GTÜ Gesellschaft für Technische Überwachung mbH

Data protection information

As operator of the website www.gtue.de (also "website"), we are the controller of the personal data of the user (“you“) of this website, within the meaning of the applicable data protection law, in particular the General Data Protection Regulation (“GDPR”).

Within the scope of our information obligations (Art. 13 et seq. GDPR), we provide you below with a clear overview of the data processed when you visit our website and the legal basis on which this is done. We also inform you on how we protect your data from a technical and organisational point of view and what rights you have in relation to us and the responsible supervisory authority.

1. Information on the controller

GTÜ Gesellschaft für Technische Überwachung mbH
Vor dem Lauch 25
70567 Stuttgart
Phone: 0711 97676-0
Fax: 0711 97676-199
Email: info@gtue.de

2. Data protection officer

We have a company data protection officer:

Florian Klytta
c/o DS Compliance GmbH
Carlsplatz 24 40213 Dusseldorf
Email: datenschutz@gtue.de

We would like to inform you that when using this email address, the contents may not be exclusively reviewed by our data protection officer. If you would like to exchange confidential information, we would therefore ask you to contact us directly via this email address without giving a detailed description of the facts.

3. Informational use of our website

If you call up our website to simply visit it, so-called log files are automatically captured and processed by our system.

The following log files are processed automatically:

IP address of the requesting computer
type of internet browser used
Version of the Internet browser used
Operating system and its version
Pages viewed
Date and time of visit
Access status/http status code
Amount of data transferred

The log files contain your IP address and possibly other personal data. Therefore, it is generally possible to assign this data to you. However, we only store your data temporarily and in particular not together with other personal data.

The processing of the above data is necessary for the provision of our website. We also store the data for the purpose of security of our information technology systems. This also justifies our legitimate interest in processing the data on the legal basis of Art. 6 (1), first sentence, (f) GDPR. The log files, which also contain your IP address, are deleted or made anonymous immediately after they are no longer required to achieve the aforementioned purposes, but no later than 14 days.

4. Contact by email, telephone or fax

You have the option of contacting us by email, telephone or fax. Your personal data transmitted in this way will be stored by us. The data will not be passed on to third parties. The data will only be processed in order to process your contact. The legal basis for the processing of your personal data is Art. 6 (1), first sentence, (f) GDPR. It is in our legitimate interest to process your data transmitted to us in order to contact you. The data will be stored until they are no longer required to achieve the purpose of the conversation with you and the issue of your contact has been fully resolved.

If your contact is aimed at entering into a contract with us, the additional legal basis for the processing of your personal data is Art. 6 (1), first sentence, (b) GDPR. These data are stored for as long as they are necessary for the execution of the contract or the pre-contractual measures. Beyond that, we only store your data in order to comply with our legal obligations (e.g., tax obligations) (Art. 6 (1), first sentence, (c) GDPR).

In addition to the data you voluntarily provide to us, we may also receive the timestamp (date and time) of when you submit your data to us, as well as your IP address. The processing of this data is based on our legitimate interest (Art. 6 (1), first sentence, (f) GDPR) to ensure the security of our systems and to counteract misuse. This data, which we also collect when you contact us, will be deleted as soon as it is no longer required, at the latest when the issue of your contact has been fully resolved.

You can instruct us at any time (see Section 1 above) to delete the data communicated in the context of the conversation. In this case, as far as permissible, all personal data of the conversation will be deleted and it will not be possible to continue the conversation.

5. Contact forms/feedback

You can opt to contact us electronically via our contact forms, for example to give us feedback, to send inquiries about the services we offer or to ask us general questions or if you want us to remind you of your main inspection ("Hauptuntersuchung" - HU). If you use this option, we will process the data collected in the contact form:

Email address (to contact you)
Salutation, name (for the purpose of preventing abuse)
Telephone number (to contact you)
Postcode (only for HU reminder & workshop tester)
Street, house number & city (only for workshop testers)
License plate number (only for HU reminder)
Next HU (only for HU reminders; for chronological assignment of the information)
Your message

By submitting the contact form, you agree to the processing of your data by us. The legal basis for the processing of your data for the purpose of processing your contact is Art. 6 (1) (a) GDPR. The legal basis for the processing of your data in order to handle your contact request is also Art. 6 (1), first sentence, (f) GDPR. It is in our legitimate interest to process your data transmitted to us in order to contact you. The data will be stored until they are no longer required to achieve the purpose of the conversation with you and the issue of your contact has been fully resolved.

If your contact is aimed at entering into a contract with us, the additional legal basis for the processing of your personal data is Art. 6 (1), first sentence, (b) GDPR. This data is stored for as long as it is necessary to carry out the contract. Beyond that, we only store your data in order to comply with legal obligations (e.g., tax obligations) (Art. 6 (1), first sentence, (b) and (c) GDPR).

