Data privacy statement

Data Privacy Statement

In the following we inform you about the processing of your personal data in the context of the use of our online offer.

1. Responsible for this information and contact information

Responsible:
GEFRO GmbH & Co. KG
Rudolf-Diesel-Strasse 21
D-87700 Memmingen/Allgäu
Mail: info@gefro.de
Phone: 08331/95950

Contact person:
If you have any questions regarding data protection, please contact us:
GEFRO GmbH & Co. KG
Rudolf-Diesel-Strasse 21
87700 Memmingen
Phone: 08331/95950
fax: 08331/9595-17
Mail: datenschutz@gefro.de

Data protection officer
Lawyer Johannes Meibers, LL.M.
meibers.data protection GmbH
House Sentmaring 9
48151 Münster
Mail: datenschutz@gefro.de

2. Storage period

(1) We delete your personal data when it is no longer necessary for the purposes for which it was collected or otherwise processed.
(2) If you revoke your consent and there is no other legal basis for its processing, we will delete your personal data.
(3) We shall delete your personal data if you object to its processing and there are no legitimate overriding reasons for processing, or if you object to processing for the purposes of direct marketing or related profiling.
(4) If deletion is not possible because processing is still necessary for the fulfilment of a legal obligation (legal retention periods, etc.) to which we are subject, or for the assertion, exercise or defence of legal claims, we shall restrict the processing of your personal data.
(5) Further information on the storage period can also be found in the following passages.


3. Your rights

(1) You have the following rights in relation to your personal data:
- Right to information,
- Right of rectification,
- Right of cancellation,
- Right to restrict processing,
- Right to object to the processing,
- Right to data portability.

You have the right to object at any time, for reasons arising from your particular situation, to the processing of your personal data pursuant to Article 6(1)(e) or (f) of the General Data Protection Regulation, including profiling based on these provisions. We will then no longer process your personal data unless we can demonstrate compelling reasons for processing that are worthy of protection and outweigh your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend legal claims.

If we process your personal data for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for the purpose of such marketing, including profiling, insofar as it is connected with such direct marketing. We will then no longer process your personal data for these purposes.

(2) You have the right to revoke your consent to the processing of your personal data at any time if you have given us such consent. Revocation of consent shall not affect the lawfulness of the processing carried out on the basis of the consent until revocation.
(3) You have the right to complain to a supervisory authority about the processing of your personal data by us.

4.Provision of your personal data

(1) The provision of your personal data is generally neither legally nor contractually required and is not necessary for the conclusion of a contract. You are generally not obliged to provide your personal data. However, if this should ever be the case, we will point this out separately when collecting your personal data (for example by marking the mandatory fields on input forms).
(2) The non-supply of your personal data regularly results in the fact that we do not process your personal data for one of the purposes described below and that you cannot take advantage of an offer related to the respective processing (example: without providing your e-mail address you will not receive our newsletter).

5. Web server log files

(1) We process your personal data in order to be able to display our online offer and to ensure the stability and security of our online offer. In the process, information (e.g. element requested, URL called up, operating system, date and time of the request, browser type and the version used, IP address, protocol used, amount of data transferred, user agent, referrer URL, time zone difference to Greenwich Mean Time (GMT) and/or HTTP status code) is stored in so-called log files (access log, error log etc.).
(2) If we have asked you for your consent and you have given it, the legal basis for processing is Art. 6 Paragraph 1 lit. a of the General Data Protection Regulation. If we have not asked you for your consent, the legal basis for processing is Art. 6 Paragraph 1 lit. f of the General Data Protection Regulation. Our legitimate interest is the proper display of our online offer and the guarantee of the stability and security of our online offer.

6. Security

For security reasons and to protect the transmission of your personal data and other confidential content, we use encryption on our domain. You can recognize this by the character string "https://" and the lock symbol in the browser line.

7. Contacting us

(1) If you contact us, we will process your personal data in order to process your contact.
(2) If we have asked you for your consent and you have given it, the legal basis for processing is Art. 6 para. 1 letter a of the General Data Protection Regulation. If we have not asked you for your consent, the legal basis for processing is Art. 6 Paragraph 1 lit. f of the General Data Protection Regulation. Our legitimate interest is the processing of your contact details. If the processing is necessary for the fulfilment of a contract with you or for the implementation of pre-contractual measures on the basis of your request, the legal basis for the processing is also Art. 6 Para. 1 lit. b of the General Data Protection Regulation.
(3) We use external services to provide and maintain our email inboxes. These services may have access to personal data that is processed in the course of contacting us.

