Privacy Policy

The protection of your data is a top priority for Gatzsch Schweißtechnik GmbH. Our website can generally be used without providing personal data. However, if you wish to use specific services via our website, the processing of personal data may be required. In such cases, where there is no legal basis for the data processing, we will always seek your consent.

The processing of personal data, such as name, address, email address, or phone number, is carried out in accordance with the General Data Protection Regulation (GDPR) and applicable national data protection laws. This privacy policy informs you about the type, scope, and purpose of the personal data we collect, use, and process. It also explains your rights as a data subject.

As the organization responsible for data processing, we have implemented comprehensive technical and organizational measures to ensure the highest level of protection for your personal data. However, internet-based data transmissions may still have security gaps, and absolute protection cannot be guaranteed. Therefore, you are free to transmit personal data to us by other means if preferred.

Terms and Definitions

The privacy policy of Gatzsch Schweißtechnik GmbH is based on the terminology used by the European General Data Protection Regulation (GDPR), which has been in effect since May 25, 2018. To ensure that our privacy policy is clear and understandable, we would like to explain the most important terms in advance.

In this privacy policy, we use the following definitions:

a) Personal Data

Personal data refers to any information relating to an identified or identifiable natural person (the "data subject"). A person is considered identifiable if they can be identified, directly or indirectly, particularly by means of an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to their physical, physiological, genetic, mental, economic, cultural, or social identity.

b) Data Subject
The data subject is any identified or identifiable natural person whose personal data is processed by us.

c) Processing
Processing means any operation or set of operations performed on personal data, whether by automated means or not. This includes collecting, recording, organizing, structuring, storing, adapting, or altering, retrieving, consulting, using, disclosing by transmission, disseminating, or otherwise making available, aligning or combining, restricting, erasing, or destroying data.

d) Restriction of Processing
Restriction of processing refers to the marking of stored personal data with the aim of limiting their future processing. This may occur, for example, when data is not deleted but its processing is temporarily paused.

e) Profiling
As a responsible company, we do not engage in any form of automated decision-making or profiling. Profiling refers to any form of automated processing of personal data used to evaluate certain personal aspects relating to a natural person, particularly to analyze or predict aspects related to work performance, economic situation, health, personal preferences, interests, reliability, behavior, or location.

f) Pseudonymization
Pseudonymization is the processing of personal data in such a way that it can no longer be attributed to a specific data subject without the use of additional information. This additional information must be kept separately and is subject to technical and organizational measures to ensure that the personal data is not attributed to an identified or identifiable person.

g) Controller or Person Responsible for Processing
The controller or the person responsible for processing is the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of processing personal data. If the purposes and means of such processing are determined by Union or Member State law, the controller or the criteria for its nomination may be provided for by that law.

h) Processor
A processor is a natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller.

i) Recipient
A recipient is a natural or legal person, public authority, agency, or another body, to whom the personal data is disclosed, whether a third party or not. However, public authorities that may receive personal data in the course of a particular inquiry in accordance with Union or Member State law are not regarded as recipients.

j) Third Party
A third party is a natural or legal person, public authority, agency, or another body other than the data subject, the controller, the processor, or persons who, under the direct authority of the controller or processor, are authorized to process personal data.

k) Consent
Consent is any freely given, specific, informed, and unambiguous indication of the data subject's wishes by which they, by a statement or by a clear affirmative action, signify agreement to the processing of personal data relating to them.

 

Data Controller

The data controller for the purposes of the General Data Protection Regulation (GDPR), other data protection laws applicable in the Member States of the European Union, and other provisions related to data protection is:

Gatzsch Schweißtechnik GmbH

Due to our company size, we are not required to appoint a data protection officer.

Cookies

This website uses cookies. By using cookies, we can provide users of this website with more user-friendly services that would not be possible without cookies. By means of a cookie, the information and offers on our website can be optimized in terms of user-friendliness. Cookies enable us to recognize the users of our website. The purpose of this recognition is to make it easier for users to use our website.

The data subject can prevent the setting of cookies by our website at any time by means of a corresponding setting of the Internet browser used and thus permanently object to the setting of cookies. Furthermore, cookies that have already been set can be deleted at any time via an Internet browser or other software programs. This is possible in all common Internet browsers. If the data subject deactivates the setting of cookies in the Internet browser used, not all functions of our website may be fully usable.