In addition to the data that you voluntarily provide us with, we store the time (date and time) when your data was transmitted to us, as well as your IP address. The processing of this data is based on our legitimate interest (Art. 6 (1), first sentence, (f) GDPR) to ensure the security of our systems and to counteract misuse. This data, which we also collect when you contact us, will be deleted as soon as it is no longer required. At the latest when the issue of your contact has been fully resolved.

6. Social networks

6.1 Icon links

We use small icons and other links on our website, each of which refers to our web pages on third-party platforms (Facebook, Instagram, LinkedIn, YouTube, XING and Wikipedia). As these are hyperlinks, we do not transfer your data automatically, but only when you click on the icons or the corresponding link and a new tab opens in your browser with the website of the third-party provider.

a. Facebook fan page

https://www.facebook.com/GTUEmbH

We operate on the social media platform Facebook (Meta Platforms, Inc., Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, D2 Dublin, Ireland (hereinafter: "Meta" or "Facebook")), a fan page that we link to on our company website via the Facebook icon. As long as you do not click on the link, Meta will not receive any data from you. If you click on the link, for example to view our company page on Facebook or to "like" our page, Meta receives data from you (which data Meta receives also depends on whether you are logged into Facebook with your user profile while you are using the click page or not). In addition, Meta uses so-called cookies, which are stored on your end device when you visit our fan page even if you do not have your own Facebook profile or are not logged into it when you visit our fan page. These cookies allow Meta to create user profiles based on your preferences and interests and to show you tailored advertising (inside and outside of Facebook). Cookies remain on your end device until you delete them. More information about the cookies used by Meta can be found at https://www.facebook.com/policies/cookies/

According to its own statements, Meta uses this data for a wide variety of purposes and transmits it worldwide, both internally to other Meta companies and to a wide variety of external partners. Meta relies on various legal bases for this data processing, which you can find in detail in Meta's data policy. The data policy can be found at the following link: https://www.facebook.com/policy.php

While Meta uses this data under its own responsibility for various purposes, we can only see aggregated data, i.e., statistics (e.g., user growth, user demographics, use of individual functions) on our company website, which no longer have any personal reference. These are called “page insights”. You can find more information about the Page Insights under the following link: https://www.facebook.com/legal/terms/information_about_page_insights_data

According to the provisions of the GDPR, we are jointly responsible with Meta for data processing on our fan page (Art. 26 GDPR). Accordingly, we have entered into a Meta-provided agreement with Meta that governs this shared responsibility. You can find this agreement in German under the following link: https://www.facebook.com/legal/terms/page_controller_addendum

As a result, Meta is primarily responsible for the aggregated Insight data. In addition, Meta will fulfil all obligations under the GDPR with regard to the processing of Insight data (such as Art. 12, 13 GDPR, Art. 15-22 GDPR and Art. 32-34 GDPR). If you send us an inquiry regarding our Facebook fan page, we will inform Meta promptly. According to our agreement, Meta will respond to the request.

Our legitimate interests in the processing of personal data lie in the use and linking of different communication channels, marketing via high-reach social media platforms and the analysis and evaluation of the success of our communication and marketing efforts. The legal basis for processing is Art. 6 (1), first sentence, (f) GDPR. If you agree to the data processing (in particular the setting of cookies), the processing is also based on Art. 6 (1), first sentence, (a) GDPR.

If you use our Facebook fan page to contact us (e.g., by contributing a post, reacting to one of our posts or by private messages to us), we will process the data you have provided exclusively to process your contact. The legal basis for the processing of your personal data is thus Art. 6 (1), first sentence, (f) GDPR. It is in our legitimate interest to process your data transmitted to us in order to contact you. The data will be stored until they are no longer required to achieve the purpose of the conversation with you and the issue of your contact has been fully resolved. You can instruct us at any time (see Section 1 above) to delete the data communicated in the context of the conversation. In this case, as far as permissible, all personal data of the conversation will be deleted and it will not be possible to continue the conversation.

b. Instagram

https://www.instagram.com/gtue.de/

We operate a company page on the social media portal Instagram. Instagram is operated by Meta Platforms, Inc., Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, D2 Dublin, Ireland, with the Facebook and Instagram platforms sharing the technical infrastructure according to their own statements. In the following, the term "Instagram" is used for the social media portal, the term "Meta" for the operator of this portal.

On our website we link to our company page on Instagram using the Instagram icon. As long as you do not click on the link, Meta will not receive any data from you. If you click on the link, for example to view or subscribe to our company page on Instagram, Meta receives data from you (which data Meta receives also depends on whether you are logged in to Instagram with your user profile while you click on the page or not). In addition, Meta uses so-called cookies, which are stored on your device when you visit our company page even if you do not have your own Instagram profile or are not logged into it during your visit to our company page. These cookies allow Meta to create user profiles based on your preferences and interests and to show you tailored advertising (on and off Instagram). Cookies remain on your end device until you delete them. More information about the cookies used by Meta can be found at https://help.instagram.com/1896641480634370?ref=ig

