Responsible person in the sense of data protection law
GzEvD - Gesellschaft zur Entwicklung von Dingen mbH
Osloer Straße 17
Managing Director: Stephan Luckow
Data Protection Officer: Manfred Wöller, firstname.lastname@example.org
In accordance with Privacy by Design Art. 25 (1) DSGVO and Privacy by Default Art. 25 (2) DSGVO, we will first inform you about our intention to log your visit and ask for your permission beforehand. If you do not agree to our intention, we will not log your visit. We promise.
We are currently testing the open source software (OSS) Mautic as well as Matomo, with which we log and evaluate your visitor behaviour and use it to create suitable offers for you and submit them to you or help you with questions. In doing so, we set cookies and save your IP address. We ourselves do not yet know exactly what we learn from you and what added value we can offer you from the knowledge gained. It is a test phase for the time being. Maybe it will turn out that it is too much work and too much effort, or that you do not want your visit to be tracked. Or maybe you are satisfied with the resulting added value for you and it develops into a win-win situation for you and us. If you want to know exactly what we are doing, please contact us. We will be happy to provide you with more information. One thing is very important to us: that we do not pass on your data to third parties. That's why Mautic runs on our own servers. Our measures are all carried out in compliance with the German Data Protection Regulation (DSGVO) and in cooperation with our TÜV-certified data protection officer.
Type of data processed
- Inventory data (e.g., names, addresses)
- Contact details (e.g., email address, telephone numbers)
- Content data (e.g., text input)
- Payment data (e.g., bank details, payment history)
- Usage data (e.g., web pages visited, interest in content, access times)
- Meta/communication data (e.g., device information, IP addresses)
Relevant legal basis
We process your personal data, which may be provided by you as a result of contacting us and purchasing services from us, in a strictly confidential and secure manner. Promise!
According to § 13 para. 1 of the German Telemedia Act (TMG), you will be informed at the beginning of the usage process by the service provider, i.e. us, GzEvD - Gesellschaft zur Entwicklung von Dingen mbH, about the type, scope and purpose of the collection and use of personal data as well as about the processing of your data in countries outside the scope of Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (OJ EC No. L 281 p. 31) in a generally understandable form.
In the following, we inform you in a generally understandable form. In doing so, we rely on two forms. The first form is the "detailed form" and the second form is the "short form", which briefly and succinctly summarises our data protection declaration.
We ask you to regularly inform yourself about the content of our data protection declaration. We adapt the data protection declaration as soon as the changes in the data processing carried out by us make this necessary. We will inform you as soon as the changes require an act of cooperation on your part (e.g. consent) or other individual notification.
The purpose of the collection, storage, processing and use of data by GzEvD - Gesellschaft zur Entwicklung von Dingen mbH is to enable you to contact us, to make the website www.gesellschaft-zur-entwicklung-von-dingen.de user-friendly and to optimise our services and offers for you. Your data will not be passed on to third parties.
We want to make it possible for you to contact us, to provide you with a beautiful and informative website and, if necessary, to make suitable offers and offer support in case of questions.
We take appropriate technical and organisational measures to ensure a level of protection appropriate to the risk in accordance with Article 32 of the GDPR, taking into account the state of the art, the costs of implementation and the nature, scope, circumstances and purposes of the processing, as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons. The measures include, in particular, ensuring the confidentiality, integrity and availability of data by controlling physical access to the data, as well as access to, input, disclosure, ensuring availability and segregation of the data. We also have procedures in place to ensure the exercise of data subjects' rights, deletion of data and response to data compromise. Furthermore, we already take the protection of personal data into account during the development and selection of hardware, software and procedures, in accordance with the principle of data protection through technology design and through data protection-friendly default settings (Art. 25 DSGVO).
The security measures include in particular the encrypted transmission of data between your browser and our server.
We do our utmost to ensure that your data is safe with us by carrying out our work in accordance with the current state of the art.
Rights of the data subjects
You have the right to request confirmation as to whether data in question is being processed and to information about this data, as well as further information and a copy of the data in accordance with Art. 15 DSGVO.
In accordance with Art. 16 DSGVO, you have the right to request that the data concerning you be completed or that the incorrect data concerning you be corrected.
In accordance with Article 17 of the GDPR, you have the right to demand that the data concerned be deleted without delay or, alternatively, to demand restriction of the processing of the data in accordance with Article 18 of the GDPR.
You have the right to request to receive the data concerning you that you have provided to us in accordance with Article 20 of the GDPR and to request that it be transferred to other data controllers.
Among other things, you have the right to know what data we have stored about you and may request this from us. You have the right to have your data completed, corrected and deleted. You have the right to complain about us to the competent supervisory authority if this is justified and relevant to data protection.
Right of withdrawal
You have the right to revoke consent granted in accordance with Art. 7 (3) DSGVO with effect for the future.
You may at any time revoke the consent you have given us to use your data so that it is no longer used in the future.
You may object to the future processing of data concerning you in accordance with Art. 21 DSGVO at any time. The objection can be made in particular against processing for direct marketing purposes.
You may object to the future processing of your data at any time in order not to receive any offers from us.
The data processed by us will be deleted or its processing restricted in accordance with Art. 17 and Art. 18 DSGVO. Unless expressly stated within the scope of this data protection declaration, the data stored by us will be deleted as soon as they are no longer required for their intended purpose and the deletion does not conflict with any statutory retention obligations. If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. I.e. the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for reasons of commercial or tax law.
