Please note: This text has been translated from the German version. The German version is the only legally valid version.

Gühring KG strives to offer its customers a unique and secure online experience. Data protection is the utmost priority for all employees of Gühring KG. In principle, it is possible to use the Gühring KG website without providing any personal data. However, personal data may need to be processed if a data subject wishes to use certain services offered by Gühring KG via its website or online shop. If the processing of personal data is necessary and there is no legal basis for this type of processing, Gühring KG generally obtains the consent of the data subject.

This policy has been created taking into account the requirements of the GDPR, the Federal Data Protection Act and other legal data protection provisions of the Federal Republic of Germany and the European Union. With this Privacy Policy, Gühring KG informs the public about the type, scope and purpose of the collection, use and processing of personal data. In addition, data subjects will be informed about their rights under this Privacy Policy.

Controller responsible for the collection and processing of personal data

The controller within the meaning of the General Data Protection Regulation, other data protection laws applicable in the Member States of the European Union and other legal provisions of a data protection nature is:

Gühring KG

Herderstraße 50-54

72458 Albstadt

Germany

Tel.: +49 (0) 7431 17-0

Email: info@guehring.de

Website: https://guehring.com/   

Any data subject may contact our data protection officer directly at any time with any questions or suggestions regarding data protection:

Gühring KG, Data Protection Officer

Herderstraße 50-54

72458 Albstadt

Germany

Tel.: +49 (0) 7431 17-0

Email: datenschutz@guehring.de

Website: https://guehring.com/

Basic terminology

a) Personal data

Personal data means any information relating to an identified or identifiable natural person (hereinafter referred to as a ‘data subject’). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

b) Data subject

A data subject is any identified or identifiable natural person whose personal data is processed by the controller.

c) Processing

Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment, combination, restriction, erasure or destruction.

d) Restriction of processing

Restriction of processing means the marking of stored personal data with the aim of limiting their processing in the future.

e) Profiling

Profiling means any form of automated processing of personal data involving the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements,

f) Pseudonymisation

Pseudonymisation means the processing of personal data in such a manner that the data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data cannot be attributed to an identified or identifiable natural person.

g) Controller or controller responsible for processing

The controller or the controller responsible for processing means the natural or legal person, public authority, agency or any other body which alone or jointly with others determines the purposes and means of the processing of personal data Where the purposes and means of processing are stipulated by European Union or Member State law, the controller or the specific criteria for their designation may be laid down in European Union or Member State law.

h) Processor

Processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

i) Recipient

Recipient means a natural or legal person, public authority, agency or other body to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or other Member State law shall not be regarded as recipients.

j) Third party

Third party is a natural or legal person, public authority, body or other body other than the data subject, the controller, the processor and the persons authorised to process the personal data under the direct responsibility of the controller or the processor.

k) Consent

Consent means any freely given, specific, informed and unambiguous indication of the data subject's wishes in a particular case by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

Principles for the processing of personal data

Personal data is processed on a lawful and fair basis.

The processing of personal data is limited to specific, predetermined and legitimate purposes. Any processing of personal data that is incompatible with the purposes of data collection is not permitted.

It is not permitted to link databases containing personal data and data that is processed for incompatible purposes.

Only personal data that corresponds to the purposes of its processing will be processed.

When personal data is processed, measures are taken to ensure that it is accurate, sufficiently up-to-date and, if necessary, up-to-date with regard to the purposes of processing. The controller takes the necessary measures and/or ensures that incomplete or inaccurate data is deleted or corrected.

Personal data shall be stored in a form that makes it possible to establish the personal reference to the data subject for no longer than is necessary for the purposes of the processing of personal data, unless the retention period is determined by federal law, a contract or a party that is the beneficiary or guarantor. Processed personal data will be deleted or anonymised as soon as the processing purposes have been achieved or if the need to achieve these purposes ceases, unless this is stipulated by federal law.

General characteristics of the collection and processing of personal data

Before starting the processing of personal data as the controller and/or operator, Gühring KG determines the legal basis for the processing.

Article 6 I (a) GDPR serves as Gühring KG's legal basis for processing transactions in which the company obtains consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is party, as is the case, for example, for processing operations that are necessary for the delivery of goods or the provision of another service or consideration, the processing is based on Art. 6 I (b) GDPR. 

The same applies to any processing operations that are necessary for the performance of pre-contractual measures, such as in the case of enquiries about products or services from Gühring KG. If Gühring KG is subject to a legal obligation that makes the processing of personal data necessary, such as for the fulfilment of tax obligations, the processing is based on Art. 6 I (c) GDPR. 

In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor were to be injured on Gühring KG premises and their name, age, health insurance data or other vital information had to be passed on to a doctor, hospital or other third party. Then the processing would be based on Art. 6 I (d) GDPR. 

Lastly, processing activities could be based on Art. 6 I (f) GDPR. Processing activities that are not covered by any of the aforementioned legal bases are based on this legal basis if the processing is necessary to safeguard a legitimate interest of Gühring KG or a third party, provided that the interests, fundamental rights and freedoms of the data subject do not override this interest. These processing activities are permitted by Gühring KG in particular because they have been specifically mentioned by European lawmakers. In this respect, they were of the opinion that a legitimate interest could be assumed if the data subject is a customer of the controller (recital 47 sentence 2 GDPR).

Gühring KG collects and stores only the personal data of the data subject that is necessary for the provision of services or the fulfilment of legal obligations and contracts with the data subject.  

