Privacy Policy

 1.1 DATA PROTECTION STATEMENT C. GIELISCH GMBH
Data Protection Statement (Valid from: 11.09.2018)

1.1.1 INTRODUCTION
Regardless of whether you are a customer, prospective customer, applicant or visitor to our
website: We, C. Gielisch GmbH (hereinafter: "C. Gielisch", "we") take the protection of your
personal data very important. But, what does this mean in concrete terms?
Below we provide you with an insight into what personal data we collect from you and in what
form we process it. Furthermore, you will receive an overview of the rights you are entitled to
according to the applicable data protection law. In addition, should you have any questions,
we will provide you with a contact person.

1.1.1.1 WHO ARE WE?
Within the meaning of the applicable data protection laws, as Controller,

C. Gielisch GmbH
Neuer Zollhof 1
40221 Düsseldorf
E-mail: info(at)Gielisch.de
Phone: +49 211 13806-01
Fax: +49 211 3236830

we take all measures required by applicable data protection laws to ensure the protection of
your personal data.

If you have any questions regarding this data protection statement, please contact our Data
Protection Officer (DPO).

2B Advice GmbH
Joseph-Schumpeter-Allee 25
53227 Bonn
E-mail: Gielisch(at)2B-Advice.com
Phone: +49 228 926165-120

1.1.2 SCOPE OF THE DATA PROTECTION DECLARATION
With the processing of personal data the legislator means activities such as collection,
recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation,
use, disclosure by transmission, dissemination or otherwise making available, alignment or
combination, restriction, erasure or destruction of personal data.
Personal data is all the information that relates to an identified or identifiable natural person.
This data protection statement concerns the personal data of customers, interested parties,
applicants or visitors.
This data protection statement applies to our website www.gielisch.de.
DATA PROTECTION POLICY - C. GIELISCH G111
1.1.3 WHICH PERSONAL DATA DO WE PROCESS?
When you contact us e.g. as an interested party or customer, we collect your personal data.
This may happen, for example, if you are interested in our products, register for our online
services, contact us via our communication channels or if you use our products or services in
the context of existing business relationships.

We process the following types of personal data:
•    personal identifiable information (PII)
o    e.g. first and last name, address data, e-mail address, telephone number, fax
number
•    Contracts‘ data
o    e.g. customer number, order number, invoice data
•    Company-related data
o    e.g. company name, department, activity
•    Data on your behaviour online
o    e.g. IP addresses, user names, data on your visits to our website, in the
customer portals or in the app, actions carried out on our websites and in the
customer portals, place of access
•    Information about your interests and wishes, which you communicate to us
o    e.g. via our contact form or other communication channels
•    Information about your professional career
o    e.g. vocational training, previous employers, other qualification
and other information comparable to these categories of data.

1.1.3.1 SENSITIVE DATA
Sensitive data and special categories of personal data such as information on religious or trade
union membership, are not collected in this way.
DATA PROTECTION POLICY - C. GIELISCH GMBH
1.1.3.2 PERSONAL DATA OF MINORS
Personal data of children or minors are collected only if they create a customer account with
us, register in the career portal, use our communication channels or use the app.

1.1.3.3 USE OF COOKIES

1.1.3.3.1 WHAT ARE COOKIES?
Cookies are files that are placed on your computer by our website or customer portals when
you visit the site. These files store information that makes your use of this site more efficient.
We use Google Analytics as a web analysis service to analyse the user behaviour on the
website and in the customer portals. For this analysis, the use-related information generated
by the cookie (including the shortened IP address of the user) is transmitted to our servers
and stored for use-analysis purposes. We use the usage analysis to optimize our own websites,
customer portals, customer approach and other advertising measures as well as for market
research purposes. The IP address of the user is immediately shortened during this process,
so that the identification of the user via the IP address is no longer possible.
Any user who does not agree to the storage and analysis of his anonymized user data when
visiting our website can object to this storage and use at any time. An anonymous use of the
customer portals is not possible.
Your visit to this website is currently recorded by Google Analytics. Please click here, so that
your visit is no longer recorded: Deactivate Google Analytics

1.1.4 WHAT DO WE PROCESS YOUR PERSONAL DATA FOR - AND ON WHAT
LEGAL BASIS?

1.1.4.1 PERFORMANCE OF THE CONTRACT
We process your data in order to fulfil our contracts. This also applies to information that you
provide to us in the context of pre-contractual correspondence. The specific purposes of the
data processing depend on the respective product and the submitted request and can also be
used to analyse your needs and to check which products and services are suitable for you.

