1 Preamble
Below we inform you about the details of data protection when visiting our website.
It is generally possible to use our website without providing personal data.
Insofar as personal data is collected when you visit our website, we process it exclusively in accordance with the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).
The processing of personal data takes place exclusively in accordance with this privacy policy.
This privacy policy applies to the use of the website at the address https://www.guksa.de/. For linked content from other providers, the data protection declaration on the linked website is authoritative.
We would like to point out that security gaps can occur during data transmission via the Internet, which cannot be prevented by the technical design of this website. Complete protection of personal data is not possible when using the Internet.
2 Responsible body, Art. 13 Abs. 1 lit. a DSGVO
Responsible for the processing of personal data in the context of the use of this website:
GUKSA
Gesellschaft für die Umsetzung kundenspezifischer Anforderungen mbH
CEO: Manuel Cordas dos Santos
Buckesfelder Straße 100-102
58509 Lüdenscheid
Phone: +49 (0)2351 67130 - 21
E-Mail:
3 Data Protection Officer
We have appointed a data protection officer:
Mr. Dipl.-Inform. Olaf Tenti
GDI Gesellschaft für Datenschutz und Informationssicherheit mbH
Körnerstraße 45
58095 Hagen
Phone: +49 (0)2331/356832-0
E-Mail:
4 Hosting
Our website is operated on servers of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen (Hoster).
We have concluded an order processing contract with Hetzner Online GmbH.
When you visit our website, data is automatically collected and stored in log files on our host's server. This data may have a personal reference. The data collected includes:
- Information about the browser type and version used
- The user's operating system
- The user's internet service provider
- The IP address of the user in anonymized form
- Date and time of access
- Websites from which the user's system accesses our website
- Websites that are accessed by the user's system via our website
The hoster uses the collected data to ensure the trouble-free operation of the website as well as to ensure IT security and to improve our offer. If there are concrete indications, the log data may be subsequently analyzed. The temporary storage of the IP address by the hoster is necessary to enable the website to be delivered to the user's computer. For this purpose, your IP address must remain stored for the duration of the session.
This data is not merged with other data sources.
The legal basis for data collection is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest in data collection arises from the aforementioned purposes.
The data is deleted by the host as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
If the data is stored in log files, this technical information is deleted or made unrecognizable after seven days at the latest.
The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, you do not have the option to object.
5 First- and Third-Party-Cookies
In addition to the aforementioned data, cookies are used on your computer when you use and visit our website.
When you visit our website for the first time, you will be asked whether you consent to the use of cookies and, if so, which categories you consent to.
Cookies are small text files that are stored by your browser on your end device to store certain information. Furthermore, these cookies are used to make the use of our website more pleasant and convenient for you or for analytical purposes.
Most of the cookies we use are so-called "session cookies". They are used to make the services of our website technically available to you. After your visit, these cookies are automatically deleted by your browser.
Other cookies remain on your computer and enable us to recognize your end device on your next visit (so-called persistent or permanent cookies).
The next time you visit our website with the same end device, the information stored in cookies is read either by our website ("first party cookie") or by another website to which the cookie belongs ("third party cookie").
These cookies are automatically deleted from your system after a preset period of time, which differs depending on the cookie.
The stored and returned information enables the respective website to recognize that you have already accessed and visited it with the browser of your end device. We use this information to optimize the design and display of the website according to your preferences. Only the cookie itself is identified on your end device.
Any further storage of personal data will only take place with your express consent or if this is absolutely necessary in order to be able to use the service offered and accessed by you accordingly.
This website uses the following types of cookies, the scope and function of which are explained below:
- Essential cookies:Strictly necessary cookies guarantee functions without which you cannot use our websites as intended. These cookies are used exclusively by us and serve, for example, to ensure that you, as a registered user, always remain logged in when accessing various subpages of our website and thus do not have to re-enter your login data each time you access a new page. The legal basis for their use is our legitimate interest within the meaning of Art. 6 para. 1 sentence 1 lit. f GDPR.
- Functional cookies:Enable our website to store information you have already provided and to offer you improved functions based on this. The legal basis for the use of these cookies is your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR.