The personal data of the data subject may be processed for the following purposes:

• providing registration (login) on the website, access to the website and in all other cases related to such actions
• providing the website user with access to personalised resources on the website
• receiving feedback from the website user, including sending notifications, receiving enquiries about use of the website, providing services, processing enquiries and requests from the website user
• creating a user account if the website user has consented to the creation of an account
• providing effective customer and technical support to the website user in the event of problems related to the use of the website
• ensuring the functionality and security of the website, confirming the actions taken by the website user, preventing fraud, computer viruses and other abuses, and investigating such cases, etc. 
• processing data to the extent necessary for the conclusion of a purchase contract or the provision of services certain data in connection with a purchase will only be processed if the data subject requests this or gives their consent
• data processing for marketing purposes on the basis of consent, for example if a website user consents to receiving personalised information via various channels, receiving push notifications on their device, configuring appropriate privacy settings on their device, approving the cookie settings or accepting legal conditions for participating in a promotion

Gühring KG collects information provided by the data subject, including:

1. The name, address, contact details, delivery and payment information of the data subject will be collected in order to process their order for products or services.

2. If the data subject contacts Gühring KG customer support, information is collected to confirm their identity and the product being processed in order to provide an appropriate response.

3. When the data subject communicates with Gühring KG service personnel, messages are forwarded via Gühring KG systems, etc.

Gühring KG collects information about the data subjects and their use of the Gühring KG web platforms, their interaction with them, as well as information about their network, network devices and computers or any other device that the data subject uses to use the website or online shop. The following can be recorded: 

1. browser types and versions used;

2. browser types and versions used;

3. the website from which the accessing system gains access to the website or online shop;

4. the sub-webpages accessible via the accessing system on the website;

5. the date and time of access to the website; 

6. an internet protocol address (IP address); 

7. the internet service provider of the accessing system and 

8. other similar data and information used to defend against attacks on information technology systems, etc.

Personal information is generally collected in two ways: (1) information that is knowingly and voluntarily entered by the data subject directly into appropriate forms on the website, in response to certain notifications or enquiries for use or registration, or otherwise knowingly and voluntarily provided by them (e.g. by e-mail); and (2) information that is automatically collected when the data subject uses the website or the online shop.

When using this general data and information, Gühring KG does not draw any conclusions about the data subject. Rather, this information is required in order to (1) deliver the content of the website correctly, (2) optimise the content of the website and the advertising of it, (3) ensure the permanent functionality of the information technology systems and the technology of the website and (4) provide law enforcement authorities with the information necessary for prosecution in the event of a cyber attack. This anonymously collected data and information is therefore evaluated by Gühring KG for statistics on the one hand but also with the aim of increasing data protection and data security in the company in order to ultimately ensure an optimum level of protection for the personal data processed by Gühring KG. The anonymous data in the server log files is stored separately from all personal data provided by a data subject.

Gühring KG only stores personal data for as long as necessary to fulfil the contractual or legal obligations for which Gühring KG has collected the data. Thereafter, Gühring KG deletes the data immediately, unless we still need it to comply with the statutory limitation periods for claims under civil law or in connection with statutory retention obligations.

Gühring KG deletes or blocks the data subject's personal data as soon as the purpose for storage has been achieved. In addition, Gühring KG is subject to various retention and documentation obligations, which arise from the German Commercial Code (HGB) or the German Tax Code (AO), among others. The retention and documentation periods stipulated therein can be up to ten years. In addition, the retention period is also assessed in accordance with the statutory limitation periods, which can be up to thirty years, for example in accordance with Sections 195 et seq. of the German Civil Code (BGB), whereby the regular limitation period is three years.

In certain circumstances, data subjects’ data may also be retained for a longer period of time, for example if so-called legal or judicial retention is ordered in connection with administrative or judicial proceedings (a prohibition of data deletion for the duration of the proceedings). 

Rights of the data subject

a) Right to confirmation

Every data subject has the right, in accordance with European lawmakers, to obtain confirmation from the controller as to whether personal data concerning them is being processed. If a data subject wishes to exercise this right of confirmation, they may contact an employee of Gühring KG at any time.

b) Right of access

Every data subject has the right to obtain from the controller free information about the personal data stored about him or her and a copy of this information at any time, in accordance with European lawmakers.

c) Right to rectification

Every data subject has the right, according to European lawmakers, to request from the controller the immediate rectification of inaccurate personal data concerning him or her. Taking into account the purposes of processing, the data subject has the right to request that incomplete personal data is completed, including by means of a supplementary declaration.

If a data subject wishes to exercise this right to rectification, they may contact an employee of Gühring KG at any time.

d) Right to erasure (right to be forgotten)

In accordance with European legislation, each data subject has the right to request the controller to erase their personal data without undue delay, and the controller is obliged to erase the personal data without undue delay, unless the processing is necessary and there are no overriding legitimate reasons for further processing.

e) Right to restriction of processing

In accordance with European legislation, each data subject has the right to request from the controller the restriction of processing provided that one of the legal conditions is met.

If there is a legal basis for the restriction of processing and the data subject wishes to request restriction of the processing of their personal data stored by Gühring KG, they may contact an employee of the controller at any time. An employee of Gühring KG will take care of the restriction of processing.

f) Right to data portability

Every data subject has the right, according to European lawmakers, to receive the personal data concerning him or her that he or she has provided to a controller in a structured, commonly used and machine-readable format. They have the right to transfer this data to another controller without hindrance by the controller to whom the personal data has been provided, provided that the processing is based on consent pursuant to item (a) of Article 6 (1) GDPR or item (a) of Article 9(2) GDPR or on a contract pursuant to item (b) of Article 6 (1) GDPR and the processing is automated, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

In addition, in accordance with Article 20(1) GDPR, the data subject has the right to transfer their personal data directly from one controller to another, insofar as this is technically feasible and does not affect the rights and freedoms of others.