According to its own statements, Meta uses this data for a wide variety of purposes and transmits it worldwide, both internally to other Meta companies and to a wide variety of external partners. Meta relies on various legal bases for this data processing, which you can find in detail in Instagram's privacy policy and Meta's data policy. Instagram's privacy policy can be found at the following link: https://www.instagram.com/legal/privacy/

While Meta uses this data under its own responsibility for various purposes, we can only see aggregated data, i.e., statistics (e.g., user growth, user demographics, use of individual functions) on our company page, which no longer have any personal reference. These are called “Page Insights”. More information about the Page Insights can be found on the corresponding Meta information page, which refers to all Meta products (and thus also to Instagram). You can access this information page under the following link: https://www.facebook.com/legal/terms/information_about_page_insights_data

According to the provisions of the GDPR, we are jointly responsible with Meta for data processing on our Instagram company page (Art. 26 GDPR). Accordingly, we have entered into a Meta-provided agreement with Meta that governs this shared responsibility. You can find the agreement in German under the following link: https://www.facebook.com/legal/terms/page_controller_addendum

As a result, Meta is primarily responsible for the aggregated Insight data. In addition, Meta will fulfil all obligations under the GDPR with regard to the processing of Insight data (such as Art. 12, 13 GDPR, Art. 15-22 GDPR and Art. 32-34 GDPR). If you send us an inquiry regarding our Instagram company page, we will inform Meta promptly. According to our agreement, Meta will respond to the request.

If you use our Instagram web page to contact us (e.g., by contributing a post, reacting to one of our posts or by private messages to us), we will process the data you have provided exclusively to process your contact. The legal basis for the processing of your personal data is thus Art. 6 (1), first sentence, (f) GDPR. It is in our legitimate interest to process your data transmitted to us in order to contact you. The data will be stored until they are no longer required to achieve the purpose of the conversation with you and the issue of your contact has been fully resolved. You can instruct us at any time (see Section 1 above) to delete the data communicated in the context of the conversation. In this case, as far as permissible, all personal data of the conversation will be deleted and it will not be possible to continue the conversation.

c. LinkedIn

https://de.linkedin.com/company/gtü-gesellschaft-für-technische-überwachung-mbh

We operate a web page on the social media portal LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (hereinafter "LinkedIn")), which we link to our website via the LinkedIn icon. As long as you do not click on the link, LinkedIn will not receive any data from you. If you click on the link, for example to view our website on LinkedIn, LinkedIn receives data from you (which data LinkedIn receives also depends on whether you are logged in to LinkedIn with your user profile while you click on the page or not). LinkedIn also uses so-called cookies, which are stored on your device when you visit our company website, even if you do not have your own LinkedIn profile or are not logged into it when you visit our company website. These cookies allow LinkedIn to provide its services, measure the performance of the services, and display relevant ads (including job ads) on and off LinkedIn. Cookies remain on your end device until you delete them. You can find more information about the cookies used by LinkedIn under https://www.linkedin.com/legal/cookie-policy?trk=homepage-basic_footer-cookie-policy

According to its own statements, LinkedIn uses this data for a wide variety of purposes and transmits it to a wide variety of recipients, including those who are not based within the EU. LinkedIn relies on various legal bases for this data processing, which you can find in LinkedIn's privacy policy. The privacy policy can be found under the following link: https://de.linkedin.com/legal/privacy-policy

While LinkedIn uses this data under its own responsibility for various purposes, we can only see aggregated data on our LinkedIn company page, i.e., statistics that no longer have any personal reference. These are called “page insights”. You can find more information about “Page Insights” on the relevant information page on LinkedIn https://www.linkedin.com/help/linkedin/answer/4499/linkedin-page-analytics-overview?lang=en

In addition, if you decide to become a follower when you visit our LinkedIn website, we will also receive your name and your position in the company according to the information in your LinkedIn user profile, as well as the time at which you became our follower.

According to the provisions of the GDPR, we are jointly responsible with LinkedIn for data processing on our LinkedIn page (Art. 26 GDPR). Accordingly, we have entered into an agreement provided by LinkedIn with LinkedIn that governs this shared responsibility. You can find the agreement at the following link: https://legal.linkedin.com/pages-joint-controller-addendum

As a result, LinkedIn is primarily responsible for the aggregated insight data. In addition, LinkedIn will fulfil all obligations under the GDPR with regard to the processing of Insight data (e.g., Art. 12-22 GDPR and Art. 32-34 GDPR). If you send us an inquiry regarding our LinkedIn page, we will promptly inform LinkedIn of this. According to our agreement, LinkedIn will answer the request.

Our legitimate interests in the processing of personal data lie in the use and linking of different communication channels, marketing via high-reach social media platforms, and analysis and evaluating the success of our communications and marketing efforts. The legal basis for processing is Art. 6 (1), first sentence, (f) GDPR. If you agree to the data processing (in particular the setting of cookies), the processing is also based on Art. 6 (1), first sentence, (a) GDPR.

