Data Protection

Gretsch-Unitas GmbH Baubeschläge takes the protection of its customers' and interested parties' personal data very seriously and complies with the rules of data protection laws. Your data remains with us and is only passed on to our service providers in justified cases. There is no sale to third parties. The following statement provides an overview in particular of how Gretsch-Unitas GmbH Baubeschläge ensures this protection and what type of data is collected for what purpose.

1. Personal Data

Personal data is any information that can be related to you personally, e.g. name, address, email addresses.

2. Controller

The controller pursuant to Art. 4 No. 7 EU General Data Protection Regulation (GDPR) is

Gretsch-Unitas GmbH Baubeschläge, Johann-Maus-Straße 3, 71254 Ditzingen

3. Data Protection Officer

Our external data protection officer is available to provide information on data protection at the following contact details:

datenschutz süd GmbH
Wörthstraße 15
97082 Würzburg

Web: www.datenschutz-sued.de
Email: datenschutz.de.gub@g-u.de

If you contact our data protection officer, please also state the responsible entity named in the Imprint.

4. Data Security

Gretsch-Unitas GmbH Baubeschläge takes all necessary technical and organizational security measures to protect personal data from loss and misuse. Data is stored in a secure operating environment that is not accessible to the public.

Confidential information is, where possible, transmitted in encrypted form via SSL certificate using the HTTPS protocol.

5. User Rights

The user has the following rights with regard to their personal data:

Right of access (Art. 15 GDPR)
You have the right to request confirmation as to whether personal data concerning you is being processed; if this is the case, you have the right to access this personal data and the information listed in detail in Art. 15 GDPR.
Right to rectification or erasure (Art. 16 and 17 GDPR)
You have the right to request the immediate rectification of inaccurate personal data concerning you and, if necessary, the completion of incomplete personal data.

You also have the right to request that personal data concerning you be deleted immediately if one of the reasons listed in Art. 17 GDPR applies, e.g. if the data is no longer required for the purposes pursued.

Right to restriction of processing (Art. 18 GDPR)
You have the right to request the restriction of processing if one of the conditions listed in Art. 18 GDPR applies, e.g. if you have objected to the processing, for the duration of any review.
Right to object to processing (Art. 21 GDPR)
If data is collected on the basis of Art. 6 para. 1 lit. f) (data processing for the purposes of legitimate interests), you have the right to object to the processing at any time for reasons arising from your particular situation. We will then no longer process the personal data unless there are demonstrably compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the establishment, exercise or defense of legal claims.

Right to data portability (Art. 20 GDPR)
In certain cases, as specified in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format or to request the transmission of this data to a third party.

The user also has the right to lodge a complaint with a data protection supervisory authority about the processing of their personal data by us. The complaint may be lodged in particular with a supervisory authority in the Member State of your place of residence, your place of work or the place of the alleged infringement.

If the user has given consent to the processing of their data, they may revoke this at any time. Users can inform us of their revocation at the following contact details: datenschutz.de.gub@g-u.de. Such revocation affects the permissibility of the processing of personal data after it has been declared to us. The lawfulness of the processing carried out on the basis of the consent until revocation remains unaffected.

If we base the processing of your personal data on the balancing of interests pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR, users may object to the processing in accordance with Art. 21 GDPR. This is the case if the processing is not necessary in particular for the performance of a contract with the users, which is explained by us in each case in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of a justified objection, we will examine the situation and either stop or adapt the data processing or demonstrate our compelling legitimate grounds on the basis of which we will continue the processing.
Of course, users may object to the processing of their personal data for advertising and data analysis purposes at any time. Users can inform us of their objection to advertising at the following contact details: datenschutz.de.gub@g-u.de

Right to lodge a complaint with a supervisory authority

You also have the right under Art. 77 GDPR to lodge a complaint with a data protection supervisory authority about the processing of your personal data by us. The complaint may be lodged in particular with a supervisory authority in the Member State of your place of residence or the place of the alleged infringement.

6. Communication by Email/Telephone/Contact Form

Personal information that you provide to us by email, telephone, post or contact form will of course be treated confidentially. We use your data exclusively for the purpose of processing your inquiry. The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f) GDPR. The legitimate interest arises from the interest in answering inquiries from our customers, business partners and interested parties and thus maintaining and promoting customer satisfaction.

We generally exclude the transfer of data to third parties outside Gretsch-Unitas GmbH Baubeschläge. Exceptionally, data is processed on our behalf by processors. These are carefully selected, audited by us and contractually obligated in accordance with Art. 28 GDPR.

Furthermore, it may be necessary for us to forward inquiries to other companies within the GU Group if this is required for their processing (e.g. response).

All personal information you provide to us in the context of inquiries will be deleted or securely anonymized by us no later than 90 days after the final response has been given to you. The retention period of 90 days is explained by the fact that it may occasionally happen that you contact us again regarding the same matter after a response and need to refer to the previous correspondence. Experience has shown that follow-up questions to our responses generally do not occur after 90 days.