To assert the right to data portability, the data subject may contact an employee of Gühring KG at any time.

g) Right to object

Every data subject has the right, according to European lawmakers, to object at any time, for reasons arising from their particular situation, to the processing of personal data concerning them performed on the basis of item (e) or (f) of Article 6 (1) GDPR. This also applies to profiling based on these provisions.

In the event of an objection, Gühring KG will no longer process the personal data, unless we can demonstrate compelling legitimate grounds for processing that override the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.

To exercise the right to object, the data subject may contact any employee of Gühring KG. Moreover, in connection with the use of information society services and notwithstanding Regulation 2002/58/EC, the data subject is free to exercise his or her right to object by means of automated procedures using technical specifications.

h) Automated decisions in individual cases, including profiling

Every data subject has the right, according to European lawmakers, not to be subject to a decision based solely on automated processing – including profiling – which has a legal effect on them or significantly affects them in a similar way.

As a responsible company, we do not use automated decision-making or profiling.

i) Right to withdraw consent under data protection law

Every data subject has the right to withdraw their consent to the processing of their personal data at any time.

If the data subject wishes to exercise their right to withdraw consent, they can contact any employee of Gühring KG at any time.

In addition, without prejudice to other administrative or judicial redress, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged infringement, if the data subject believes that their aforementioned rights have been infringed.

How we use your personal data

Gühring KG may use the personal data provided by data subjects to provide advertising materials and information about products and services offered by Gühring KG. This may include sending personalised advertising, sending marketing materials and sending special offers.

Gühring KG wants to offer its customers up-to-date information and advertising offers based on their interests and preferences. For this reason, Gühring KG may analyse personal data of data subjects, such as their purchase history, preferences and behavioural patterns, in order to offer them suitable products and services.

Gühring KG complies with all applicable laws and regulations with regard to the processing of personal data for advertising purposes. Gühring KG also takes measures to ensure the security and confidentiality of data subjects' personal information.

The data subject has the right to unsubscribe from advertising materials or to change their preferences with regard to advertising by contacting the Gühring KG data protection officer. 

If a data subject subscribes to the Gühring KG email newsletter, Gühring KG will regularly send information about their offers. The only information required for sending the e-mail newsletter is the e-mail address of the data subject. Additional data is provided, sometimes on a voluntary basis, in order to be able to contact the data subject personally.

Gühring KG uses a process known as the double opt-in process to send the newsletter. This means that Gühring KG will only send an email newsletter to the data subject if the data subject has previously contacted Gühring KG and expressly confirmed that they consent to receiving newsletters. The data subject will then receive a confirmation email asking them to click on a link to confirm that they wish to receive the newsletter. By activating the confirmation link, the data subject gives Gühring KG consent to the use of their personal data in accordance with Art. 6 (1) (a) GDPR. If the data subject subscribes to the newsletter, Gühring KG also stores the IP address assigned to them by their internet service provider (ISP) as well as the date and time of registration in order to be able to track possible misuse of the data subject’s email address in the future. The data collected when registering for the newsletter will be used exclusively for advertising purposes for the newsletter. The data subject can unsubscribe from the newsletter at any time by following the corresponding link in the newsletter or sending a corresponding message to the above-mentioned responsible person.

After unsubscribing, the data subject's email address will be removed from the newsletter distribution list, unless the data subject has expressly consented to further use of their data or Gühring KG reserves the right to use the data beyond this in accordance with what is permitted by law and as specified in this declaration.

If the data subject provides Gühring KG with their email address as part of the purchase of goods or services, Gühring KG reserves the right to regularly send the data subject emails offering goods or services from the Gühring KG range that are similar to those that the data subject has already received. For this purpose, Gühring KG is not obliged to obtain separate consent in accordance with Section 7 (3) of the German Act against Unfair Competition (UWG). In this context, the data is processed exclusively on the basis of the legitimate interest of Gühring KG in personalised direct marketing in accordance with Art. 6 (1) (f) GDPR.

If the data subject has originally objected to the use of their email address for this purpose, we will not send any advertising communications. The data subject has the right to object to the use their email address for advertising purposes at any time by notifying the above-mentioned controller. Upon receipt of the objection from the data subject, the use of the email address for advertising purposes shall cease immediately.

Job applications

Gühring KG processes the personal data of applicants as part of the recruitment process in accordance with the legal requirements. The legal basis for this processing activity is Article 6 (1) (b) GDPR and Article 6 (1) (f) GDPR. As part of this processing activity, Gühring KG may collect the following information:

• Basic personal data (e.g. gender, first name, surname, date of birth)
• Address information (e.g. street, house number, postcode, city, country)
• Contact information (e.g. mobile phone number, email address)
• Skills (e.g. foreign languages, additional qualifications)
• Application or profile data (e.g. cover letter, CV, certificates, earliest start date, desired job, desired locations, salary expectations, how you heard about us)
• Contact information for reference providers
• Areas of interest
• Profile photo, etc.

The information provided by the applicant may contain special categories of personal data pursuant to Article 9 GDPR, which are subject to special protection.

