Data Privacy Statements of GEZE GmbH, last updated March 2020
Thank you for visiting GEZE websites (hereinafter referred to as ‘websites’ or ‘sites’) and your interest in GEZE GmbH and our products. The services offered through our websites are designed to ensure that the information and content regarding GEZE that is delivered to you is of interest to you Consequently, we need to collect and utilise your data to a certain extent in order to optimise our offerings and ensure that the aforementioned objective is met.
GENERAL
We take the protection of your privacy and your private data very seriously. Therefore, we will provide you with comprehensive information here so that you can feel comfortable when you visit our website, and so that you know that we take your privacy into consideration even when processing personal data. We treat data that is collected when you visit our website as confidential at all times and handle it in compliance with the valid data protection regulations. The protection of your personal data is one of our central objectives. Data privacy and information security are an integral part of our company policy.
In particular, we are subject to the provisions of the European General Data Protection Regulation (EU – GDPR), as well as the provisions of the new Federal Data Protection Act (BDSG) that was defined on the basis of the EU – GDPR. Accordingly, we are authorised to collect and utilise personal data to the extent necessary to allow you to use our website geze.com and geze.de and the websites of GEZE GmbH, along with all their services and functions.
These statements are issued in accordance with the European General Data Protection Regulation (GDPR) and apply to all processing of personal data, insofar as GDPR applies legally to this processing.
1. Conditions of use of the websites of GEZE GmbH
1.1 Disclaimer
The details and pieces of information that appear on our websites have been carefully checked and researched by GEZE GmbH. We strive to keep expanding and updating this pool of information. However, GEZE GmbH is unable to assume any liability, guarantee or responsibility for correctness, completeness and topicality. This also applies to internet sites to which this website makes direct or indirect references. Our privacy policy does not apply to websites of other providers, even if our website links to these. Therefore, please note the specific privacy policies of the corresponding website providers when you leave our website. GEZE GmbH reserves the right to make changes or additions to the provided information without making any prior announcements regarding the same.
1.2 Copyright and protective rights
The contents and layouts of these websites are protected by copyright. The websites or their contents may be reproduced only with prior written consent from GEZE GmbH. This condition does not apply to press releases that appear in the ‘Company’ and ‘Press’ sections, and which serve to facilitate general and customary press work. Links directing towards the sites of www.geze.de/.com as well as GEZE GmbH websites, may be set. The following section contains information regarding the specific personal data that we collect when you use our websites or their services and functions, how we process said data, and for what purposes. GEZE GmbH, Reinhold-Vöster-Str. 21-29 in 71229 Leonberg, Germany (hereinafter referred to as ‘we’) is responsible for the operations in which these websites are used to collect and utilise data.
2. In case of visits to GEZE websites
When you visit our websites, we automatically save certain pieces of data about your usage, such as the IP (Internet Protocol) address that was assigned to you by your internet service provider, and the date, duration and path of your visit. Information regarding the type of browser that you used to visit us is also collected and saved, along with information regarding the websites that you visited and the respective date and time. This is done anonymously.
We retain this information for a maximum period of four weeks for misuse detection and tracking purposes. If necessary, we use anonymous usage information to structure our website in a need-based manner, and to solve technical problems. Additional usage analysis operations pertaining to this data are only carried out as described in point 7. Furthermore, we delete or anonymise the usage data (including your IP address) after a period of four weeks; as soon as the said data is no longer necessary for the aforementioned purposes.
3. What are personal data?
“Personal data” refers to all particulars about the personal or material circumstances of a specific or identifiable person. For example: name, address, e-mail address, etc.