8. Cookies and similar technologies

(1) We use cookies. A cookie is a piece of text information that is stored on your end device. A distinction is made between session cookies, which are deleted immediately after closing your browser, and permanent cookies, which are only deleted after a certain time.
(2) In addition to cookies, similar technologies (tracking pixels, web beacons, etc.) may also be used. The following explanations on cookies also apply to similar technologies. These statements also apply to further processing in connection with cookies and similar technologies (analysis & marketing etc.). This also applies in particular to any consent you may have given for the use of cookies. This also extends to other technologies and to further processing in connection with cookies and similar technologies.
(3) Cookies can serve to enable the use of certain functions. Cookies can also be used to measure the range of our online offer, to design it according to needs and interests and thus to optimise our online offer and our marketing. Cookies can be used by us and by external services.
(4) We use a consent tool to manage the cookies used and the associated consents. Details of the cookies used (purpose, storage duration, where applicable external services used) can be found in the following passages and the consent tool used by us.
(5) If we have asked you for your consent and you have given it, the legal basis for processing is Art. 6 Paragraph 1 lit. a of the General Data Protection Regulation. If we have not asked you for your consent, the legal basis for processing is Art. 6 (1) lit. f of the General Data Protection Regulation. Our legitimate interest is the management of the cookies used and the relevant consents. Depending on the purpose of the processing, our legitimate interests can be seen from the following passages.
(6) You can prevent the storage of cookies by setting your browser accordingly. In the following list, we provide you with links for typical browsers, where you can find further information on the administration of cookie settings:
•    Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
•    Chrome: https://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
•    Internet Explorer / Edge: https://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
•    Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
•    Opera: https://help.opera.com/de/latest/web-preferences/#cookies
•    Yandex: https://browser.yandex.com/help/personal-data-protection/cookies.html
(7) For further appeal possibilities, please consult the following links: https://www.youronlinechoices.eu/, https://youradchoices.ca/en/tools, https://optout.aboutads.info and https://optout.networkadvertising.org/?c=1.
(8) If you prevent cookies from being saved, this may impair the proper functioning of our online service. If you delete all cookies, the above-mentioned settings will also be lost and must be made again.
(9) Furthermore, you can activate the "Do-Not-Track" function of your browser to signal that you do not wish to be tracked. In the following list, we provide you with links for typical browsers, where you can find further information on the "Do-Not-Track" setting:
•    Firefox: https://support.mozilla.org/de/kb/wie-verhindere-ich-dass-websites-mich-verfolgen
•    Chrome: https://support.google.com/chrome/answer/2790761?co=GENIE.Platform%3DDesktop&hl=de
•    Internet Explorer / Edge: https://support.microsoft.com/de-de/help/17288/windows-internet-explorer-11-use-do-not-track
•    Opera: https://help.opera.com/en/presto/be-safe-and-private/
•    Safari no longer supports the "Do-Not-Track"  feature since February 2019. You can prevent cross-site tracking in Safari by following this link: https://support.apple.com/de-de/guide/safari/sfri40732/12.0/mac
•    Yandex: https://browser.yandex.com/help/personal-data-protection/do-not-follow.html

(10)  You can revoke or amend your given consent in the consent tool used by us.

9. Shop

(1) If you place an order, we process your personal data in order to process and handle your order and to comply with the rights and obligations associated with it.
(2) If you create a customer account, we process your personal data to provide the customer account and its associated functions (forgotten password function, etc.), to enhance your shopping experience and to facilitate the ordering process for future orders.
(3) If we have asked you for your consent and you have given it, the legal basis for processing is Art. 6 para. 1 lit. a of the General Data Protection Regulation. If we have not asked you for your consent, the legal basis for processing is Art. 6 Paragraph 1 lit. f of the General Data Protection Regulation. Our legitimate interest is the processing and handling of your order. If the processing is necessary for the fulfilment of a contract with you or for the implementation of pre-contractual measures on the basis of your request, the legal basis for the processing is also Art. 6 Para. 1 lit. b of the General Data Protection Regulation.
(4) Recipients of your personal data may be third parties (fulfillment providers, IT services providers, shipping or transport service providers, banks, tax consultants, lawyers, authorities, etc.), insofar as this is necessary for the processing and handling of your order and the rights and obligations associated with it.
(5) We use external services to process payments. We transmit your personal data to these services as far as this is necessary for the processing of payments. Further information on the services used, the scope of data processing and the technologies and procedures when using the respective services can be found in the additional information on the services used by us at the end of this passage and under the links provided there.