The personal data received or collected is only stored for as long as necessary to achieve the purpose associated with its storage (e.g. to make a decision about entering into an employment contract and, where applicable, to perform and terminate the employment relationship). If an application is rejected, the data will be deleted no later than 6 months after the position is filled, unless the deletion conflicts with other legitimate interests of Gühring KG. Other legitimate interests include, for example, the obligation to provide evidence in proceedings pursuant to the German General Act on Equal Treatment (AGG) or in connection with a dispute under competition law. In the event of employment, the data will be transferred to the personnel file, to which statutory retention periods apply.

Analysis tools and marketing

Gühring KG uses third-party services for effective delivery, better presentation and detailed analysis of the content on its website.

These companies may, for example, use cookies on the user’s device as long as they are active on the website.

Gühring KG has no control over the way the cookies used by these services work. All necessary information on their use can be found on the relevant resource.

You can find Gühring KG’s cookie policy on the platforms here.

1. Borlabs Cookie (Hamburger Str. 11, 22083 Hamburg, Germany)  

Gühring KG uses the Borlabs cookie plug-in to effectively manage cookies and comply with GDPR requirements. When using the Borlabs cookie plug-in, the website collects and processes certain personal data, in particular the settings that visitors have selected in Borlabs cookie settings.

When a user visits the website, the Borlabs cookie plug-in displays a cookie notification and requests the user’s consent to the use of cookies. Gühring KG collects and stores information on the user’s consent to the use of cookies and their preferences with regard to the cookie categories.

The personal data collected by the Borlabs cookie plug-in may include the cookie runtime, cookie version, WordPress website domain and path, consent, and a UID. The UID is a randomly generated ID and not personal information. This data will only be used and stored for the purpose of managing cookies and complying with GDPR requirements.

When a user visits the website, they receive a notification and the option to easily select and save their settings (cookie settings). The Borlabs cookie does not collect any personal data. The IP address is also not used for this purpose.

Gühring KG undertakes to process the personal data collected by the Borlabs cookie plug-in in accordance with GDPR requirements and to take measures to secure this data against unauthorised access, use or disclosure. Gühring KG does not pass on this personal data to third parties, unless this is required by law or provided for in the privacy policy.

For more information about how personal data is processed in Borlabs, please read their privacy policy: https://de.borlabs.io/datenschutz/ 

2. Userlike (Userlike UG, Probsteigasse 44-46, 50670 Cologne, Germany) 

Gühring KG uses the Userlike platform to ensure a high-quality service and high-quality communication with its visitors. When using the Userlike platform, the website may collect and process certain personal data.

If a user contacts Gühring KG via the Userlike platform, Gühring KG may collect the following personal data:

• Data transfer volume;
• Browser type;
• Browser version;
• Chat log;
• Device information;
• Email address;
• First name;
• IP address;
• Last name;
• Number of page views;
• Information about the operating system;
• Referrer URL;
• Time zone;
• URL;
• Date and time of the enquiry;
• Status information.

This data will only be used for communication purposes and to provide high quality customer service. All chat data is securely stored on servers in Germany.

To ensure that the Userlike widget works properly, cookies are stored in the user’s browser. These cookies are technically necessary and do not contain any personal data as long as the chat service is not used. They are used exclusively to technically facilitate the provision of the chat service.

Session cookies: To ensure the smooth functionality of the software, cookies are stored in the end user’s browser to manage the application status. These cookies contain the persistent status, machine status, session ID and chat statistics.

In order to identify end users when they return to the website, cookies containing user information are stored in the end user’s browser. These cookies may contain an individual user ID, the end user’s name, email address and number of visits.

The collected cookies are used exclusively to provide the functions of the Userlike service and to enable a personalised chat experience. The stored data is not passed on to third parties and is only used for the intended purpose. They are stored for a reasonable period of time necessary to provide the chat service and, where applicable, generate statistical evaluations.

For more information on how personal data is processed in Userlike, please read its privacy policy: https://www.userlike.com/en/terms#privacy-policy 

3. Google Analytics (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) 

Gühring KG uses the Google Analytics analysis service to collect and analyse information about visits to the website. Google Analytics uses cookies and similar technologies to help analyse website usage, compile reports on user activity, and provide valuable data to improve user experience.

When using Google Analytics, the website may collect the following personal data:

• Device information;
• Geographical location;
• Browser information;
• Operating system of the device;
• Screen resolution;
• Referrer URL;
• Interaction data;
• Date and time of the visit;
• User behaviour;
• Pages visited;
• Online identifiers;
• Abbreviated IP address;
• User ID;
• Advertising ID.

Gühring KG uses this data exclusively in anonymised form for analytical purposes and statistical analyses.

The storage of Google Analytics cookies and the use of this analysis tool are subject to the corresponding consent, and the data is processed exclusively on the basis of Art. 6 (1) (a) GDPR; consent can be withdrawn at any time.

The personal data collected via Google Analytics is not used to identify individual users and is not linked to other data that allows direct or indirect identification of an individual.

Google Analytics uses methods, including cookies, that make it possible to analyse use of the website by users. The information generated automatically about your use of this website is usually transferred to a Google server in the USA and stored there. If IP anonymisation is activated on this website, your IP address will be truncated beforehand within member states of the European Union or in other countries party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will not associate the anonymous IP address transmitted by your browser within the scope of Google Analytics with any other data. Once the purpose and use of Google Analytics have ended, the data collected in this context will be deleted.

Google Analytics may transfer the collected data to another country. Please note that this service may transfer data to a country where the required data protection standards are not met (for example, the USA, Singapore, Taiwan, Chile). For more information about security measures, please consult the provider’s privacy policies or contact the provider directly.

