Privacy policy

We are pleased that you visit our website and thank you for your interest. Below we inform you about the handling of your personal data when using our website. Personal data is all data that personally identifies you. Your data is protected within the framework of legal regulations, in particular the General Data Protection Regulation (DSGVO) and the Federal Data Protection Act (BDSG). Below you will find information about which data is collected during your visit to the homepage and how it is used:

Datenschutzerklärung
I. Scope

With this document, the data controller wishes to fulfil its information obligations towards data subjects in accordance with Article 13 of the General Data Protection Regulation (GDPR). This data protection information is published at http://g-o-friedrich.com/datenschutz and has been valid since September 2021. Due to the further development of our Internet presence or due to changed legal or official requirements, it may become necessary to change this data protection information. The amended version will be announced to you here.

II. Who is responsible for data processing?

The data controller according to Art. 4 No. 7 DSGVO is:

Georg + Otto Friedrich GmbH, Waldstraße 73, 64846 Groß-Zimmern,

Telephone: 06071 492-0, Fax: 06071 492-39, E-mail: mail@g-o-friedrich.com

The complete imprint is available at the following link: https://g-o-friedrich.com/impressum

III. Is there a data protection officer?

The data controller has appointed the following company data protection officer:

Boris Koppenhöfer, Tel: 06123 921361, Mail: bk@ko-we.de

IV. What do we process your data for?

IV.1. Logfiles / Hosting

If you visit our website without registering or otherwise transmitting information to us, we only collect the following data that your browser transmits to our server (so-called “server log files”):

  • The individual pages of our website (URL)
  • Date and time at the time of access
  • Amount of data sent in bytes
  • Source/reference from which you accessed the page
  • Browser used
  • Operating system used
  • IP address used (if applicable, in anonymised form)

Our internet presence is stored with a hosting provider and kept available for retrieval. The web server used stores the aforementioned server log files.

  • Purpose of the processing: Hosting of the internet presence
  • Legal basis and legitimate interests: The processing is carried out on the basis of our overriding legitimate interest (Art. 6 para. 1 lit. f DSGVO) in the security and stability of our internet presence by commissioning a service provider to provide infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services.
  • Data recipient: IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, https://www.ionos.de/
  • Storage period: 7 days

IV.2. Cookies

IV.2.a. General

a) Definitions

Below you will find extensive information on so-called “cookies”. These are pieces of information that are often stored in databases on your terminal device. The following terms may be used in the following:

  • First-party cookie: This cookie is stored or modified by the website you are currently browsing.
  • Third-party cookie: This cookie is stored or modified by third parties with whom the website operator is associated (e.g. an advertising network, a social media platform, etc.)
  • Session cookie: This cookie is deleted from your terminal when you close the browser. Often, a session cookie stores only one session ID in order to assign several requests of a user on a page to his or her session.
  • Persistent cookie: This cookie is stored on your terminal device until its validity expires or you delete it manually or automatically in the browser.
  • Technically necessary cookie: This cookie is technically necessary for the presentation of our website and enables the necessary functions contained on it.
  • Technically not necessary cookie: This cookie is not absolutely necessary for the display or use of the website, but enables us or you to use a special functionality.

Any type of cookie may contain personal data. In many cases, however, the data in the cookies are pseudonymised

b) Legal basis

  • Technically necessary cookies: The storage and modification of technically necessary cookies are based on the legal basis of our overriding legitimate interests according to Art. 6 (1) lit. f DSGVO. These are the optimal, browser and operating system-independent, technically secure external presentation and advertising of our company on the Internet as well as the user-friendly and effective design of your website visit.
  • Technically unnecessary cookies: The storage and modification of technically unnecessary cookies are based on the legal basis of your individual personal and voluntary consent according to Art. 6 (1) lit. a DSGVO. You can revoke your consent at any time with effect for the future. The data processing remains lawful until the revocation. Please note that if you do not accept technically unnecessary cookies, individual functions of our website may be restricted.

c) Data recipient / access possibility

  • First-party cookies: Only we, as the data controller and site operator, have access to these.
  • Third-party cookies: Only the third party that has set these cookies itself has access to them. For example, only Google has access to a cookie set by Google and can read or change it.

d) Storage period / deletion options

  • Session cookies: These only remain temporarily stored in your browser until the end of the browser session or can be deleted by you before.
  • Persistent cookies: These remain stored on your terminal device for as long as specified for the respective cookie or can be deleted by you before.

