PRIVACY POLICY
The use of this website may involve the processing of personal data. To ensure that these data processing activities are transparent and understandable, we provide you with the following information regarding the nature, scope, and purpose of the processing of your personal data.
In addition, we would like to inform you about your rights under the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG).
The controller responsible for the processing of personal data is GEOTOOL Maschinenbaugesellschaft für Geotechnik mbH, Weststraße 6, 16356 Werneuchen, Germany (hereinafter referred to as "GEOTOOL", "we", "us", or "our").
Contents
1. General Information
a. Contact
b. General Information on Data Processing
c. Data Retention
d. Technical Service Providers
e. SSL/TLS Encryption
2. Server Log Files
3. Contact Form
4. Registration
5. Cookies
6. Google Analytics
7. Third-Party Services and Embedded Content
8. Your Rights as a Data Subject
9. Data Protection Officer
10. Right to Lodge a Complaint with a Supervisory Authority
1. General Information
a. Contact
If you have any questions about this Privacy Policy, the processing of your personal data, or if you wish to exercise your rights as a data subject, you may contact us at any time:
GEOTOOL Maschinenbaugesellschaft für Geotechnik mbH
Weststraße 6
16356 Werneuchen
Germany
Email: info@geotool.de
b. General Information on Data Processing
When you use this website, personal data may be processed. The term "personal data" refers to any information relating to an identified or identifiable natural person. This may also include your IP address, which is assigned to your internet-enabled device by your internet service provider.
We process personal data exclusively in accordance with the applicable data protection laws, in particular the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). Personal data is processed only where a legal basis exists.
Your personal data is processed in particular:
-
on the basis of your consent (Art. 6(1)(a) GDPR);
-
for the performance of a contract or to take steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR);
-
for compliance with a legal obligation (Art. 6(1)(c) GDPR);
-
for the purposes of our legitimate interests or those of a third party, provided that your interests or fundamental rights and freedoms do not override those interests (Art. 6(1)(f) GDPR).
If you apply for a position with us, we also process your personal data for the purpose of deciding whether to establish an employment relationship in accordance with Section 26(1) of the German Federal Data Protection Act (BDSG).
c. Data Retention
Unless otherwise specified in this Privacy Policy, we retain personal data only for as long as necessary to fulfil the respective processing purposes or to comply with applicable statutory retention obligations.
Statutory retention obligations may arise in particular under commercial and tax law. Once the applicable retention periods have expired, the personal data will be deleted unless it is still required for the performance of a contract or for taking steps prior to entering into a contract.
d. Technical Service Providers
Unless otherwise stated in this Privacy Policy, personal data is processed on the servers of technical service providers engaged by us to host, operate, and maintain this website.
As a rule, the processing takes place within the European Union (EU) or the European Economic Area (EEA). Our service providers process personal data solely on our behalf and in accordance with our instructions. They are contractually bound to comply with the applicable data protection requirements pursuant to Art. 28 GDPR and to implement appropriate technical and organizational measures to protect personal data.
e. SSL/TLS Encryption
For security reasons and to protect the transmission of confidential content—such as inquiries submitted via our contact form—this website uses SSL/TLS encryption.
You can recognize an encrypted connection by the fact that your browser's address bar begins with "https://" and usually displays a padlock icon.
When SSL/TLS encryption is enabled, the data you transmit to us cannot generally be read by unauthorized third parties.
2. Processing of Server Log Files
When you visit our website for informational purposes only, information transmitted by your browser is automatically collected and stored in server log files. This information includes, in particular:
-
browser type and version;
-
operating system used;
-
the webpage accessed;
-
the previously visited webpage (referrer URL);
-
IP address;
-
date and time of access; and
-
HTTP status code.
This data is processed on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in ensuring the secure and reliable operation of our website, its technical administration, and the prevention of misuse.
The server log data will be deleted as soon as it is no longer required for these purposes, unless there are concrete indications of unlawful use that make further storage necessary for evidentiary purposes.
3. Contact Form
Our website provides a contact form that allows you to get in touch with us.
The information marked as mandatory in the contact form is required to process your inquiry. Without this information, we will not be able to respond to your request. Providing any additional information is voluntary.
Alternatively, you may contact us at any time by e-mail.
Your personal data is processed for the purpose of handling your inquiry and, where applicable, for taking steps prior to entering into a contract, on the basis of Art. 6(1)(b) GDPR. If your inquiry is not related to a contract, the processing is based on our legitimate interest in responding to your request pursuant to Art. 6(1)(f) GDPR.
4. Registration
Where our website provides registration for certain features or services, you are required to provide the information marked as mandatory in the registration form. Without this information, registration cannot be completed. The provision of any additional information is voluntary.
The personal data you provide will be processed for the purpose of creating and administering your user account and providing the requested services. The processing is based on Art. 6(1)(b) GDPR.
5. Cookies
Our website uses cookies. Cookies are small text files that are stored on your device and contain certain information. They help ensure the proper functioning of our website, improve user experience, and enhance the security and functionality of our online services.
We use both session cookies, which are automatically deleted when you close your browser, and persistent cookies, which remain stored on your device until they expire automatically or are deleted by you.
