General data protection information

 

GRAMMER appreciates your visit to our website and your interest in our company. In this data protection notice for our website, we inform you in accordance with Art. 13, 14 GDPR about the processing of personal data by GRAMMER AG, Grammer-Allee 2, 92289 Ursensollen and its affiliated companies in accordance with § 15 AktG in Germany ("GRAMMER").

 

1. Who is responsible for the processing of data and who is the data protection officer?

 

The controller for data processing on this online platform:

Grammer AG
Grammer-Allee 2
92289 Ursensollen

If you have any questions or suggestions, please use the contact option:

data-protection(at)grammer.com

You can contact our external data protection officer in accordance with Art. 4 para. 7 GDPR as follows:

Olga Stepanova
ByteLaw Attorneys at Law
Koch Stepanova Veeck Part mbB
Bockenheimer Landstraße 51-53
60325 Frankfurt am Main
dsb(at)grammer.com

 

2. What data do we process, for what purpose and on what legal basis is the processing based?

 

In the following, we inform you about the processing of personal data when you use our website. In doing so, we would like to inform you about our processing operations and at the same time comply with legal obligations, particularly those arising from the GDPR.

Personal data within the meaning of Art. 4 No. 1 GDPR are all data that can be related to you personally, e.g. name, address, e-mail address, user behavior.

 

INFORMATIONAL USE OF THE WEBSITE

 

When using the website for informational purposes, i.e. simply viewing it without registering and without you providing us with any other information, we process the personal data that your browser transmits to our server. The data described below is technically necessary for us to display our website to you and to ensure stability and security and must therefore be processed by us:

• the IP address,
• the previously visited website,
• the name of the website you visit on our site,
• the date and duration of your visit,
• the amount of data transferred in each case,
• the identification of your web browser,
• language and version of the browser software,
• time zone difference to Greenwich Mean Time [GMT],
• access status/HTTP status code and
• the operating system.

In the context of ensuring the operation of the IT-System, the legal basis for data processing is the fulfillment of the legal obligations to which GRAMMER is subject (Art. 6 para. 1 lit. c) GDPR) ("fulfillment of legal obligations").

Unless expressly stated otherwise when collecting personal data, the legal basis for data processing is otherwise the protection of our legitimate interests (Art. 6 para. 1 lit. f) GDPR) ("legitimate interest in processing").

If you have expressly given your consent to the processing of personal data in individual cases, this consent is the legal basis for the processing (Art. 6 para. 1 lit. a) GDPR) ("consent").

 

CONTACT OPTION

 

We process your personal data within the contact option on our website, in particular first name, surname, e-mail address and your created message.

The legal basis for the use of the contact form is the implementation of pre-contractual measures at the request of the data subject in accordance with Art. 6 para. 1 lit. b) GDPR ("fulfillment of pre-contractual measures").

 

EXTRANET / BUSINESS SUPPORT

 

When you register on the extranet, we process your personal data, in particular your first name, surname, email address and password.

The purpose of this processing is to identify you as an authorized sales and service partner (data comparison) and to authenticate you for online access to corresponding exclusive services and products and to manage and support your user account in our system.

Registration does not take place on the website itself. Registration takes place by creating you as an authorized sales and service partner as part of a pre-contractual measure or to fulfil a contractual relationship. The data of the created registration is stored on the website in order to fulfill the pre-contractual and contractual obligations of GRAMMER. Your telephone number and address are also processed and stored on the website (Art. 6 para. 1 lit. b) GDPR) ("fulfillment of pre-contractual/contractual measures").

If you subscribe to our newsletter, we will use the data you provide (e-mail address) to send you the newsletter you have requested. You can unsubscribe from our newsletter at any time. For such a revocation, a link is provided in every newsletter that leads you directly to a cancellation option. 

The legal basis for this lies in the consent given (Art. 6 para. 1 lit. a GDPR) ("consent").

 

3. Which data protection rights can be asserted as a data subject?

 

As the data subject, you have the following rights (Art. 13 para. 1 lit. b GDPR):

 

RIGHT TO INFORMATION (ART. 15 GDPR)

 

You have the right to request information about the stored data, the processing, the purpose of the processing, the data transfer, the recipients of your personal data and the storage period of the data.

 

RIGHT TO RECTIFICATION (ART. 16 GDPR)

 

You have the right to demand the immediate rectification of your incorrect data and the completion of incomplete stored data.