For more information about how personal data is processed in Google Analytics, please read their privacy policy: https://policies.google.com/privacy?hl=en 

4. Matomo

Gühring KG uses the Matomo analysis service to collect and analyse information about visits to the website. Matomo enables Gühring KG to analyse the use of our website, create reports on user activity and receive valuable data for the purpose of improving the user experience.

When using Matomo, the website may collect certain personal data, such as:

• Browser language;
• Browser type;
• Operating system of the device;
• Geographical location;
• IP address;
• Number of visits;
• Referrer URL;
• Screen resolution;
• Usage data;
• Visits to subpages.

Matomo meets the requirements of the GDPR and provides mechanisms to protect personal data. Gühring KG hosts Matomo on its own servers and has complete control over the collected data. Gühring KG takes all necessary security measures to protect personal data and does not disclose it to third parties without the prior consent of the user or legal requirements.

The personal data collected via Matomo is used exclusively for conducting analyses and improving the website. This data will not be linked to other information that allows a specific user to be identified and will not be used to identify individual users.

Gühring KG undertakes to process personal data in accordance with the requirements of the GDPR and to apply security measures to protect this data. Gühring KG does not pass on the personal data collected via Matomo to third parties, unless this is required by law or stipulated in the privacy policy.

For more information on how personal data is processed in Matomo, please read its privacy policy: https://matomo.org/privacy-policy/ 

5. Wiredminds (WiredMinds GmbH, Lindenspürstraße 32, 70176 Stuttgart, Germany)

Gühring KG uses the WiredMinds analysis service to analyse visitor behaviour on the website and collect information about interaction with its content. WiredMinds enables Gühring KG to receive valuable data that serves to improve the website and provide more relevant content.

If the user consents to the use of cookies, WiredMinds LeadLab uses the following cookies on the website: to detect returning visitors and to assign a click/page access to a visit. The cookie is set for 90 days. If the visitor returns to the website within this period, the visitor is recognised and the cookie is automatically extended for 90 days. After the 90 days have elapsed, the cookie is automatically deleted or deleted immediately if consent to use of the cookie is revoked.

WiredMinds meets the requirements of the GDPR and provides mechanisms for protecting personal data. Gühring KG takes all necessary security measures to protect the personal data collected by WiredMinds. This data will not be linked to other information that allows a specific user to be identified and will not be used to identify individual users.

Gühring KG undertakes to process personal data in accordance with the requirements of the GDPR and to apply security measures to protect this data. Gühring KG does not pass on the personal data collected via WiredMinds to third parties, unless this is required by law or stipulated in the privacy policy.

For more information on how personal data is processed in Wiredminds, please read its privacy policy: https://wiredminds.de/datenschutz/ 

6. Google Tag Manager (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland)

With the Google Tag Manager service, Gühring KG manages elements known as “tags” that it has embedded on its website. Tags are small elements of code that can be used to measure traffic and visitor behaviour, track the impact of online advertising and social channels, employ remarketing and targeting, and test and optimise websites. When using tags, no data is stored on your end device.

When using the Google Tag Manager service, the website may collect and process certain personal data, such as aggregated tag activation data.

Google Tag Manager meets the requirements of the GDPR and provides mechanisms for protecting personal data. Gühring KG does not pass on personal data collected via Google Tag Manager to third parties without prior consent from the user or a legal obligation. Gühring KG also does not use this data to identify individual users or combine it with other information that enables a specific user to be identified.

Google Tag Manager may transfer the collected data to another country. Please note that this service may transfer data to a country that does not meet the required data protection standards (for example, Singapore, Taiwan, Chile and the USA). For more information about security measures, please consult the provider’s privacy policies or contact the provider directly.

For more information on how personal data is processed in Google Tag Manager, please read its privacy policy: https://policies.google.com/privacy?hl=en 

7. Facebook (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland) 

Gühring KG has integrated components from Facebook into this website. Facebook is a social network. A social network is a place for social encounters on the internet, an online community that typically allows users to communicate with each other and interact in virtual spaces. A social network can serve as a platform for exchanging opinions and experiences or enabling the internet community to share personal or business information. Facebook allows users of social networks to create personal profiles, upload photos and communicate via friend requests.

Gühring KG uses the Facebook service for marketing purposes and for communication with the public. When using the Facebook service, certain personal data may be collected and processed.

When interacting with the website via the Facebook service, personal data of the data subject may be collected and used. This data may include information provided by the data subject in their Facebook profile, information about their interaction with the website and other data provided voluntarily by the data subject during communication or registration.

In order to increase the protection of this data when visiting the website, these buttons and widgets are not fully integrated into the page, but are only integrated as an HTML link. This integration ensures that no connection to the servers of the respective social network provider is established when accessing a page on the website that contains such buttons. Clicking on one of the buttons opens a new browser window for the user concerned and opens the page of the relevant service provider, where they can, for example, click on the “Like” or “Share” buttons (as required after entering the login information).

Facebook ensures compliance with GDPR requirements and provides means to protect personal data. Gühring KG undertakes to process personal data in accordance with the requirements of the GDPR and to apply all necessary security measures to protect this data. Gühring KG also does not link any personal data collected via the Facebook service with other information that enables a specific person to be identified.

Personal data collected via the Facebook service will only be stored for the period necessary to achieve the aforementioned purposes and comply with the privacy policy.