4. Collection and processing of personal data
Beyond the processing described in section 2, personal data will be saved only if you actively and voluntarily share it with us and provide explicit consent for it to be used, for example in the context of a registration, survey, newsletter, competition/contest, etc., or where you contact us in some other way, e.g. via e-mail or an online form. For example, if you register for the newsletter your personal profile will consist of information you provide voluntarily. To the extent that we obtain consent from the person in question for processing operations involving personal data, article 6 section 1 lit. a of the EU General Data Protection Regulation (GDPR) shall serve as the legal basis. The other legal bases of article 6 shall apply depending on the appropriation. Furthermore, we also store anonymised information regarding your usage behaviour in order to improve our services. Other evaluations are also carried out in an anonymised form (user and click behaviour).
5. Disclosure of personal data and earmarking
We shall use your personal data for the purpose of the technical administration of our website, for customer management, for our own surveys and for marketing, to the necessary extent. Our employees and external service providers/data processors which are entrusted with the processing of your data shall, of course, be bound by us to confidentiality, the currently-applicable EU – GDPR and the corresponding new Federal Data Protection Act (BDSG). We will not forward your data to third parties outside GEZE GmbH without your consent. However, this does not apply to situations involving point 8 (‘Transfer of data’), or situations in which personal data is transferred to state institutions and authorities on the basis of mandatory national legislation.
If you have already given your consent in advance, we shall also use the data to advertise our own products and services/data processors, and/or to conduct market and attitude research. We may also need to forward your data to certified external service providers in order to process orders, but only where this is permissible under the applicable provisions of data protection legislation. GEZE GmbH always obliges its service providers to comply with the applicable data protection regulations (currently EU – GDPR and BDSG). Your data will not be sold to third parties or marketed in any other way. You may withdraw your consent for the use of your personal data for purposes related to advertising or the improvement of our services and/or website at any time via e-mail, fax or by sending a letter to our head office in Leonberg. Your personal data will then immediately be rendered unusable.
6. Cookies
GEZE uses so-called “cookies” when you visit certain areas of our websites. These cookies enable us to customise our services to you. Cookies are small text files that a web server can send to your computer in order to identify it. Since they are stored on your hard drive, they make it possible to simplify navigation and ensure that the websites are more user-friendly.
We use such cookies in order to recognise the preferences of visitors, be able to design the web pages optimally, and identify particularly popular areas of our website. This makes it possible for us to tailor our website more specifically to the needs of users and improve our offer for you. We also use cookies to establish whether you have visited out web pages from your device in the past, whereby only the cookie stored on your device is identified.
Personal data can be saved in cookies if you have actively entered this. For example, this is the case in the event of a password protected online access, in which your user ID and the password are automatically retained. You can also use our websites without cookies or object to their use, or delete cookies that have already been set. This is done using your browser settings, in which you can refuse to accept cookies, or delete cookies. You can also completely deactivate the cookie function in your internet browser. Approval of cookies is not absolutely necessary in terms of the navigation and functionality of the website. Instructions for allowing, rejecting, viewing and deleting cookies can be found in your internet browser’s help function. Please note that, in this case, some functions of the website may no longer be available. If links lead you to third-party websites, you should be mindful of the fact that the data privacy statements of the third parties in question shall apply.
7. Google Analytics
We use Google Analytics, a web analysis service of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter referred to as “Google”) on the various websites of GEZE GmbH. Google Analytics uses so-called ‘cookies’ (as described in point 6), i.e. text files that are stored on your computer, and which make it possible to analyse your use of the website. The information about your use of this website which is generated by the cookie is usually transferred to a Google server in the USA, where it is stored. However, the so-called IP anonymisation facility has been activated on our website. This means that Google shall shorten your IP address beforehand, and this shall be done within member states of the European Union or other signatories to the treaty on the European Economic Area. Only in exceptional cases (servers not located in a European Union member state or outside of the contracting states to the convention or the European Economic Area) is the full IP address transmitted to a server in the USA and shortened there.On our instructions, Google shall use this information to analyse your use of the website, compile reports regarding website activities and provide us with other services associated with the use of the website and the internet. The IP address transmitted by your browser within the framework of Google Analytics operations shall not be combined with other Google data. By using GEZE websites, you are agreeing to the processing of the data collected about you by Google in the manner described above and for the aforementioned purpose.