1.1.4.1.1 PERFORMANCE OF THE CONTRACTUAL RELATIONSHIP
For the execution of the contractual relationship we need your name, your address, your
telephone number or your e-mail address so that we can contact you.
Kommentiert [A1]: The following purposes are
exemplary for a production and trading company.
DATA PROTECTION POLICY - C. GIELISCH GMBH
1.1.4.1.2 OFFERING GOODS AND SERVICES
We also need your personal data to be able to check whether and which products and services
we can and may offer you.
Details on the respective purposes of data processing can be found in the contractual
documents and our General Terms and Conditions of Business.

1.1.4.1.3 CARRYING OUT THE APPLICATION PROCESS
We process your data that you have sent us as part of your application to check whether your
professional qualifications are suitable for the advertised position. We only use your
information for the application process and transfer it to your personnel file when a contract
is concluded. If no agreement is reached, your information will be deleted or destroyed. We
will not use your application information for any other purpose than to conduct the application
process.

1.1.4.2 BALANCING INTERESTS: WE IMPROVE OUR SERVICES AND OFFER YOU
SUITABLE PRODUCTS

1.1.4.2.1 SUBSCRIBE TO NEWSLETTER
You have the opportunity to register for our newsletter via our website. For sending it we only
need your e-mail address, all other information is voluntary. Only after successful completion
of a double opt-in process will you receive our newsletter. At any time, you have the right to
view your declaration of consent or to unsubscribe from the newsletter. Corresponding links
are implemented in every cover letter to our newsletter. If you unsubscribe from our
newsletter, we will immediately delete your contact details from our newsletter distribution
list.
The effectiveness of an electronic consent, as it is used for the registration for the newsletter,
is subject to certain requirements by law. This also includes recording your declaration of
consent. We therefore log the date and time of consent, the text of the declaration of consent,
the fact whether the checkbox was selected, your e-mail address and all other voluntary
information. We also log the date and time of the click on the confirmation link and on the link
in the confirmation e-mail. We collect this information exclusively in order to comply with legal
obligations.

1.1.4.2.2 DATA PROCESSING AND ANALYSIS FOR MARKETING PURPOSES
Your needs are important to us and we try to provide you with information about products
and services that exactly suit you. For this purpose, we use the findings of our joint business
relationship and market research. Our main goal is to adapt our product proposals to your
needs. In this context, we guarantee that we always process the data in accordance with
applicable data protection law. Important: You can object to the use of your personal
data for this purpose at any time.
What exactly do we analyse and process?
•    Results of our marketing activities to measure the efficiency and relevance of our
campaigns;
•    Information from your visits to our website;
•    We analyse the possible needs of our products and services.

1.1.4.2.3 MEASURES TO SERVE YOUR PROTECTION
Among others, we use your personal data in the following cases:
•    We analyse your data to protect you or your company from fraudulent activities,
This may happen, for example, if you have been the victim of identity theft or if
unauthorized people have otherwise gained access to your user account;
•    Our IT support works closely with you in case of technical problems to improve the
reliability of our web applications. In this context, we also evaluate logs of page
accesses, actions performed, etc;
•    To be able to guarantee IT security;
•    In order to be able to record and prove facts in the event of possible legal disputes.

1.1.4.3 ON THE BASIS OF YOUR CONSENT
If you have consented to the processing of your personal data for one or more specific
purposes, we may process your data. You can withdraw this consent at any time for the future
without incurring any costs other than the transmission costs according to the basic tariffs
(costs of your Internet connection). However, the withdrawal of consent does not affect the
legality of the processing up to the withdrawal.

1.1.4.4 DUE TO LEGAL REQUIREMENTS OR IN THE PUBLIC INTEREST
As a company, we are subject to a wide variety of legal requirements (e.g. from tax
legislation). In order to comply with our legal obligations, we process your personal data.
DATA PROTECTON POLICY - C. GIELISCH GMBH
1.1.5 WHERE WE TRANSMIT DATA AND WHY

1.1.5.1 USE OF DATA WITHIN C. GIELISCH
Within C. Gielisch only those entities that need your personal information in order to fulfil our
contractual or legal obligation or to protect our legitimate interest will have access to them.