Cookies are text files that are stored on a computer system via an Internet browser. Numerous websites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier for the cookie. It consists of a string of characters that can be used to assign websites and servers to the specific internet browser in which the cookie was stored. This enables the websites and servers visited to distinguish the individual browser of the data subject from other Internet browsers that contain other cookies. A specific Internet browser can be recognized and identified via the unique cookie ID. The user of a website that uses cookies, for example, does not have to re-enter the access data each time they visit the website because this is taken over by the website and the cookie stored on the user's computer system. Another example is the cookie for a shopping basket in an online store. The online store remembers the items that a customer has placed in the virtual shopping cart via a cookie.

Collection of General Data and Information

Every time a data subject or an automated system visits our website, a series of general data and information is collected, which is stored in the server log files. This data includes:

  • Browser types and versions used,
  • The operating system used by the accessing system,
  • The website from which an accessing system reaches our website (the referrer),
  • The sub-pages accessed via the accessing system,
  • Date and time of access,
  • The Internet Protocol address (IP address),
  • The Internet Service Provider of the accessing system, and
  • Other similar data and information that serve to protect against attacks on our IT systems.

Gatzsch Schweißtechnik GmbH does not draw any conclusions about the data subject from this general data and information. Instead, this data is needed to:

  • Provide the content of our website correctly,
  • Optimize our website and its advertising,
  • Ensure the long-term functionality of our IT systems and the website, and
  • Provide law enforcement authorities with the necessary information for prosecution in the event of a cyberattack.

This anonymously collected data is used both for statistical analysis and to enhance data protection and security in our company. It helps ensure a high level of protection for the personal data we process. Anonymous server log files are stored separately from all personal data provided by the data subject and are only used for statistical purposes. There is no transfer of this data to third parties.

Contact via the Website

The website of the Gatzsch Schweißtechnik GmbH contains information that enables a quick electronic contact to our enterprise, as well as direct communication with us, which also includes a general address of the electronic mail (e-mail address). This also includes a general address for electronic mail (e-mail address). If a data subject contacts the person responsible for data processing by e-mail or via a contact form, the personal data transmitted will be stored automatically.

This personal data transmitted on a voluntary basis by the data subject is stored exclusively for the purpose of processing the inquiry or contacting the data subject. At the request of the data subject, this data will be deleted after the correspondence has been concluded. This personal data is not passed on to third parties outside our Group. Likewise, the data collected in this way is not compared with data that may be collected by other components of our website.

Routine Deletion

The controller shall process and store the personal data of the data subject only for the period necessary to achieve the purpose of storage, or as long as this is required by the European directives and regulations or other legal provisions to which the controller is subject.

As soon as the purpose of storage ceases to apply or a storage period stipulated by the European directives and regulations or other relevant legislation expires, the personal data is routinely blocked or deleted in accordance with the statutory provisions.

Rights of the data subject

a) Right to Confirmation

Every data subject has the right, under European regulations and directives, to request confirmation from the data controller as to whether their personal data is being processed. If a data subject wishes to exercise this right of confirmation, they may contact Gatzsch Schweißtechnik GmbH at any time.

b) Right of Access

Every individual whose personal data is being processed has the right, under European regulations and directives, to request access to their stored personal data from the data controller free of charge at any time and to obtain a copy of this information. Furthermore, the data subject has the right to the following information:

  • The purposes of processing,
  • The categories of personal data being processed,
  • The recipients or categories of recipients to whom the personal data has been or will be disclosed, especially in the case of recipients in third countries or international organizations,
  • If possible, the planned duration for which the personal data will be stored, or, if not possible, the criteria used to determine that duration,
  • The existence of a right to rectification or deletion of personal data, to restrict the processing by the data controller, or to object to such processing,
  • The existence of a right to lodge a complaint with a supervisory authority,
  • If the personal data was not collected from the data subject, all available information about the source of the data,
  • The existence of automated decision-making, including profiling, according to Article 22 paragraphs 1 and 4 of the GDPR, and, at least in such cases, meaningful information about the logic involved, as well as the significance and expected consequences of such processing for the data subject.

