can revoke at any time with future effect by deselecting “External Media” or “Vimeo” in the cookie settings on our site. The evaluation on the part of Vimeo is carried out in accordance with Art. 6 para. 1 lit.f DSGVO on the basis of the legitimate interests of Vimeo in the insertion of personalized advertising, market research and / or design of its website to meet needs. You have the right to object to the creation of these user profiles, whereby you must contact Vimeo to exercise this right.
  • Storage period: We store the anonymized data determined in this way for a maximum period of 14 months. After this period, the data is automatically deleted. With regard to the storage period by Vimeo, we refer to their privacy policy.
  • Data recipient: Vimeo Inc., Attention: Legal Department, 555 West 18th Street New York, New York 10011, USA
  • Privacy policy of Vimeo: https://vimeo.com/privacy
  • Third country transfer: Insofar as non-anonymized data is transferred to Vimeo Inc. the data processing takes place in the USA.

V. What data protection rights do I have?

1. As a data subject, you have the following rights:

  • Confirmation of data processing: You have the right to request confirmation from us as to whether your personal data are being processed. The requirements for this can be found in Art. 15 DSGVO;
  • Information: you have the right to request information about your personal data processed by us. The requirements for this can be found in Art. 15 DSGVO;
  • Correction: You have the right to request that inaccurate personal data concerning you be corrected without undue delay. The requirements for this can be found in Art. 16 DSGVO;
  • Deletion: You have the right to request the immediate deletion of personal data concerning you. The conditions for this can be found in Art. 17 DSGVO;
  • Restriction of processing: You have the right to request the restriction of the processing of your personal data. The requirements for this can be found in Art. 18 DSGVO;
  • Data portability: you have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format. Furthermore, you have the right to have this data transferred to another responsible party by us. The requirements for this can be found in Art. 20 DSGVO;
  • Revocation of consent: You have the right to revoke the consent you have given at any time if the processing is based on Art. 6 (1) lit. a or Art. 9 (2) lit. a DSGVO. The data processing remains lawful until the revocation. The revocation is only valid for the future. The requirements for this can be found in Art. 7 (3) DSGVO;
  • Complaint: You have the right, without prejudice to any other administrative or judicial remedy, to lodge a complaint with a supervisory authority if you consider that the processing of personal data concerning you infringes the GDPR. The requirements for this can be found in Art. 77 DSGVO. You can contact the supervisory authority responsible for the controller or the one in your country or federal state. You can find a list of all supervisory authorities here: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

2. right of objection

  • You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which we process on the basis of our overriding legitimate interest (Art. 6 (1) lit. e or f DSGVO), with effect for the future; this also applies to profiling based on this provision within the meaning of Art. 4 No. 4 DSGVO. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

3. right to object to processing of data for purposes of direct marketing and product evaluations.

  • We collect and process your personal data to conduct direct advertising. You have the right to object at any time to the processing of personal data concerning you for the purposes of such direct marketing; this also applies to profiling, insofar as it is related to such direct marketing.
  • In individual cases, we process and use your personal data in order to send you an evaluation request and/or product recommendation by e-mail, exclusively in connection with your purchase, conclusion and/or other analogous transactions. Furthermore, we may also use your e-mail address and/or postal address in this context to send you product recommendations by e-mail and/or by post regarding similar goods and/or services offered by us. You will receive these evaluation requests and product recommendations from us regardless of whether you have subscribed to a newsletter.
  • Exercise of the objection: You can object to this data processing for direct advertising purposes at any time by sending a letter to Georg + Otto Friedrich GmbH, Waldstraße 73, 64846 Groß-Zimmern or by sending an e-mail to mail@g-o-friedrich.com and/or at the end of each advertising e-mail with effect for the future without incurring any costs other than the respective transmission costs according to the basic rates. Your right to object automatically also applies to possible profiling, insofar as it is connected with such direct advertising.
  • If you object to processing for direct marketing purposes, we will immediately cease to process your personal data for these purposes.

VI. How long will my data be stored?

Unless otherwise regulated above, the following criteria apply to determine the storage period:

  • In the case of consent pursuant to Art. 6 (1) a DSGVO, the data will be stored until the data subject revokes his consent.
  • In the case of pre-contractual and contractual purposes pursuant to Art. 6 (1) lit. b DSGVO, the data is stored beyond the end of the contract until the expiry of relevant limitation periods (e.g. 3 years pursuant to § 195 BGB) from the concluded contract.
  • In the case of our overriding legitimate interest pursuant to Art. 6(1)(f) DSGVO, the data will be stored until the data subject exercises his or her right to object pursuant to Art. 21(1) DSGVO, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.
  • In the case of direct advertising pursuant to Art. 6 (1) lit. f DSGVO, the data will be stored until the data subject exercises his or her right to object pursuant to Art. 21 (2), (3) DSGVO.
  • In the case of storage obligations incumbent upon us, the documents concerned will be stored until the expiry of the relevant statutory provisions (e.g. 10 or 6 years in accordance with § 147 AO and § 257 HGB).

Otherwise, personal data will only be stored for as long as there is a legal reason to store it.

VII. source of personal data

We process personal data that we have received from you or the recipients of personal data.

VIII. Obligation to provide data

As part of the performance of our contractual or legally assumed obligations, you as the data subject may be legally obligated to provide our company with information and personal data that is required for the establishment, execution and termination of the contractual relationship and the fulfillment of the associated contractual obligations or that we are legally obligated to collect. Without this data, we will usually have to refuse to conclude the contract or will no longer be able to perform an existing contract and may have to terminate it.

IX. Copyright
Data protection information Copyright 2023 Lawyer Marc Oliver Giel