Privacy policy

Data protection

Responsible person in the sense of data protection law

GzEvD - Gesellschaft zur Entwicklung von Dingen mbH 
Osloer Straße 17 
13359 Berlin 
E-Mail: contact@gzevd.de

Managing Director: Stephan Luckow 
Data Protection Officer: datenschutz@gzevd.de

Foreword

In accordance with Privacy by Design Art. 25 (1) DSGVO and Privacy by Default Art. 25 (2) DSGVO, we will first inform you about our intention to log your visit and ask for your permission beforehand. If you do not agree to our intention, we will not log your visit. We promise.

We are currently testing the open source software (OSS) Mautic as well as Matomo, with which we log and evaluate your visitor behaviour and use it to create suitable offers for you and submit them to you or help you with questions. In doing so, we set cookies and save your IP address. We ourselves do not yet know exactly what we learn from you and what added value we can offer you from the knowledge gained. It is a test phase for the time being. Maybe it will turn out that it is too much work and too much effort, or that you do not want your visit to be tracked. Or maybe you are satisfied with the resulting added value for you and it develops into a win-win situation for you and us. If you want to know exactly what we are doing, please contact us. We will be happy to provide you with more information. One thing is very important to us: that we do not pass on your data to third parties. That's why Mautic runs on our own servers. Our measures are all carried out in compliance with the German Data Protection Regulation (DSGVO) and in cooperation with our TÜV-certified data protection officer.

Type of data processed

  • Inventory data (e.g., names, addresses)
  • Contact details (e.g., email address, telephone numbers)
  • Content data (e.g., text input)
  • Payment data (e.g., bank details, payment history)
  • Usage data (e.g., web pages visited, interest in content, access times)
  • Meta/communication data (e.g., device information, IP addresses)

Relevant legal basis

We process your personal data, which may be provided by you as a result of contacting us and purchasing services from us, in a strictly confidential and secure manner. Promise!

According to § 13 para. 1 of the German Telemedia Act (TMG), you will be informed at the beginning of the usage process by the service provider, i.e. us, GzEvD - Gesellschaft zur Entwicklung von Dingen mbH, about the type, scope and purpose of the collection and use of personal data as well as about the processing of your data in countries outside the scope of Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (OJ EC No. L 281 p. 31) in a generally understandable form.

In the following, we inform you in a generally understandable form. In doing so, we rely on two forms. The first form is the "detailed form" and the second form is the "short form", which briefly and succinctly summarises our data protection declaration.

Changes and updates to the privacy policy

Detailed form 
We ask you to regularly inform yourself about the content of our data protection declaration. We adapt the data protection declaration as soon as the changes in the data processing carried out by us make this necessary. We will inform you as soon as the changes require an act of cooperation on your part (e.g. consent) or other individual notification.

Short form 
Please check here from time to time for the current status of our privacy policy. If you are a customer and/or require consent, we will inform you without being asked.

Purpose

Detailed form 
The purpose of the collection, storage, processing and use of data by GzEvD - Gesellschaft zur Entwicklung von Dingen mbH is to enable you to contact us, to make the website www.gesellschaft-zur-entwicklung-von-dingen.de user-friendly and to optimise our services and offers for you. Your data will not be passed on to third parties.

Short form 
We want to make it possible for you to contact us, to provide you with a beautiful and informative website and, if necessary, to make suitable offers and offer support in case of questions.

Security measures

Detailed form 
We take appropriate technical and organisational measures to ensure a level of protection appropriate to the risk in accordance with Article 32 of the GDPR, taking into account the state of the art, the costs of implementation and the nature, scope, circumstances and purposes of the processing, as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons. The measures include, in particular, ensuring the confidentiality, integrity and availability of data by controlling physical access to the data, as well as access to, input, disclosure, ensuring availability and segregation of the data. We also have procedures in place to ensure the exercise of data subjects' rights, deletion of data and response to data compromise. Furthermore, we already take the protection of personal data into account during the development and selection of hardware, software and procedures, in accordance with the principle of data protection through technology design and through data protection-friendly default settings (Art. 25 DSGVO).

The security measures include in particular the encrypted transmission of data between your browser and our server.

Short form 
We do our utmost to ensure that your data is safe with us by carrying out our work in accordance with the current state of the art.

Rights of the data subjects

Detailed form 
You have the right to request confirmation as to whether data in question is being processed and to information about this data, as well as further information and a copy of the data in accordance with Art. 15 DSGVO.

In accordance with Art. 16 DSGVO, you have the right to request that the data concerning you be completed or that the incorrect data concerning you be corrected.

In accordance with Article 17 of the GDPR, you have the right to demand that the data concerned be deleted without delay or, alternatively, to demand restriction of the processing of the data in accordance with Article 18 of the GDPR.

