Ginzler GmbH

subsequently called “Ginzler” for short

The protection of your personal data is particularly important to us. We process your Data exclusively on the basis of legal regulations (GDPR).

1. Scope

This Privacy Policy applies to Ginzler and all its affiliates within Ginzler.

2.  Purpose of the processing

Ginzler processes personal data from employees, partners, customers and suppliers for the purpose of performing business activities and fulfilling associated legal and contractual requirements.

2.1 Processing of customer, partner and supplier data

Ginzler collects and processes personal data provided by interested parties, customers, partners and suppliers for the purpose of creating quotations and requests as well as processing orders and fulfilling the associated contractual and legal obligations. To fulfill legal obligations, the data is also forwarded to public authorities and authorities.

2.2  Applicants

The contact details and application documents submitted in the course of an application are electronically processed for the purpose of selecting suitable candidates for an employment relationship.

In case of any cancellation, the application documents will only be kept in evidence, if you agree.

2.3  Website & Cookies

2.3.1 IP-Address

When visiting our website, information is automatically stored on the web server. This includes the browser and operating system used, which page you brought to our website, the IP address, the time of access and other information. From Ginzler’s point of view these data are pseudonymized and cannot be assigned to individuals without additional data sources.

Ginzler does not analyze these data as long as there is no illegal use of the Website.

2.3.2 Google-Analytics

Our website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on your computer and that allow an analysis of the use of the website by you. The information generated by the cookie about your use of the website (including your IP address) is transmitted to and stored by Google on servers in the United States. Google will use this information to evaluate your use of the website, compile reports on website activity for website operators and provide others with website and internet related services. Google may also transfer this information to third parties if required by law or as far as third parties process this data on behalf of Google. Google will never associate your IP address with other Google data. You can prevent the installation of cookies by setting your browser software accordingly; however, please note that in this case you may not be able to use all features of this website to the fullest extent. By using our website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.

3. Principles relating to processing of personal data

The processing of personal data is based on strict principles that view the protection and security of the data and the rights of the data subjects as the highest assets.

Lawfulness & transparency

Data processing takes place in a lawfully manner in good faith. The data subject will be informed about the planned processing and handling of the data at the point of data acquisition. Thus, data subjects are informed about the following points at least:

• Purpose of the data processing
• Legal basis of processing

Purpose limitation

The data is collected and processed for specified, explicit and legitimate purposes. The processing of the data does not occur in a manner incompatible with these purposes.

Data minimization

Only those data are collected and processed which are absolutely necessary for the stated purposes. If it is possible to achieve the purpose and the effort is reasonable, only anonymous data will be processed.

Storage limitation and erasure

Personal data are deleted as soon as the purpose, for which they were originally collected, is no longer given and legal retention periods do not prevent their erasure. If in individual cases, there are legitimate interests in these data, they will be stored until the protection-worthy interests has been legally clarified.

Data security

All personal data are subject to data secrecy. The data are to be handled confidentially and are protected by appropriate organizational and technical measures against unauthorized access, unlawful manipulation or transfer as well as loss and destruction.

Accuracy

Personal data are to be held accurate, complete and up to date. Appropriate measures are taken to rectify outdated, inaccurate or incomplete data.

4. Commitment to maintain data security

All employees of Ginzler as well as the employees of the affiliates are contractually bound to data secrecy and are regularly reminded and trained on the safe handling of personal and other critical data.

5.  Data Security

Protecting the confidentiality, availability and integrity of data is an essential task of Ginzler. This equally applies to company secrets, customer data, personal data and other critical information.

For this purpose, technical and organizational security measures according to the state of the art and internationally recognized best practices as well as security standards are established and continuously improved.

6.  Data Protection Committee

Ginzler is not in the need to appoint a data protection officer as Article 37 (1) of the EU GDPR is not applicable.

In accordance to the importance of data protection, Ginzler has decided to appoint a data protection committee, which consists of employees of different areas. The role of this committee is to continually review and improve Ginzler’s data protection measures.

Depending on the subject, a person of the committee is available for data subjects and the data protection authority. The committee will define the responsibility.

7. Rights of the data subjects

Any data subject whose personal data are processed by Ginzler always has the possibility to invoke the data subjects’ own rights and claim them from the Data Protection Comittee of Ginzler.

To exercise your rights, you can always contact in writing by emailing to privacy@gisaqua.com

Information and access to personal data

Data subjects may request information about their personal data processed and the purposes of those processing activities at any time.

Rectification

Data subjects have the right to demand the immediate correction of rectification of inaccurate personal data concerning him or her.

Restriction of processing

Data subjects have the right to restrict processing if the accuracy of their personal data is disputed, the processing activity is unlawful, the data are no longer needed for processing or the data subject has objected to the processing.

Revocation

Data subjects have the right to object the processing of personal data concerning them at any time.

Portability

Data subjects have the right to obtain the personal data, which they have provided to Ginzler, in a structured, common and machine-readable format. If technically feasible, you also have the right to request the transfer of this data to another controller.

The portability only applies to personal data which has been processed using automated procedures.

Erasure

Data subjects have the right to demand immediate erasure of the personal data concerning him or her if the legal basis for the processing activity is missing or ceased, the data is objected or the data processing is unlawful and deletion is not ruled out by any legal retention periods.

Data security also has a high significance with regard to the rights of the data subjects, which is why the assertion of data subject rights is only possible after an unequivocal identification of the data subject.

You also have the right to complain to the data protection authority at any time.

8.  Data Transfer

A transfer of personal data to recipients outside the Ginzler and recipients outside the EU (third countries) will only follow in accordance with applicable legislation and on a lawful basis while considering the highest confidentiality and data security.

Ginzler also uses a variety of processors in their processing activities. All processors are contractually bound to comply with legally valid privacy policy through data processing Agreements.

9.  Continuous improvement

The continuous improvement of quality and processes has a high significance to Ginzler. Compliance with data protection policies, applicable legislation and the effectiveness of data protection and data security measures is constantly being measured and improved to ensure the best possible data protection practices.