In addition, the data subject has the right to be informed if personal data has been transferred to a third country or an international organization. Where this is the case, the data subject has the right to be informed of the appropriate safeguards relating to the transfer.
If a data subject wishes to exercise this right of access, they may contact Gatzsch Schweißtechnik GmbH at any time.

c) Right to Rectification

Every data subject whose personal data is processed has the right, under European regulations and directives, to request the rectification of inaccurate personal data without undue delay.

Furthermore, the data subject has the right, taking into account the purposes of the processing, to request the completion of incomplete personal data, including by means of a supplementary statement. If a data subject wishes to exercise this right of rectification, they may contact Gatzsch Schweißtechnik GmbH at any time.

d) Right to Erasure ("Right to be Forgotten")

Every data subject whose personal data is processed has the right, under European regulations and directives, to request the erasure of personal data concerning them without undue delay, provided that one of the following reasons applies and the processing is not necessary:

  • The personal data is no longer necessary for the purposes for which it was collected or otherwise processed,
  • The data subject withdraws their consent on which the processing is based according to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR, and there is no other legal basis for the processing,
  • The data subject objects to the processing pursuant to Article 21(1) GDPR, and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) GDPR,
  • The personal data has been unlawfully processed,
  • The personal data must be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject,
  • The personal data has been collected in relation to the offer of information society services referred to in Article 8(1) GDPR.

If one of the aforementioned reasons applies, and a data subject requests the erasure of personal data stored by Gatzsch Schweißtechnik GmbH, they may contact us at any time. We will ensure that the request for erasure is acted upon without delay.

If Gatzsch Schweißtechnik GmbH has made the personal data public and is obliged to erase the data pursuant to Article 17(1) GDPR, Gatzsch Schweißtechnik GmbH, taking into account available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform other controllers processing the personal data that the data subject has requested the erasure of all links to, copies, or replication of the personal data, insofar as processing is not required. Gatzsch Schweißtechnik GmbH will arrange the necessary measures in individual cases.

e) Right to Restriction of Processing

Every data subject whose personal data is processed has the right, under European regulations and directives, to request the restriction of processing by the data controller if one of the following conditions applies:

  • The accuracy of the personal data is contested by the data subject for a period enabling the controller to verify the accuracy of the personal data,
  • The processing is unlawful, and the data subject opposes the erasure of the personal data and requests the restriction of its use instead,
  • The controller no longer needs the personal data for the purposes of the processing, but the data subject requires it for the establishment, exercise, or defense of legal claims,
  • The data subject has objected to processing pursuant to Article 21(1) GDPR, pending the verification whether the legitimate grounds of the controller override those of the data subject.

If one of the aforementioned conditions is met, and a data subject requests the restriction of processing of personal data stored by Gatzsch Schweißtechnik GmbH, they may contact us at any time. Gatzsch Schweißtechnik GmbH will ensure that the restriction of processing is implemented.

f) Right to Data Portability

Every data subject whose personal data is processed has the right, under European regulations and directives, to receive the personal data concerning them, which they have provided to a controller, in a structured, commonly used, and machine-readable format. They also have the right to transmit this data to another controller without hindrance from the original controller to whom the personal data was provided, as long as the processing is based on consent pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR or on a contract pursuant to Article 6(1)(b) GDPR, and the processing is carried out by automated means. This right applies as long as the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

In addition, the data subject has the right, pursuant to Article 20(1) GDPR, to have the personal data transmitted directly from one controller to another, where technically feasible and without adversely affecting the rights and freedoms of others.

To exercise the right to data portability, the data subject may contact Gatzsch Schweißtechnik GmbH at any time.

g) Right to Object

Every data subject whose personal data is processed has the right, under European regulations and directives, to object, on grounds relating to their particular situation, at any time, to the processing of personal data concerning them based on Article 6(1)(e) or (f) GDPR. This also applies to profiling based on these provisions.

Gatzsch Schweißtechnik GmbH shall no longer process the personal data in the event of an objection unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject or for the establishment, exercise, or defense of legal claims.

