Thank you for visiting our website www.gedore.com and your interest in our company.

The protection of your personal data is an important concern for us.

The purpose of this data protection declaration is to inform you about the processing of your personal data that we collect when you visit our website. Our data protection practice is in accordance with the legal regulations of the EU Data Protection Basic Regulation (DSGVO) and the Federal Data Protection Act (BDSG). The following data protection declaration serves to fulfil the information obligations resulting from the DSGVO. These can be found, for example, in Art. 13 and Art. 14 ff. DSGVO.

1.Person responsible

The person responsible within the meaning of Art. 4 No. 7 DSGVO is the person who alone or jointly with others decides on the purposes and means of processing personal data.

With regard to our website, the following companies are jointly and severally responsible within the meaning of Art. 26 DSGVO:

GEDORE Werkzeugfabrik GmbH & Co. KG
Remscheider Str. 149
42899 Remscheid

GEDORE Holding GmbH
Remscheider Strasse 149
42899 Remscheid

GEDORE GmbH
Remscheider Strasse 149
42899 Remscheid

GEDORE Torque Solutions GmbH
Bertha-Benz-Strasse 12
71665 Vaihingen/Enz

GEDORE Automotive GmbH
Breslauer Str. 41
78166 Donaueschingen

GEDORE AUSTRIA GmbH
Gedore-Strasse 1
8190 Birkfeld

2. Contact details of the Data Protection Officer

We have appointed a data protection officer in accordance with Art. 37 DSGVO. You can reach our data protection officer under the following contact details:

Andreas Langendonk
EggSec GmbH
Dohmenstraße 28a
47807 Krefeld

E-Mail: dsb@eggsec.de
Tel.: +49-2151-200855
Website: https://eggsec.de

3. Provision of the website and creation of log files

Each time you access our website, our system automatically collects data and information about the device you are accessing (e.g. computer, mobile phone, tablet, etc.).

What personal data is collected and to what extent is it processed?

(1) Information about the browser type and the version used;
(2) The operating system of the retrieval device;
(3) Host name of the accessing computer;
(4) The IP address of the retrieval device;
(5) Date and time of access;
(6) Websites and resources (images, files, other page content) accessed on our website;
(7) Websites from which the user's system accessed our website (referrer tracking);
(8) Reporting whether the retrieval was successful;
(9) Volume of data transferred

This data is stored in the log files of our system. These data are not stored together with the personal data of a specific user, so that individual site visitors are not identified.

Legal basis for the processing of personal data
Art. 6 para. 1 lit. f DSGVO (legitimate interest). Our legitimate interest is to ensure that the purpose described below is achieved.

Purpose of data processing
The temporary (automated) storage of the data is necessary for the course of a website visit to enable the delivery of the website. The storage and processing of personal data is also carried out to maintain the compatibility of our website for as many visitors as possible and to combat misuse and troubleshooting. For this purpose, it is necessary to log the technical data of the accessing computer in order to be able to react as early as possible to display errors, attacks on our IT systems and/or errors in the functionality of our website. In addition, the data is used to optimise the website and to generally ensure the security of our information technology systems.

Duration of storage
The aforementioned technical data will be deleted as soon as they are no longer required in order to ensure the compatibility of the website for all visitors, but no later than 3 months after our website has been called up.

Possibility of opposition and deletion
You may object to the processing at any time in accordance with Art. 21 DSGVO and request the deletion of data in accordance with Art. 17 DSGVO. Which rights you have and how you assert them can be found at the bottom of this data protection declaration.

4. Special functions of the website

Contact form(s)

Which personal data are collected and to what extent are they processed?
The data you have entered in our contact forms, which you have entered in the input mask of the contact form.

Legal basis for the processing of personal data
Art. 6 para. 1 lit. a DSGVO (consent by clear confirmatory act or conduct)

Purpose of data processing
The data collected via our contact form or via our contact forms will only be used for processing the specific contact request received via the contact form. Please note that we may also send you e-mails to the address provided in order to fulfil your contact request. The purpose of this is to enable you to receive confirmation from us that your request has been correctly forwarded to us. However, sending this confirmation e-mail is not mandatory for us and is for your information only.