Mastercard
Provider: Mastercard Europe SA, Belgium.
Website: https://www.mastercard.de
Further information & privacy: https://www.mastercard.de/de-de/datenschutz.html  
 
PAYONE
Provider: PAYONE GmbH, Germany.
Website: https://www.payone.com/
Further information & data protection: https://www.payone.com/datenschutz/, https://www.payone.com/dsgvo/ and https://www.payone.com/dsgvo-haendler/

PayPal
Provider: PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg.
Website: https://www.paypal.com
Further information & data protection:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE

Visa
Provider: Visa Inc., United States of America.
Website: https://www.visa.de
Further Information & Privacy: https://www.visa.de/nutzungsbedingungen/visa-privacy-center.html

10. Credit assessment

(1) If we make advance payments (e.g. when purchasing on account), we reserve the right to process your personal data in order to carry out a credit check and thus assess the risk of non-payment. The credit assessment is based on mathematical-statistical methods, also - but not exclusively - using address data, and may contain probability values about a certain future behaviour of your person (scoring).
(2) We use the result of the credit assessment with regard to the risk of non-payment to make a decision on the establishment, execution or termination of a contractual relationship with you.
(3) We also carry out credit checks to decide whether certain payment options (e.g. purchase on account) are offered to you in the ordering process.
(4) If we have asked you for your consent and you have given it, the legal basis for processing is Art. 6 (1) lit. a of the General Data Protection Regulation. If we have not asked you for your consent, the legal basis for processing is Art. 6 (1) lit. f of the General Data Protection Regulation. Our legitimate interest in this is to avoid the risk of non-payment. If the processing is necessary for the performance of a contract with you or for the implementation of pre-contractual measures on the basis of your request, the legal basis for the processing is also Art. 6 (1) lit. b General Data Protection Regulation.
(5) We use external services to carry out credit checks. Further information on the services used, the scope of data processing and the technologies and procedures for using the respective services can be found in the additional information on the services we use at the end of this passage and under the links provided there.

infoscore Consumer Data GmbH
Provider: infoscore Consumer Data GmbH, Germany.
Website: https://www.eperian.de/
Further information & data protection: https://www.experian.de/selbstauskunft/selbstauskunft-faqs

11. Newsletter

(1) If we have asked you for your consent and you have given it, we will process your e-mail address in order to carry out e-mail marketing and, if necessary, other personal data in order to address you personally. The legal basis for the processing is Art. 6 para. 1 lit. a of the General Data Protection Regulation. The contents of email marketing will be specifically described when your consent is obtained. Furthermore, email marketing contains information about us, our goods and services.
(2) We use the so-called double opt-in procedure to prevent possible misuse of your personal data. For this purpose, after collecting your email address, we will send you an email to the email address you have given us in which we ask you to confirm that you actually wish to use email marketing. The legal basis for the processing is Art. 6 para. 1 lit. f of the General Data Protection Regulation. Our legitimate interest is the legally compliant execution of email marketing.
(3) We will record the time of granting your consent and the time of your confirmation as well as your IP address and the content of your declaration of consent in order to be able to prove that your consent has been obtained in a legally compliant manner. The legal basis for the processing is Art. 6 para. 1 lit. f of the General Data Protection Regulation. Our legitimate interest is the legally compliant execution of email marketing.
(4) We use external services for email marketing. Further information on the services used, the scope of data processing and the technologies and procedures when using the respective services, as well as on whether profiling takes place when using the respective services and, if applicable, information on the logic involved and the scope and intended effects of such processing for you, can be found in the further information on the services used by us at the end of this passage and under the links provided there.
(5) You can revoke your consent at any time. Revocation of your consent shall not affect the lawfulness of the processing that has taken place on the basis of your consent until revocation. To revoke your consent, you can use the link provided for this purpose in the emails or contact us using the contact details given above.
(6) If you have revoked your consent, we reserve the right to process your personal data in a so-called blacklist/blocking list in order to be able to ensure in future that no further email marketing is carried out in connection with this personal data. The legal basis for the processing is Art. 6 para. 1 lit. f of the General Data Protection Regulation. Our legitimate interest is to avoid unwanted email marketing.
(7) We process your personal data within the framework of tracking or success measurements in order to measure the reach of our email marketing, to design it in line with your needs and interests and thus to optimise our email marketing. This may also involve profiling (for advertising purposes, personalised information, personalised prices for your favourite products or for products that you have not yet bought, etc.). Profiling can also take place across services and devices. For personalised pricing, we use automated decisions to determine if you receive discounts for certain products. If we have asked you for your consent and you have given it, the legal basis for processing is Art. 6 Paragraph 1 letter a of the General Data Protection Regulation. If we have not asked you for your consent, the legal basis for processing is Art. 6 (1) lit. f of the General Data Protection Regulation. Our legitimate interest is the optimisation of our email marketing. A separate revocation of your consent or objection with regard to tracking or success measurements is unfortunately not possible. You must use the above options to revoke your consent or object to the processing of your personal data for the purpose of email marketing as a whole. With regard to the automated decision, you have the right to human intervention on the part of the responsible party, to express your point of view and to challenge the decision.