If Gatzsch Schweißtechnik GmbH processes personal data for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning them for such marketing, which includes profiling to the extent that it is related to such direct marketing. If the data subject objects to Gatzsch Schweißtechnik GmbH's processing for direct marketing purposes, we will cease processing the personal data for these purposes.

In addition, the data subject has the right to object, on grounds relating to their particular situation, to the processing of personal data concerning them for scientific or historical research purposes or for statistical purposes pursuant to Article 89(1) GDPR unless the processing is necessary for the performance of a task carried out for reasons of public interest.

To exercise the right to object, the data subject may contact Gatzsch Schweißtechnik GmbH at any time. Furthermore, in the context of the use of information society services, and notwithstanding Directive 2002/58/EC, the data subject is free to exercise their right to object by automated means using technical specifications.

h) Automated Decisions in Individual Cases, Including Profiling

Every data subject whose personal data is processed has the right, under European regulations and directives, not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them, unless the decision:

  • Is necessary for entering into, or the performance of, a contract between the data subject and a data controller, or
  • Is authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, or
  • Is based on the data subject's explicit consent.

If the decision:

  • Is necessary for entering into, or the performance of, a contract between the data subject and a data controller, or
  • Is based on the data subject's explicit consent,
    Gatzsch Schweißtechnik GmbH shall implement suitable measures to safeguard the data subject's rights and freedoms and legitimate interests, including at least the right to obtain human intervention on the part of the controller, to express their point of view, and to contest the decision.

If a data subject wishes to exercise rights concerning automated decision-making, they may contact Gatzsch Schweißtechnik GmbH at any time.

i) Right to Withdraw Data Protection Consent

Every data subject whose personal data is processed has the right, under European regulations and directives, to withdraw consent to the processing of their personal data at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

If the data subject wishes to exercise their right to withdraw consent, they may contact Gatzsch Schweißtechnik GmbH at any time.

Use of Google Analytics

(with anonymization function)

Gatzsch Schweißtechnik GmbH has integrated the Google Analytics component (with anonymization function) on this website. Google Analytics is a web analytics service that collects, gathers, and analyzes data about the behavior of visitors on the website. This includes information such as which website visitors came from (so-called referrers), which subpages were accessed, how often they were visited, and how long users stayed on individual pages. The primary purpose of this web analysis is to optimize the website and assess the effectiveness of online advertising.

Google Analytics is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043-1351, USA.

For the analysis through Google Analytics, this website uses the "_gat._anonymizeIp" add-on. This means that the IP address of the data subject is anonymized by Google if access occurs from a member state of the European Union or from another state party to the Agreement on the European Economic Area.

The purpose of the Google Analytics component on the Gatzsch Schweißtechnik GmbH website is to analyze visitor traffic. Google uses the collected data and information, among other things, to evaluate the use of our website, to compile reports on activities on the website for us, and to provide other services related to the use of the website.

For this purpose, Google Analytics places a cookie on the data subject's information technology system. As mentioned earlier, cookies are small files that allow certain information about user behavior to be stored. By setting the cookie, Google is enabled to analyze the usage of our website. Each time a page on our website that includes a Google Analytics component is accessed, the data subject’s browser automatically transmits data to Google for the purpose of online analysis. In this process, Google gains knowledge of personal data, such as the IP address of the data subject, which helps Google trace the origin of visitors and their click behavior, potentially allowing for commission settlements.

The cookie stores personal information such as the time of access, the location from which access occurred, and the frequency of visits to our website. This personal data, including the IP address of the data subject, is transmitted to Google in the United States and stored there each time the website is visited. Google may also share this data collected via the technical process with third parties.

The data subject may, at any time, prevent the setting of cookies by our website by adjusting the settings in their browser as described above, thereby permanently objecting to the setting of cookies. Such an adjustment would also prevent Google from setting a cookie on the data subject's information technology system. Cookies already set by Google Analytics may also be deleted at any time via the internet browser or other software programs.

Furthermore, the data subject may object to and prevent the collection of data generated by Google Analytics relating to their use of this website, as well as the processing of this data by Google. To do so, the data subject can download and install a browser add-on available at the following link: tools.google.com/dlpage/gaoptout. This add-on informs Google Analytics via JavaScript that no data and information about website visits may be transmitted to Google Analytics. The installation of this browser add-on is considered an objection to data collection.