- Marketing or tracking cookies:These cookies are used to collect information about the websites visited by the user, to create target group-oriented and more effective advertising for the user and to enable us to identify the interests of website visitors in order to make our website even more interesting in the future.
Marketing and/or tracking cookies are only set with your active consent.
The legal basis for data processing here is Art. 6 para. 1 sentence 1 lit. a GDPR.
Opt-out for Marketing Cookies
You can also manage cookies that are used for online advertising via the tools developed in many countries as part of self-regulatory programs, such as the US-based https://www.aboutads.info/choices/ or the EU-based https://www.youronlinechoices.com/de/praferenzmanagement/.
You can revoke this consent to cookies at any time with effect for the future here.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, e.g. third-party cookies (cookies that are set by a third party, i.e. not by the actual website on which you are currently located), exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. You can use your web browser to delete stored cookies at any time.
You have the option of deactivating cookies in your browser at any time.
If cookies are deactivated, however, the functionality of this website may be restricted.
Deleting cookies
Cookies are stored on your end device until you delete them, which you can do at any time. Furthermore, expired cookies are automatically deleted by your browser if you have configured your browser accordingly. Expired cookies are no longer sent to our servers by your browser and can therefore no longer be used by us.
Here you will find information on how to delete cookies in your browser and manage the cookie settings for the most common browsers:
Desktop PC / Laptop
Mobile devices
- Google Chrome (Android)
- Google Chrome (iOS)
- Apple Safari (iOS)
- Samsung Internet (Android)
- Mozilla Firefox (Android)
If you have not made or do not make any different settings, cookies that enable or ensure the necessary technical functions will remain on your end device until you close the browser; other cookies may remain on your end device for longer (maximum 6 months).
To safeguard your privacy, you should regularly check the cookies on your end device and your browser history and delete them yourself.
6 SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties (end-to-end encryption). The protocols authenticate the communication partner and ensure the integrity of the transmitted data.
7 Storage duration
Unless a more specific storage period has been specified in this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, the deletion will take place after these reasons no longer apply.
8 Contact options
You can contact us via e-mail / contact form on our website.
In this context, your details from the form or from the e-mail, including the contact details you provide there, will be stored and processed by us for the purpose of processing the request and in the event of follow-up questions. This data (e.g. name, e-mail address) will not be passed on to third parties without your consent.
The data is not merged with other data collected on this website.
The data may be stored as part of customer relations management (CRM) if you are already a customer of our company.
The contact form is sent encrypted using TLS technology. The encryption serves to prevent unauthorized access to your personal data by third parties.
This data is processed on the basis of Art. 6 para. 1 sentence 1 lit. b GDPR if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Art. 6 para. 1 sentence 1 lit. f GDPR).
We will retain the data you provide on the contact form or in the email until you request its deletion, object to its processing or the purpose for its storage no longer pertains (e.g. after your request has been processed). Mandatory statutory provisions - in particular retention periods - remain unaffected.
9 Applications
On our website you have the opportunity to apply for a job in our company.
We accept digital applications, regardless of whether you are applying for a position we have advertised or whether it is an unsolicited application.
The following personal data is processed in the context of an application for applicants (m/f/d) or other third parties:
Name, street, postal code, city, telephone number, e-mail address.
This data is processed for the purpose of fulfilling the contract or implementing pre-contractual measures at the request of the data subject, Art. 6 para. 1 lit. b GDPR.
The data will be stored to process your application and to fulfill statutory retention obligations until the expiry of the tax and commercial law regulations at the latest, unless you have expressly consented to any further use of the data.
10 Google reCAPTCHA
To protect input forms on our website, we use the "reCAPTCHA" service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter referred to as "Google". By using this service, it is possible to distinguish whether a form entry is of human origin or is misused by automated machine processing.
The legal basis for the use of reCAPTCHA is your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR, insofar as you give us your consent to this when you first access the page.
To implement the functionality, your referrer URL, IP address, the behavior of website visitors, information about the operating system, browser and length of stay, cookies, display instructions, scripts, information about the user's input behavior and mouse movements in the area of the reCAPTCHA checkbox are transmitted to Google.
Google uses the information obtained in this way to digitize and optimize its own various services, among other things.