Emarsys
Provider: Emarsys eMarketing Systems GmbH, Austria.
Website: https://emarsys.com
Further information & data protection: https://help.emarsys.com/hc/de/articles/360005211473-DSGVO-und-Datenschutz-%C3%9Cberblick- and https://emarsys.com/de/datenschutzrichtlinie/

12. Existing customer marketing - advertising by email

(1) If we have received your email address in connection with the sale of a product or service and you have not objected to this, we will process your email address in order to carry out email marketing for our own similar products or services and, if necessary, other personal data in order to address you personally in this connection. The legal basis for the processing is Art. 6 para. 1 lit. f of the General Data Protection Regulation. Our legitimate interest is direct advertising.
(2) We use external services for email marketing. Further information on the services used, the scope of data processing and the technologies and procedures when using the respective services, as well as on whether profiling takes place when using the respective services, and, if applicable, information on the logic involved and the scope and intended effects of such processing for you, can be found in the further information on the services used by us at the end of this passage and under the links provided there.
(3) You have the right to object at any time to the processing of your personal data for the purpose of email marketing, without incurring any costs other than the transmission costs according to the basic tariffs. We will then no longer process your personal data for email marketing purposes. To object to the processing of your personal data for the purpose of email marketing, you can use the link provided for this purpose in the emails or contact us at the contact details given above.
(4) If you have objected to the processing of your personal data for the purpose of email marketing, we reserve the right to process your personal data in a so-called blacklist/blocking list in order to be able to ensure in future that no further email marketing is carried out in connection with this personal data. The legal basis for the processing is Art. 6 para. 1 lit. f of the General Data Protection Regulation. Our legitimate interest is to avoid unwanted email marketing.
(5) We process your personal data within the framework of tracking or success measurements in order to measure the reach of our email marketing, to design it in line with your needs and interests and thus to optimise our email marketing. This may also involve profiling (for advertising purposes, personalised information, personalised prices for your favourite products or for products that you have not yet bought, etc.). Profiling can also take place across services and devices. For personalised pricing, we use automated decisions to determine if you receive discounts for certain products. If we have asked you for your consent and you have given it, the legal basis for processing is Art. 6 Paragraph 1 letter a of the General Data Protection Regulation. If we have not asked you for your consent, the legal basis for processing is Art. 6 (1) lit. f of the General Data Protection Regulation. Our legitimate interest is the optimisation of our email marketing. A separate revocation of your consent or objection with regard to tracking or success measurements is unfortunately not possible. You must use the above options to revoke your consent or object to the processing of your personal data for the purpose of email marketing as a whole. With regard to the automated decision, you have the right to human intervention on the part of the responsible party, to express your point of view and to challenge the decision.

Emarsys
Provider: Emarsys eMarketing Systems GmbH, Austria.
Website: https://emarsys.com
Further information & data protection: https://help.emarsys.com/hc/de/articles/360005211473-DSGVO-und-Datenschutz-%C3%9Cberblick- and https://emarsys.com/de/datenschutzrichtlinie/