For more information on how personal data is processed at Facebook, please read their privacy policy: https://www.facebook.com/privacy/explanation    

8. Google Maps (Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, United States of America) 

Gühring KG uses the Google Maps service on its website. Gühring KG uses Google Maps to share geographical data and locations on its website. When using Google Maps, certain personal data may be collected and processed, such as:

• Date and time of visit
• Location information
• IP address
• URL address
• Usage data
• Search conditions
• Geographical location

To load the map, the corresponding plug-in must be activated. If the data subject activates the plug-in, the data is transferred to Google and the Google DoubleClick advertising network to which it belongs. This may lead to further data processing operations that cannot be controlled by Gühring KG. Cookies are also used when the map is loaded.

Google Maps may transfer the collected data to another country. Please note that this service may transfer data to a country where the required data protection standards are not met (for example, the USA, Singapore, Taiwan, Chile). For more information about security measures, please consult the provider’s privacy policies or contact the provider directly.

To find out more about the scope and purpose of data collection, the further processing and use of data by Google Maps, the possible transfer of personal data to third countries such as the USA, your rights and the privacy options available to you, please read Google’s privacy policy: https://policies.google.com/privacy 

9. Instagram (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland)

Gühring KG uses the Instagram service for communication and interaction with its followers and the community. When using Instagram, certain personal data may be collected and processed.

Some personal data may be collected and used when interacting with the Gühring KG Instagram account. This data may include information that the user shares in their Instagram profile, such as photos, comments, likes and other information that they voluntarily share on the platform.

Gühring KG uses the collected personal data exclusively for the purpose of communicating with its followers, providing content and supporting our community. Gühring KG does not pass on personal data collected via Instagram to third parties without express consent or legal obligation.

Personal data collected via Instagram will only be stored for the period necessary to support communication with followers and the community.

For more information on how personal data is processed by Instagram, please read their privacy policy: https://www.instagram.com/legal/privacy/  

10. Vimeo (Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA)

Gühring KG uses the Vimeo service to upload and play videos on its website. When using Vimeo, certain personal data may be collected and processed.

When interacting with videos uploaded to the website via Vimeo, some personal data may be collected and used. This data may include the user’s IP address, information about their device and browser, as well as the user’s interaction with the video.

Gühring KG uses the collected personal data exclusively to provide video content on the website. Gühring KG does not pass on personal data collected via Vimeo to third parties without express consent or legal obligation.

Gühring KG also does not link personal data collected via Vimeo with other information that enables a specific person to be identified.

Personal data collected via Vimeo is only stored for the period necessary to provide video content on our website.

Usage takes place in compliance with the corresponding consent and exclusively on the basis of Art. 6 (1) (a) GDPR; consent can be withdrawn at any time. The purpose and scope of data collection and the further processing and use of data by the providers as well as your rights and setting options for protecting your privacy can be found in the providers’ data protection policies.

For more information about how personal data is processed by Vimeo, please read its privacy policy: https://vimeo.com/privacy      

11. YouTube Video (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland)

Gühring KG uses the YouTube service to upload and play videos on its website. When using YouTube, certain personal data may be collected and processed.

Content from third parties is integrated on this website via YouTube for the interactive content design.

In order to increase data protection when visiting the website, the plug-ins are integrated into the page in a way that ensures they can only be activated after consent. This integration ensures that no connection to the servers of the respective social network is established when a page of the website containing such plug-ins is accessed. A direct connection between the respective user's browser and the respective social network's servers is not established until the browser plug-in is activated.

The content of the respective plug-in is then transmitted directly to the browser by the respective provider and integrated into the page. By integrating the plug-ins, the providers receive information that the user’s browser has called up the corresponding page of the website, even if the user does not have a profile with the corresponding provider or is not currently logged in. This information (including the user’s IP address) is transmitted by the user’s browser directly to the server of the respective provider and stored there, possibly in the USA.

When interacting with videos embedded on the website via YouTube, certain personal data may be collected and used, such as:

• Device information;
• IP address;
• URL address;
• Watched videos.

If the user interacts with the plug-ins, for example by clicking on the “Like” button, the corresponding information is also transmitted directly to the providers’ servers and stored there.

Usage takes place with the corresponding consent and exclusively on the basis of Art. 6 (1) (a) GDPR; consent can be withdrawn at any time. The purpose and scope of data collection and the further processing and use of the data by the providers as well as your rights and setting options with regard to protecting your privacy can be found in the providers’ data protection statements.

For more information on how personal data is processed by YouTube, please read its privacy policy: https://policies.google.com/privacy?hl=en 

12. Usercentrics Constent Management Platform (Usercentrics GmbH Sendlinger Str. 7, 80331 Munich, Germany)

The Usercentrics platform is used to manage user consent regarding the use and processing of their personal data on websites and applications. The platform provides users with transparency and control over their consent and allows them to choose which types of data can be collected and processed.

The following data may be collected when using the platform: 

• Consent and rejection data;
• Referrer URL;
• User agent;
• User settings;
• Consent ID;
• Consent date;
• Template version;
• Banner language;
• IP address;
• Geographical location. 

For more information on how personal data is processed on the Usercentrics Consent Management Platform, please read its privacy policy: https://usercentrics.com/de/datenschutzerklaerung/ 

13. Friendly Captcha GmbH (Am Anger 3-5, 82237 Wörthsee, Germany)

Gühring KG uses the Friendly Captcha service to effectively secure online forms and protect against abusive automated access such as spam and bots. Friendly Captcha is a privacy-friendly, proof-of-work-based solution that operates invisibly in the background.