You have the right to request to receive the data concerning you that you have provided to us in accordance with Article 20 of the GDPR and to request that it be transferred to other data controllers.

You also have the right to lodge a complaint with the competent supervisory authority pursuant to Art. 77 DSGVO.

Short form 
Among other things, you have the right to know what data we have stored about you and may request this from us. You have the right to have your data completed, corrected and deleted. You have the right to complain about us to the competent supervisory authority if this is justified and relevant to data protection.

Right of withdrawal

Detailed form 
You have the right to revoke consent granted in accordance with Art. 7 (3) DSGVO with effect for the future.

Short form 
You may at any time revoke the consent you have given us to use your data so that it is no longer used in the future.

Detailed form 
You may object to the future processing of data concerning you in accordance with Art. 21 DSGVO at any time. The objection can be made in particular against processing for direct marketing purposes.

Short form 
You may object to the future processing of your data at any time in order not to receive any offers from us.

Data deletion

Detailed form 
The data processed by us will be deleted or its processing restricted in accordance with Art. 17 and Art. 18 DSGVO. Unless expressly stated within the scope of this data protection declaration, the data stored by us will be deleted as soon as they are no longer required for their intended purpose and the deletion does not conflict with any statutory retention obligations. If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. I.e. the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for reasons of commercial or tax law.

According to legal requirements, storage is carried out in particular for 6 years in accordance with § 257 para. 1 HGB (commercial books, inventories, opening balances, annual financial statements, commercial letters, accounting vouchers, etc.) and for 10 years in accordance with § 147 para. 1 AO (books, records, management reports, accounting vouchers, commercial and business letters, documents relevant for taxation, etc.).

Short form 
Your data will be deleted by if it is no longer required or if you request us to do so. Of course, this always takes into account the statutory provisions, such as the retention periods.

Web server

Detailed form 
We provide our website on our own web server (hosting). These web servers are located at a German service partner in a high-security environment. We have concluded an order processing agreement (AVV) with our service partner. This complies with the requirements of § 62 of the Federal Data Protection Act (BDSG). The web server writes log files that our IT department evaluates for the operation of the web servers. We store your IP address in the log files and evaluate your visitor behaviour.

Short form 
We also strictly comply with the DSGVO and the BDSG when operating our web server. For the optimisation of our website and our offers, we save your IP address during your visit.

Personal data

Detailed form 
For the purposes of Article 4(1) of the GDPR, 'personal data' means any information relating to an identified or identifiable natural person (hereinafter 'data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Short form 
All data that can be traced back to you is personal data.

Encryption of your data

Detailed form 
We encrypt the transmission of your data on our website using a secure socket layer connection (SSL connection), which is indicated by the green locked padlock in front of the https in the address line of our website. In addition, all data on our servers is encrypted and protected against access by third parties. If you want to send us an e-mail to kontakt@gzevd.de, you should encrypt it. The OpenPGP Key-ID required for this is 0x13E5FF55. If this is not possible for you, you can use our secure and DSGVO-compliant mailbox.

Short form 
We encrypt the data transmission to our website (recognisable by the green lock in front of the address line and the https). In addition, all data on our servers is encrypted and protected against access by third parties. Please always encrypt e-mails to us or use our DSGVO-compliant mailbox.

Cookies

Detailed form 
Cookies are pieces of information that are transferred from our web server or third-party web servers to your web browser and stored there for later retrieval. Cookies can be small files or other types of information storage.

In part, the cookies serve security purposes or are necessary for the operation of our online offer (e.g., for the display of the website) or to save the user decision when confirming the cookie banner. In addition, we use cookies for range measurement and marketing purposes, about which you will be informed in the course of the data protection declaration.

You can disable the storage of cookies by deactivating them in the settings of your browser. Please take into account that the display of our website may not be optimal.

Short form 
Cookies are basically not evil and serve on the one hand to ensure optimal presentation and on the other hand to optimise our range of services for you. If you are happy to do without them, please do so by blocking cookies in your browser settings or by visiting our website anonymously.

E-Mail

Detailed form 
When contacting us by e-mail, the information you provide voluntarily will be processed for the purpose of handling the contact request and its processing in accordance with Art. 6 Para. 1 lit. b) DSGVO. We ensure that your personal data is processed in accordance with the state of the art and that your data is protected against unauthorised access by third parties. Please note that unencrypted e-mails are not sufficiently protected against unauthorised access by third parties. We therefore ask you to encrypt e-mails as a matter of principle. The OpenPGP Key-ID for our e-mail address kontakt@gzevd.de is 0x13E5FF55. You can also use our secure and DSGVO-compliant mailbox. We delete the requests if they are no longer necessary. We review the necessity every two years

Short form 
If you are unable to encrypt your email to us, please use our secure DSGVO-compliant mailbox. This is the only way we can guarantee secure data transmission.

