Privacy Policy

The controller within the meaning of Article 4(7) of the GDPR is the entity which, alone or jointly with others, determines
the purposes and means of the processing of personal data.

With regard to our website, the following companies are joint controllers within the meaning of Article 26 of the GDPR:

GEDORE Werkzeugfabrik GmbH & Co. KG
Remscheider Str. 149
42899 Remscheid

GEDORE Holding GmbH
Remscheider Straße 149
42899 Remscheid
GEDORE GmbH
Remscheider Straße 149
42899 Remscheid

GEDORE Digital Solutions GmbH
Remscheider Straße 147
42899 Remscheid

GEDORE Torque Solutions GmbH
Bertha-Benz-Straße 12
71665 Vaihingen/Enz

GEDORE Automotive GmbH
Breslauer Str. 41
78166 Donaueschingen

GEDORE AUSTRIA GmbH
Gedore-Straße 1
8190 Birkfeld

You can contact our Data Protection Officer using the following details:

EggSec GmbH
Andreas Langendonk
Dohmenstr. 28
47807 Krefeld

Email:dsb@eggsec.de
Telephone: +49-2151-200855

As the provider of this website, we automatically collect information in server log files that your browser transmits automatically. This may include, in particular, the IP address, the date and time of access, the page or file accessed, the amount of data transferred, the HTTP status code, the referrer URL, and information about your browser and operating system. This information is not combined with other data sources.

This processing of data serves to ensure the technically error-free display of our website, to guarantee trouble-free operation, and to detect and defend against attacks.

The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest lies in the secure, stable and functional provision of our website.

The recipient of the data is our hosting service provider.

The stored information is deleted after 30 days, unless longer storage is required to investigate or prevent a specific security incident. We are unable to identify you on the basis of the stored information. Therefore, Articles 15 to 22 of the GDPR do not apply in accordance with Article 11(2) of the GDPR, unless you provide further information that enables your identification.

‘Personal data’ refers to any information relating to an identified or identifiable natural person. We process this data in accordance with the applicable data protection laws, in particular the GDPR and the BDSG. We may only process personal data where there is a legal basis for doing so.

We process personal data only with your consent, to enter into a contract with you or to respond to your enquiry in connection with a potential business relationship, to fulfil legal obligations, or to protect our legitimate interests, provided this does not infringe upon your interests or fundamental rights and freedoms that require the protection of personal data.

Our website offers you various features; when you use these, we collect, process and store personal data. Below, we explain what happens to this data:

Purpose of processing

We process your personal data to the extent necessary to fulfil the following purposes:

• ShopWare serves as a shop system for displaying our product pages and creating content.
   

Legal basis

The legal basis for the processing of your personal data for the purposes:

• the legitimate interests of the controller or a third party (Article 6(1)(f) of the GDPR)
   

Legitimate interests

Our ‘legitimate interests’ pursued through the processing of personal data relate to Article 6(1), first sentence, point (f) of the GDPR

• Our legitimate interest is to use Shopware to display product pages that function as a catalogue.
   

Categories of personal data

Where personal data is not collected directly from the data subject, we are obliged to inform the data subject of the categories of data concerned.

• Cookies. These can be found in the cookie policy at (please insert link).
   

Retention period

We inform you of the period for which personal data will be stored or, where this is not possible, the criteria used to determine that period.

• The retention period depends on the selection of cookies. These can be found in the Cookie Policy at (please insert link).
   

Recipients or categories of recipients

The recipients or categories of recipients of your personal data are

• web hosting service providers based in Germany and the EU. These providers may engage further data processors to provide their services, in particular for hosting, technical infrastructure and support.

Purpose of processing

We process your personal data for the purpose of sending newsletters.

• Sending newsletters to customers and interested parties
   

Legal basis

The legal basis for processing your personal data for the purposes set out above is/are

• Consent (Article 6(1)(a) of the GDPR)

You may withdraw your consent at any time with future effect and without any detriment to you, in particular via the unsubscribe link included in every newsletter.
 