Duration of storage
After processing your request, the collected data will be deleted immediately, as long as there are no legal retention periods.

Possibility of revocation and deletion
The revocation and deletion options are based on the general regulations regarding the right of revocation under data protection law and the right of deletion described below in this data protection declaration.

Necessity of providing personal data
The contact forms are used on a voluntary basis and are neither contractually nor legally prescribed. You are not obliged to contact us via the contact form, but can also use the other contact options given on our website. If you would like to use our contact form, you must fill in the fields marked as mandatory. If you do not fill in the necessary information on the contact form, you can either not send the request or we can unfortunately not process your request.

Login Area / Registration

Scope of the processing of personal data and collected personal data
The registration and login data provided by you to us or provided to you.

Legal basis for the processing of personal data
Art. 6 para. 1 lit. b DSGVO (implementation of (pre)contractual measures.

Purpose of data processing
On our website you have the possibility to use a separate login area. To enable us to check your authorization to use the protected area or the protected documents, you must enter your login data (e-mail or user name and password) in the appropriate form. If required, we can send you your login data or the possibility to reset your password by e-mail on request.

Newsletter subscription form

Which personal data are collected and to what extent are they processed?
When you register for the newsletter on our website, we receive the e-mail address entered by you in the registration field and, if applicable, other contact data, provided that you inform us of this via the newsletter registration form.

Legal basis for the processing of personal data
Art. 6 para. 1 lit. a DSGVO (consent by clear confirmatory act or conduct)

Purpose of data processing
The data recorded in the registration mask of our newsletter will be used by us exclusively for the dispatch of our newsletter, in which we inform you about all our services and news. After registration, we will send you a confirmation e-mail containing a link that you must click to complete your subscription to our newsletter (double opt-in).

Duration of storage
Our newsletter can be unsubscribed at any time by clicking on the unsubscribe link, which is also included in every newsletter. Your data will be deleted by us immediately after you have unsubscribed, provided there are no legal storage obligations. Your data will also be deleted by us immediately in the event of an uncompleted registration. We reserve the right to delete your data without giving reasons and without prior or subsequent information.

Possibility of revocation and deletion
The revocation and deletion options are based on the general regulations regarding the right of revocation under data protection law and the right of deletion described below in this data protection declaration.

Necessity of providing personal data
If you would like to use our newsletter, you must fill in the fields marked as mandatory and confirm your e-mail address by clicking on the double opt-in link. The information for newsletter registration is neither necessary to enter into a contract with us nor legally binding. They serve exclusively to send our newsletter. If you do not fill in the mandatory fields, we are unfortunately unable to provide you with our newsletter service.

Call-me-back button

On our website, we offer you the opportunity to contact us quickly and easily. For this purpose, you can click on the "call-me-back button" displayed on the sub-pages, which will show you various contact options.

Legal basis for the processing of personal data
The legal basis for the processing is Art. 6 (1) UAbs. 1 lit. a DSGVO (consent), or Art. 6 (1) UAbs. 1 lit. b DSGVO (implementation of pre-contractual measures that take place at the request of the data subject), if you contact us to conclude a contract with us.

Purpose of the data processing
The data is processed in order to be able to identify you as a person and thus to be able to help you quickly with your request. Furthermore, the data is required in order to be able to get back to you. If you use the call-back service, this cannot be used without processing your data; the purpose of the processing here is also the provision of the service itself.

Duration of storage
The data is stored for as long as it is required to fulfil the purpose. Accordingly, your data will be regularly deleted after we have answered your enquiry. If you give us your consent, longer-term storage may also be possible.

Revocation
Insofar as the legal basis for processing your personal data is consent, you have the right to revoke your consent at any time with effect for the future. If you revoke, we will no longer process your data. The lawfulness of the past processing is not affected by the revocation.