7. Data processing of contact persons

Gretsch-Unitas GmbH Baubeschläge processes the contact details of contact persons at customers, interested parties, suppliers and other business partners for communication by email, telephone, fax and post. The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f) GDPR. The legitimate interest on the part of Gretsch-Unitas GmbH Baubeschläge arises from the interest in conducting or initiating the business relationship with customers, interested parties, suppliers and other business partners and maintaining personal contact with contact persons.

We generally exclude the transfer of data to third parties outside Gretsch-Unitas GmbH Baubeschläge. Within Gretsch-Unitas GmbH Baubeschläge, your data is only passed on, among other things, for the purpose of conducting or initiating the business relationship. Exceptionally, data is processed on our behalf by processors. These are carefully selected, audited by us and contractually obligated in accordance with Art. 28 GDPR.

Personal data is stored for the purpose of conducting business relationships as long as there is a legitimate interest.

8. Further Information

The user is aware that data protection for data transmissions on the Internet cannot yet be fully guaranteed according to the current state of the art. The user is therefore responsible for the security of the data they transmit to the Internet.

The trust of users is very important to Gretsch-Unitas GmbH Baubeschläge. Therefore, Gretsch-Unitas GmbH Baubeschläge is happy to answer any questions regarding the processing of personal data. If you have any questions that this data protection declaration could not answer or if you would like more detailed information on any point, you can contact the following email address at any time: datenschutz.de.gub@g-u.de.

9. Existence of automated decision-making

Automated decision-making or profiling does not take place.

10. No obligation to provide personal data

Unless otherwise stated in the previous chapters, the provision of personal data is not required by law or contract or necessary for the conclusion of a contract. You are not obliged to provide personal data if no other information has been given previously. Failure to provide your personal data may result in us not being able to answer your contact request, or participation in the application process or an event may not be possible.

11. Data protection declaration for our social media pages

Below we would like to inform you about the handling of your data in accordance with Art. 13 General Data Protection Regulation (GDPR).

Controller

We operate the following social media pages:

Gretsch-Unitas GmbH Baubeschläge

You can find the contact details in Chapter 2 of this data protection declaration.

In addition to us, there is also the operator of the social media platform itself. This operator is also a controller who carries out data processing over which we have only limited influence. Where we can exert influence and parameterize data processing, we work within the scope of our possibilities to ensure that the operator of the social media platform handles data in a manner that complies with data protection requirements. In many cases, however, we cannot influence the data processing by the operator of the social media platform and do not know exactly what data they process. The operator will inform you about this in their respective privacy policy.

12. Data Processing

12.1 Data processing by us

The data you enter on our social media pages, such as comments, videos, images, likes, public messages, etc., are published by the social media platform and are never used or processed by us for other purposes. We reserve the right to delete content if this is necessary. If applicable, we may share your content on our page if this is a function of the social media platform and communicate with you via the social media platform. The legal basis is Art. 6 para. 1 sentence 1 lit. f) GDPR. Data processing is carried out in the interest of our public relations and communication.

On our Instagram page, we use the Page Insights function. Page Insights are aggregated data that allow us to gain insight into how people interact with our Instagram page. Page Insights may be based on personal data collected in connection with a visit to or interaction with our Instagram page and its content. The legal basis is Art. 6 para. 1 sentence 1 lit. f) GDPR. Data processing is carried out in the interest of our public relations and communication.

If you wish to object to a specific data processing over which we have influence, please contact the contact details provided in Chapter 2 of this data protection declaration. We will then review your objection or forward it to the social media platform if necessary.

If you send us an inquiry via the social media platform, we may, depending on the required response, refer you to other, secure communication channels that guarantee confidentiality. You always have the option of sending us confidential inquiries to our address stated in the imprint.

As already explained, we ensure, where the provider of the social media platform gives us the opportunity, that our social media pages are designed to be as data protection-compliant as possible. We therefore do not use demographic, interest-based, behavioral or location-based target group definitions for advertising that may be provided to us by the operator of the social media platform. Overall, we do not use the social media platform for advertising purposes. With regard to statistics provided to us by the provider of the social media platform, we can only influence these to a limited extent and cannot deactivate them. However, we ensure that no additional optional statistics are made available to us.

12.2 Data processing by the operator of the social media platform

The operator of the social media platform uses web tracking methods. Web tracking can also take place regardless of whether you are logged in or registered with the social media platform. As already explained, we have little influence over the web tracking methods of the social media platform. We cannot, for example, deactivate this.

Please be aware: It cannot be ruled out that the provider of the social media platform uses your profile and behavioral data, for example to analyze your habits, personal relationships, preferences, etc. We have no influence on the processing of your data by the provider of the social media platform.

Further information on data processing by the provider of the social media platform and additional options for objection can be found in the provider's privacy policy: