Privacy Policy
We are pleased that you are visiting our website. Goldschmitt techmobil GmbH (hereinafter referred to as “Goldschmitt”, “we” or “us”) places great importance on the security of users’ data and compliance with data protection regulations. We would like to inform you below about the processing of your personal data on our website.
Controller and data protection officer
Controller
Goldschmitt techmobil GmbH
Goldschmitt-Technik-Park 1
74746 Höpfingen
Tel.: +49 (0) 62 83 / 22 29-100
Email: info@goldschmitt.de
External data protection officer
DDSK GmbH
Tel.: 0 75 42 / 9 49 21-00
Email: datenschutz@goldschmitt.de
Definitions
The technical terms used in this privacy policy are to be understood as legally defined in Art. 4 GDPR.
Information on data processing
Automated data processing (log files, etc.)
Our website can be visited without users actively providing any personal information. However, every time the website is accessed, we automatically store access data (server log files), such as the name of the internet service provider, the operating system used, the website from which the user visits us, the date and duration of the visit or the name of the requested file, as well as, for security reasons, e.g. to detect attacks on our website, the IP address of the device used for a period of 30 days. This data is not combined with data from other sources. We process and use the data for the following purposes: provision of the website, prevention and detection of errors/malfunctions, and misuse of the website.
| Data categories: | Meta and communication data (e.g. IP address, date and time of access, time, type of HTTP request, website from which access takes place (referrer URL), browser used and, where applicable, operating system of the accessing computer (user agent)) |
| Purpose of processing: | Prevention and detection of errors/malfunctions, detection of misuse of the website |
| Legal basis: | Legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR |
| Legitimate interests: | Fraud prevention to detect misuse of the website |
Necessary cookies
To enable the use of the basic functions on our website and provide the service requested by the user, we use so-called cookies on our website. Cookies are information and/or data that may be stored on the user’s device, for example. Strictly necessary cookies are used to provide a digital service expressly requested by the user, e.g.:
- Cookies for error analysis and security purposes
- Cookies for storing logins
- Cookies for storing data in online forms if the form extends over several pages
- Cookies for storing (language) settings
- Cookies for storing items placed in the shopping cart by users in order to complete the purchase
- Cookies for storing consent or withdrawal (opt-in, opt-out)
Session cookies are deleted after the end of the browser session, i.e. after closing the browser. Users can subsequently delete cookies in order to remove data that the website has stored on the user’s computer. The data processing described may also relate to information that is not personal data but nevertheless constitutes information within the meaning of the TDDDG. In these cases, too, this information may be required to use an expressly requested service and may therefore be stored in accordance with Section 25 TDDDG.
| Legal bases: | Legitimate interests (Art. 6 para. 1 lit. f) GDPR in conjunction with § 25 para. 2 no. 2 TDDDG), consent (Art. 6 para. 1 lit. a) GDPR in conjunction with § 25 para. 1 TDDDG |
| Legitimate interests: | Storage of opt-in preferences, ensuring the functionality of the website, preserving user status throughout the entire website |
Consent Management Platforms (consent management)
We use a consent management process on our website to store and manage your consent regarding cookies and tracking technologies. This is done to comply with data protection requirements. We store the time at which you gave your consent and identify you and your device in order to correctly assign your consent. You can manage your preferences yourself and change or withdraw your consent at any time.
| Data categories: | Consent data (consent ID and number, time consent was given, opt-in or opt-out), meta and communication data (e.g. device information, IP addresses) |
| Purposes of processing: | Fulfilment of accountability obligations, consent management |
| Legal bases: | Legal obligation (Art. 6 para. 1 lit. c) GDPR in conjunction with Art. 7 GDPR) |
Borlabs Cookie
Recipient: BORLABS GmbH, Hamburger Str.11 22083 Hamburg, Germany
Transfer to third countries: Does not take place
Privacy policy: https://de.borlabs.io/datenschutz/
Web analysis and optimisation
To analyse visitor traffic to our online services, we use tools for web analysis and reach measurement. For this purpose, we collect information about the behaviour, interests or demographic information of our visitors, such as age, gender or similar. This helps us identify the times at which our online services, their functions or content are used most frequently or invite repeat visits. In addition, based on the information collected, we can determine whether our online services need to be optimised or adjusted. The information collected for this purpose is stored in cookies or similar procedures are used and the information is used to measure reach and optimise our services. The data stored in cookies may include content viewed, online services visited, settings, and functions and systems used. As a rule, however, no clear data identifying users is processed for the purposes described. In this case, the data is modified so that neither we nor the provider of the tool used knows the users’ actual identity. The data modified in this way is often stored in user profiles.