Necessity of providing personal data
The provision of your personal data is voluntary and is neither contractually nor legally required. You are not obliged to contact us using the call-me-back button. Insofar as information is requested for the call-back service, this is necessary in order to be able to provide you with the service.

Service for torque tools

What personal data is collected and to what extent is it processed?

In order to provide the service, we process the data you provide via the online application form.

Legal basis for the processing of personal data
Art. 6 para. 1 lit. b DSGVO, Art. 6 para. 1 lit. a DSGVO or Art. 6 para. 1 lit. f DSGVO.

Legitimate interest of the party responsible
If the contract is concluded with a legal entity, the processing of personal data is justified as a legitimate interest of the responsible party in processing the data of the contact person of the company initiating the contract.

Purpose of data processing
Provision of a service by GEDORE Werkzeugfabrik Standort TorqueTech Solingen (regular checking of torque spanners), recording and maintenance of customer master data, sending reminder e-mails for the first free and further chargeable calibrations according to customer intervals or the recommended DIN EN ISO 6789 specifications.

Duration of storage
Your data will be stored by us until revoked.

Recipient of the data
Recipients of your data are the service department of GEDORE Werkzeugfabrik's TorqueTech Solingen site and our online marketing department and the online agency "netzkern" as order processor.

Revocation and deletion option
The revocation and deletion options are based on the general regulations on the right of revocation and deletion under data protection law as described in this data protection declaration.

5. Information on the use of cookies

Scope of the processing of personal data
On various pages, we use cookies and plugins to enable the use of certain functions on our website. Plugins are additional software that can enable further functions on the website. So-called 'cookies' are small text files that your browser can store on your computer. These text files contain a characteristic string of characters that enable the browser to be uniquely identified when our website is called up again. The process of placing a cookie file is also called 'setting a cookie'.

Legal basis for the processing of personal data
Art. 6 para. 1 sentence 1 lit. f DSGVO (legitimate interest). Our legitimate interest is to maintain the full functionality of our website, to increase usability and to enable a more individualised customer approach. We are only able to identify individual site visitors with the help of cookie technology if the site visitor has previously provided us with corresponding personal data on the basis of separate consent.
The legal basis for data processing for some cookies and plug-ins is also your consent in accordance with Art. 6 para. 1 sentence 1 lit. a, Art. 49 para. 1 sentence 1 lit. a DSGVO in our information banner regarding the use of cookies, plug-ins and web tracking (consent through clear confirming action or behaviour).
Please refer to the clear table below to see which cookies and plugins are associated with which legal bases.

Purpose of data processing
Cookies are set by our website to maintain the full functionality of our website and to improve usability. The same purpose is served by the plugins which are installed on the website. In addition, cookie technology enables us to recognise individual visitors through pseudonyms, e.g. an individual, arbitrary ID, so that it is possible for us to offer more individualised services.

In addition, we use information from the cookies to evaluate your visit to this website, to compile reports on website activities and to provide us with other services related to website and internet use. In particular, if you have consented to the processing, the success of our advertising measures in connection with LinkedIn will be measured. In this context, we record when you arrive at our website from LinkedIn and which subpages you subsequently view on our website.
We also need the web tracking for security reasons. Web tracking allows us to track whether third parties are attacking our website. The information from the web tracker allows us to take effective countermeasures and protect the personal data we process from these cyber-attacks.
The purpose of each cookie and plugin can be found in the table below.

Duration of storage
Please refer to the table for the storage period of each cookie and plugin.

Possibility of objection and removal
You can set your browser yourself according to your wishes so that the setting of cookies is generally prevented. You can then decide on a case-by-case basis whether to accept cookies or accept cookies in principle. Cookies can be used for various purposes, e.g. to recognise that your PC has already had a connection to our website (persistent cookies) or to save recently viewed offers (session cookies). We use cookies to provide you with increased user comfort. In order to use our comfort functions, we recommend that you allow the acceptance of cookies for our web offer. The options for objection and removal are also based on the general regulations on the right of objection and deletion under data protection law described below in this data protection declaration.