Please note that you can set your browser in such a way that you are informed about the setting of cookies and can decide individually about their acceptance or can exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browsers under the following links:

A general objection to the use of cookies for online marketing purposes can be declared for a large number of services, especially in the case of tracking, via the US-American site https://www.aboutads.info/choices/ or EU-Site https://www.youronlinechoices.com/.

IV.2.b. Cookies in use

In the following overview, we list the technically necessary first-party cookies used on our website and the purpose of the data processing:

  • uncodeAI.css (Session-Cookie)
    purpose: This cookie is needed for system functionality
    Storage duration: Until the end of the browser session
  • uncodeAI.images (Session-Cookie)
    purpose: This cookie is needed for system functionality
    Storage duration: Until the end of the browser session
  • uncodeAI.screen (Session-Cookie)
    purpose: This cookie is needed for system functionality
    Storage duration: Until the end of the browser session
  • borlabs-cookie (Persistent-Cookie)
    Purpose: storage of cookie settings
    Storage period: 1 year

In the following overview, we list the technically necessary session storage used on our website and the purpose of the data processing:

  • wc_cart_hash (+ID)
    purpose: This cookie is needed for system functionality
    Storage duration: Until the end of the browser session
  • wc_fragments (+ID)
    purpose: This cookie is needed for system functionality
    Storage duration: Until the end of the browser session

In the following overview, we list the technically necessary local storage used on our website and the purpose of the data processing:

  • wc_cart_hash (+ID)
    purpose: This cookie is needed for system functionality
    Storage period: Until manual deletion

In the following overview, we list the technically unnecessary third-party cookies from Google Analytics used on our website and the purpose of the data processing:

  • gali (Persistent-Cookie)
    Purpose: storage of cookie settings

Storage period: 1 year

  • ga (Persistent-Cookie)
    Purpose: This cookie is used for Google Analytics to distinguish between users.

Storage period: 2 years

  • gid (Persistent-Cookie)
    Purpose: This cookie is used for Google Analytics to distinguish between users.

Storage period: 1 day

  • gat_gtag_UA (+ID) (Persistent-Cookie)
    Purpose: This cookie is used for Google Analytics to throttle the request frequency from the player.

Storage duration: 1 day

IV.3. Contact

Personal data is collected when you contact us (e.g. via contact form, e-mail, telephone, fax). Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of answering your request or for contacting you and the associated technical administration. Without this mandatory information, we cannot process your request. All other information is voluntary.

  • Purpose of processing: to respond to your request
  • Legal basis: Art. 6 para. 1 lit. b DSGVO for pre- or contractual matters. Art. 6 para. 1 lit. a DSGVO for your voluntary information. Art. 6 para. 1 lit. f DSGVO for all other enquiries and the use of our technical service providers.
  • Legitimate interests: The processing using the service providers is based on our overriding legitimate interest in responding to your request in a secure, timely and professional manner.
  • Recipients of the data: Email service provider for emails, hosting provider for contact form requests.
  • Storage period: Your data will be deleted after your request has been processed. This is the case when the circumstances indicate that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary. In the case of pre-contractual and contractual matters, your enquiry will be stored until the end of the contract and then its processing will be restricted. If there is no longer a legal reason to store the data, it will be deleted.

IV.4. Web analysis

Google Analytics

Our website uses Google Analytics, a web analytics service provided by Google Ireland Ltd. (Google). Google Analytics uses so-called “cookies”. These are pieces of information that are often stored in databases on your terminal device and which enable an analysis of your use of the website. The information generated by the cookie about the use of this website by the user is usually transmitted to the parent company of Google in the USA and stored there.

Our website uses Google Analytics exclusively with the extension “_anonymizeIp()”, which ensures anonymisation of the IP address by shortening it and excludes direct personal reference. The extension means that your IP address is shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to Google’s parent company in the USA and shortened there.