Sources of personal data

Where personal data is not collected directly from the data subject, we are obliged to inform the data subject of the sources of this data

• Entries in the online form for subscribing to the newsletter
   

Categories of personal data

Where personal data is not collected directly from the data subject, we are obliged to inform the data subject of the categories of data concerned

• Email address, and, where applicable, any further details you have provided, such as first name, surname and company name.
   

Retention period

We will inform you of the period for which the personal data will be stored or, if this is not possible, the criteria used to determine this period.

• Until further notice
   

Recipients or categories of recipients

The recipients or categories of recipients of your personal data are

• We use Brevo’s service to send and manage our newsletter. Brevo processes personal data on our behalf on the basis of a data processing agreement in accordance with Article 28 of the GDPR. Brevo may engage further data processors to provide its services, in particular for hosting, technical infrastructure and support.
   

Purpose of processing

We process your personal data to the extent necessary to fulfil the following purposes:

• Displaying the website using a specified font from Adobe Typekit
   

Legal basis

The legal basis for the processing of your personal data for the purposes set out above is/are

• Protection of the legitimate interests of the controller or a third party (Article 6(1)(f) of the GDPR)
   

Legitimate interests

Our ‘legitimate interests’, which are pursued through the processing of personal data, relate to Article 6(1), first sentence, point (f) of the GDPR.

• Our legitimate interest is the delivery of the website using one of the fonts provided via Adobe Typekit.
  
   

Categories of personal data

Where personal data is not collected directly from the data subject, we are obliged to inform the data subject of the categories of data concerned.

• IP address, hostname of the accessing website, and technical information relating to the provision of the fonts used and the Adobe Fonts web project.
  
   

Retention period

We inform you of the period for which personal data will be stored or, where this is not possible, the criteria used to determine that period.

• The retention period depends on the selection of cookies. These can be found in the cookie policy at (please insert link).
   

Recipients

Adobe Systems Software Ireland Limited, 4–6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland, and, where applicable, other service providers engaged by Adobe.
 

Transfers to third countries:

Adobe may also transfer data within the Adobe Group outside the EEA, in particular to the USA.
 

Transfers to third countries

Where personal data is transferred to countries outside the European Union or the European Economic Area, the transfer is carried out in accordance with the requirements of Article 44 et seq. of the GDPR.
 

purpose of processing

We process your personal data to the extent necessary to fulfil the following purposes:

• FactFinder is a tool designed to provide customers with a search function on our website. It enables a highperformance search, allowing users to browse through the wide range of tools.
• FactFinder is technically essential for the use of the website.
   

Legal basis

The legal basis for the processing of your personal data for the purposes set out above is/are

• the legitimate interests of the controller or a third party (Article 6(1)(f) of the GDPR)
   

Legitimate interests

Our ‘legitimate interests’, which are pursued through the processing of personal data, relate to Article 6(1), first sentence, point (f) of the GDPR.

• Our legitimate interest is the operation of the website using FactFinder.
   

Sources of personal data

Where personal data is not collected directly from the data subject, we are obliged to inform the data subject of the sources of this data.

• Via your browser when accessing our website
   

Categories of personal data

Where personal data is not collected directly from the data subject, we are obliged to inform the data subject of the categories of data concerned.

• Meta/communication data (IP address, device information, date, time)
   

Retention period

We will inform you of the period for which the personal data will be stored or, where this is not possible, the criteria used to determine that period.

• The retention period depends on the selection or settings of the cookies. These can be found in the cookie policy at (please insert link).
   

Recipients

Omikron Data Quality GmbH, Habermehlstr. 17, 75172 Pforzheim, and, where applicable, other service providers engaged by Adobe.
 

Transfers to third countries:

Omikron Data Quality GmbH may also transfer personal data outside the EEA, in particular to the USA.
 

Transfers to third countries

Where personal data is transferred to countries outside the European Union or the European Economic Area, the transfer takes place in accordance with the requirements of Article 44 et seq. of the GDPR.