When a user visits the website and accesses a protected form, a connection is established between the user’s device and the servers of Friendly Captcha through the integration of the service. The user’s device receives a computational task, the difficulty of which is determined based on a risk value derived from connection, environment, and interaction data. The solution to this task is sent back to the web server and is used to verify whether the request is human or automated.

As part of the use of Friendly Captcha, Gühring KG collects and processes certain technical data. This includes, in particular, connection data (e.g., HTTP request data such as browser type, operating system and user agent as well as protocol data), hashed IP addresses (which do not allow any conclusions to be drawn about an individual person), technical information about the connection setup, and network statistics. In addition, environment data such as browser settings, device data, and technical data relating to code execution are collected.

Furthermore, interaction data may be processed, such as statistical information about keystrokes (without reference to specific text input), mouse movements, scrolling behavior, and window adjustments. Functional data such as version and status information of the protection software used, session identifiers, and solutions to computational tasks are also processed.

The collected data is used exclusively to ensure the functionality and security of the website and to prevent misuse. Personal data, if stored, is deleted no later than 30 days.

The data is processed exclusively within the European Union. Data is not transferred to third parties or to third countries unless this is required by law or provided for in the privacy policy.

Further information: https://friendlycaptcha.com/de/legal/privacy-service-users/

14. Google Fonts (Gordon House, 4 Barrow St, Dublin 4, Ireland) 

This website uses the “Google Fonts” service, which is provided by Google Inc. If a user activates Google Fonts on the website, their browser establishes a connection to Google servers in the USA when they visit the website. As a result, the user’s browser transmits information to the Google server that the user's assigned IP address has visited the website. When a user visits the website, their browser loads the required fonts into the browser cache to display the text and fonts correctly and ensure consistent font presentation.

The use of Google Web Fonts is only possible with consent. If a user withdraws consent or their browsers do not support web fonts, only the default font will be used on their computer.  

As such, the following data can be collected:

• IP address;
• Aggregated usage statistics;
• Font file enquiries;
• Referrer URL;
• CSS requests;
• User agent;
• Browser information.

You can find more information about Google Fonts here: https://developers.google.com/fonts/faq and in Google’s privacy policy: https://www.google.com/policies/privacy/ 

15. Adobe Commerce (Adobe Systems Software Ireland Limited 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland)

Gühring KG uses the Adobe Commerce service on its website. The Adobe Commerce platform is designed to create, manage and develop e-commerce on websites. The platform offers functionality for creating online shops and for managing products, orders, payments, shipping and other aspects of e-commerce.

The following data may be collected when using the platform: 

• First name;
• Last name;
• Address;
• Telephone number;
• Email address;
• Gender;
• Date of birth;
• Geographical location;
• Company information;
• Order information;
• Payment information;
• Referrer URL;
• IP address;
• Viewed products;
• Identifiers. 

Adobe Commerce may transfer the collected data to another country. Please note that this service may transfer data to the USA. For more information about security measures, please consult the provider’s privacy policies or contact the provider directly.

For more information on how personal data is processed by Adobe Commerce, please read its privacy policy: https://www.adobe.com/privacy.html 

16. Clever Reach (CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany)

Gühring KG uses the Clever Reach service on its website. The Clever Reach platform is designed to manage and automate marketing emails and communication with customers. The platform allows you to create and send emails, manage subscriber lists, track email openings and clicks, analyse campaign effectiveness, and other marketing functions. CleverReach is a service that can be used to organise and analyse the sending of newsletters. The data you enter for the purpose of subscribing to the newsletter (e.g. email address) is stored on the servers of CleverReach in Germany or Ireland.

The following data may be collected when using the Clever Reach platform: Identification information such as name, email address, telephone number, to manage subscriptions and the provision of emails; information about interaction with emails, such as opening emails, clicking on links, to analyse campaign effectiveness and improve communication with subscribers.

For more information on how personal data is processed by CleverReach, please read its privacy policy: https://www.cleverreach.com/de-de/datenschutz/

17. Adobe Commerce Persistent Shopping Cart (Adobe Systems Software Ireland Limited 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland) 

Our online shop uses the Adobe Commerce Persistent Shopping Cart program to improve customer comfort and optimise their shopping experience. This software allows users to save articles in their online shopping trolley even after they have left the website.

Saving articles in the shopping trolley makes it easier for users to return to selected articles at a later stage and simplifies the purchase process. Please note that information about the articles placed in your shopping trolley may be stored on the server in accordance with this privacy policy. Gühring KG ensures the protection of the stored data and does not pass it on to third parties without consent from the user concerned or a significant legal basis.

For more information on how personal data is processed by Adobe Commerce Persistent Shopping Cart, please read its privacy policy: https://www.adobe.com/privacy.html 

18. Google Ads (Google Ireland Limited, Google Building Gordon House, 4 Barrow Street, Dublin D04 E5SW5, Ireland)  

Gühring KG uses Google Ads to display adverts to users. Google Ads may use cookies and other tracking technologies to display personalised or non-personalised advertising based on users’ previous visits to the Gühring KG website and other websites.

Google Ads may also use non-personalised advertising that is not based on user data, but rather on page environment or other non-personalised criteria.

Users can manage their ad settings, including deciding whether to see personalised ads, in their browser settings or in their Google account.

Gühring KG may collect the following personal data using Google Ads:

• Viewed adverts
• Cookie ID
• Date and time of visit
• Device information
• Geographical location
• IP address
• Search conditions
• Displayed adverts
• Customer ID
• Online identifiers
• Browser information
• Impressions

The collected data will be deleted as soon as it is no longer required for the purposes of processing. Log data is anonymised after 9 months and cookie information is deleted after 18 months.