If you use our LinkedIn web page to contact us (e.g., by contributing a post, reacting to one of our posts or by private messages to us), we will process the data you have provided exclusively to process your contact. The legal basis for the processing of your personal data is thus Art. 6 (1), first sentence, (f) GDPR. It is in our legitimate interest to process your data transmitted to us in order to contact you. The data will be stored until they are no longer required to achieve the purpose of the conversation with you and the issue of your contact has been fully resolved. You can instruct us at any time (see Section 1 above) to delete the data communicated in the context of the conversation. In this case, as far as permissible, all personal data of the conversation will be deleted and it will not be possible to continue the conversation.

d. YouTube

https://www.youtube.com/user/gtuemedia

We operate a company channel on the video sharing platform YouTube. YouTube is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. In the following, the term "YouTube" is used for the video sharing platform, the term "Google" for the operator of the platform.

On our website we link to our company channel on YouTube using the YouTube icon. As long as you do not click on the link, Google will not receive any data from you. If you click on the link, for example to view or subscribe to our company channel on YouTube, Google will receive data from you (which data Google receives also depends on whether you are logged in to YouTube with your user profile while you click on the page or not). In addition, Google uses so-called cookies, which are stored on your end device when you visit our company channel, even if you do not have your own YouTube profile or are not logged into it during your visit to our company channel. These cookies allow Google, among other things, to collect and analyse data on audience interactions and website statistics (inside and outside of YouTube). Cookies remain on your end device until you delete them. More information about the cookies used by Google can be found at https://policies.google.com/technologies/cookies?hl=de&utm_source=ucb

According to its own statements, Google uses this data for a wide variety of purposes and transmits it worldwide, both internally to affiliated companies and to companies, organizations or people outside of Google. Google relies on various legal bases for this data processing, which you can find in detail in Google's data protection guidelines. You can find Google's privacy policy at the following link: https://policies.google.com/privacy?hl=en

While Google uses this data under its own responsibility for various purposes, we can only see aggregated data, i.e., statistics (e.g., playbacks, playback times and types of access sources) on our company page, which no longer have any personal reference. This performance data is analysed with the "YouTube Analytics" tool. You can find more information about the performance data on the relevant information page from Google under the following link: https://support.google.com/youtube/answer/9002587?hl=en

If you use our YouTube channel to contact us (e.g., by contributing a post, reacting to one of our posts or by private messages to us), we will process the data you have provided exclusively to process your contact. The legal basis for the processing of your personal data is thus Art. 6 (1), first sentence, (f) GDPR. It is in our legitimate interest to process your data transmitted to us in order to contact you. The data will be stored until they are no longer required to achieve the purpose of the conversation with you and the issue of your contact has been fully resolved. You can instruct us at any time (see Section 1 above) to delete the data communicated in the context of the conversation. In this case, as far as permissible, all personal data of the conversation will be deleted and it will not be possible to continue the conversation.

e. XING

https://www.xing.com/pages/gtugesellschaftfurtechnischeuberwachungmbh

We have a company page on the social media portal XING (New Work SE, Dammtorstraße 29-32, 20354 Hamburg, hereinafter "XING"), which we link to on our website via the XING icon. As long as you do not click on the link, XING will not receive any data from you. If you click on the link, for example to look at our company page on XING, XING will receive data from you (which data XING receives also depends on whether you are logged in to XING with your user profile while you click on the page or not). In addition, XING uses so-called cookies, which are stored on your end device when you visit our company page, even if you do not have your own XING profile or are not logged into it during your visit to our company page. These cookies allow XING, among other things, to use tracking tools and display personalised advertising (within and outside of XING). Cookies remain on your end device until you delete them. More information about the cookies used by XING can be found at https://privacy.xing.com/de/datenschutzerklaerung/druckversion

According to its own statements, XING uses this data for a wide variety of purposes and transmits it to a wide variety of recipients, including those who are not based within the EU. XING relies on various methods for this data processing Legal bases, which you can find in detail in the privacy policy of XING. The privacy policy can be found under the following link: https://privacy.xing.com/de/datenschutzerklaerung/druckversion

While XING uses this data under its own responsibility for various purposes, we can only see aggregated data on our company page, i.e., statistics that no longer have any personal reference.

In addition, if you are logged in with your user profile when you visit our XING company page, we may receive additional information about you. The extent to which we see such additional information about you (e.g., your name, activity information, time of your visit to the site) depends on the settings you have made in your XING user profile. You can use your XING user profile to control in detail which data we receive about you personally.