  • Purposes of processing: tracking (e.g. interest/behavioural profiling), visit action evaluation, interest-based and behavioural marketing, profiling (creating user profiles), conversion measurement (measuring the effectiveness of marketing measures), reach measurement (e.g. access statistics, recognising returning visitors). These purposes apply to us as well as to Google and its parent company.
  • Legal basis: For the use of Google Analytics, you may give us your consent in accordance with Art. 6 (1) p. 1 lit. a DSGVO, which you can revoke at any time with future effect by deselecting “Marketing” or “Google Analytics” in the cookie settings on our site.
  • Storage period: We store the anonymised data determined in this way for a maximum period of 14 months. After that, the data is automatically deleted. Regarding the storage period by Google, we refer to their data protection statement.
  • Objection / Opt-Out: You can object to the collection of your data by installing a browser add-on to deactivate Google Analytics: https://tools.google.com/dlpage/gaoptout?hl=de

Here you can specify yourself which data is to be used by Google: https://g.co/privacytools

You can also deactivate personalised advertising directly at Google: https://www.google.com/settings/ads/onweb/

Further information from Google on how to block certain advertising can be found here: https://support.google.com/ads/answer/2662922?hl=de

You can also store your preferences regarding online advertising across providers here: https://www.youronlinechoices.com/de/

Alternatively, you can use the Network Advertising Initiative’s administration page: http://www.networkadvertising.org/consumer/opt_out.asp

  • Data recipient: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

  • Privacy policy of Google: https://policies.google.com/privacy
  • Data protection information from Google for Google Analytics: https://policies.google.com/technologies/partner-sites
  • Third-country transfer: Insofar as non-anonymised data is transferred to Google LLC, data processing also takes place in the USA.
  • Appropriate safeguards: We have concluded an order processing agreement with Google as well as the EU standard contractual clauses, which are to be regarded as appropriate safeguards pursuant to Art. 46 (2) lit c) DSGVO.

Google Tag Manager

We use the Google Tag Manager from Google on our website.  The Google Tag Manager is an online tool with which we can integrate and manage website tags centrally and via a user interface. Tags are small sections of code that, for example, record your activities on our website. For this purpose, JavaScript code sections are inserted into the source code of our internet presence. The tags come from Google Ads or Google Analytics, for example, but tags from other companies can also be integrated and managed via the manager. Such tags perform different tasks. They can collect browser data, integrate buttons, set cookies and also track users across several websites. In the account settings of the Tag Manager, we have allowed Google to receive anonymised data from us. However, this is only the use and usage of our tag manager and not your data that is stored via the code sections.

  • Purposes of processing: Tracking (e.g. interest/behavioural profiling), visit action evaluation, interest-based and behavioural marketing, profiling (creation of user profiles), conversion measurement (measurement of the effectiveness of marketing measures), reach measurement (e.g. access statistics, recognition of returning visitors). These purposes apply to us as well as to Google and its parent company. As far as we are aware, Google also uses the data collected in this way (anonymised) for its own purposes. In this respect, we refer to the data protection declaration of Google.
  • Legal basis and legitimate interests: For the integration of the Google Tag Manager on our website, this processing is carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate interest in the statistical analysis of user behaviour for optimisation and marketing purposes. The use of the various tags then takes place in accordance with the separately described sections with the express consent of the user.
  • Storage period: With regard to the storage period by Google, we refer to their privacy policy.
  • Data recipient: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

  • Privacy policy of Google: https://policies.google.com/privacy
  • Third-country transfer: Insofar as non-anonymised data is transferred to Google LLC, the data processing takes place in the USA.

IV.5. Newsletter

We send newsletters by e-mail to registered users with information about our company, products, services, promotions and offers. The newsletter is sent out a maximum of 2 times per month.