13. Existing customer marketing - advertising by mail

(1) If we have received your personal data in connection with the sale of a product or service and you have not objected to this, we will process your personal data in order to carry out postal marketing. Postal marketing may also include offers and information from our advertising partners. The legal basis for processing is Art. 6 Para. 1 letter f of the General Data Protection Regulation. Our legitimate interest and the legitimate interest of our advertising partners is direct advertising.
(2) We use external services (printers, lettershops etc.) for marketing by post.
(3) We process your personal data within the framework of tracking or success measurements in order to measure the reach of our postal marketing, to design it in line with your needs and interests and thus to optimise our postal marketing. This may also involve profiling (for advertising purposes, personalised information, personalised prices for your favourite products or for products that you have not yet bought, etc.) For personalised pricing, we use automated decisions to determine if you receive discounts for certain products. The legal basis for processing is Art. 6 (1) lit. f of the General Data Protection Regulation. Our legitimate interest is the optimisation of our postal marketing. With regard to the automated decision, you have the right to human intervention on the part of the responsible party, to express your point of view and to challenge the decision.
(4) You have the right to object at any time to the processing of your personal data for the purpose of postal marketing. We will then no longer process your personal data for the purpose of postal marketing. If you wish to object to the processing of your personal data for the purpose of postal marketing, you can contact us at the contact details given above.
(5) If you have lodged an objection to the processing of your personal data for the purpose of postal marketing, we reserve the right to process your personal data in a so-called blacklist/blocking list in order to be able to ensure in future that no further postal marketing is carried out in connection with this personal data. The legal basis for the processing is Art. 6 para. 1 lit. f DS-GVO. Our legitimate interest is to avoid unwanted postal marketing.

14. Competitions/Promotions

(1) If you participate in a competition or promotion, we process your personal data in order to process the competition or promotion and to comply with the rights and obligations associated with it.
(2) If we have asked you for your consent and you have given it, the legal basis for the processing is Art. 6 Paragraph 1 lit. a of the General Data Protection Regulation. If we have not asked you for your consent, the legal basis for processing is Art. 6 (1) lit. f of the General Data Protection Regulation. Our legitimate interest is the processing of a competition or promotion. If the processing is necessary to fulfil a contract with you or to carry out pre-contractual measures on the basis of your request, the legal basis for the processing is also Art. 6 Paragraph 1 lit. b of the General Data Protection Regulation.
(3) Recipients of your personal data may be third parties (shipping or transport service providers, banks, tax consultants, lawyers, authorities, etc.), insofar as this is necessary for the processing and handling of your order and the rights and obligations associated with it.

15. Recommend a friend advertising

(1) If you recommend a potential new customer as part of the referral process, we process your personal data in order to process and handle your referral and to comply with the rights and obligations associated with it.
(2) If we have asked you for your consent and you have given it, the legal basis for processing is Art. 6 para. 1 letter a of the General Data Protection Regulation. If we have not asked you for your consent, the legal basis for processing is Article 6 (1) (f) of the General Data Protection Regulation. Our legitimate interest is the processing and handling of the referral of friends. If the processing is necessary to fulfil a contract with you or to carry out pre-contractual measures on the basis of your request, the legal basis for the processing is also Art. 6 para. 1 lit. b of the General Data Protection Regulation.
(3) Recipients of your personal data may be third parties (shipping or transport service providers, banks, tax consultants, lawyers, authorities, etc.), insofar as this is necessary for the processing and handling of your order and the rights and obligations associated with it.

16. Trial package request

(1) If you have requested a free trial package, we process your personal data in order to process and fulfil your request and to comply with the rights and obligations associated with it. Part of this process involves checking compliance with our conditions of participation (this trial package is for new customers only. It can only be requested once per household/domestic community) and use automated decisions to determine if you are eligible to receive a free trial package in accordance with the conditions of participation.
(2) If we have asked you for your consent and you have given it, the legal basis for the processing is Art. 6 para. 1 letter a of the General Data Protection Regulation. If we have not asked you for your consent, the legal basis for processing is Article 6 (1) (f) of the General Data Protection Regulation. Our legitimate interest is the processing and handling of your trial package request. If the processing is necessary to fulfil a contract with you or to carry out pre-contractual measures on the basis of your request, the legal basis for the processing is also Art. 6 para. 1 lit. b of the General Data Protection Regulation.
(3) Recipients of your personal data may be third parties (shipping or transport service providers, banks, tax consultants, lawyers, authorities, etc.), insofar as this is necessary for the processing and handling of your order and the rights and obligations associated with it.
(4) With regard to the automated decision, you have the right to human intervention on the part of the responsible party, to express your point of view and to challenge the decision.

17. Analysis & marketing

(1) We process your personal data in order to measure the range of our online offer, to design it according to your needs and interests and thus to optimise our online offer and our marketing.
(2) If we have asked you for your consent and you have given it, the legal basis for processing is Art. 6 (1) lit. a of the General Data Protection Regulation. If we have not asked you for your consent, the legal basis for processing is Art. 6 (1) lit. f of the General Data Protection Regulation. Our legitimate interest is the optimisation of our online offer and our marketing.
(3) We use external services for analysis and marketing. This may also involve profiling (for purposes of advertising, personalised information, etc.). Profiling can also take place across services and devices. Further information on the services used, the scope of data processing and the technologies and procedures when using the respective services and whether profiling takes place when using the respective services and, if applicable, information on the logic involved and the scope and intended effects of such processing for you, can be found in the further information on the services used by us at the end of this passage and under the links provided there.
(4) You can prevent the storage of cookies by setting your browser accordingly. In the following list, we provide you with links for typical browsers, where you can find further information on the administration of cookie settings:
•    Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
•    Chrome: https://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
•    Internet Explorer / Edge: https://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
•    Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
•    Opera: https://help.opera.com/de/latest/web-preferences/#cookies
•    Yandex: https://browser.yandex.com/help/personal-data-protection/cookies.html