| Categories of data subjects: | Website visitors, users of online services |
| Categories of data: | User data (e.g. websites visited, interest in content, access times), meta and communication data (e.g. device information, IP addresses), contact data (e.g. email address, telephone number), content data (e.g. text entries, photographs, videos) |
| Purposes of processing: | Website analysis, reach measurement, website interaction load and analysis, lead evaluation |
| Legal bases: | legitimate interests (Art. 6 para. 1 lit. f) GDPR) |
| Legitimate interests: | Optimisation and further development of the website, increasing profits, customer retention and acquisition of new customers |
Matomo & Matomo Tag Manager
Service used: InnoCraft Ltd, 150 Willis St., 6011 Wellington, New Zealand
Privacy: https://matomo.org/privacy-policy/
Opt-out link: https://matomo.org/docs/gdpr/
Legal basis: Consent (Art. 6 para. 1 lit. a) GDPR)
Online marketing
To continuously increase our reach and the awareness of our online services, we process personal data as part of online marketing, particularly with regard to potential interests and measuring the effectiveness of our marketing activities.
For the purpose of measuring the effectiveness of our marketing activities and identifying potential interests, relevant information is stored in cookies or similar procedures are used. The data stored in cookies may include content viewed, online services visited, settings, and functions and systems used. As a rule, however, no clear data identifying users is processed for the purposes described. The data is then modified so that neither we nor the provider of the tool used knows the users’ actual identity. The data modified in this way is often stored in user profiles.
If user profiles are stored, the data may be read, supplemented and updated on the server of the online marketing provider when visiting other online services that use the same online marketing process.
We can determine the success of our advertisements based on aggregated data made available to us by the provider of the online marketing process (so-called conversion measurement). As part of these conversion measurements, we can determine whether a marketing activity has led to a purchase decision by a visitor to our online services. This analysis serves to evaluate the success of our online marketing.
| Categories of data subjects: | Website visitors, users of online services, interested parties, communication partners, business and contractual partners |
| Categories of data: | User data (e.g. websites visited, interest in content, access times), meta and communication data (e.g. device information, IP addresses), location data, contact data, content data (e.g. text entries, photographs, videos) |
| Purposes of processing: | Marketing (partly also interest-based and behaviour-related), conversion measurement, audience creation, click tracking, development of marketing strategies and increasing campaign efficiency |
| Legal bases: | Consent (Art. 6 para. 1 lit. a) GDPR); legitimate interests (Art. 6 para. 1 lit. f) GDPR) |
| Legitimate interests: | Optimisation and further development of the website, increasing profits, customer retention and acquisition of new customers |
Social media presences
We maintain online presences on social networks and career platforms in order to exchange information with users registered there and to enable uncomplicated contact.
In some cases, user data on social networks is used to conduct market research and thereby pursue advertising purposes. User profiles can be created and used based on users’ behaviour, such as the interests they indicate, in order to tailor advertisements to the interests of target groups. For this purpose, cookies are regularly stored on users’ devices, in some cases regardless of whether they are registered users of the social network.
In connection with the use of social media, we also use the associated messengers to communicate with users in an uncomplicated manner. We would like to point out that the security of individual services may depend on the user’s account settings. Even in the case of end-to-end encryption, the service provider may be able to determine that and when users communicate with us and may also collect location data.