  • Double opt-in procedure: Registration for our newsletter is always carried out using a so-called double opt-in procedure. After registration, you will receive an e-mail in which you are asked to confirm your registration. This confirmation is necessary to check the accuracy of your e-mail address. Registrations for the newsletter are logged in order to be able to prove the registration process in accordance with legal requirements. This includes the storage of the registration and confirmation time as well as the IP address.
  • Purpose of processing: direct marketing, customer communication.
  • Legal basis: When registering for our newsletter, the registrant gives his/her consent (Art. 6 para. 1 p. 1 lit. a DSGVO).
  • Right of withdrawal/ opt-out: You can cancel receipt of our newsletter at any time, i.e. withdraw your consent, by informing us by e-mail (see above under Person responsible) or by clicking on the link that can be found at the end of each newsletter. The revocation does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
  • Obligation to provide: To send the newsletter, we need at least your valid e-mail address. Otherwise it will not be possible to send it.
  • Storage period: Your data will be stored until you revoke your consent. After that, they will be restricted in processing and stored for up to three years in order to be able to prove a previously granted consent in a legally compliant manner. This is done on the basis of our legitimate interests (Art. 6 para. 1 p. 1 lit. f. DSGVO) in proving data protection compliance.

If named below, we use the following service provider for this purpose:

RapidMail

  • Data recipient: rapidmail GmbH, Augustinerplatz 2, 79098 Freiburg i.Br., https://www.rapidmail.de
  • Privacy policy of RapidMail:, https://www.rapidmail.de/datenschutz
  • Legal basis and legitimate interests: The data transfer is based on our overriding legitimate interest (Art. 6 para. 1 lit. f DSGVO) in the security and stability of a legally compliant newsletter system incl. automated double opt-in and verifiability of user registrations.
  • Transfer to third countries: none
  • Storage period: Your data will be stored until you revoke it. After that, they will be restricted in processing and stored for up to three years in order to be able to prove a previously granted consent in a legally compliant manner.

IV.6. Web fonts

Our website uses so-called web fonts provided by the respective provider for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.

For this purpose, the browser you use must connect to the servers of the respective provider. This enables the provider to know that our website has been accessed via your IP address. If your browser does not support web fonts, a standard font is loaded from your computer.

  • Purpose of processing: Consistent presentation of our internet presence in all media.
  • Legal basis and legitimate interests: The integration is based on our legitimate interests (Art. 6 para. 1 p. 1 lit. f. DSGVO) in a technically secure, maintenance-free and efficient use of fonts, their uniform presentation and taking into account possible restrictions under licensing law for their integration.

We use web fonts from the following providers:

Google

  • Data recipient: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA

  • Google privacy policy: https://policies.google.com/privacy
  • Third-country transfer: Insofar as non-anonymised data is transferred to Google LLC, the data processing takes place in the USA.

IV.7. Security check

Google reCAPTCHA

Our website uses Google reCAPTCHA, a service provided by Google Ireland Ltd. (Google) to protect against misuse of our web forms and spam. The service monitors the behaviour of the user when filling out the web form in order to distinguish humans from bots. If a bot is detected, the web form is blocked, thus preventing misuse. To do this, a code embedded in the web page, a so-called JavaScript, must be executed. Individual user input is not required. Cookies are not set for this purpose. Personal data is neither stored by the responsible party nor by Google. Google WebFonts are also loaded for the execution of the service.

