Privacy Policy

1. Scope and subject of the data protection declaration

The purpose of this privacy policy is to inform you about which personal data is collected via the website, available at https://www.gisa.de, and for what purpose it is processed. Insofar as links are provided to other sites, we have neither influence nor control over the linked contents and the data protection regulations there. We recommend that you check the data protection declarations on the websites to determine whether and to what extent personal data is collected, processed, used or made available to third parties.

2. Definitions

Personal data

Any information relating to an identified or identifiable natural person (hereinafter referred to as ‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, on-line identification, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;

Processing

Any operation or set of operations carried out with or without the aid of automated means in relation to personal data, such as collection, recording, organisation, organisation, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, deletion or destruction;

Person Responsible

Designates the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or national law, the controller or the specific criteria for his designation may be provided for by Union or national law;

Recipient

Designates a natural or legal person, public authority, agency or other body to whom personal data are disclosed, whether or not that person is a third party. However, authorities which may receive personal data in the context of a specific investigation mandate under Union or national law shall not be considered as recipients; the processing of such data by those authorities shall be carried out in accordance with the applicable data protection rules and in accordance with the purposes of the processing;

The full text of the basic data protection regulation (DS-GVO), including further definitions and definitions, is available on the Internet at the following Link.

3. Name and contact details of the person responsible

GISA GmbH

Leipziger Chaussee 191a, 06112 Halle/Saale, Germany

represented by the Managing Director Mr Michael Krüger

Phone: +49 345 5850, Fax: +49 345 5852177, E-Mail: kontakt@gisa.de

4. Contact details of the Data Protection Officer

GISA GmbH, Data Protection Officer

Leipziger Chaussee 191a, 06112 Halle/Saale, Germany

Phone: +49 345 5850 , Telefax: +49 345 5852177, E-Mail: datenschutz@gisa.de

5. Categories of personal data

Category Site View

Explanation

Personal data

IP address, cookie identifier

Description

We collect so-called access data when our website is called up and store this in a log file (so-called log file). This access data also includes the IP address. In addition, the name of the website called up, the file called up, the date and time of the call, the amount of data transferred and notification of the successful call, the browser type and version, the operating system, the so-called referrer URL (the previously visited page) and the requesting provider are stored in the log file. In addition, cookies are set when our website is accessed. For details about the cookies used on the website, the specific purpose that the respective cookie serves and a description of how to delete these cookies, please refer to the document Privacy Opt-Out.

Purpose of data processing

We collect the log file data, including the IP address, in order to file a criminal complaint with the law enforcement authorities in the event of an attack on our website or our IT infrastructure or, in the event of imminent damage, to be able to call in the authorities responsible for security and thus ensure the functionality of the website. With the help of the cookie identification, we also receive information about user behaviour or search queries and can adapt the offer to the interests of the user on future visits.

Interest in data processing

The log file data, including the IP address, is used for technical and design optimization of the website and for securing our systems (e.g. in the event of an attack or security incident). The log file data, including the IP address, does not allow us to establish a personal reference when our website is accessed. With the help of the cookie identifier we find out whether and to what extent you have already visited our website and when you returned to it.

Duration of data storage

The IP address will be deleted two (2) months after collection; for details on cookies, how long they are stored and how to delete them, see Privacy Opt-Out.

Legal basis

Art. 6 paragraph 1 f) DS-GVO

Provision required or necessary

The provision of personal data is not required by law or contract. However, without the IP address and the cookie identification, the service and the functionality of the website may be limited.

Category Website Tracking

Explanation

Personal data

IP address, cookie identifier

Description

A so-called tracking tool is used on the website, in which cookies are used and the IP address is collected. Tracking tools typically examine where visitors come from, what areas of a website are visited and how often and for how long which sub-pages and categories are viewed.

Purpose of data processing

Tracking tools are used to analyse user behaviour in order to adapt the online offer to the interests of the visitor and to find out how our services are used.

Interest in data processing

With the help of tracking tools, we can align our offer more specifically to our customers, visitors and prospects and increase traffic by placing target-group oriented ads. For details about the providers, how they work and how you can delete the cookies used and prevent tracking, please see Privacy Opt-Out.

Recipient of the above data

For more details about the recipients of the data, how the tools work, and how to prevent data transfer (tracking), see Privacy Opt-Out.