If you use our XING site to contact us (e.g., by contributing a post, reacting to one of our posts or by private messages to us), we will process the data you have provided exclusively to process your contact. The legal basis for the processing of your personal data is thus Art. 6 (1), first sentence, (f) GDPR. It is in our legitimate interest to process your data transmitted to us in order to contact you. The data will be stored until they are no longer required to achieve the purpose of the conversation with you and the issue of your contact has been fully resolved. You can instruct us at any time (see Section 1 above) to delete the data communicated in the context of the conversation. In this case, as far as permissible, all personal data of the conversation will be deleted and it will not be possible to continue the conversation.

f. Twitter

We have a company page on the social media portal Twitter (Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland (hereafter "Twitter")), which we have linked to our website via the Twitter icon. As long as you do not click on the link, Twitter will not receive any data from you. If you click on the link, for example to view our company page on Twitter, Twitter receives data from you (which data Twitter receives also depends on whether you are logged in to Twitter with your user profile while you click on the page or not). In addition, Twitter uses so-called cookies, which are stored on your end device when you visit our company page, even if you do not have your own Twitter profile or are not logged into it during your visit to our company page. These cookies allow Twitter, among other things, to use tracking tools and to display personalised advertising (within and outside of Twitter). Cookies remain on your end device until you delete them. You can find more information about the cookies used by Twitter at https://help.twitter.com/en/rules-and-policies/twitter-cookies

According to its own statements, Twitter uses this data for a wide variety of purposes and transmits it to a wide variety of recipients, including those who are not based within the EU. Twitter relies on various legal bases for this data processing. Twitter's privacy policy gives you an overview, which you can access under the following link: https://twitter.com/de/privacy

If you use our Twitter page to contact us (e.g., by creating your own posts, reacting to one of our posts or by sending us private messages), we process the data you have provided exclusively in order to process your contact. The legal basis for the processing of your personal data is Art. 6 (1), first sentence, (f) GDPR. It is in our legitimate interest to process your data transmitted to us in order to contact you. The data will be stored until they are no longer required to achieve the purpose of the conversation with you and the issue of your contact has been fully resolved. You can instruct us at any time (see Section 1 above) to delete the data communicated in the context of the conversation. In this case, as far as permissible, all personal data of the conversation will be deleted and it will not be possible to continue the conversation.

g. Wikipedia

If you wish, you can use the online encyclopaedia Wikipedia (Wikimedia Foundation Inc., 1 Montgomery Street, Suite 1600, San Francisco, CA 94104, USA, hereinafter "Wikipedia") to view a user contribution about our company that we have linked to our website using the Wikipedia icon.

Until you click the link, Wikipedia will not receive any data from you. This only happens when you click the link to view the post. In addition, Wikipedia uses so-called cookies, which are stored on your end device when you visit the Wikipedia website. These cookies allow Wikipedia to create user profiles based on your preferences and interactions with the Wikipedia pages and generally improve the services offered. Cookies remain on your end device until you delete them. More information about the cookies used by Wikipedia can be found at https://foundation.wikimedia.org/wiki/Cookie_statement

According to its own statements, Wikipedia uses this data for a wide variety of purposes and processes it in the USA, both internally and via external service providers. Wikipedia relies on various legal bases for this data processing, which you can find in detail in the data policy of Wikipedia. The data policy can be found at the following link: https://meta.wikimedia.org/wiki/Privacy_policy/en

Wikipedia does not forward any personal data, for example in the form of personalised statistics, to us.

6.2 Social media management software

The data made available to us by the social media network operators is processed by us in the social media management software "Hootsuite". We have a legitimate interest in using this software in accordance with Art. 6 (1), first sentence, (f) GDPR.

Hootsuite allows us to manage multiple social media accounts. Contributions can be prepared, planned, published, liked and shared. At the same time, the channels of the different services can also be tracked within Hootsuite in order to observe relevant discussions on the social web about our company, brands or our services and products.

The data is stored for a maximum of two years and then deleted.

7. Other third-party content and functions integrated on our website

7.1 YouTube

For the purpose of making our website appealing, we have embedded videos from YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter: "YouTube"). In the following, the term "YouTube" is used for the video portal, the term "Google" for the operator of this portal.

When integrating YouTube videos, we use the extended privacy mode, in which, according to the provider, information about you is only shared with Google if you activate the video by clicking the play button on the video.

If you activate the video, Google may use cookies to collect information for analysis purposes and to improve user-friendliness. According to Google, the data is processed pseudonymised. However, particularly if you are logged into your Google or YouTube account, the data may be directly linked to those accounts.

According to its own statements, Google uses this data for a wide variety of purposes and transmits it to a wide variety of recipients, including those who are not based within the EU. Google relies on various legal bases for this data processing. Google's privacy policy gives you an overview, which you can access under the following link: https://policies.google.com/privacy?hl=en

The legal basis for the integration of the YouTube service on our website and the associated processing of your data is Art. 6 (1), first sentence, (f) GDPR. Our legitimate interests lie in the appealing design of our website and the use of a specialised third-party service for hosting and displaying videos.

If YouTube sets cookies when you actively click on and play a YouTube video on our site, we process your data on the basis of your consent (Art. 6 (1), first sentence, (a) GDPR) and on the basis of our legitimate interests (Art. 6 (1), first sentence, (f) GDPR). You can withdraw your consent at any time by deleting the cookies from your browser. In this respect, our legitimate interests also lie in the appealing design of our website and the use of a specialised, external service for hosting and displaying videos.