If you do not want us to collect and analyse information about your visit, you can opt out at any time with future effect. You can stop cookies from being saved via your browser software settings; please note, however, that this may limit your use of all the functions of this website. Downloading the browser add-on for deactivating Google Analytics, which is available via the following link, prevents Google from collecting and processing the data (including your IP address) that is generated by the cookie and which relates to your use of our website: tools.google.com/dlpage/gaoptout. Please note that this browser add-on can be used only on one specific device. If you delete cookies or use another device or another browser, you will have to re-download and re-execute the browser add-on.
8. Hotjar
Hotjar
This website uses Hotjar. The provider is Hotjar Ltd., Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe (Website: https://www.hotjar.com).
Hotjar is used to analyze user behavior on a website where we record, among other things, your scroll movements, mouse movements, and clicks. Hotjar uses this information to create so-called “heat maps,” which can be used to determine which areas of the website are preferred by website visitors.
In addition, Hotjar can be used to determine at which point you cancelled your entries in a contact form (so-called Conversion-Funnels).
Hotjar uses cookies. This serves to make our services more user-friendly, effective and secure.
These cookies can be used in particular to determine whether our website has been visited with a specific device or whether the functions of Hotjar have been deactivated for the browser in question. Hotjar cookies remain on your device until you delete them. You can set your browser to inform you when cookies are set, and to allow cookies only in individual cases, to exclude the acceptance of cookies in certain cases or in general, and to activate the automatic deletion of cookies when the browser is closed. If you deactivate cookies, the performance of this website may be restricted. The use of Hotjar and the storage of Hotjar-Cookies is based on Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in the analysis of user behavior in order to optimize both its website and its advertising.
Data protection officer of the processing company
Below you will find the e-mail address of the data protection officer of the processing company. dpo@hotjar.com
Legal basis
The following is the required legal basis for the processing of data: Art. 6 para. 1 p. 1 lit. a DSGVO
Deactivating Hotjar
If you would like to disable Hotjar data collection, click on the link and follow the instructions there: www.hotjar.com/opt-out For more information about Hotjar and the data collected, please refer to Hotjars Privacy Policy
9. Transfer of data
Information that we collect and use with regard to your use of this website may also be processed by other companies, such as external service providers and/or other companies that are part of GEZE GmbH, however only to the extent necessary for the purposes specified in this data protection declaration, or to the extent that the other company is bound by its instructions as a service provider/data processor. If and when data is forwarded in such a manner, we shall use contractual agreements pertaining to the protection of your personal rights (which could, for example, arise as a result of contract clauses) to ensure that protection that is sufficient in terms of the legal data protection regulations is guaranteed.
10. Consents pertaining to receipt of advertisements
10.1 Subscription to newsletter and other mailings
You can use our websites to sign up for and subscribe to our monthly newsletter or other communications that are sent via e-mail. We collect your name and e-mail address and use the said data to e-mail you the newsletter or, as the case may be, the other communications that you have subscribed to. We use the so-called ‘double opt-in procedure’ to verify your willingness to receive our newsletter or other communications via e-mail. This means that we first send an e-mail to the e-mail address that you specified during the subscription procedure in order to request you to actively confirm your willingness to receive the newsletter or other communication; this is done before we start sending the respective items. The information regarding this confirmation is used to document and (if necessary) verify your consent. Your willingness to receive the newsletter or other communications and your consent for the associated utilisation of your personal data can be revoked for the future at any time.
11. Additional usage of personal data
11.1 For applicants to GEZE GmbH
GEZE GmbH uses personal data in a variety of ways. For example, the formulation of the contact form can vary and/or be presented for a specific purpose depending on the campaign. You alone shall decide upon the purpose for which you give us your consent. You can opt out of any and all services at any time.
You can send applications for open positions to us through our Careers page, either by e-mail or using our online application portal. We process the data you send to us along with your application to evaluate your suitability for the advertised positions (or any other open positions at GEZE) and carry out the application process. After your application is received, your applicant data is inspected in house by the HR department and our department managers. Within the company, only individuals who require access to your data to carry out the application process receive such access.