  • Purposes of processing: Protection against misuse of the web forms and spam.
  • Legal basis: The processing is carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of our overriding legitimate interest in improving the security and functionality of our website.
  • Automated decision-making: Google determines a score to distinguish a human input from an abusive bot input. If the score does not reach a certain level, the request is considered a bot submission and the web form is not submitted. If you are unable to send the web form by mistake, there are several alternatives for contacting the person responsible (e.g. letter, fax, e-mail). This does not result in any significant impairment.
  • Storage period: We do not store any data in connection with this service.
  • Data recipient: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
  • Google privacy policy: https://policies.google.com/privacy
  • Third-country transfer: Insofar as non-anonymised data is transferred to Google LLC, the data processing takes place in the USA.
V. What data protection rights do I have?
  1. As a data subject, you have the following rights:
  • Confirmation of data processing: You have the right to request confirmation from us as to whether your personal data are being processed. The requirements for this can be found in Art. 15 of the GDPR;
  • Information: You have the right to request information about your personal data processed by us. The requirements for this can be found in Art. 15 DSGVO;
  • Correction: You have the right to request that inaccurate personal data concerning you be corrected without delay. The requirements for this can be found in Art. 16 of the GDPR;
  • Deletion: You have the right to request the immediate deletion of personal data concerning you. The conditions for this can be found in Art. 17 of the GDPR;
  • Restriction of processing: You have the right to request the restriction of the processing of your personal data. The requirements for this can be found in Art. 18 DSGVO;
  • Data portability: You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format. Furthermore, you have the right to have this data transferred to another controller by us. The requirements for this can be found in Art. 20 DSGVO;
  • Revocation of consent: You have the right to revoke the consent you have given at any time if the processing is based on Art. 6 (1) lit. a or Art. 9 (2) lit. a DSGVO. The data processing remains lawful until the revocation. The revocation only applies for the future. The requirements for this can be found in Art. 7 (3) DSGVO;
  • Complaint: You have the right, without prejudice to any other administrative or judicial remedy, to lodge a complaint with a supervisory authority if you consider that the processing of personal data relating to you infringes the GDPR. The requirements for this can be found in Art. 77 DSGVO. You can contact the supervisory authority responsible for the controller or the one in your country or federal state. You can find a list of all supervisory authorities here: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
  1.  right of objection
  • You have the right to object at any time and with future effect to the processing of personal data relating to you which we process on the basis of our overriding legitimate interest (Art. 6 (1) lit. e or f DSGVO) for reasons arising from your particular situation; this also applies to profiling based on this provision within the meaning of Art. 4 No. 4 DSGVO. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.
  1.  right to object to the processing of data for the purposes of direct marketing and product evaluations
  • We collect and process your personal data for the purpose of direct marketing. You have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct advertising.
  • In individual cases, we process and use your personal data to send you a product evaluation and/or other evaluation requests by e-mail, which are exclusively related to your purchase, conclusion and/or other analogous transactions. We may also use your email address and/or postal address in this context to send you product recommendations by email and/or post about similar goods and/or services we offer. You will receive these evaluation requests and product recommendations from us regardless of whether you have subscribed to a newsletter.
  • Exercise of the right to object: You can object to these evaluation requests and product recommendations at any time by sending a letter to Georg + Otto Friedrich GmbH, Waldstraße 73, 64846 Groß-Zimmern or by sending an e-mail to mail@g-o-friedrich.com and/or at the end of each evaluation and/or product recommendation e-mail with effect for the future, without incurring any costs other than the respective transmission costs according to the basic rates. Your right to object automatically also applies to possible profiling, insofar as it is connected with such direct advertising. If you object to processing for the purpose of product evaluation and/or other evaluation requests and/or product recommendations, we will no longer process your personal data for these purposes with effect for the future.
  • If you object to processing for the purposes of direct advertising, we will no longer process your personal data for these purposes with effect for the future.
VI. How long will my data be stored?

Unless otherwise regulated above, the following criteria apply to determine the storage period:

  • In the case of consent pursuant to Art. 6 (1) lit. a DSGVO, the data will be stored until the data subject revokes his/her consent.
  • In the case of pre-contractual and contractual purposes pursuant to Art. 6 para. 1 lit. b DSGVO, the data will be stored until the termination of the contract.
  • In the case of our overriding legitimate interest pursuant to Art. 6(1)(f) DSGVO, the data will be stored until the data subject exercises his or her right to object pursuant to Art. 21(1) DSGVO, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.
  • In the case of direct advertising pursuant to Art. 6(1)(f) DSGVO, the data will be stored until the data subject exercises his or her right to object pursuant to Art. 21(2), (3) DSGVO.

Otherwise, personal data will only be stored for as long as there is a legal reason to store it.

VII. Source of the personal data

We process personal data that we have received from you or the recipients of personal data.

VIII. Obligation to provide data

As part of the performance of our contractual or legally assumed obligations, you as the data subject may be legally obliged to provide our company with information and personal data that are necessary for the establishment, implementation and termination of the contractual relationship and the fulfilment of the associated contractual obligations or which we are legally obliged to collect. Without this data, we will usually have to refuse to conclude the contract or will no longer be able to perform an existing contract and may have to terminate it

VX. Copyright

Data protection information Copyright 2021 Rechtsanwalt Marc Oliver Giel