Where cookies are necessary for the technical operation of the website, they are used on the basis of Art. 6(1)(f) GDPR. Our legitimate interest is to ensure the secure, functional, and user-friendly operation of our website.
Where cookies are not technically necessary (e.g. for analytics or marketing purposes), they are used only with your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25(1) of the German Telecommunications-Telemedia Data Protection Act (TTDSG) or any applicable successor legislation.
You can configure your browser settings to notify you when cookies are set, allow cookies only in individual cases, reject cookies in specific cases or in general, and automatically delete cookies when closing your browser. You may also delete cookies that have already been stored at any time through your browser settings.
Further information on the use of cookies is available from the German Federal Office for Information Security (BSI):
6. Google Analytics
Subject to your consent, we use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"), on our website.
Google Analytics uses cookies to analyze how you use our website. The information generated by these cookies is generally transmitted to and processed on Google's servers. In this context, personal data may also be transferred to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
We use Google Analytics exclusively with IP anonymization enabled. This means that your IP address is shortened by Google within the Member States of the European Union or in other states party to the Agreement on the European Economic Area before being transmitted. Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and shortened there.
Google processes this information on our behalf to evaluate the use of our website, compile reports on website activity, and provide us with other services related to website and internet usage. According to Google, the IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
The processing is carried out exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25(1) of the German Telecommunications-Telemedia Data Protection Act (TTDSG) or any applicable successor legislation. You may withdraw your consent at any time with future effect via the cookie settings on our website.
You can also prevent the storage of cookies by adjusting your browser settings. In addition, you can prevent Google from collecting and processing the data generated by the cookies relating to your use of the website by downloading and installing the browser add-on available at:
https://tools.google.com/dlpage/gaoptout?hl=en
Further information about Google's privacy practices is available at:
Where personal data is transferred to the United States, such transfers are based on the appropriate safeguards recognized by the European Commission. Google is certified under the EU-U.S. Data Privacy Framework (DPF).
7. Third-Party Services and Embedded Content
Our website may include content and services provided by third parties. These may include, for example, maps, fonts, videos, or other external content.
To display such content in your browser, it is technically necessary to transmit your IP address to the respective provider. Depending on the service used, additional technical information (such as browser information or device identifiers) may also be processed.
Where the integration of such content is technically necessary, the processing is based on Art. 6(1)(f) GDPR. Our legitimate interest is to ensure an attractive, user-friendly, and efficient presentation of our website.
Where cookies or similar technologies are used, or where personal data is processed for analytics or marketing purposes, such processing takes place only with your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25(1) of the German Telecommunications-Telemedia Data Protection Act (TTDSG) or any applicable successor legislation.
Google Maps
Our website uses Google Maps, a mapping service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
To display the maps, it is necessary to transmit your IP address and certain technical information to Google. In this context, personal data may also be transferred to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Maps is only integrated after you have given your consent in accordance with Art. 6(1)(a) GDPR.
Further information about Google's processing of personal data can be found at:
Where personal data is transferred to the United States, such transfers are based on the appropriate safeguards recognized by the European Commission. Google is certified under the EU-U.S. Data Privacy Framework (DPF).
8. Your Rights as a Data Subject
As a data subject, you have various rights under the General Data Protection Regulation (GDPR). To exercise your rights, you may contact us at any time using the contact details provided under "Contact."
You have the following rights in particular:
Right of Access (Art. 15 GDPR, Section 34 BDSG)
You have the right to request information as to whether we process your personal data. If this is the case, you may also request information about the personal data concerned and the additional information specified in Art. 15 GDPR.
Right to Rectification (Art. 16 GDPR)
You have the right to request the correction of inaccurate personal data and the completion of incomplete personal data without undue delay.
Right to Erasure (Art. 17 GDPR, Section 35 BDSG)
Under the applicable legal requirements, you have the right to request the deletion of your personal data.
Right to Restriction of Processing (Art. 18 GDPR)
Under certain legal conditions, you may request that the processing of your personal data be restricted.
Right to Data Portability (Art. 20 GDPR)
You have the right to receive the personal data you have provided to us, where processed by automated means on the basis of your consent or for the performance of a contract, in a structured, commonly used, and machine-readable format. You also have the right to have those data transmitted to another controller where technically feasible.
Right to Object (Art. 21 GDPR)
You have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data where such processing is based on Art. 6(1)(e) or Art. 6(1)(f) GDPR. Where personal data is processed for direct marketing purposes, you have the right to object at any time to such processing for direct marketing purposes.
Right to Withdraw Consent (Art. 7(3) GDPR)
You may withdraw any consent you have given at any time with effect for the future. The withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
9. Data Protection Officer
Under Art. 37 GDPR and Section 38 BDSG, our company is currently not legally required to appoint a Data Protection Officer.
If you have any questions regarding the processing of your personal data or wish to exercise your data protection rights, you may contact us at any time using the contact details provided under "Contact."
10. Right to Lodge a Complaint with a Supervisory Authority
If you believe that the processing of your personal data violates the provisions of the General Data Protection Regulation (GDPR), you have the right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR.
This right is without prejudice to any other administrative or judicial remedy. In particular, you may lodge a complaint with the supervisory authority of your habitual residence, your place of work, or the place of the alleged infringement.