The legal basis for processing your personal data in an application process is Sec. 26 BDSG, in particular. According to this Section, data may be processed if necessary in conjunction with a decision regarding the initiation of an employment relationship. Any additional information provided voluntarily by you is saved on the basis of Art. 6 para. 1 lit. f) GDPR, since we have a legitimate interest in processing additional information provided voluntarily by you for the purpose of carrying out the application process.
1. The following are processed and saved to fill positions within the application process:
*First name
*Last name
*E-mail address
*The personal details that you have provided in the application documents and the subsequent process
2. So-called session cookies are saved to facilitate usage of the website (if the application is submitted online):
GEZE only uses “first party” cookies, which are required to ensure the function and security of the application and make user guidance easier for you. Personal data is neither recorded nor saved for this purpose. The cookies are deleted as soon as you log out or close the browser. You will not be able to use the application generator if you do not accept any cookies. In this event, you must submit you application via e-mail or post.
3. So-called *log files are created to avoid
duplicate applications:
GEZE stores internet protocol addresses (IP addresses) in the log files for a limited period where necessary for tracking purposes (to prevent double applications).
We compare personal data (name, date of birth, birthplace, nationality and voluntarily provided data) of those applicants we specifically intend to hire during the application process with names on sanctions lists, in particular the EU terror list according to the EU anti-terror ordinances. We do so first to prepare to conclude an employment agreement with those applicants, and secondly to fulfil a legal obligation (Art. 6 para. 1 lit. c) GDPR), since legal regulations prohibit providing financial benefits, including paying wages, to persons listed on such sanctions lists. Finally, this comparison with sanctions lists is also carried out on the basis of our legitimate interest in the sense of Art. 6 para. 1 lit. f) GDPR, namely to maintain our AEO certification.
If you agree that your personal data remain saved in our applicant pool after – unsuccessfully – completing the application process, the legal basis for the associated further processing is your consent in accordance with Art. 6 para. 1 lit. a) GDPR. You can revoke your consent any time with future effect in written form, without providing grounds. Please send such revocations to GEZE GmbH HR department; Reinhold-Vöster-Strasse 21- 29 in D-71229 Leonberg, or via e-mail to datenschutz@geze.com.
We regularly delete the personal data of applicants if they are rejected after four months, or after six months at the latest. Accordingly, a separate request is not necessary, we hereby confirm the deletion in accordance with legal provisions. If you have agreed to the further processing of your personal data in our applicant pool, data will be deleted once it is no longer required for the purposes for which it was collected and processed, typically after 2 years from the time you were included in the applicant pool. If you are selected for a position during the application process, your data is included in our personnel management system and processed there insofar as it is necessary to initiate and carry out the employment relationship.
Further details regarding the selection procedure or the reimbursement of travel cost can be found on our Careers page. The data used therein shall be used only in the context of the application procedure and/or the reimbursement of travel costs (at your request).
12. Supplementary data privacy statements
Certain offers appearing on our websites require a registration. The specified data is saved by us (until revocation) for the purpose of managing your registration. This does not apply to campaigns such as competitions, however, where point 9.3 applies. GEZE GmbH hereby undertakes not to transmit the saved data to third parties, except for in the cases described in point 10.2. Other users cannot view the e-mail address that you have provided. Where applicable, you can also use our websites to register with and log in to a password-protected domain (e.g. a retailer portal, Media Pool, etc.). Data collection and data usage in this regard are subject to specific data privacy statements or the respective portal, which are available in the specific login-protected domain in question.Additional usage instructions for the GEZE media pool can be found in the General Terms and Conditions of our online portal.