Third country transfer
Some cookies and plugins may also transfer your data to servers outside the European Union. These are the cookies and plugins of the company Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; website: https://marketingplatform.google.com/intl/de/about/analytics/; privacy policy: https://policies.google.com/privacy), as well as LinkedIn Ireland Unlimited Company, 70 Sir John Rogerson's Quay, Dublin 2, Dublin, D02r296, Ireland (service provider: LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA; website: https://www.linkedin.com; privacy policy: https://www.linkedin.com/legal/privacy-policy, cookie policy: https://www.linkedin.com/legal/cookie_policy). These are marked with "*" in the table. We strive to ensure the greatest possible protection of your personal data, especially with regard to international transfers. In particular, the data in the cookies is processed pseudonymously in order to disguise a clear personal reference and thus make it difficult to draw conclusions about your person.
As far as we are able, we will assist you in obtaining a copy of the personal data processed about you from Google or LinkedIn. As far as we are able, we have concluded order processing contracts or contracts concerning joint responsibility.

6. Data security and data protection, communication by e-mail

GEDORE takes all necessary technical and organisational measures to protect your personal data from unauthorised access. In the case of unencrypted communication by e-mail, we cannot guarantee complete data security on the transmission path to our IT systems, so that we recommend encrypted communication or by post for information requiring a high level of confidentiality.

Automatic e-mail archiving

Scope of the processing of personal data
We expressly point out that our mail system has an automated archiving procedure. This means that all incoming and outgoing e-mails are digitally archived in an audit-proof manner.

Legal basis for the processing of personal data
Art. 6 (1) sentence 1 lit. c DSGVO (legal obligation). The legal obligation is to comply with tax and commercial law requirements (e.g. §§ 146, 147 AO, §§ 238, 257 HGB).

Purpose of data processing
The purpose of archiving is to comply with tax law (e.g. §§ 146, 147 AO duty to store e-mails of tax law relevance) and commercial law requirements (e.g. §§ 238, 257 HGB duty to archive business correspondence).

Duration of storage
The storage of our e-mail communication is carried out until the expiration of tax and commercial law retention obligations. The storage period can be up to 10 years.

Possibility of objection and deletion
Under certain circumstances, you can request the deletion of data in accordance with Art. 17 DSGVO. What rights you are entitled to and how to assert them can be found at the bottom of this data protection declaration.

Communication by e-mail

Scope of the processing of personal data
When you send an e-mail to GEDORE, we process at least your e-mail address. In addition, we may also process your name and the information that you provide us with in your e-mail.

Legal basis for processing personal data
Art. 6 (1) sentence 1 lit. a, b DSGVO (consent, implementation of pre-contractual measures). If you send us an e-mail, we assume your consent to data processing by conclusive conduct. Otherwise, please point this out to us.
If you contact us to conclude a contract, the implementation of a pre-contractual measure is the legal basis for the processing.

Purpose of data processing
The purpose of the communication is to reply to enquiries about services, products or general information.

Duration of storage
The storage of our e-mail communication is carried out until the expiration of tax and commercial law retention obligations. The storage period can be up to 10 years.

Possibility of objection and deletion
If the processing is based on your consent, you can revoke this consent at any time with effect for the future. However, this does not affect the lawfulness of the processing that has taken place up to that point. Under certain circumstances you may also be entitled to have your personal data deleted in accordance with Art. 17 DSGVO.

Handling of application documents

If you have any questions regarding our e-mail archiving system, please contact our data protection officer. We would also like to point out that we only consider application documents in PDF file form. Zipped files (WinZip, WinRAR, 7Zip, etc.) are filtered out by our security systems and will not be delivered. Applications in Word file format and other file formats will not be considered and will be deleted unread. Please note that unencrypted application documents sent by e-mail may be opened by third parties before they reach our IT systems. We assume that we may also answer unencrypted application e-mails without encryption. If you do not wish this, please give us a note in your application e-mail.