1.1.5.2 USE OF DATA OUTSIDE C. GIELISCH
We respect the protection of your personal data and we pass on information about you only if
required by law, if you have given your consent or to fulfil contractual obligations.
For the following recipients, for example, there is a legal obligation to pass on your personal
data:
•    Public authorities or supervisory authorities, e.g. tax authorities, customs
authorities;
•    Judicial and law enforcement authorities, e.g. police, courts, public prosecutors;
•    Lawyers or notaries, e.g. in legal disputes;
•    Chartered Accountant/ Auditors.
In order to fulfil our contractual obligations, we cooperate with other companies. These
include:
•    Transport service providers and freight forwarders;
•    Organisers and training service providers, if you have registered through us for
certain trade fairs or events;
•    Banks and financial service providers to handle all financial matters.

Our own service providers
In order to make our operations more efficient, we use the services of external service
providers who may receive personal data from you for the purposes described, including IT
service providers, printing and telecommunications service providers, debt collection,
consulting or sales companies.

Important: We pay close attention to your personal data! PROTECTION POLICY - C. GIELISCH GMBH
In order to ensure that the service providers comply with the same data protection standards
as in our company, we have concluded appropriate contracts for order processing. These
contracts regulate, among other things:
•    that third parties only have access to the data they need to carry out the tasks assigned
to them;
•    that the service providers only grant access to your data to employees who have
explicitly committed themselves to comply with data protection regulations;
•    that the service providers comply with technical and organisational measures that
guarantee data security and data protection;
•    what happens to the data when the business relationship between the service provider
and us is terminated
For service providers based outside the European Economic Area (EEA), we take special
security measures (e.g. by using special contractual clauses) to ensure that the data is treated
with the same level of caution that is exercised in the EEA. We regularly check all our service
providers for compliance with our specifications.

Very important: Under no circumstances do we sell your personal data to third parties!

 

 

 

 

 

 

 

 

Google Analytics This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google“). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. Generally, the information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States. In case of activation of the IP anonymisation, however, Google will anonymise the IP address for member states of the European Union as well as for other parties to the Agreement on the European Economic Area. Only in certain exceptions will the full IP address be sent to and shortened by Google servers in the USA. On behalf of the website provider Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website and internet usage to the website provider. Google will not associate the IP address transmitted by your browser as part of the service provided by Google Analytics to any other data held by Google. You may refuse storage of cookies by selecting the appropriate settings on your browser; however, please note that if you do this, you may not be able to use the full functionality of this website. Furthermore you can prevent Google's collection and use of data (cookies and your IP address) by downloading and installing the browser plug-in available under the following link. In addition, you can avoid registration by Google Analytics by clicking on the following link: A specific value (disableGA = "1") will be set in your browser's local storage settings, which will prevent registration of your data on the occasion of future visits to this website: deactivate Google Analytics. For further information regarding the terms of use and data protection issues, please refer to http://www.google.com/analytics/terms/de.html, or http://www.google.com/intl/de/analytics/learn/privacy.html. Please note that on this website the Google Analytics code was extended to include "gat._anonymizeIp();“ to guarantee anonymised collection of IP addresses (so-called IP masking).

1.1.5.3 GOOGLE MAPS
This page uses the Google Maps map service via an API. Provider is Google Inc., 1600
Amphitheatre Parkway Mountain View, CA 94043, USA.
To use the functions of Google Maps, it is necessary to store your IP address. This information
is usually transferred to a Google server in the USA and stored there. The provider of this site
has no influence on this data transfer.
You can find more information on the handling of user data in Google's data protection policy:
www.google.de/intl/de/policies/privacy/

1.1.5.4 YOUTUBE
YouTube is operated by YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
By being certified in accordance with the EU-US Privacy Shield, Google and its subsidiary YouTube guarantee that the data protection requirements of the EU are also complied with when processing data in the USA, www.privacyshield.gov/EU-US-Framework.

We have integrated YouTube videos into our online offering, which are stored at www.YouTube.com and can be played directly from our website. These are all integrated in the "extended data protection mode", i.e. no data about you as a user is transferred to YouTube if you do not play the videos. If you play the videos, YouTube will at least record and process your IP address, the date and time and the website you visited. In addition, a connection to the advertising network "DoubleClick" is established by Google. We have no influence on this data transfer.