Depending on where the social network is operated, user data may be processed outside the European Union or outside the European Economic Area. This may result in risks for users because, for example, enforcement of their rights may be made more difficult.
| Categories of data subjects: | Registered users and unregistered users of the social network |
| Categories of data: | Master data (e.g. name, address), contact data (e.g. email address, telephone number), content data (e.g. text entries, photographs, videos), usage data (e.g. websites visited, interests, access times), meta and communication data (e.g. device information, IP address) |
| Purposes of processing: | Increasing reach, networking |
| Legal bases: | Legitimate interests (Art. 6 para. 1 lit. f) GDPR), consent (Art. 6 para. 1 lit. a) GDPR) |
| Legitimate interests: | Interaction and communication on social media presence, increasing profits, insights into target groups |
Service used: Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
Privacy: https://help.instagram.com/519522125107875 and https://www.facebook.com/about/privacy
Opt-out link: https://www.instagram.com/accounts/login/?next=/accounts/privacy_and_security
Service used: Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
Privacy: https://www.facebook.com/privacy/explanation and https://www.facebook.com/legal/terms/page_controller_addendum
Opt-out link: https://www.facebook.com/policies/cookies/
Service used: LinkedIn Corporation, 1000 West Maude Avenue, Sunnyvale, CA 94085, USA
Privacy: https://www.linkedin.com/legal/privacy-policy
Opt-out link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
TikTok
Service used: TikTok Inc., 10100 Venice Blvd., Culver City, CA 90232, USA
Privacy: https://www.tiktok.com/legal/privacy-policy?lang=de
YouTube
Service used: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Privacy: https://policies.google.com/privacy?hl=de&gl=de
Opt-out link: https://tools.google.com/dlpage/gaoptout?hl=de or https://myaccount.google.com/
Plug-ins and embedded third-party content
We have integrated functions and content into our online services that are obtained from third-party providers. For example, videos, displays, buttons or posts (hereinafter referred to as content) may be embedded.
In order to display content to visitors to our online services, the respective third-party provider processes, among other things, the user’s IP address so that the content can be transmitted to and displayed in the browser. Without this processing operation, it is not possible to display third-party content.
In some cases, additional information is collected via so-called pixel tags or web beacons, allowing the third-party provider to receive information about the use of the content or visitor traffic to our online services, technical information about the user’s browser or operating system, the time of the visit or referring websites. The data obtained in this way is stored in cookies on the user’s device.
To protect the personal data of visitors to our online services, we have taken certain security measures to prevent the automatic transmission of this data. This data is only transmitted when users use the buttons or click on the third-party content.
| Categories of data subjects: | Users of the plug-in or embedded third-party content |
| Categories of data: | Usage data (e.g. websites visited, interests, access time), meta and communication data (e.g. device information, IP address), contact data (e.g. email address, telephone number), master data (e.g. name, address) |
| Purposes of processing: | Design of our online services, increasing the reach of advertisements on social media, sharing posts and content, interest- and behaviour-based marketing, cross-device tracking |
| Legal bases: | Consent (Art. 6 para. 1 lit. a) GDPR) |
mapbox plugins and buttons
Service used: Mapbox, Inc., 740 15th Street NW, 5th Floor, Washington, D.C. 20005, USA
Privacy: https://www.mapbox.com/legal/privacy/
Opt-out link: https://www.mapbox.com/legal/cookies
Legal basis: Consent (Art. 6 para. 1 lit. a) GDPR)
YouTube
Service used: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Privacy: https://policies.google.com/privacy?hl=de&gl=de
Opt-out link: https://tools.google.com/dlpage/gaoptout?hl=de or https://myaccount.google.com/
Legal basis: Consent (Art. 6 para. 1 lit. a) GDPR)
Use of survey services on the website with data transfer
We conduct surveys and questionnaires (hereinafter referred to as “surveys”) on our online services. This serves to help us improve our services and better respond to the needs of our customers. For this purpose, it is not necessary to be able to determine whether we can assign feedback to a specific person. Before evaluating the user survey, the data that we process to provide and technically conduct our surveys is anonymised. Participation in the survey is voluntary.
| Categories of data subjects: | Survey participants |
| Categories of data: | Meta and communication data (e.g. device information, IP address), usage data (e.g. interests, access times), master data (e.g. name, address), contact data (e.g. email address, telephone number) |
| Purposes of processing: | Marketing, customer retention and acquisition of new customers, improvement/optimisation of the services |
| Legal bases: | Consent (Art. 6 para. 1 lit. a) GDPR) |
UmfrageOnline
Service used: enuvo GmbH, Huobstrasse 10, 8808 Pfäffikon SZ, Switzerland
Privacy: https://www.umfrageonline.com/datenschutz
Newsletter and mass communication
On our online services, users have the option of subscribing to our newsletter or any notifications via various channels (hereinafter referred to as the newsletter). In accordance with statutory provisions, we only send newsletters to recipients who have consented to receive them. We use a selected service provider to send our newsletter.