7.2 Yellow Map

We include maps from the YellowMap service provided by YellowMap AG, CAS-Weg 1-5, D-76131 Karlsruhe, Germany. In order to make the map material available, YellowMap processes technically necessary data for this purpose. When you enter the postal code, your browser loads the required data from YellowMap in order to provide you with the correct map display.

We process your data for the above purposes on the following legal basis:
The integration of the YellowMap service is necessary for the needs-based design of our website. This is also our legitimate interest in data processing in accordance with Art. 6 (1), first sentence, (f) GDPR.

7.3 Usercentrics Consent Management Platform

For the easy and transparent management of consent, we use the Usercentrics Consent Management Platform (Usercentrics CMP) from Usercentrics GmbH, Rosental 4, 80331 Munich. We have concluded an order processing contract with Usercentrics GmbH.

Usercentrics collects log file data and consent data using JavaScript. This JavaScript enables us to inform, obtain, manage and document the user's consent to certain cookies and other technologies on our website. The purpose is to comply with legal obligations and to store consent for verification purposes. The legal basis for processing the data is Art. 6 (1), first sentence, c in connection with Art. 7 (1) GDPR. The data is processed in the European Union.

The consent data (consent, revocation of consent, date and time, IP address and device information) are stored for three years. You can permanently prevent the execution of JavaScript at any time by making the appropriate settings in your browser, which would also prevent Usercentrics from executing the JavaScript. Further information on data protection at Usercentrics: https://usercentrics.com/de/datenschutzerklaerung/

7.4 Google Analytics 4

The analysis service Google Analytics 4 is implemented on our website, which is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland for users from the European Economic Area, Switzerland and Liechtenstein and by Google LLC, 1600 Amphitheater Parkway Mountain View, CA 94043, USA (hereinafter: "Google Analytics 4"). You can find Google's privacy policy under the following link: https://policies.google.com/privacy?hl=en

We have concluded an order processing contract with Google Ireland Limited in accordance with Art. 28 GDPR.

Among other things, Google Analytics 4 can record the following information:

type of internet browser used
Internet browser version
the operating system you are using
chosen language
data on the requesting end device
referrer (previously visited website)
your IP address (according to Google, the IP address is only used temporarily to determine a rough location of the requesting end device (city level) and then deleted)
(approximate) location data, i.e., city (including its longitude and latitude), continent, country, region and subcontinent of the requesting device
date and time of the server request
session duration
clicking and scrolling behaviour including media playing, internal searches, content sharing
web shop interactions, such as product views and orders

Google Analytics 4 only uses the IP address to derive location data. According to Google, IP addresses are otherwise not logged or stored.

Google Analytics 4 only shows us statistics that we use to optimise our website and offers. We have also configured Google Analytics 4 in such a way that Google is not allowed to use the data for its own analysis of online trends or to improve its own products and services.

Before we use Google Analytics 4 to analyse your website visit, we obtain your consent to the processing of your personal data (Art. 6 (1), first sentence, (a) GDPR), the setting of the necessary cookies (Section 25 (1) German Telecommunications and Telemedia Data Protection Act (TTDSG)) and the data transmission to the USA possibly associated with Google Analytics 4 (Art. 49 (1), first sentence, (a) GDPR).

You can find more information about the cookies used in our cookie information.

The legal basis for the processing of your personal data and the setting of cookies within the framework of Google Analytics 4 is therefore your consent in accordance with Section 25 (1) TTDSG and Art. 6 (1), first sentence, (a) GDPR.

The legal basis for the transmission of your personal data to Google servers in the USA, which may be associated with Google Analytics 4, is your consent in accordance with Art. 49 (1), first sentence, (a) GDPR. Please note the following in this regard:

Note on data transfers to the USA:
The use of Google Analytics is based on an agreement that we have concluded with Google Ireland Ltd. At Google Ireland Ltd. However, it is a subsidiary of the US group Google, so that your personal data may also be transferred to US group companies of Google (esp. Google LLC) and Google servers located in the USA. The USA is a third country within the meaning of the GDPR for which there is no adequacy decision. The ECJ has classified the USA as insecure in terms of data protection law, as there is a lack of an adequate level of data protection. In particular, when personal data is transferred to the USA, there is a risk that US security authorities could access this data on the basis of the powers to which they are entitled, without you as the person concerned being entitled to appropriate legal remedies.

Therefore, we only use Google Analytics 4 if you have given your consent (Art. 49 (1), first sentence, (a) GDPR).

You can revoke your consent according to the aforementioned legal bases at any time by changing the privacy settings on our website.

You can also prevent the collection of your personal data by Google Analytics 4 and the processing of this data by Google by clicking on the following link (https://tools.google.com/dlpage/gaoptout?hl=en) available browser add-on to disable Google Analytics and install.

You can also prevent the processing of your data as part of Google Analytics 4 by clicking on the following link and opting out: [Please insert the link]. In doing so, an "opt-out cookie " will be set, which prevents your user data from being recorded on this website in the future unless the opt-out cookie is deleted.