Purpose of processing

We process your personal data to the extent necessary to fulfil the following purposes:

• Functional use of the website and provision of the consent banner
   

Legal basis

The legal basis for the processing of your personal data for the purposes set out above is/are

• Compliance with a legal obligation (Article 6(1)(c) of the GDPR)
• We are complying here with the accountability requirement under Article 5(2) of the GDPR in conjunction with the TDDDG for the management of accepted settings.
   

Sources of personal data

Where personal data is not collected directly from the data subject, we are obliged to inform the data subject of the sources of this data.

• Information provided by the website visitor
   

Categories of personal data

Where personal data is not collected directly from the data subject, we are obliged to inform the data subject of the categories of data concerned.

• Consent status, consent ID, time of consent, template version, banner language, referrer URL, user agent and IP address
   

Retention period

We will inform you of the period for which the personal data will be stored or, if this is not possible, the criteria used to determine that period.

• The retention period depends on the selection or settings of the cookies. These can be found in the cookie policy at (please insert link).

Purpose of processing

We process your personal data to the extent necessary to fulfil the following purposes:

• Sending newsletters to customers who have already purchased goods or services from us
   

Legal basis

The legal basis for processing your personal data for the purposes set out above is/are

• the legitimate interests of the controller or a third party (Article 6(1)(f) of the GDPR) and, furthermore,
• you have not objected to the use of your email address for the purpose of sending the newsletter.
   

Sources of personal data

Where personal data is not collected directly from the data subject, we are obliged to inform the data subject of the sources of such data.

• Contractual data
   

Categories of personal data

Where personal data is not collected directly from the data subject, we are obliged to inform the data subject of the categories of data concerned.

• Email address
• Company
• Surname
• First name
• Any further information you have provided
   

Legitimate interests

Our ‘legitimate interests’ or those of a third party, which are pursued through the processing of personal data, are based on Article 6(1)(f) of the GDPR.

• Regular updates on tools, services, events and the company.
• If you no longer wish to receive the newsletter, you may unsubscribe at any time with future effect, without any detriment to you, for example via the unsubscribe link included in every newsletter
   

Retention period

We will inform you of the period for which personal data will be stored or, where this is not possible, the criteria used to determine that period.

• Until further notice
   

Recipients or categories of recipients

The recipients or categories of recipients of your personal data are

• We use Brevo’s service to send and manage our newsletter. Brevo processes personal data on our behalf on the basis of a data processing agreement in accordance with Article 28 of the GDPR. Brevo may engage further data processors to provide its services, in particular for hosting, technical infrastructure and support.
   

Purpose of processing

We process your personal data to the extent necessary to fulfil the following purposes:

• Website visitors submit enquiries regarding services, products or general matters via the online form. To process these enquiries, at least your email address is required in order to contact you.
   

Legal basis

The legal basis for processing your personal data for the purposes set out above is/are

• Consent (Article 6(1)(a) of the GDPR)
   

Sources of personal data

Where personal data is not collected directly from the data subject, we are obliged to inform the data subject of the sources of this data.

• Directly via the contact form
   

Categories of personal data

Where personal data is not collected directly from the data subject, we are obliged to inform the data subject of the categories of data concerned.

• Email address
• Further entries, e.g. in the free-text field
   

Retention period

We will inform you of the period for which the personal data will be stored or, where this not possible, the criteria used to determine this period

• Once the purpose has been fulfilled, within 30 days, provided there are no statutory retention obligations.
   

We use cookies and similar technologies on our website.

Cookies are small text files used by websites to make the user experience more efficient. They do not damage your device.

We use cookies to personalise content and adverts, to offer social media features and to analyse traffic to our website. We also share information about your use of our website with our social media, advertising and analytics partners. Our partners may combine this information with other data that you have provided to them or that they have collected in connection with your use of their services. You can find our full privacy policy (please insert link)

These are used in particular for the technically necessary operation (essential) of the website and – subject to your consent – for functional and marketing purposes.

Technically necessary technologies are used in accordance with the relevant legal requirements.