To subscribe to our newsletter, an email address must be provided. Where applicable, we collect additional data, such as the name, in order to personalise our newsletters.
Our newsletter is only sent after the so-called double opt-in process has been completed in full. If visitors to our online services decide to receive our newsletter, they receive a confirmation email intended to prevent the misuse of false email addresses and to ensure that sending the newsletter is not triggered by a single, possibly accidental click. You can unsubscribe from our newsletter at any time with effect for the future. An unsubscribe link (opt-out link) is included at the end of every newsletter.
We are also obliged to provide evidence that our subscribers actually wished to receive the newsletter. For this purpose, we collect and store the IP address and the time of subscription and unsubscription.
Our newsletters are designed to enable us to gain insights into improvements, target groups or the reading behaviour of our subscribers. This is made possible by a so-called web beacon or tracking pixel that responds to interactions with the newsletter, such as whether links are clicked, whether the newsletter is opened at all or at what time the newsletter is read. For technical reasons, we can assign this information to individual subscribers.
| Categories of data subjects: | Newsletter subscribers |
| Categories of data: | Master data (e.g. name, address), contact data (e.g. email address, telephone number), meta and communication data (e.g. device information, IP address), usage data (e.g. interests, access times) |
| Purposes of processing: | Marketing, customer retention and acquisition of new customers, analysis and evaluation of campaign success |
| Legal bases: | Consent (Art. 6 para. 1 lit. a) GDPR) |
SendinBlue
Service used: Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin
Privacy: https://www.brevo.com/de/legal/privacypolicy/
Making contact
Our online services provide the opportunity to contact us directly or obtain information via various contact options. If contact is made, we process the data of the person making the enquiry to the extent required to answer or process the enquiry. Depending on the method used to contact us, the data processed may vary.
| Categories of data subjects: | Persons making enquiries |
| Categories of data: | Master data (e.g. name, address), contact data (e.g. email address, telephone number), content data (e.g. text entries, photographs, videos), usage data (e.g. interests, access times), meta and communication data (e.g. device information, IP address). |
| Purposes of processing: | Processing enquiries |
| Legal bases: | Consent (Art. 6 para. 1 lit. a) GDPR), performance or initiation of a contract (Art. 6 para. 1 lit. b) GDPR) |
Contacting the dealer
Our website gives you the opportunity to contact your preferred dealer, for example to request a quotation. For this purpose, the required personal data is collected and transmitted to the dealer you have selected: name, form of address, email address, enquiry. If you would like your selected dealer to contact you by telephone, your telephone number will also be collected and transmitted as a voluntary entry. This collection, storage and transmission of data is based on your voluntary consent within the meaning of Art. 6 para. 1 sentence 1 lit. a) in conjunction with Art. 7 GDPR. You can withdraw this consent at any time with effect for the future by emailing datenschutz@goldschmitt.de or by post to Goldschmitt techmobil GmbH , Goldschmitt-Technik-Park 1, 74746 Höpfingen. In addition, you may also assert your rights against the dealer. To do so, contact the dealer you have selected.
| Categories of data subjects: | Persons making enquiries |
| Categories of data: | Master data (e.g. name, address), contact data (e.g. email address, telephone number), content data (e.g. text entries, photographs, videos), usage data (e.g. interests, access times), meta and communication data (e.g. device information, IP address). |
| Purposes of processing: | Establishing and supporting contact between customers and the responsible dealers |
| Legal bases: | Art. 6 para. 1 sentence 1 lit. a) in conjunction with Art. 7 GDPR |
Data transfer
We transfer the personal data of visitors to our online services for internal purposes (e.g. for internal administration or to the HR department in order to comply with statutory or contractual obligations). Internal data transfer or disclosure of data only takes place to the extent necessary and in compliance with the applicable data protection regulations.
