Privacy Policy and Cookie Information
This policy serves to inform you about the processing of your personal data that takes place when you visit our website and, if applicable, through subsequent processes.
According to Art. 4(1) GDPR, personal data means any information relating to an identified or identifiable (when combined with other data) natural person or allowing for conclusions to be drawn about such person. Pursuant to Art. 4(2) GDPR, processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
Unless stated otherwise in the following, the provision of your personal data is not legally or contractually required for visiting our website and is not necessary for the conclusion of a contract. If you do not provide certain data (e.g. through browser settings or by withholding consent), some functions of the website – especially in connection with cookies or external content – may not be usable, or only usable to a certain extent.
Controller | Data Protection Officer
The Controller for the processing of your personal data is:
Golf BidCo GmbH (hereinafter referred to as “we”, “GETEC”)
Albert-Vater-Str. 50
39108 Magdeburg
Germany
Phone: +49 (0) 391 2568 100
Fax: +49 (0) 391 2568 120
Email: info@getec.de
Our Data Protection Officer is available at:
EPRO Consult GmbH
getec@epro-consult.de
Data Processing via Our Website
Unless stated otherwise in the following, we shall delete any personal data processed when using our website immediately after the respective processing purpose has been achieved or no longer applies. Any storage beyond this period shall be exclusively on the basis of our legitimate interest in asserting, enforcing, and defending our legal rights while any contractual or statutory limitation claims are in place as well as in order to comply with any retention periods which we are legally obliged to observe by commercial or tax law requirements, for example. Should any statutory retention periods apply, the personal data shall be restricted for further processing rather than deleted and shall only be processed for the purposes of complying with such retention periods as well as asserting, exercising, or defending any legal rights.
Cookies | Third-Party Content
Our website stores cookies or uses similar technologies that we use for certain functionalities.
Cookies are small text files that are placed and stored in your browser, or by your browser on your device. Cookies contain a unique string of characters that makes sure your browser is recognised when you visit the website again at a later point. In that context, certain technical information required for the provision and use of certain features may be processed individually.
Please refer to the respective sections in this Privacy Policy for any details about the respective processing of your personal data, particularly as to whether such processing is carried out with or without your consent.
You have full control over the use of cookies on your device and may limit or prevent their storage by adjusting certain settings in your browser. Cookies that have already been stored may also be deleted at any time in your browser settings. If you do so, however, you may no longer be able to use all features of our website.
Server Log Files
When you visit our website, data is automatically transmitted to us or our web hosting service provider and stored in “server log files” in order to log enquiries and access to our website as well as error messages from our website. This data processing is technically necessary to ensure a secure and stable internet presence. The following data shall be stored temporarily:
- Information about the browser used
- Information about the operating system used
- URL of the website visited
- Access date and time
- Volume of data sent
- Website from which the switch to our website originated (referrer URL)
- IP address
The data is only used for statistical evaluation and to improve our website. It is not stored together with other personal data concerning you and is automatically deleted after 7 days. That storage period shall only be exceeded in exceptional cases where it is necessary in order to provide supporting evidence due to specific signs of illegal use.
The processing of your personal data is carried out to safeguard our legitimate interests in the stability, security, functionality, and optimisation of our website in accordance with Art. 6(1)(f) GDPR.
Contact
If you contact us by email or via our contact form, we will receive and process the personal data provided by you (in particular your name, email address, and message content) in order for us to process your request.
If the purpose of your enquiry is related to concluding a contract (e.g. a request for a quotation) or connected to an already existing contract between you and us, your personal data shall be processed in order to perform the requested pre-contractual measures or to perform the existing contract in accordance with Art. 6(1)(b) GDPR.
In all other cases, your personal data shall be processed in order to safeguard our legitimate interest in processing and responding to your enquiry in accordance with Art. 6(1)(f) GDPR.
Cookie Consent Tool (CCM19)/Privacy Settings – Technically Necessary Cookies
To manage the privacy-relevant settings and to document the consent given or withheld by users (including consent regarding the integration of external content/services), we use the consent management tool CCM19, which is provided by Papoo Software & Media GmbH, Auguststr. 4, 53229 Bonn, Germany.
Whenever our website is accessed, technically necessary information is processed to ensure the functionality of consent management. This includes in particular the consent status, an associated timestamp, technical browser and device characteristics as well as information on the selection made. This data shall be used exclusively for the management and verification of the necessary privacy settings.
The settings are stored via technically necessary cookies (and comparable storage methods) which help us remember your selected preferences when you access our website again. That data is not used for any analysis or marketing purposes.