 

RIGHT TO ERASURE (ART. 17 GDPR)

 

You have the right to request the erasure of your personal data stored by us without undue delay.

 

RIGHT TO RESTRICTION OF PROCESSING (ART.18 GDPR)

 

You have the right to request the restriction of the processing of your data (i.e. the marking of stored personal data with the aim of restricting its future processing).

 

RIGHT TO DATA TRANSFERABILITY (Art. 20 GDPR)

 

At your request, you have the right to have your data transferred to another controller, where technically feasible. This right only exists if the data processing is based on your consent or is necessary for the performance of a contract.

 

RIGHT TO OBJECT (ART. 21 GDPR)

 

If the processing of your personal data is based on the protection of legitimate interests, you have the right to object to the processing on grounds relating to your situation. We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.

Of course, you can object to the processing of your personal data for the purposes of advertising and data analysis at any time. To assert your objection, you can contact us at any time at the above address/e-mail address.

 

RIGHT TO WITHDRAW CONSENT (ART. 7 PARA. 3 GDPR)

 

If the processing of your personal data is based on your consent, you can withdraw this consent at any time. Withdrawal of your consent is only effective for the future and has no influence on the processing that took place before the withdrawal.

 

RIGHT TO LODGE A COMPLAINT (ART. 77 GDPR)

 

You have the right to lodge a complaint with a data protection supervisory authority if you are of the opinion that the processing of your personal data by us violates applicable data protection law.

The data protection supervisory authority responsible for us:

Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 27
91522 Ansbach

 

4. Cookies

 

We use cookies to improve and constantly adapt the use of our website. When you access our website and at any time thereafter, you have the choice of whether you generally allow cookies to be set or which individual additional functions you would like to select. You can make changes in your browser settings or via the button at the bottom left.

Cookies are small text files or information in a database that are stored on your hard disk and assigned to the browser you are using so that certain information can flow to the place that sets the cookie. Cookies cannot execute programs or transfer viruses to your computer but are primarily used to make it easier for you to interact with our website. This website uses the following types of cookies, whose function and legal basis are explained below:

• Transient cookies: Such cookies, especially session cookies, are automatically deleted when you close your browser or log out. They contain a so-called session ID. This allows various requests from your browser to be assigned to the joint session and your computer can be recognized when you return to our website.
• Persistent cookies: These are automatically deleted after a specified period, which varies depending on the cookie. You can view the cookies set and the duration at any time in your browser settings and delete the cookies manually.
• Other technologies: These functions are not based on cookies, but on similar technical mechanisms, such as Flash cookies, HTML5 objects or an analysis of your browser settings. As a result, we can also use the technologies described below. Here, too, you can of course consent or object.

 

MANDATORY, TECHNICALLY NECESSARY FUNCTIONS

 

The technical structure of the website requires us to use technologies, in particular cookies. Without these technologies, our website cannot be displayed in full, or the support functions could not be enabled. These are basically transient cookies that are deleted at the end of your visit to the website, at the latest when you close your browser. You cannot deselect these cookies if you wish to use our website. The individual cookies can be seen in the Consent Manager. The legal basis for this processing is Art. 6 para. 1 lit. f) GDPR.

 

OPTIONAL COOKIES

 

We only set various cookies with your consent, which you can select when you first visit our website using the cookie consent tool. The functions are only activated with your consent and can be used in particular to enable us to analyze and improve visits to our website, to make it easier for you to use different browsers or end devices, to recognize you when you visit us again or to place advertising (possibly also to tailor advertising to your interests, measure the effectiveness of advertisements or show interest-based advertising). The legal basis for this processing is Art. 6 para. 1 lit. a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

 

5. Is data transferred to a third country?

 

GRAMMER is a globally active company. If we transfer personal data to service providers and Group companies outside the European Economic Area (EEA), the transfer will only take place if the third country has been confirmed by the EU Commission to have an adequate level of data protection (Art. 45 para. 1 GDPR) or other appropriate data protection guarantees within the meaning of Art. 47 GDPR (e.g. binding corporate rules on data protection pursuant to Art. 46 para. 2 lit. b) GDPR, or standard data protection clauses issued by the EU Commission pursuant to Art. 46 para. 2 lit. c) GDPR) are in place or you have given your express consent.

 

6. How long do we store your data?

 

We store your personal data for as long as the respective purpose requires. If the data processing is based on several purposes, the data will be deleted when the last specified purpose has been fulfilled.