(5 ) For further appeal possibilities, please consult the following links: https://www.youronlinechoices.eu/, https://youradchoices.ca/en/tools, https://optout.aboutads.info/?c=2&lang=EN and https://optout.networkadvertising.org/?c=1.
(6) If you prevent cookies from being saved, this may impair the proper functioning of our online service. If you delete all cookies, the above-mentioned settings will also be lost and must be made again.
(7) Furthermore, you can activate the "Do-Not-Track" function of your browser to signal that you do not wish to be tracked. In the following, we provide you with links for typical browsers, where you can find further information on the "Do-Not-Track" setting:
•    Firefox: https://support.mozilla.org/de/kb/wie-verhindere-ich-dass-websites-mich-verfolgen
•    Chrome: https://support.google.com/chrome/answer/2790761?co=GENIE.Platform%3DDesktop&hl=de
•    Internet Explorer / Edge: https://support.microsoft.com/de-de/help/17288/windows-internet-explorer-11-use-do-not-track
•    Opera: https://help.opera.com/en/presto/be-safe-and-private/
•    Safari no longer supports the "Do-Not-Track" feature since February 2019. You can prevent cross-site tracking in Safari by following this link: https://support.apple.com/de-de/guide/safari/sfri40732/12.0/mac
•    Yandex: https://browser.yandex.com/help/personal-data-protection/do-not-follow.html

Facebook pixel with Custom Audiences and advanced data matching
Provider: Meta Platforms Ireland Limited, Ireland. Meta Platforms Ireland Limited is a subsidiary of Meta Platforms, Inc, United States of America.
Website: https://www.facebook.com/business/help/744354708981227?id=2469097953376494
Further information & data protection: https://www.facebook.com/business/help/742478679120153?id=1205376682832142&recommended_by=218844828315224, https://www.facebook.com/business/help/1474662202748341?id=2469097953376494&locale=de_DE, https://de-de.facebook.com/business/help/611774685654668, https://de-de.facebook.com/privacy/explanation, https://de-de.facebook.com/policies/cookies/https://www.facebook.com/help/566994660333381?ref=dp and https://de-de.facebook.com/help/568137493302217
Guarantee: EU standard contractual clauses. You can request a copy of the EU standard contractual clauses from us.

Google Ads Conversion Tracking
Provider: In the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://support.google.com/google-ads/answer/1722022?hl=de
Further information & data protection: https://policies.google.com/?hl=de
Transfer of personal data to third countries occurs depending on the Google service used and is subject to the various standard EU contractual clauses, provided they are offered by Google.
Further information on this and Google's responsibility can be found here: https://business.safety.google/gdpr/
You can request a copy of the EU standard contractual clauses from us.

Google Analytics
Provider: In the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://marketingplatform.google.com/intl/de/about/analytics/
Further information & data protection: https://support.google.com/analytics/answer/6004245?hl=de and https://policies.google.com/?hl=de
Transfer of personal data to third countries occurs depending on the Google service used and is subject to the various standard EU contractual clauses, provided they are offered by Google.
Further information on this and Google's responsibility can be found here:https://business.safety.google/gdpr/.
You can request a copy of the EU standard contractual clauses from us.

Google Optimize
Provider: In the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://marketingplatform.google.com/intl/de/about/optimize/
Further information & data protection: https://support.google.com/analytics/answer/6004245?hl=de and https://policies.google.com/?hl=de
Transfer of personal data to third countries occurs depending on the Google service used and is subject to the various standard EU contractual clauses, provided they are offered by Google.
Further information on this and Google's responsibility can be found here:https://business.safety.google/gdpr/
You can request a copy of the EU standard contractual clauses from us.

Google Remarketing
Provider: In the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://support.google.com/google-ads/answer/2453998
Further information & data protection: https://policies.google.com/?hl=de
Transfer of personal data to third countries occurs depending on the Google service used and is subject to the various standard EU contractual clauses, provided they are offered by Google.
Further information on this and Google's responsibility can be found here: https://business.safety.google/gdpr/
You can request a copy of the EU standard contractual clauses from us.