Finally, you can also prevent the storage of Google cookies directly yourself by making the appropriate settings in your browser.

8. Use of service providers

8.1 General remarks

We would like to point out that, when processing your personal data, we may use service providers with whom we have concluded order processing contracts (e.g., for website hosting). If processors carry out the data processing in a third country (not within the EU), we ensure that the level of protection of your data guaranteed by the GDPR is not undermined (Art. 44 et seq. GDPR).

In principle, your data will not be transferred to a third country outside the EU/EEA. However, it cannot be ruled out that data will be transmitted to a third country due to legal regulations or requirements.

Insofar as we are legally obliged to do so, the data will also be transmitted to other recipients.

8.2 Amazon Web Services

Our website uses Amazon Web Services (hereinafter "AWS"), a cloud computing environment provided by Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855, Luxembourg. Your device is connected to the content on our website and our databases via the AWS servers. We use the AWS Region Europe (Frankfurt) for this. This means that the personal data collected on our website is stored on servers located within the European Union. This can be IP addresses, contact requests, meta and communication data, contract data, contact details, names, website access and other data generated via a website.

It is in our legitimate interest to host our website and its content with a professional provider in order to ensure the security and efficiency of our offers and services (Art. 6 (1), first sentence, (f) GDPR).

We have concluded an order processing contract with Amazon. In the event that, exceptionally, personal data is transferred to the parent company of Amazon, Amazon Web Services, Inc., 410 Terry Avenue North, Seattle WA 98109, USA, in the USA, we also have so-called Standard Contractual Clauses (SCC) with Amazon. completed. Amazon has thus committed itself to guaranteeing the European data protection principles and the local level of data privacy in the context of data processing taking place in the USA. For more information, see https://d1.awsstatic.com/legal/aws-gdpr/AWS_GDPR_DPA.pdf (AWS GDPR Addendum to Data Processing or Data Processing Addendum (“DPA”)) and under https://d1.awsstatic.com/Supplementary_Addendum_to_the_AWS_GDPR_DPA.pdf (AWS Supplemental Addendum to the DPA).

8.3 Six cookies

Our website uses the content management system of Six Offene Systeme GmbH, Hanauer Landstraße 198, 60314 Frankfurt (hereinafter "Six"). The connection between your device and the content on our website and our databases is established via the Six servers.

We have concluded an order processing contract with Six.

9. Cookie information

Please note the following information in advance: You can ensure that no cookies are stored on your computer at all, or that only certain cookies are allowed to be stored. You can select this in your internet browser settings. You can also view and delete the stored cookies there.

If you block all cookies, it is possible that not all functions of our website will be available to you.

We use cookies on our website. Cookies are text files that are sent from our web server to your browser when you visit our website and are stored on your computer for later retrieval. A cookie can therefore identify your Internet browser when you visit the website again. There are session cookies, which are those that are deleted when the browser is closed, and there are persistent cookies, which are stored on the hard drive until their preset expiration date is reached or until they are actively removed by you.

We set the following types of cookies:

Technically necessary cookies: These are mandatory in order to move around the website, use basic functions and ensure the security of the website; they do not collect information about you for marketing purposes, nor do they remember which websites you have visited. The legal basis for setting the technically necessary cookies is Section 25 (2) TTDSG and Art. 6 (1), first sentence, (f) GDPR, whereby our legitimate interests lie in the provision of important functionalities and the correct presentation of the website.

Optional cookies: We also use so-called analysis and marketing cookies on our website. Analysis cookies collect information about how you use our website, which pages you visit and, for example, whether errors occur when using the website. Marketing cookies are used to show you tailored advertising on the website or offers from third parties and to measure the effectiveness of these offers. These are cookies that are not technically necessary. The legal basis for the setting of these cookies is your consent according to Section 25 Abs. 1 TTDSG and Art. 6 (1), first sentence, (a) GDPR.

9.1 Google Analytics 4

We place optional cookies from Google Analytics 4 on our website to statistically evaluate website visits. (Further information on this service, in particular on the legal basis for the subsequent processing of the information collected by these cookies, can be found under Section 7.4).

With your consent (Section 25 (1) TTDSG and Art. 6 (1), first sentence, (a) GDPR), the following cookies are set:

Name: _ga
Lifespan: 2 years
Purpose: This cookie is used to distinguish individual website visitors.

Name: _ga_ <container-id>
Lifespan: 2 years
Purpose: This cookie stores information about your visit to our site.

Possibility of revocation and elimination

As stated in the introduction to this section, you can enable or restrict the transmission of cookies by changing the settings in your Internet browser. You can delete cookies that have already been saved by your internet browser there at any time. If cookies are restricted or deactivated for our website, it is possible that not all functionalities can be used.

9.2 Amazon Web Services

Our website uses Amazon Web Services (hereinafter "AWS"), a cloud computing environment provided by Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855, Luxembourg. (Further information on this service, in particular on the legal basis for the subsequent processing of the information collected by these cookies, can be found under Section 8.2).