Google Ads may transfer the collected data to another country. Please note that this service may transfer data to a country that does not meet the required data protection standards (Chile, Singapore, USA, Taiwan). For more information about security measures, please consult the provider’s privacy policies or contact the provider directly.

For more information on how personal data is processed by Google Ads, please read their privacy policy: https://policies.google.com/privacy?hl=en  

19. OpenStreetMap (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland) 

Gühring KG uses the OpenStreetMap program to provide geographical data such as road maps to improve the user experience and ensure access to required geographical information.

OpenStreetMap collects and makes geographical data freely accessible to create free, licence-free maps. The use of OpenStreetMap enables Gühring KG to integrate high-quality map data on its website, which helps users find locations, routes and other geographical information they need.

Please note that when using OpenStreetMap, certain technical data such as IP address and map interaction data may be collected in accordance with OpenStreetMap’s privacy policy. Gühring KG has no control over this data, but strives to protect the privacy of users in accordance with applicable data protection laws.

For more information on how personal data is processed by OpenStreetMap, please read their privacy policy: https://wiki.osmfoundation.org/wiki/Privacy_Policy

20. Zoovu (Germany) GmbH (Webergasse 1, House B/1, 01067 Dresden, Germany)

Gühring KG uses the Zoovu search and navigation solution to display alternative, accessory and complementary products in the online shop and thereby improve the customer experience. In addition to the search results, navigation and filtering options are also provided by Zoovu. Zoovu is integrated into the online shop as a web application and accesses tool data via the connected PIM system Crossbase.

As part of the use of Zoovu, personal data is processed. End-user data includes, in particular, IP address (for prevention of data protection violations and for analysis mechanisms, e.g., anti-DDoS protection), device and browser information, behavioral data (clicks, navigation patterns, page views, number of visits, time spent on the site), session data (random user IDs for session tracking and for providing personalized services such as language settings), and user interaction data (entries into search fields, product finders, configurators or chatbots). Zoovu ensures that all processed end-user data is anonymized; IP addresses are anonymized immediately after collection by removing or hashing the last octet, and full IP addresses are never stored.

For authorized users, in addition to the IP address, audit logs of actions performed, event data (e.g., performance of the Digital Assistant, question-and-answer flows, navigation patterns, product interactions), details about the traffic source, login and logout times, as well as browser and device information are processed. Customer data includes business contact data (email address, phone number, postal address including shipping and billing address), first and last name, company name, job title or position, LinkedIn profile if applicable, and contract number. All usage data is anonymized, de-identified and aggregated to protect privacy and cannot be attributed to individuals.

>Data is stored exclusively within the European Union by hosting partner Hetzner. End-user data is deleted one year after contract termination (IP addresses after 30 days), customer data and authorized user data are automatically deleted six years after contract termination. Gühring KG processes all personal data collected in connection with Zoovu in accordance with the GDPR and implements appropriate technical and organizational measures to protect against unauthorized access, use or disclosure. Personal data is not passed on to third parties unless required by law or stipulated in the relevant privacy policy. For more information on how Zoovu processes personal data, please read their privacy policy: https://zoovu.com/de/privacy-policy

Interaction between the company and third parties in relation to personal data

Gühring KG only transfers personal data to third parties if this is required by law, at the data subject’s request or in other cases described in this policy. Gühring KG understands that personal information is an asset and represents inseparable content, including the personal intellectual property rights of any natural person, which is why Gühring KG takes all possible measures to protect personal information that has been voluntarily and knowingly transmitted to them by its users.

The website may contain links to other websites. When you click on a link to other websites, this policy does not apply to those websites. In this context, Gühring KG recommends reviewing the privacy and data collection policy of each website before disclosing personal data that can be used for identification.

Transfer of personal data to third countries

Gühring KG processes personal data of data subjects within the EU/EEA. In exceptional cases and if necessary, data may also be transferred to and processed in countries outside the EU/EEA (third countries). Before personal data is transferred to a third country, Gühring KG ensures that adequate data protection is guaranteed. This is ensured either by the recognition of the third country by the European Commission or by the conclusion of standard contractual clauses of the European Commission (SCC). If necessary, additional measures are taken to ensure data protection.

Security measures for the protection of personal data

Gühring KG uses generally accepted standards for the technological and operational protection of information and personal data against loss, misuse, alteration or destruction. However, despite all efforts, Gühring KG cannot guarantee absolute security against external threats that fall outside the scope of regulation.

Gühring KG guarantees compliance with all relevant obligations to maintain confidentiality as well as technical and organisational security measures to prevent unauthorised or unlawful disclosure or processing of such information and data, accidental loss, destruction or damage.

Gühring KG only grants access to information and personal data to authorised personnel who have agreed to maintain confidentiality in accordance with the requirements of this policy.

The transfer of personal data without the consent of the data subject or a person authorised by him or her is permitted in the cases specified by law and only in the interests of national security, economic well-being and human rights.

Child protection

The website is not intended for users under the age of 18. Gühring KG takes security issues very seriously, especially with regard to people who are not yet 18. Gühring KG therefore calls upon parents to explain to their children the problems of safety and security on the Internet, their specific purpose and the need to use certain services on the website.  

The right to update the Privacy Policy

The website administration reserves the right to make changes to this privacy policy without the user’s consent.

The new privacy policy enters into force as soon as it is published on the website, unless the new version of the privacy policy stipulates otherwise.

Gühring KG asks you to review the privacy policy from time to time in order to be informed of any changes or additions.