Google Search Ads 360
Provider: In the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://marketingplatform.google.com/intl/de/about/search-ads-360/
Further information & data protection: https://policies.google.com/?hl=de
Transfer of personal data to third countries occurs depending on the Google service used and is subject to the various standard EU contractual clauses, provided they are offered by Google.
Further information on this and Google's responsibility can be found here: https://business.safety.google/gdpr/
You can request a copy of the EU standard contractual clauses from us.

Google Tag Manager
Provider: In the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://policies.google.com/privacy?hl=de&gl=de
Further information & data protection: https://policies.google.com/privacy?hl=de&gl=de
Transfer of personal data to third countries occurs depending on the Google service used and is subject to the various standard EU contractual clauses, provided they are offered by Google.
Further information on this and Google's responsibility can be found here:https://business.safety.google/gdpr/
You can request a copy of the EU standard contractual clauses from us.

Hurra
Provider: Hurra Communications GmbH, Germany.
Website: https://www.hurra.com/
Further information & data protection: https://www.hurra.com/datenschutz/

OWAPro
Provider: Hurra Communications GmbH, Germany.
Website: https://www.hurra.com/
Further information & data protection: https://www.hurra.com/datenschutz/

Sovendus
Provider: Sovendus GmbH, Germany.
Website: https://www.sovendus.com/de/
Further information & data protection: https://www.sovendus.com/de/datenschutz/

18. Social media presences

(1) We maintain social media presences with external services in order to be able to communicate with users there and thus optimise our online offer and our marketing.
(2) This privacy policy also applies to the following social media presences:
Facebook: https://www.facebook.com/gefro.geniessen/
Instagram: https://www.instagram.com/gefro.de/?hl=de
Youtube: https://www.youtube.com/user/GefroReformversand
LinkedIn: https://www.linkedin.com/company/42085568/
Pinterest: https://www.pinterest.de/gefrogeniessen/
(3) If we have asked you for your consent and you have given it, the legal basis for the processing is Art. 6 (1) lit. a of the General Data Protection Regulation. If we have not asked you for your consent, the legal basis for processing is Article 6 (1) (f) of the General Data Protection Regulation. Our legitimate interest is the optimisation of our online offer and our marketing.
(4) When using external services, profiling (for purposes of advertising, personalised information etc.) may also occur. Profiling can also take place across services and devices. Further information on the services used, the scope of data processing and the technologies and procedures when using the respective services and whether profiling takes place when using the respective services and, if applicable, information on the logic involved and the scope and intended effects of such processing for you, can be found in the further information on the services used by us at the end of this passage and under the links provided there.

Facebook
Provider: Meta Platforms Ireland Limited, Ireland. Meta Platforms Ireland Limited is a subsidiary of Meta Platforms, Inc, United States of America.
Website: https://www.facebook.com
The provider and we share collective responsible. We have signed an agreement with the provide to this effect. You can view this agreement at: https://www.facebook.com/legal/terms/page_controller_addendum and https://www.facebook.com/legal/controller_addendum.
Further information and data protection: 
 https://developers.facebook.com/docs/plugins/, https://www.facebook.com/legal/terms/information_about_page_insights_data, https://de-de.facebook.com/privacy/explanation, https://de-de.facebook.com/policies/cookies/https://www.facebook.com/help/566994660333381?ref=dp and https://de-de.facebook.com/help/568137493302217
Guarantee: EU standard contractual clauses. You can request a copy of the EU standard contractual clauses from us.

Instagram
Provider: Meta Platforms Ireland Limited, Ireland. Meta Platforms Ireland Limited is a subsidiary of Meta Platforms, Inc, United States of America.
Website: https://www.instagram.com
Further information & data protection: https://help.instagram.com/581066165581870
and
https://help.instagram.com/519522125107875
Guarantee: EU standard contractual clauses. You can request a copy of the EU standard contractual clauses from us.

LinkedIn
Provider: If you are in the EU, the European Economic Area (EEC) or in Swtzerland, this service is provided by LinkedIn Ireland Unlimited Company, Ireland. If you are outside the EU, the European Economic Area (EEC) or Swtzerland, this service I srovided by LinkedIn Corporation, United States of America.
Website: https://www.linkedin.com
Further information & data protection: https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy and https://www.linkedin.com/legal/cookie-policy?trk=homepage-basic_footer-cookie-policy
Guarantee: EU standard contractual clauses. You can request a copy of the EU standard contractual clauses from us.