Information on data processing:
- Service providers:
Papoo Software & Media GmbH, Auguststr. 4, 53229 Bonn, Germany (CCM19) - Purpose:
to provide and manage privacy settings as well as maintain evidence of consent given or withheld - Legal basis:
Access to end device: Section 25(2)(2) German Telecommunications Digital Services Data Protection Act (TDDDG)
Processing of personal data: Art. 6(1)(f) GDPR (legitimate interest in the technically necessary management of consent) - Processed data:
consent status, timestamp, technical browser and device information, selection parameters and technical communication data (e.g., IP address) when retrieving content from the provider's domain - Recipients/categories of recipients:
Papoo Software & Media GmbH (retrieval/integration of the consent management tool from the provider's domain; technical operation) - Retention period:
the data will be stored as long as the respective selection remains valid. Deletion will either be automatic or can be initiated by the user via the privacy settings. - Transfer to third countries:
there shall be no transfer of personal data to third countries.
For information about all cookies used on our website, please refer to our privacy settings (the cookie icon in the bottom left area of the website).
YouTube Video – Social Media (External Content/Services)
On our website, we embed videos from the YouTube service in extended data protection mode. YouTube videos are disabled by default and shall only load and play after your explicit consent. That consent is managed via the privacy settings by activating the Social Media switch.
A connection to YouTube's servers shall not be established and the video content shall not load until that switch has been activated. During that process, communication and usage data in particular are processed for technical reasons (e.g. IP address, date/time of access, device/browser information, and information about which page or video was accessed). This data shall not be transmitted to YouTube in connection with the integration of the YouTube videos until such consent is given.
Information on data processing:
- Service providers:
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (YouTube) - Legal basis:
Access to end device/integration of third-party content: Section 25(1) TDDDG (consent)
Processing of personal data: Art. 6(1)(a) GDPR (consent) - Withdrawal:
you can withdraw or change your consent at any time with effect for the future via the privacy settings by deactivating the Social Media switch. - Transfer to third countries:
when the YouTube videos are activated, personal data may be transmitted to YouTube and/or affiliated companies and may also be processed outside the EU/EEA.
Please refer to the Google privacy policy for further information on data processing by YouTube/Google:
https://policies.google.com/privacy
https://www.youtube.com/intl/eng/howyoutubeworks/privacy/
Online Job Applications/Publication of Job Advertisements
You may use an applicant portal provided by an external service provider to send us your application. The applicant portal is provided via the Workday platform at the domain getec.wd103.myworkdayjobs.com. The applicant portal is provided by Workday. For these digital applications, your applicant and application data shall be collected and processed electronically by us for the purpose of handling the application process.
The legal basis for this processing is Section 26(1)(1) German Federal Data Protection Act (BDSG) in conjunction with Art. 88(1) GDPR.
If an employment contract is concluded following the application process, we shall store the data submitted by you during the application process in your personnel file for the purpose of the usual organisational and administrative process. All further legal obligations shall be observed.
The legal basis for this processing is also Section 26(1)(1) BDSG in conjunction with Art. 88(1) GDPR.
If an application is rejected, we shall generally delete the data transmitted to us no later than six months after the applicant has been notified about the rejection unless individual circumstances are making a longer retention period necessary, e.g. for the assertion, exercise, or defence of legal claims or until the conclusion of legal proceedings.
The legal basis in this case is Art. 6(1)(f) GDPR and Section 24(1)(2) BDSG. Our legitimate interest lies in the defence and/or enforcement of our legal rights.
If you expressly consent to a longer retention period of your data, e.g. in order to be included in an applicant or prospective candidate database, your data shall be further processed on the basis of your consent. The legal basis in that case is Art. 6(1)(a) GDPR. However, you may withdraw your consent at any time in accordance with Art. 7(3) GDPR by means of a declaration to us with effect for the future.
Data Processing When Visiting Our Social Media Profile on LinkedIn
Controllers
The following privacy policy provides an overview of the collection and processing of your data in our profiles on the following social media platforms:
- LinkedIn: https://www.linkedin.com/company/getec-solutions/, hereinafter each the “LinkedIn Profile”
We would like to point out that your use of our social media pages and their features as well as social media platforms as a whole is at your own responsibility. This applies in particular to your use of the interactive features (e.g. liking, commenting, sharing, rating). For the corresponding terms of use, please visit:
For the data policy, please visit: https://www.linkedin.com/legal/privacy-policy
In addition to us, the operator of the social media platform (hereinafter each referred to as the “Provider”) is also the Controller responsible for data processing on our LinkedIn Profile, hereinafter also referred to as “LinkedIn”.
LinkedIn Ireland Unlimited Company
Attn: Legal Dept. (Privacy Policy and User Agreement)
Wilton Plaza
Wilton Place, Dublin 2
Ireland
Contacting LinkedIn's Data Protection Officer:
https://www.linkedin.com/help/linkedin/ask/TSO-DPO?_l=en_US
The operators of the social media platforms are your central point of contact. However, you may also assert your rights in relation to the processing under joint responsibility against us. If you contact us, we shall coordinate with the respective provider to respond to your enquiry and guarantee your rights as a data subject.
Notes
Please be advised that LinkedIn may also store the data of logged-in users and other interested visitors of its social media platforms, e.g. personal information (including registration data, status messages, photos, and other profile and usage data) or IP addresses, cookies, etc., outside the European Union (EU) or the European Economic Area (EEA), and use such data for its own business purposes.