Newsletter in a B2B context (retailer newsletter)

You will receive our retailer newsletter under the following conditions

1. your e-mail address is directly related to the products or services we sell
2. the dealer newsletter relates to the context of the products or services mentioned above
3. you have not consented to the use of the e-mail address for sending advertising or newsletters
4. you have the option to unsubscribe from the B2B newsletter at any time. For this purpose, the dealer newsletter contains an opt-out link at the bottom

7. Data subject's rights

You have the right to request confirmation as to whether we are processing personal data about you. If this is the case, you have the right to be informed of the information referred to in Art. 15 para. 1 DSGVO, provided that the rights and freedoms of other persons are not affected (cf. Art. 15 para. 4 DSGVO). We will also be pleased to provide you with a copy of the data.

Right of correction
In accordance with Art. 16 DSGVO, you have the right to have any personal data (e.g. address, name, etc.) that may be incorrectly stored by us corrected at any time. You can also request the completion of the data stored with us at any time. A corresponding adjustment will be made immediately.

Right to deletion
In accordance with Art. 17 para. 1 DSGVO, you have the right to request that we delete the personal data collected about you if

• the data are either no longer required;
• has lost the legal basis for processing the data without replacement due to the revocation of your consent;
• you have lodged an objection to the processing and there are no legitimate reasons for the processing;
• your data are processed unlawfully;
• has a legal obligation to do so or a survey pursuant to Art. 8 para. 1 DSGVO has taken place.

According to Art. 17 para. 3 DSGVO, this right does not exist if

• the processing is necessary for the exercise of the right to freedom of expression and information;
• your data have been collected on the basis of a legal obligation;
• the processing is necessary for reasons of public interest;
• the data are necessary for the assertion, exercise or defence of legal claims.

Right to limit processing
In accordance with Art. 18 para. 1 DSGVO, you have the right in individual cases to demand that the processing of your personal data be restricted.

This is the case if

• the correctness of your personal data is disputed;
• the processing is unlawful and you do not consent to its deletion;
• the data are no longer needed for the purpose of processing, but the data collected are used to assert, exercise or defend legal claims;
• an objection to the processing has been lodged in accordance with Art. 21 Paragraph 1 DSGVO and it is still unclear which interests prevail.

Right of revocation
If you have given us your express consent to process your personal data (Art. 6 para. 1 lit. a DSGVO or Art. 9 para. 2 lit. a DSGVO), you can revoke this consent at any time. Please note that the lawfulness of the processing carried out on the basis of the consent until revocation is not affected by this.

Right of objection
In accordance with Art. 21 DSGVO, you have the right to object at any time to the processing of personal data relating to you which has been collected on the basis of Art. 6 Paragraph 1 Letter f (within the scope of a legitimate interest). You are only entitled to this right if there are special circumstances that speak against storage and processing.

Right to data transferability
In accordance with Art. 20 DSGVO, you have a right to the transmission of personal data concerning you. We will provide the data in a structured, common and machine-readable format. The data can be sent either to yourself or to a person responsible designated by you.

We will provide you with the following data on request in accordance with Art. 20 Para. 1 DSGVO:

• Data collected on the basis of express consent in accordance with Art. 6 Para. 1 lit. a DSGVO or Art. 9 Para. 2 lit. a DSGVO;
• Data that we have received from you in accordance with Art. 6 Para. 1 lit. b DSGVO under existing contracts;
• Data that have been processed within the framework of an automated procedure.

We will transfer the personal data directly to a person in charge requested by you as far as this is technically feasible. Please note that we are not permitted to transfer data that encroaches on the freedoms and rights of other persons in accordance with Art. 20 Paragraph 4 DSGVO.

How do I exercise my rights?
You can exercise your rights at any time by contacting the contact details below:

GEDORE GmbH
Remscheider Strasse 149
42899 Remscheid
e-mail: info@gedore.com
Phone: +49 2191 5960
fax: +49 2191 596999

8. Right of appeal to the supervisory authority pursuant to Art. 77 I DSGV

If you believe that the processing of personal data concerning you is in breach of data protection law, you have the right to lodge a complaint with a competent data protection supervisory authority.