Pinterest
Provider: for users not located in the United States, the service is provided by Pinterest Europe Ltd, Ireland. For users located in the USA, the service is provided by Pinterest Inc, United States of America.
Website: https://www.pinterest.de/
Further information and data protection: https://policy.pinterest.com/de
Guarantee: EU standard contractual clauses. You can request a copy of the EU standard contractual clauses from us.

YouTube
Provider: In the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC United States of America.
Website: https://www.youtube.de
Further information & privacy: https://policies.google.com/?hl=de
Transfer of personal data to third countries occurs depending on the Google service used and is subject to the various standard EU contractual clauses, provided they are offered by Google.
Further information on this and Google's responsibility can be found here: https://privacy.google.com/businesses/compliance/#!#gdpr.
You can request a copy of the EU standard contractual clauses from us.

19. Maps

(1) We use maps from external services to show you our location and to enable you to use the other functions of these external services in connection with the maps.
(2) If we have asked you for your consent and you have given it, the legal basis for processing is Art. 6 (1) lit. a of the General Data Protection Regulation. If we have not asked you for your consent, the legal basis for processing is Article 6(1)(f) of the General Data Protection Regulation. Our legitimate interest here is the simplified use of maps.
(3) When using external services, profiling (for purposes of advertising, personalised information etc.) may also occur. Profiling can also take place across services and devices. Further information on the services used, the scope of data processing and the technologies and procedures when using the respective services and whether profiling takes place when using the respective services and, if applicable, information on the logic involved and the scope and intended effects of such processing for you, can be found in the further information on the services used by us at the end of this passage and under the links provided there.

Google Maps
Provider: In the European Economic Area (EEA) and Switzerland, Google services are provided by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://www.google.de/maps
Further information & data protection: https://policies.google.com/?hl=de
Transfer of personal data to third countries occurs depending on the Google service used and is subject to the various standard EU contractual clauses, provided they are offered by Google.
Further information on this and Google's responsibility can be found here: https://privacy.google.com/businesses/compliance/#!#gdpr.
You can request a copy of the EU standard contractual clauses from us.

20. Search engines

(1) We use search engines from external services in order to provide you with better results when searching our online offer and to optimise our online offer.
(2) If we have asked you for your consent and you have given it, the legal basis for the processing is Art. 6 (1) lit. a of the General Data Protection Regulation. If we have not asked you for your consent, the legal basis for processing is Article 6 (1) (f) of the General Data Protection Regulation. Our legitimate interest is the optimisation of our online offer.
(3) When using external services, profiling (for advertising, personalised information, etc.) may also occur. Profiling can also take place across services and devices. Further information about the services used, the scope of data processing and the technologies and procedures when using the respective services, as well as whether profiling takes place when using the respective services and, if applicable, information about the logic involved and the scope and intended effects of such processing for you, can be found in the further information about the services used by us at the end of this passage and under the links provided there.

SEMKNOX
Provider: Zoovu (Germany) GmbH, Germany.
Website: https://semknox.com/
Further information & data protection: https://semknox.com/datenschutz/

21. Applications

(1) If you apply for a job with us, we process your personal data in order to carry out the application procedure and to make a decision on the establishment of an employment relationship. At the end of the application procedure, we will restrict the processing of your personal data and delete or destroy it at the latest 6 month upon receipt of the rejection by you or return the application documents to you and delete or destroy any copies unless you have consented to our further use of your personal data.
(2) If we have asked you for your consent and you have given it, the legal basis for processing is Art. 6 (1) lit. a of the General Data Protection Regulation. If we have not asked you for your consent, the legal basis for processing is Article 6 (1) (f) of the General Data Protection Regulation. Our legitimate interest in this is the proper conduct of the application procedure and, if necessary, the defence against claims arising from the rejection of an application. If the processing is necessary for a decision on the establishment of an employment relationship, the legal basis for the processing is also Art. 26 (1) sentence 1 BDSG (the German Federal Data Protection Act).


22. Comments

(1) If you leave comments (on blog entries, products, etc.) using the functions provided for this purpose, we process your personal data in order to be able to display your comments and to prevent possible misuse.
(2) If we have asked you for your consent and you have given it, the legal basis for the processing is Art. 6 Paragraph 1 lit. a of the General Data Protection Regulation. If we have not asked you for your consent, the legal basis for processing is Article 6 (1) (f) of the General Data Protection Regulation. Our legitimate interest in this is to ensure that your comments are properly displayed and to prevent abuse.