This occurs regardless of whether YouTube provides a user account that you are logged in to, or whether no user account exists. If you are logged in, your data will be assigned directly to your account. If you do not wish your profile to be assigned to YouTube, you must log out before activating the button and manually delete your cookies and browser history before logging in again. YouTube stores your data as user profiles and uses them for advertising, market research and/or the design of its website to meet your needs. Such evaluation is carried out in particular (even for users who are not logged in) in order to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.

Further information on the purpose and scope of data collection and processing by YouTube can be found in YouTube's Privacy Policy. There you will also find further information on your rights and setting options to protect your privacy: www.google.de/intl/de/policies/privacy.

1.1.5.5 VIMEO
Our website uses plugins of the video portal Vimeo. The provider is Vimeo Inc, 555 West 18th
Street, New York, New York 10011, USA.
When you visit one of our pages equipped with a Vimeo plug-in, a connection is established
to the Vimeo servers. This will tell the Vimeo server which of our pages you have visited. In
addition, Vimeo obtains your IP address. This also applies if you are not logged in to Vimeo or
do not have an account with Vimeo. The information collected by Vimeo is transferred to the
Vimeo server in the USA.

If you are logged in to your Vimeo account, you enable Vimeo to assign your surfing behavior
directly to your personal profile. You can prevent this by logging out of your Vimeo account.
For more information about how we treat user information, please see Vimeo's privacy policy
at: vimeo.com/privacy.

1.1.5.6 WEBFONT VON FAST.FONTS.NET BZW. FONTS.COM
This page uses so-called web fonts provided by Monotype GmbH (fonts.com or fast.fonts.net)
for the uniform display of fonts. When you call up a page, your browser loads the required
web fonts into its browser cache in order to display texts and fonts correctly. For this purpose,
the browser you are using must connect to the fonts.com servers. By doing so, fonts.com
becomes aware that your IP address has been used to access our website. Fonts.com Web
Fonts are used in the interest of a uniform and appealing presentation of our online services.
This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO. If your
browser does not support web fonts, a standard font will be used by your computer.
Further information on these web fonts can be found at www.fonts.com/info/legal
and in the Fonts.com Privacy Policy: www.fonts.com/info/legal/privacy
and in the privacy policy of Monotype GmbH: www.monotype.com/legal/privacy-policy.

1.1.5.6 USE OF DATA WITHIN THE C. GIELISCH GROUP
In order to provide you with the best possible service, we occasionally exchange data within
the Group. We guarantee that the applicable data protection regulations are observed and
that your personal data is adequately protected at all times.
For this reason, we have taken appropriate measures to ensure compliance with data
protection within the C. Gielisch Group:
We have concluded appropriate contracts with the individual subsidiaries to ensure that
personal data shared within the Group remains protected at all times.
In accordance with these contracts and applicable data protection laws, we transfer personal
data to our production and sales subsidiaries only for the purposes stated in this data
protection statement. In doing so, we support our subsidiaries both in their operations and in
their compliance with the technical and organizational measures that we also use at the parent
company to guarantee the security of your personal data. If possible, we protect your data by
using pseudonymisation or anonymisation measures. If subsidiaries are located outside the
EEA, we take appropriate measures to ensure that the personal data processed there is just
as protected as within the EEA.

1.1.6 ARE YOU OBLIGED TO PROVIDE US WITH PERSONAL DATA?
In the context of the business relationship between you and C. Gielisch, we require from you
the following categories of personal data:
•    all necessary data for the establishment and implementation of a business relationship;
•    data required for the fulfilment of contractual obligations;
•    data that we are legally obliged to collect.
Without these data it is not possible for us to enter into or execute contracts with you.

1.1.7 DELETION PERIODS
In accordance with the applicable data protection regulations, we do not store your personal
data longer than we need for the purposes of the respective processing. If the data is no
longer required for the fulfilment of contractual or legal obligations, it will be regularly deleted
by us, unless its temporary storage is still necessary. There may be the following reasons for
further storage:
•    Obligations under commercial and tax law to retain data must be observed: The
periods for storage, primarily in accordance with the provisions of the Commercial Code
and the Fiscal Code, are up to 10 years.
•    To obtain evidence in the event of legal disputes within the framework of
statutory limitation periods: in civil law, statutory limitation periods may be up to 30
years, with the regular limitation period occurring after three years.