To enable the use of AWS, Amazon sets the following cookies:

Name: AWSALB
Purpose and duration: The Amazon Web Services Classic Load Balancer cookie is used for load balancing on the server. Duration: 7 days

Name: AWSALBCORS
Purpose and duration: The Amazon Web Services Classic Load Balancer cookie is used for load balancing on the server. Duration: 7 days

The legal basis for any processing of personal data via these cookies is Art. 6 (1) (f) GDPR.

9.3 Six cookies

Our website uses the content management system of Six Offene Systeme GmbH, Hanauer Landstraße 198, 60314 Frankfurt (hereinafter "Six"). (Further information on this service, in particular on the legal basis for the subsequent processing of the information collected by these cookies, can be found under Section 8.3).

In order to enable the content management services to be used, Six sets the following cookies:

SIXCMS90_SESSION_ID: The session cookie enables the visitor to be recognised using an anonymous ID. This cookie is deleted as soon as you close your browser. Duration: session/session

It is a technically necessary cookie. The legal basis for any processing of personal data via this cookie is therefore Art. 6 (1) (f) GDPR.

9.4 Usercentrics

(Further information on this service, in particular on the legal basis for the subsequent processing of the information collected by these cookies, can be found under Section 7.3).

10. Your rights

If we process your personal data, you are the "data subject" within the meaning of the GDPR. If the legal requirements are met, you have the following: rights: right to information, right to correction, right to restriction of processing, right to erasure, right to notification as well as the right to data portability. In addition, you have a right to object, a right to withdrawal and the right to lodge a complaint with the supervisory authority.

Below are some details on each right:

a. Right to information

You have the right to request confirmation from us as to whether we are processing your personal data. If we process your personal data, you have the right to receive information about the processed data, processing purposes, categories of personal data, recipients or categories of recipients and, if applicable, the storage period.

b. Right to rectification

You have the right to have the personal data that we hold about you corrected and/or completed if this personal data is inaccurate or incomplete. We will rectify or complete the data immediately.

c. Right to restrict processing

Under certain conditions, you have the right to request that we restrict the processing of your personal data. An example of this is that you contest the accuracy of your personal data and we need to verify the accuracy for a certain period of time. Your personal data will only be processed to a limited extent for the duration of the examination. Another example of restriction is where we no longer need your personal information, but you need it for a legal dispute.

d. Right to erasure

In certain situations, you have the right to request that we erase your personal data immediately. This is the case, for example, if we no longer need your personal data for the purposes for which we collected the personal data or if we have processed your personal data unlawfully. Another example would be where we process your personal data based on your consent, you withdraw your consent and we do not process the personal data based on any other legal basis. However, your right to erasure does not always exist. For example, we may process your personal data in order to comply with a legal obligation or because we need it for a legal dispute.

e. Right to notification

If you have asserted your right to rectification, erasure or restriction to us, we are obliged to notify all recipients to whom we have disclosed your personal data of the rectification, erasure or restriction of processing of your personal data, unless this proves to be impossible or involves a disproportionate effort.

f. Right to data portability

You have the right, under certain conditions, to receive the personal data that you have provided to us in a structured, commonly used and machine-readable format and the right to have this personal data transmitted to another controller. This is the case when we process the personal data either on the basis of your consent or on the basis of a contract with you and when we process the personal data using automated processes.

You have the right to have us transfer your personal data directly to another controller, insofar as this is technically feasible and the freedoms and rights of other people are not impaired by this.

This right to data portability does not apply if the processing is necessary for the performance of a task that is in the public interest or in the exercise of official authority that has been delegated to us.

g. Right of objection according to Art. 21 GDPR

You have the right, for reasons that arise from your particular situation, at any time to lodge an objection against the processing of your personal data, which is based on Art. 6 (1) (e) or (f) GDPR. This also applies to profiling referred to in these provisions.

After an objection, we no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If we process your personal data in order to conduct direct marketing, you have the right to object at any time to the processing of your personal data for the purpose of such marketing. This also applies to profiling insofar as it is related to direct marketing. If you object to the processing of your personal data for direct marketing purposes, we will no longer process it for these purposes.

You can send an objection, for example, by email to datenschutz@gtue.de.

h. Right of withdrawal

You can revoke your consent given to us at any time with effect for the future. A revocation of the consent does not affect the legality of the data processing carried out on the basis of the consent up to the point of revocation.

You can revoke your consent, for example, by sending an email to datenschutz@gtue.de.

i. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority, without prejudice to any other administrative or judicial remedy. In particular, you can assert your right to lodge an appeal in the member state of your place of residence, your place of work or the place of the alleged infringement, if you believe that the processing of your personal data violates the GDPR.

You can find an overview of the respective state data protection officers of each federal state along with their contact details on the website of the Federal Commissioner for Data Protection and Freedom of Information (https://www.bfdi.bund.de/EN/).

11. Up-to-dateness and changes to this privacy policy

Status: June 2023

Version: 2.3

Data pro­tec­tion in­for­ma­tion