The IP address transmitted as part of reCAPTCHA will not be merged with other Google data unless you are logged into your Google account at the time you use the reCAPTCHA plug-in, i.e. at the time you visit our website. If you wish to prevent this transmission and storage of data about you and your behavior on our website by Google, you must log out of Google before accessing our site.
Google also processes your data in the USA, among other places. We would like to point out that, in the opinion of the European Court of Justice, there is currently no adequate level of protection for data transfers to the USA. This may entail various risks for the legality and security of data processing. Google uses so-called standard contractual clauses in accordance with Art. 46 (2) and (3) GDPR as the basis for data processing for recipients based in third countries (outside the European Union, Iceland, Liechtenstein, Norway, i.e. in particular in the USA) or for data transfer there.
Standard contractual clauses are templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even if it is transferred to third countries (such as the USA) and stored there.
By concluding these clauses, Google undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses here, among other places: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de.
The Google Ads Data Processing Terms, which refer to the standard contractual clauses, can be found at https://business.safety.google/intl/de/adsprocessorterms/.
The terms of use of the reCAPTCHA service can be found at: https://www.google.com/intl/de/policies/privacy/.
11 Google Tag Manager
We use "Google Tag Manager" on our websites. The service is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, or if you have your registered office or place of residence in the EU, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").
The Google Tag Manager provides a functionality that enables us to integrate additional services on our website easily, efficiently and dynamically. Code snippets can be implemented more easily in websites or apps. This allows us to quickly configure and customize services integrated via Google Tag Manager, so-called tags, without having to make technical changes to our website.
The functions of the tags are often used, for example, to analyze the online behavior of users (in general or on the site), to optimize marketing campaigns or to display appropriate advertising. Services whose use you have already objected to will not be delivered to your browser by Google Tag Manager.
The Google Tag Manager does not collect any personal data and does not set any cookies itself. However, it can transmit cookies, as the tags used can set cookies. However, when the Google Tag Manager is called up, the IP address and the browser fingerprint (also known as device fingerprinting or online fingerprinting) are transmitted to Google. This constitutes data processing within the meaning of Art. 4 No. 2 GDPR.
The legal basis for the use of "Google Tag Manager" is your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR, insofar as you have given us this consent when you first access the website.
Google also processes your data in the USA, among other places. For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
Furthermore, Google uses so-called standard contractual clauses in accordance with Art. 46 (2) and (3) GDPR. Standard contractual clauses are templates provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even if it is transferred to third countries (such as the USA) and stored there.
By concluding these clauses, Google undertakes to comply with the European level of data protection when processing your relevant data, even if the data is stored, processed and managed in the USA. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the corresponding standard contractual clauses here, among other places:
https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de.
Addendum to data processing
We have concluded the Google Ads Data Processing Terms with Google. These correspond to the standard contractual clauses and also apply to the Google Tag Manager.
You can find the Google Ads data processing conditions at https://business.safety.google/adsprocessorterms/
Please refer to the following link for Google's privacy policy: https://policies.google.com/privacy?hl=de.
The Google Tag Manager terms of use can be found at the following link: https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/
12 Google Maps
On this website we use the offer of "Google Maps", operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, or if you have your registered office or place of residence in the EU, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").
Google Maps is integrated on the website via the Google API in order to visualize location information and display it in the form of a map. The files required for this purpose are requested via the Google domains maps.googleapis.com, fonts.googleapis.com and/or fonts.gstatic.com.
Gstatic is a domain used by Google to load static content into a different domain name to reduce bandwidth usage and increase network performance for the end user.
The processing of the IP address by Google Maps is technically necessary to display the map. With regard to the other web services integrated via Google Apis, the regulations in the respective section of this data protection declaration for Google Apis apply.
By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition
- the IP address,
- Date and time of the request,
- Time zone difference to Greenwich Mean Time (GMT),
- Content of the request (specific page),
- Access status/HTTP status code,
- the amount of data transferred,
- the website from which the request originates (so-called referrer),
- Type and version of the browser used together with the language version used and
- Type and version of the operating system and the interface used
are also transmitted. This information (including your IP address) is transmitted directly from your browser to a Google server in the USA and stored there.