To perform contracts or fulfil a legal obligation, it may be necessary for us to disclose personal data. If the data required for this purpose is not made available to us, it may not be possible to conclude the contract with the data subject.
If we transfer data to a country outside the EEA for processing, we ensure that the processing is legally permissible in the manner intended by us. In this case, we have concluded standard data protection clauses, including separate provisions on appropriate technical and organisational measures, in order to protect the data subjects’ data as effectively as possible.
Data processing on behalf of a controller
Recipients used may act as so-called processors on our behalf. We have concluded so-called “data processing agreements” with them in accordance with Art. 28 para. 3 GDPR. This means that processors may only process your personal data in a manner for which we have explicitly instructed them. Processors take appropriate technical and organisational measures to process your data securely and in accordance with our instructions.
Storage period
As a general rule, we store the data of visitors to our online services for as long as this is necessary to provide our services or as stipulated by the European legislator or another legislator in laws or regulations to which we are subject. In all other cases, we delete the personal data once the purpose has been fulfilled, with the exception of data that we must continue to store in order to fulfil legal obligations (e.g. due to tax and commercial retention periods, we are obliged to retain documents such as contracts and invoices for a certain period of time).
Automated decision-making
We do not use automated decision-making or profiling pursuant to Art. 22 GDPR.
Legal bases
The relevant legal bases are primarily derived from the GDPR. These are supplemented by national laws of the Member States and may, where applicable, apply jointly with or in addition to the GDPR.
| Consent: | Art. 6 para. 1 lit. a) GDPR serves as the legal basis for processing operations for which we have obtained consent for a specific processing purpose. |
| Performance of a contract: | Art. 6 para. 1 lit. b) GDPR serves as the legal basis for processing that is necessary for the performance of a contract to which the data subject is a party or for the implementation of pre-contractual measures carried out at the request of the data subject. |
| Legal obligation: | Art. 6 para. 1 lit. c) GDPR serves as the legal basis for processing that is necessary to fulfil a legal obligation. |
| Vital interests: | Art. 6 para. 1 lit. d) GDPR serves as the legal basis where processing is necessary to protect the vital interests of the data subject or another natural person. |
| Public interest: | Art. 6 para. 1 lit. e) GDPR serves as the legal basis for processing that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller. |
| Legitimate interest: | Art. 6 para. 1 lit. f) GDPR serves as the legal basis for processing that is necessary for the purposes of the legitimate interests pursued by the controller or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child. |
Rights of data subjects
Right of access: Pursuant to Art. 15 GDPR, data subjects have the right to request confirmation as to whether we process data relating to them. They may request access to this data, the further information listed in Art. 15 para. 1 GDPR and a copy of their data.
| Right to rectification: | Pursuant to Art. 16 GDPR, data subjects have the right to request the rectification or completion of data relating to them and processed by us. |
| Right to erasure: | Pursuant to Art. 17 GDPR, data subjects have the right to request the immediate erasure of data relating to them. Alternatively, pursuant to Art. 18 GDPR, they may request that we restrict the processing of their data. |
| Right to data portability: | Pursuant to Art. 20 GDPR, data subjects have the right to request the provision of the data they have made available to us and to request its transmission to another controller. |
| Right to lodge a complaint: | Data subjects also have the right to lodge a complaint with the supervisory authority responsible for them in accordance with Art. 77 GDPR. |
| Right to object: | If personal data is processed on the basis of legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR, data subjects have the right, pursuant to Art. 21 GDPR, to object to the processing of their personal data where there are grounds relating to their particular situation or where the objection is directed against direct marketing. In the latter case, data subjects have a general right to object, which we will implement without requiring them to provide reasons relating to a particular situation. |
Withdrawal of consent
Some data processing operations are only possible with the express consent of the data subjects. You have the option to withdraw consent that has already been given at any time. An informal notification or email to us at datenschutz@goldschmitt.de is sufficient for this purpose. The lawfulness of the data processing carried out before withdrawal remains unaffected by the withdrawal.
External links
Our website contains links to the online services of other providers. We hereby point out that we have no influence over the content of the linked online services or the compliance of their providers with data protection regulations.
Changes
We reserve the right to amend this privacy information at any time in the event of changes to our online services and in compliance with the applicable data protection regulations, so that it meets the legal requirements.