Use of the open source software Mautic

Detailed form 
We deliberately use Mautic on a test basis to find out to what extent we can optimise our website, our services and offers for you based on your visit behaviour. We have specifically decided against e.g. Google Analytics and specifically in favour of Mautic in order to have sovereignty over the data and to guarantee you the best possible security and DSGVO conformity of your personal data. Your data will not be passed on to third parties..

We use Mautic, a web analysis software operated on our servers, on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f) DSGVO). Mautic uses cookies. The information generated by the cookie about your use of the online offer is transmitted to our server and stored there.

This information is stored in log files and may include, but is not limited to, Internet Protocol ("IP") addresses, referring/exit pages, date/time stamp and/or clickstream data. We do not monitor or log data collected from your servers when you use the Services, but do log information about your access to our Services. We collect this information to improve marketing, analytics and service functionality and to provide offers to you. We do not sell, rent or share this information with third parties. Technologies such as cookies, tags and scripts are used by Mautic and help us analyse usage trends and collect aggregate, anonymised information about our user base as a whole. Cookies are used to remember information submitted by you as a user, although you can control the use of cookies in your web browser. If you reject cookies, you can continue to use our services, but some features or areas of our services may be limited.

Our website contains social media features, such as a Twitter stream, that run on our website. These features may collect your IP address, the page you visit on our website and may set a cookie in order for the feature to work properly. These features are either hosted by third parties or hosted directly on our website. Your interactions with these features are subject to the privacy policy of the company providing them. We may also receive information from other sources and combine it with information we collect through our services. We make all reasonable efforts to ensure compliance with the GDPR in our internal operations.

If you would like more information about Mautic, please call us. We will be happy to answer your questions.

Short form 
The use of Mautic is initially only on a test basis. The collected data will be stored on our server and will not be passed on to third parties. We want to make sure that you get exactly what you need from us, exactly when you need it. Please support us in this and call us to find out more. We will be happy to take time for you.

Use of the open source software Matomo

Detailed form 
Within the scope of Matomo's reach analysis, the following data is processed on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f) DSGVO): the type and version of browser you use, the operating system you use, your country of origin, the date and time of the server request, the number of visits, the time you spend on the website and the external links you click. The user's IP address is anonymised before it is stored.

Matomo uses cookies that are stored on the user's computer and that enable an analysis of the use of our online offer by the user. Pseudonymous user profiles can be created from the processed data. The cookies have a storage period of one week. The information generated by the cookie about your use of this website is only stored on our server and is not passed on to third parties.

Users can object to the anonymised data collection by the Matomo programme at any time with future effect by clicking on the link below. In this case, a so-called opt-out cookie is stored in their browser, which means that Matomo no longer collects any session data. However, if users delete their cookies, this has the effect that the opt-out cookie is also deleted and must therefore be reactivated by the users.

Short form 
The use of Matomo, like the use of Mautic, is initially only on a test basis. The collected data is stored on our server and not passed on to third parties. Our aim is to ensure that you get exactly what you need from us, exactly when you need it. Please support us in this and call us to find out more. We will be happy to take time for you.

Tracking Opt-out

Integration of third-party services and content

Detailed form 
Within our online offer, we use content or service offers from third party providers on the basis of our legitimate interests (i.e. optimisation and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. DSGVO). DSGVO) content or service offers from third-party providers in order to integrate their content and services, such as videos or fonts (hereinafter uniformly referred to as "content"). This always requires that the third-party providers of this content are aware of the IP address of the user, as without the IP address they would not be able to send the content to their browser. The IP address is therefore necessary for the display of this content. We endeavour to only use content whose respective providers only use the IP address to deliver the content. Third-party providers may also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. The "pixel tags" can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user's device and may contain, among other things, technical information about the browser and operating system, referring websites, time of visit and other information about the use of our online offer, as well as being linked to such information from other sources.

The following presentation provides an overview of third-party providers and their content, together with links to their data protection declarations, which contain further information on the processing of data and, in part already mentioned here, options for objection (so-called opt-out):

  • We use OpenStreetMap (OSM) to display the location of our office. OSM does not store any user data. Legal FAQ
  • Within our online offer, functions of the Twitter service or platform may be integrated (hereinafter referred to as "Twitter"). Twitter is a service of Twitter Inc, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. The functions include the display of our posts within Twitter within our online offer, the link to our profile on Twitter as well as the possibility to interact with the posts and the functions of Twitter, as well as to measure whether users reach our online offer via the advertisements placed by us on Twitter (so-called conversion measurement). Twitter is certified under the Privacy Shield agreement and thus offers a guarantee of compliance with European data protection law. Privacy policy. Here you can find the opt-out option.

Short form 
The integration of third-party content means that we use OpenStreetMap to display our location. We also use content from Twitter. Please use the opt-out functionality of the respective third-party provider to object.

Status March 2021