The transmission takes place regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your Google profile, you must log out of your Google profile before using our website. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.
You can prevent the collection and forwarding of personal data to Google (in particular your IP address) and the processing of this data by Google by deactivating the execution of script code in your browser, installing a script blocker in your browser or activating the "Do Not Track" setting in your browser. You can find Google's security and data protection principles at https://policies.google.com/privacy.
Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider's privacy policy. There you will also find further information on your rights in this regard and setting options to protect your privacy: http://www.google.de/intl/de/policies/privacy.
We have concluded a joint processing agreement with Google with regard to Google Maps. You can find the content at https://privacy.google.com/intl/de/businesses/mapscontrollerterms/.
The data transfer to the USA is based on your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.
You can revoke your consent to data processing at any time with effect for the future. To do so, delete the cookies in your browser or use the link to manage your consent, which you can find in the "Cookies" section of this privacy policy. The withdrawal of consent does not affect the lawfulness of the data processing carried out up to the time of withdrawal.
13 Google Fonts
By integrating "Google Maps" and "Google reCAPTCHA", "Google Fonts" are loaded, offered by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, or if you have your registered office or place of residence in the EU, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").
We have no influence on this.
The files required for this purpose are requested via the Google domains fonts.gstatic.com.
Gstatic is a domain used by Google to load static content into a different domain name to reduce bandwidth usage and increase network performance for the end user.
By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, the following are transmitted
- the IP address,
- Date and time of the request,
- Time zone difference to Greenwich Mean Time (GMT),
- Content of the request (specific page),
- Access status/HTTP status code,
- the amount of data transferred,
- the website from which the request originates (so-called referrer),
- Type and version of the browser used together with the language version used and
- Type and version of the operating system and the interface used
This information (including your IP address) is sent directly from your browser to a Google server. According to its own information, Google does not store this information and only uses it to deliver the requested fonts and to recognize and, if necessary, ward off attacks on the IT system.
If you have given your consent for us to use Google Fonts, the legal basis for data processing is this consent (Art. 6 para. 1 sentence 1 lit. a in conjunction with Art. 49 para. 1 lit. a GDPR).
We use Google Web Fonts to optimize our website and present it in an appealing way.
Google processes personal data in the USA, among other places. According to the European Court of Justice, there is currently no adequate level of data protection for the transfer of data to the USA. This may entail various risks for the rights and freedoms of data subjects.
Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider's privacy policy. There you will also find further information on your rights in this regard and setting options to protect your privacy: http://www.google.de/intl/de/policies/privacy.
14 Your rights and assertion of rights
You are entitled to the rights listed below. You can assert these rights against us. You are entitled to the rights listed below. You can assert these rights against us.
Information:
In accordance with Art. 15 GDPR, you have the right to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
Correction:
In accordance with Art. 16 GDPR, you have the right to demand the immediate correction of incorrect or incomplete personal data stored by us;
Deletion:
In accordance with Art. 17 GDPR, you have the right to request the deletion of your personal data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
Restriction of processing:
In accordance with Art. 18 GDPR, you have the right to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR;
Data portability:
In accordance with Art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transferred to another controller;
Withdrawal of your consent:
In accordance with Art. 7 (3) GDPR, you have the right to withdraw your consent at any time. This means that we may no longer continue the data processing that was based on this consent in the future. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
Please send your revocation to the data given above or by e-mail to:
Right of objection
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions.
The controller will no longer process the personal data concerning you unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.
If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing.
If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.
In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.
Automated decision in individual cases including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision is necessary for entering into, or performance of, a contract between you and the controller, is authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests, or is based on your explicit consent.
However, these decisions may not be based on special categories of personal data pursuant to Art. 9 para. 1 GDPR, unless Art. 9 para. 2 lit. a) or g) GDPR applies and appropriate measures have been taken to protect the rights and freedoms as well as your legitimate interests.
Complaint to a supervisory authority:
In accordance with Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.
15 Status of the data protection information
The constant development of the Internet makes it necessary to adapt our privacy policy from time to time. We reserve the right to make corresponding changes at any time.
Status: January 2024