If the data subject’s information technology system is later deleted, formatted, or reinstalled, the browser add-on must be reinstalled to deactivate Google Analytics again. If the browser add-on is uninstalled or disabled by the data subject or another person, it is possible to reinstall or reactivate the add-on at any time.

Further information and Google's applicable privacy policy can be found at www.google.de/intl/de/policies/privacy/ and www.google.com/analytics/terms/de.html. Google Analytics is further explained at www.google.com/intl/de_de/analytics/.

Embedding of YouTube Videos

(1) We have embedded YouTube videos into our online offering, which are stored on http://www.YouTube.com and can be played directly from our website. [All these videos are embedded in "enhanced privacy mode," meaning that no data about you as a user is transmitted to YouTube unless you play the videos. Only when you play the videos will the data mentioned in paragraph 2 be transmitted. We have no influence over this data transmission.]

(2) By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. Additionally, the data referred to under §3 of this declaration is transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether there is no user account. If you are logged in to Google, your data will be directly associated with your account. If you do not want this association with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research, and/or demand-driven design of its website. Such evaluation is carried out (even for users who are not logged in) to provide targeted advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and to exercise this right, you must contact YouTube directly.

(3) Further information on the purpose and scope of data collection and processing by YouTube can be found in the privacy policy. There, you will also find more information about your rights and settings to protect your privacy: www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

Legal Basis for Processing

Article 6(1)(a) GDPR serves as the legal basis for processing operations at Gatzsch Schweißtechnik GmbH, where we obtain the consent of the data subject for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is a party — for example, processing necessary for the supply of goods or the provision of services — the processing is based on Article 6(1)(b) GDPR. This also applies to processing operations that are required to carry out pre-contractual measures, such as inquiries regarding our products or services.

If our company is subject to a legal obligation that requires the processing of personal data, such as for compliance with tax obligations, the processing is based on Article 6(1)(c) GDPR.

In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or another natural person. This could occur, for example, if a visitor in our company is injured and personal information such as their name, age, or health insurance data must be passed on to a doctor or hospital. In this case, the processing would be based on Article 6(1)(d) GDPR.

Processing operations may also be based on Article 6(1)(f) GDPR if the processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests, fundamental rights, and freedoms of the data subject. Such processing operations are permitted because they have been specifically recognized as legitimate by the European legislator, particularly when the data subject is a customer of the controller (Recital 47 Sentence 2 GDPR).

Verarbeitungsvorgänge können auch auf Art. 6 Abs. 1 lit. f DSGVO gestützt werden, wenn sie zur Wahrung eines berechtigten Interesses unseres Unternehmens oder eines Dritten erforderlich sind, sofern die Interessen, Grundrechte und Grundfreiheiten der betroffenen Person nicht überwiegen. Solche Vorgänge sind zulässig, weil der Europäische Gesetzgeber ein berechtigtes Interesse anerkannt hat, insbesondere wenn die betroffene Person ein Kunde des Verantwortlichen ist (Erwägungsgrund 47 Satz 2 DSGVO).

Miscellaneous

If the processing of personal data is based on Article 6(1)(f) GDPR, our legitimate interest lies in conducting our business activities in the best interests of the well-being of all our employees and shareholders.

The criterion for the duration of storage of personal data is the respective legal retention period. After this period expires, the corresponding data is routinely deleted, provided that it is no longer required for the fulfillment of a contract or the initiation of a new contract.

We would like to inform you that the provision of personal data is partially required by law (e.g., tax regulations) or may result from contractual agreements (e.g., details of a contract partner). In certain cases, it may be necessary for the data subject to provide personal data for the conclusion of a contract, which we would subsequently need to process. For example, if a contract is concluded between our company and the data subject, the data subject is obliged to provide the necessary personal data. Failure to provide this data may result in the contract not being concluded.

Before providing personal data, the data subject should contact Gatzsch Schweißtechnik GmbH. In such cases, we will clarify whether the provision of personal data is legally or contractually required, whether it is necessary for the conclusion of the contract, whether there is an obligation to provide the data, and what the consequences of not providing the data would be.