According to legal requirements, storage is carried out in particular for 6 years in accordance with § 257 para. 1 HGB (commercial books, inventories, opening balances, annual financial statements, commercial letters, accounting vouchers, etc.) and for 10 years in accordance with § 147 para. 1 AO (books, records, management reports, accounting vouchers, commercial and business letters, documents relevant for taxation, etc.).
Your data will be deleted by if it is no longer required or if you request us to do so. Of course, this always takes into account the statutory provisions, such as the retention periods.
We provide our website on our own web server (hosting). These web servers are located at a German service partner in a high-security environment. We have concluded an order processing agreement (AVV) with our service partner. This complies with the requirements of § 62 of the Federal Data Protection Act (BDSG). The web server writes log files that our IT department evaluates for the operation of the web servers. We store your IP address in the log files and evaluate your visitor behaviour.
We also strictly comply with the DSGVO and the BDSG when operating our web server. For the optimisation of our website and our offers, we save your IP address during your visit.
For the purposes of Article 4(1) of the GDPR, 'personal data' means any information relating to an identified or identifiable natural person (hereinafter 'data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
All data that can be traced back to you is personal data.
Encryption of your data
We encrypt the transmission of your data on our website using a secure socket layer connection (SSL connection), which is indicated by the green locked padlock in front of the https in the address line of our website. In addition, all data on our servers is encrypted and protected against access by third parties. If you want to send us an e-mail to email@example.com, you should encrypt it. The OpenPGP Key-ID required for this is 0x13E5FF55. If this is not possible for you, you can use our secure and DSGVO-compliant mailbox.
We encrypt the data transmission to our website (recognisable by the green lock in front of the address line and the https). In addition, all data on our servers is encrypted and protected against access by third parties. Please always encrypt e-mails to us or use our DSGVO-compliant mailbox.
Cookies are pieces of information that are transferred from our web server or third-party web servers to your web browser and stored there for later retrieval. Cookies can be small files or other types of information storage.
You can disable the storage of cookies by deactivating them in the settings of your browser. Please take into account that the display of our website may not be optimal.
Cookies are basically not evil and serve on the one hand to ensure optimal presentation and on the other hand to optimise our range of services for you. If you are happy to do without them, please do so by blocking cookies in your browser settings or by visiting our website anonymously.
When contacting us by e-mail, the information you provide voluntarily will be processed for the purpose of handling the contact request and its processing in accordance with Art. 6 Para. 1 lit. b) DSGVO. We ensure that your personal data is processed in accordance with the state of the art and that your data is protected against unauthorised access by third parties. Please note that unencrypted e-mails are not sufficiently protected against unauthorised access by third parties. We therefore ask you to encrypt e-mails as a matter of principle. The OpenPGP Key-ID for our e-mail address firstname.lastname@example.org is 0x13E5FF55. You can also use our secure and DSGVO-compliant mailbox. We delete the requests if they are no longer necessary. We review the necessity every two years
If you are unable to encrypt your email to us, please use our secure DSGVO-compliant mailbox. This is the only way we can guarantee secure data transmission.
Use of the open source software Mautic
We deliberately use Mautic on a test basis to find out to what extent we can optimise our website, our services and offers for you based on your visit behaviour. We have specifically decided against e.g. Google Analytics and specifically in favour of Mautic in order to have sovereignty over the data and to guarantee you the best possible security and DSGVO conformity of your personal data. Your data will not be passed on to third parties..
If you would like more information about Mautic, please call us. We will be happy to answer your questions.
The use of Mautic is initially only on a test basis. The collected data will be stored on our server and will not be passed on to third parties. We want to make sure that you get exactly what you need from us, exactly when you need it. Please support us in this and call us to find out more. We will be happy to take time for you.
Use of the open source software Matomo
Within the scope of Matomo's reach analysis, the following data is processed on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f) DSGVO): the type and version of browser you use, the operating system you use, your country of origin, the date and time of the server request, the number of visits, the time you spend on the website and the external links you click. The user's IP address is anonymised before it is stored.
Users can object to the anonymised data collection by the Matomo programme at any time with future effect by clicking on the link below. In this case, a so-called opt-out cookie is stored in their browser, which means that Matomo no longer collects any session data. However, if users delete their cookies, this has the effect that the opt-out cookie is also deleted and must therefore be reactivated by the users.
The use of Matomo, like the use of Mautic, is initially only on a test basis. The collected data is stored on our server and not passed on to third parties. Our aim is to ensure that you get exactly what you need from us, exactly when you need it. Please support us in this and call us to find out more. We will be happy to take time for you.
Integration of third-party services and content
Within our online offer, we use content or service offers from third party providers on the basis of our legitimate interests (i.e. optimisation and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. DSGVO). DSGVO) content or service offers from third-party providers in order to integrate their content and services, such as videos or fonts (hereinafter uniformly referred to as "content"). This always requires that the third-party providers of this content are aware of the IP address of the user, as without the IP address they would not be able to send the content to their browser. The IP address is therefore necessary for the display of this content. We endeavour to only use content whose respective providers only use the IP address to deliver the content. Third-party providers may also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. The "pixel tags" can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user's device and may contain, among other things, technical information about the browser and operating system, referring websites, time of visit and other information about the use of our online offer, as well as being linked to such information from other sources.
The following presentation provides an overview of third-party providers and their content, together with links to their data protection declarations, which contain further information on the processing of data and, in part already mentioned here, options for objection (so-called opt-out):
- We use OpenStreetMap (OSM) to display the location of our office. OSM does not store any user data. Legal FAQ
The integration of third-party content means that we use OpenStreetMap to display our location. We also use content from Twitter. Please use the opt-out functionality of the respective third-party provider to object.
Status March 2021