Company: Siteimprove GmbH, Kurfürstendamm 56, 10707 Berlin, Germany

Tracking tool: Siteimprove

Transfer to third country: no

Details/Information on data protection/privacy shield:

https://siteimprove.com/en/privacy/privacy-policy/

Opt-out/objection possible: yes

Company: HubSpot, Inc.; 25 First Street, 2nd Floor; Cambridge, MA 02141 USA

Tracking tool: HubSpot

Transfer to third country: yes

Details/Information on data protection/privacy shield:

https://legal.hubspot.com/de/privacy-policy

Privacy Shield Certification

Opt-out/objection possible: yes

Duration of data storage

For details on how the tracking tools work, information about how long cookies are stored and how tracking can be prevented, please see Privacy Opt-Out.

Legal basis

Art. 6 paragraph 1 a) DS-GVO
Art. 6 paragraph 1 f) DS-GVO

Provision required or necessary

The provision of personal data is not required by law or contract. However, without the IP address and cookie identification, the service and the functionality of the website may be limited.

Profiling

With the help of the tracking tools, the behaviour of the visitors can be evaluated and the interests can be analysed. Through this analysis you are offered targeted information material about the content you have visited. Details and further details can be found under Privacy Opt-Out.

Category Advertising Tracking

Explanation

Personal data

IP address, cookie identifier

Description

On the website, a so-called advertising tracking tool is used, in which cookies are used and the IP address is collected. Tracking tools typically examine where visitors come from, what areas of a website are visited and how often and for how long which sub-pages and categories are viewed. This can be used, for example, to determine which search terms and web pages the user has entered in order to display corresponding advertising.

Purpose of data processing

The use of the advertising tools also serves to evaluate user behaviour in order to adapt the online offer to the interests of the visitor and to find out how our services are used.

Interest in data processing

With the help of the advertising tools, we can target our offer more specifically to our customers, visitors and interested parties and increase traffic by placing target-group oriented ads. For details about the providers, how they work and how you can delete the cookies used and prevent tracking, please see Privacy Opt-Out.

Recipient of the above data

For more details about the recipients of the data, how the tools work, and how to prevent the transfer of data (advertising tracking), see Privacy Opt-Out.

 

Company: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Tracking tool: DoubleClick
Transfer to third country: yes
Details/Information on data protection/privacy shield:
http://www.google.com/policies/technologies/ads/
http://www.google.com/policies/technologies/
Privacy Shield Zertifizierung
Opt-out/objection possible: yes

 

Company: Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA
Tracking tool: Impressions
Transfer to third country: yes
Details/Information on data protection/privacy shield:
https://www.facebook.com/about/privacy
Privacy Shield Zertifizierung
Opt-out/objection possible: yes

Duration of data storage

For details on how the advertising tracking tools work, information about how long cookies are stored and how tracking can be prevented, please see Privacy Opt-Out.

Legal basis

Art. 6 paragraph 1 f) DS-GVO

Provision required or necessary

The provision of personal data is not required by law or contract. However, without the IP address and the cookie identification, the service and the functionality of the website may be limited.

Profiling

Social media tracking tools can be used to evaluate visitor behavior, analyze interests, and display user-related advertising; see Privacy Opt-Out for details and more.

Category Social-media Tracking

Explanation

Personal data

IP address, cookie identifier

Description

The website uses a tracking tool that allows us to include so-called “social media” in our offer. Here, too, cookies are used, among other things, with which the IP address of your computer is processed. When you access our website, a connection to the respective provider is established and, for example, the websites visited are linked to your social media accounts.

Purpose of data processing

The use of social media tools also serves to evaluate user behavior, to simplify login procedures and to find out whether and to what extent visitors use such media and profiles.

Interest in data processing

With the help of these tools, we can also target our offer more specifically at our customers, visitors and prospects and increase traffic by placing target-group oriented ads. Details about the providers, how they work and how you can delete the cookies used and prevent tracking can be found under Privacy Opt-Out.

Recipient of the above data

For more details about the recipients of the data, how the tools work, and how to prevent data transfer (tracking), see Privacy Opt-Out.