We have no influence on any data collection and use by the provider. Furthermore, it is not transparent to us which data LinkedIn stores where, and for how long, as well as to what extent LinkedIn fulfils any existing deletion obligations, what evaluations and links are made using the data, and with whom the data is shared. Whenever you are logged in with your respective social media account and visit our social media page, the provider can match that visit to your profile.
LinkedIn may also process personal data outside the European Union (EU) or the European Economic Area (EEA) (particularly in the United States). To the extent that personal data is transferred to third countries, this shall be done in accordance with data protection regulations, in particular on the basis of an adequacy decision or subject to appropriate safeguards. Nevertheless, it cannot be ruled out that authorities in these third countries may have access to data processed by LinkedIn within the framework of their respective legal powers.
A joint controller agreement pursuant to Art. 26 GDPR has been concluded which determines, among other things, how the respective tasks and responsibilities in the processing of personal data are structured and who fulfils which obligations under data protection law.
Information on Data Processing
GETEC maintains the LinkedIn Profile in order to draw attention to its services and service offerings and to interact with its customers and visitors of the social media platforms (hereinafter referred to as “Users”).
When the GETEC LinkedIn Profile is used, personal data is being processed. For information about the type and scope of data processing for which GETEC is responsible under data protection law in this context, please read on.
GETEC itself does not store any personal data about your use of the respective social media pages.
Information that you publish on GETEC's respective social media pages (e.g. comments) or send via the associated messenger will be stored by the providers on the basis of your owner-and-user relationship and may be removed by you there.
Processing of Usage Data with LinkedIn and GETEC as Joint Controllers
Whenever you visit GETEC's social media page, LinkedIn also uses certain usage data (e.g. whether you have liked or commented certain GETEC posts) to provide GETEC with aggregated usage statistics (known as “Page Insights”). Usage statistics do not allow any conclusions about the behaviour of individual users. They merely provide GETEC with an overview of the use of its social media pages (e.g. which posts were clicked on the most). GETEC itself has no access to the personal data processed for the compilation of these statistics. LinkedIn alone determines which usage actions are logged by LinkedIn on the social media platforms; this cannot be configured, changed, or influenced in any other way by GETEC.
LinkedIn provides GETEC with usage statistics on its social media page for GETEC to improve the posts published there and make them as interesting as possible for users. The data processing is done on the basis of a balancing of interests in accordance with Art. 6 (1)(f) GDPR, which always takes your interests into account. If you are logged in to LinkedIn yourself, the processing in accordance with Art. 6(1)(b) GDPR shall also be done in accordance with the terms of use that apply between you and LinkedIn.
LinkedIn and GETEC are Joint Controllers for the processing of personal data for the compilation of these usage statistics in accordance with Art. 26 GDPR.
LinkedIn's Page Insights information (https://legal.linkedin.com/pages-joint-controller-addendum) describes what data is processed under joint responsibility and includes the “Page Joint Controller Addendum”, in which LinkedIn and GETEC have contractually determined which of them fulfils which obligations under the GDPR.
Processing of Your Data when Communicating with GETEC via the LinkedIn Page
If you contact GETEC via its LinkedIn page, e.g. by commenting on a post or writing a message via the LinkedIn Messenger, GETEC shall process your data (e.g. your name and the content of the communication) in order to handle your request.
To the extent necessary, GETEC shall also process your data for the purpose of asserting legal rights and mounting a defence in legal disputes as well as for the prevention and investigation of criminal offences (e.g. hate or hate speech).
The legal basis for processing the data transmitted in the course of contacting us is Art. 6(1)(f) GDPR. If the purpose of you contacting us is related to concluding a contract or pertaining to an existing contractual relationship, the additional legal basis for the processing is Art. 6(1)(b) GDPR.
Your data shall be deleted if your enquiry has been conclusively answered and the deletion does not conflict with any statutory retention obligations, such as in the case of any subsequent contract processing.
Your Rights
As a data subject, you have the following rights vis-à-vis us with regard to the data processing detailed above:
- Right of access to the personal data concerning you pursuant to Art. 15 GDPR
- Right to rectification of the personal data concerning you pursuant to Art. 16 GDPR
- Right to erasure of the personal data concerning you pursuant to Art. 17 GDPR
- Right to restriction of processing of the personal data concerning you pursuant to Art. 18 GDPR
- Right to data portability of the personal data concerning you pursuant to Art. 20 GDPR
- Right to object to the processing of personal data concerning you pursuant to Art. 21 GDPR where such processing is based on the performance of a task carried out in the public interest or in the exercise of official authority pursuant to Art. 6(1)(e) GDPR or the safeguarding of our legitimate interests pursuant to Art. 6(1)(f) GDPR.
If you believe that our processing of personal data concerning you is not in accordance with applicable data protection law, you also have the right to lodge a complaint with the competent supervisory authority.
For a list including contact details of the supervisory authorities, please visit:
https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html