Where consent is required, processing takes place on the basis of your consent. Your consent is given in accordance with Section 25(1) of the TDDDG in conjunction with Article 4(11) and Article 7 of the GDPR.

You have the option to amend or withdraw your consent at any time via the consent banner on our website.

In this Cookie Policy, you can find out who we are, how to contact us and how we process personal data. Please provide your consent ID and the date when you contact us regarding your consent.
 

Recipients or categories of recipients

The recipients or categories of recipients of your personal data are:

Google:

Google Ireland Limited
Gordon House, Barrow Street
Dublin 4
Irland

Adobe:

Adobe Systems Software Ireland Limited
4-6 Riverwalk
Citywest Business Campus
Dublin 24
Republic of Ireland
 

Details of the cookies we use

For details of the cookies we use, such as cookie ID, device information, type of cookie, purpose of processing, storage duration and your options for withdrawing consent, please refer directly to the consent banner, which you can access here (insert link):

GEDORE takes all necessary technical and organisational measures to protect your personal data from unauthorised access.

Scope of personal data processing
When you send an email to GEDORE, we process at least your email address. In addition, we may also process your name and any other information you provide to us in your email.
 

Legal basis

Article 6(1), first sentence, points (a) and (b) of the GDPR (consent, implementation of pre-contractual measures). When you send us an email, we assume that you have consented to the processing of your data based on your conduct.

If this is not the case, please let us know.

If you contact us with a view to entering into a contract, the legal basis for the processing is the implementation of a pre-contractual measure.
 

Purpose of processing

The purpose of the communication is to respond to enquiries regarding services, products or general matters.
 

Retention period

Our email correspondence is retained until the expiry of retention obligations under tax and commercial law. The retention period may be up to 10 years
 

Right to object and right to erasure

Where processing is based on your consent, you may withdraw this consent at any time with effect for the future. However, this does not affect the lawfulness of any processing carried out up to that point. In certain circumstances, you may also have a right to have your personal data erased under Article 17 of the GDPR.
 

Handling of application documents

Please note that application documents sent by email in unencrypted form may be opened by third parties before they reach our IT systems. We assume that we are also permitted to reply to unencrypted application emails in unencrypted form. If you do not wish this to happen, please let us know in your application email.

The General Data Protection Regulation (GDPR) guarantees every data subject certain rights in relation to their personal data. These include:

• The right of access: Every data subject has the right to obtain confirmation from us as to whether personal data is being processed, and to access this data, as well as to receive further information and copies of this data.
• The right to rectification: Every data subject has the right to request the immediate rectification of inaccurate personal data.
• The right to erasure (‘right to be forgotten’): Every data subject has the right to request the erasure of their personal data without undue delay.
• The right to restriction of processing: Every data subject has the right to request the restriction of the processing of their personal data.
• The right to data portability: Every data subject has the right to receive the personal data concerning them, which they have provided to us, in a structured, commonly used and machine-readable format.
• The right to object: Every data subject has the right to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them which is carried out on the basis of Article 6(1)(e) or (f) of the GDPR. Where we process personal data relating to the data subject for the purposes of direct marketing, the data subject may object to such processing in accordance with Article 21(2) and (3) of the GDPR.

The data subject also has the right to lodge a complaint with a supervisory authority if they consider that the processing of personal data infringes the GDPR.

The supervisory authority responsible for us is: State Commissioner for Data Protection and Freedom of Information, North Rhine-Westphalia

If you wish to exercise your rights under Articles 15 to 22 of the GDPR, we will process the personal data you provide in order to fulfil these rights and to be able to provide evidence thereof. We will process the data stored for the purpose of providing information and preparing responses exclusively for this purpose and for the purposes of data protection monitoring; otherwise, we will restrict processing in accordance with Article 18 of the GDPR.

This processing is based on the legal basis of Article 6(1)(c) of the GDPR in conjunction with Articles 15 to 22 of the GDPR and Section 34(2) of the BDSG.

Last updated: 20 September 2026