Your personal data is also retrieved if you sign up for one and/or more of our GEZE training programmes and seminars. In such a case, you must first use your data to register with us. Once again, other users will not be able to view your data. Your registration data allows you to sign up for our various seminars. Under such circumstances, your personal data shall only be used with regard to GEZE seminars and training programmes; it shall not be used for advertising. This means that the said data shall be used for your participation in the seminar/training programme, confirmations, reminders associated with certificate extensions etc. Your personal data can be de-registered at any time via post, telephone or e-mail.
The same conditions apply to GEZE customer portal and GEZE supplier portal. You are responsible for your login details, as well as for the contents uploaded by you (e.g. comments or images). We reserve the right to promptly block content that violates the prevailing law, as well as offensive content. GEZE GmbH may exclude users who violate the conditions of use from further participation and/or campaigns.
13. Safety
GEZE has implemented various organisational and technical security measures to protect all the managed data (including the information that you have stored with us) from manipulation, loss, destruction and access by unauthorised persons. Our security measures are always up-to-date, and we are continuously working on further technological developments in order to protect your data as well as possible.
14. Children
Children should not send us any personal data unless their parents or legal guardians have approved of such a course of action. We would therefore like to clearly emphasise that children’s online activities should always be supervised by their legal guardians. We do not request personal data from children.
15. Rights of data subjects
15.1 Rights of data subjects
As a data subject whose data we process, you have the following rights:
- The right to information according to Art. 15 GDPR
- The right to rectification according to Art. 16 GDPR
- The right to deletion (“right to be forgotten”) according to Art. 17 GDPR
- The right to restrict processing according to Art. 18 GDPR
- The right to transmit your data in a structured, commonly used and machine-readable format according to Art. 20 GDPR
- The right to submit complaints to a supervisory authority according to Art. 77 GDPR
15.2 Contact adress
Please address your claims or declarations to the following address:
GEZE GmbH
Reinhold-Vöster-Straße 21-29
71229 Leonberg
or via E-Mail to: datenschutz@geze.com
15.3 Complaints
If you believe the processing of your personal data by GEZE GmbH violates statutory provisions, we would greatly appreciate notification of this via e-mail to datenschutz@geze.com . In addition, you have the right to submit complaints to a responsible data privacy supervisory authority (Art. 77 GDPR).
16. Objection and revocation
16.1 Your right to object
If we process your personal data on the basis of our legitimate interest, you have the right to object to this processing. Furthermore, you have a right to object to any processing of data for the purpose of direct advertising. If you would like to exercise your right to object, a notification in text form is sufficient. You are also welcome to write to us, send a fax, or contact us by e-mail. Our contact information is provided under point 14.2 in these data privacy statements.
16.2 Your right to revocation
If we carry out processing of your personal data for certain purposes based on your consent, you have the right to revoke that consent at any time according to Art. 7 para. 3 GDPR. After receiving your revocation, we will cease data processing for the purposes for which you granted us the consent. The legality of processing carried out before your consent was received shall remain unaffected.
17. Amendments and updates to GEZE GmbH Data Privacy Statements
Further technological development of the website can also affect the handling of personal data. We therefore reserve the right to amend this GEZE GmbH Data Privacy Declaration in the context of the applicable data protection laws, and (if necessary) to adapt it to changed data processing realities. We therefore recommend you to visit our website from time to time, in order to familiarise yourself with any potential updates pertaining to this matter.
If GEZE GmbH launches new products or services or changes the respective internet procedure, or if the security technology pertaining to the internet and EDP evolves, these GEZE GmbH data privacy statements will be updated. We shall always publish the latest version at this location. This means, however, that any consent that you have previously granted will not automatically extend to potentially different purposes, and we will require you to give your explicit consent again.
You can use our data protection information form to request complete disclosure of data, including information about how GEZE saves and uses your data internally. Please note that we cannot process enquiries that are not accompanied by a copy of your proof of identity.
GEZE GmbH
Reinhold-Vöster-Str. 21-29
71229 Leonberg
Deutschland
Telefon: +49-7152-203-0
Telefax: +49-7152-2033-10
E-Mail: datenschutz@geze.com
Web: geze.com