Company: Facebook, 1601 South California Avenue, Palo Alto, CA 94304, USA
Tracking tool: FacebookConnect
Transfer to third country: yes
Details/Information on data protection/privacy shield:
https://www.facebook.com/about/privacy
Privacy Shield Zertifizierung
Opt-out/objection possible: no

 

Company: Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103 U.S.A.
Tracking tool: Twitter Button, Twitter Syndication
Transfer to third country: yes
Details/Information on data protection/privacy shield:
https://help.twitter.com/forms/privacy
Privacy Shield Zertifizierung
Opt-out/objection possible: no

 

Company: LinkedIn Corporation, 1000 W. Maude Ave., Sunnyvale, California 94085
Tracking tool: LinkedIn Button
Transfer to third country: yes
Details/Information on data protection/privacy shield:
https://www.linkedin.com/legal/privacy-policy?_l=de_DE
Privacy Shield Zertifizierung
Opt-out/objection possible: no

 

Company: XING SE, Dammtorstraße 30, 20354 Hamburg, Germany
Tracking tool: Xing Button
Transfer to third country: yes
Details/Information on data protection/privacy shield:
https://privacy.xing.com/de/datenschutzerklaerung

Duration of data storage

For details on how the social media tracking tools work, how long cookies are stored and how tracking can be prevented, please see Privacy Opt-Out.

Legal basis

Art. 6 paragraph 1 f) DS-GVO

Provision required or necessary

The provision of personal data is not required by law or contract. However, without the IP address and the cookie identification, the service and the functionality of the website may be limited.

Profiling

Social media tracking tools can be used to evaluate visitor behavior, analyze interests, and display user-related advertising; see Privacy Opt-Out for details and more.

Category Webshop (GISA shopIT)

Explanation

Personal data

Salutation, e-mail address, first and last name, company, different contact person, different billing address, VAT ID, telephone number

Purpose of the data processing

We use your contact form data, including the inquiry itself, only to answer your inquiries, i.e. to communicate with you, to prepare offers and to process the order or the conclusion of the contract.

Duration of data storage

As soon as the storage of your data is no longer necessary or legally required, it will be deleted.

Legal basis

Art. 6 paragraph 1 b) DS-GVO

Provision required or necessary

The provision of personal data is not required by law or contract. However, it is not possible to process the request or conclude a contract without the information.

Category Contact form

Explanation

Personal data

Salutation, e-mail address, first and last name, comment

Purpose of the data processing

Your contact form data, including the enquiry itself, will only be used to answer your enquiries, i.e. to communicate with you and to prepare offers.

Duration of data storage

Duration of the processing and handling of the request or until we are requested to delete it.

Legal basis

Art. 6 paragraph 1 b) DS-GVO

Provision required or necessary

The provision of personal data is not required by law or contract. However, it is not possible to process the request without this information.

Category Newsletter

Explanation

Personal data

Salutation, e-mail address, first and last name

Purpose of the data processing

We only use the e-mail address to send the newsletter for advertising our own goods and services

Recipient of the data

Company: HubSpot, Inc.; 25 First Street, 2nd Floor; Cambridge, MA 02141 USA
Transfer to third country: yes
Details/Information on data protection/privacy shield:
https://legal.hubspot.com/de/privacy-policy
Privacy Shield Certification
Opt-out/objection possible: yes

Duration of data storage

Until we stop using the newsletter or we are requested to delete it (revocation of consent).

Legal basis

Art. 6 paragraph 1 a) DS-GVO

Special right of revocation

You have the right to revoke your consent to the processing of your personal data at any time (cancellation of the newsletter). The legality of the processing based on the consent until your revocation remains unaffected. You will find the contact details for exercising the right of revocation in the imprint of the website. You can also always use the link provided for this purpose in the advertising mail. This does not incur any costs other than the transmission costs according to the basic tariffs. The provider of the newsletter tool is also covered by the revocation, and therefore the irrevocable deletion of your data also with this company.

Provision prescribed or necessary

The provision of personal data is not required by law or contract. However, it is not possible to send the newsletter without the information.

Category E-Mail

Explanation

Personal data

E-mail address, subject field e-mail, text field e-mail

Purpose of the data processing

Your data, which you give us by sending us the email, we use in the context of communication with you.

Duration of data storage

Duration of the processing and handling of the request or until we are requested to delete it.

Legal basis

Art. 6 paragraph 1 a) DS-GVO, Art. 6 paragraph 1 b) DS-GVO

Provision required or necessary

The provision of personal data is not required by law or contract. However, it is not possible to process the request without this information.

6. Your rights

The right of access, rectification, erasure, restriction of processing, as well as the right to object to the processing of personal data, the right to data transferability as well as the right to withdraw consent to data processing at any time and the right to complain to a data protection supervisory authority in case of data breaches. For GISA GmbH, the State Commissioner for Data Protection of Saxony-Anhalt is responsible.

You can assert all rights towards us by e-mail via datenschutz@gisa.de or via the contact data given in the section “Person responsible”.