1.1.8 YOUR RIGHTS
Within the scope of processing your personal data, you also have certain rights. More detailed
information can be found in the corresponding provisions of the General Data Protection
Regulation (Articles 15 to 21).

1.1.8.1 RIGHT TO INFORMATION AND CORRECTION
You have the right to obtain information from us on which of your personal data we process.
If this information is not (no longer) correct, you can ask us to correct the data, or, if it is
DATA PROTECTION POLICY - C. GIELISCH GMBH
EFFECTI VE: 11.09.2018 © 2B ADVICE LLC PAGE: 15 OF 17
incomplete, to complete it. If we have passed on your data to third parties, we will inform the
relevant third parties in the event of a corresponding legal situation.

1.1.8.2 RIGHT TO DELETION
You can request the immediate deletion of your personal data under the following
circumstances:
•    When your personal information is no longer needed for the purposes for which it was
collected;
•    If you have revoked your consent and there is no other legal basis for data processing;
•    If you object to the processing and there are no overriding legitimate reasons for data
processing;
•    If your data is processed unlawfully;
•    If your personal data must be deleted in order to comply with legal obligations.
Please note that before deleting your data we must check whether there is not a legitimate reason
for processing your personal data.

1.1.8.3 RIGHT TO RESTRICTION OF PROCESSING ("RIGHT TO BLOCK")
You may request us to restrict the processing of your personal data for one of the following
reasons:
•    If you dispute the accuracy of the data until we have had the opportunity to verify the
accuracy of the data;
•    If the data is processed unlawfully, but instead of being deleted, you merely request
the restriction of the use of personal data;
•    If we no longer need the personal data for the purposes of processing, but you still
need them to assert, exercise or defend in the course of legal claims;
•    If you have filed an objection against the processing and it is not yet clear whether
your legitimate interests outweigh ours.
DATA PROTECTION POLICY - C. GIELISCH GMBH
EFFECTI VE: 11.09.2018 © 2B ADVICE LLC PAGE: 16 OF 17
1.1.8.4 RIGHT TO OBJECT

1.1.8.4.1 RIGHT OF OBJECTION IN INDIVIDUAL CASES
If the processing is carried out in the public interest or on the basis of a balance of interests,
you have the right to object to the processing for reasons arising from your particular situation.
In the event of an objection, we will not process your personal data further, unless we can
prove compelling reasons for processing your data, which outweigh your interests, rights and
freedoms, or because your personal data serve to assert, exercise or defend legal claims. The
objection shall not preclude the legality of the processing carried out up to the time of the
objection.

1.1.8.4.2 OBJECT AGAINST THE USE OF DATA FOR ADVERTISING PURPOSES
In cases where your personal information is used for advertising purposes, you can object to
this form of processing at any time. We will no longer process your personal information for
these purposes.

The objection can be made form-free and should be addressed to:

C. Gielisch
Neuer Zollhof 1
40221 Düsseldorf
E-mail: info(at)Gielisch.de
Phone: +49 211 13806-01

1.1.8.5 RIGHT TO DATA PORTABILITY
Upon requests, you have the right to receive personal data that you have given us for
processing in a transferable and machine-readable format.

1.1.8.6 RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY (ART. 77 GDPR)
We try to process your requests and claims as quickly as possible in order to protect your
rights appropriately. Depending on the frequency of enquiries, however, it may take up to 30
days before we can provide you with further information about your request. If it should take
longer, we will inform you promptly of the reasons for the delay and discuss the further process
with you.
DATA PROTECTION POLICY - C. GIELISCH GMBHEFFECTI VE: 11.09.2018 © 2B ADVICE LLC
In some cases we may not or cannot give you any information. If legally permissible, we will
inform you of the reason for refusing to disclose the information.
However, should you not be satisfied with our answer and responses or should you be of the
opinion that we are violating the current data protection law, you are free to file a compliant
with our Data Protection Officer as well as the relevant supervisory authority. The supervisory
authority responsible for us is:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestr. 2-4
40213 Düsseldorf
Phone: +49 211 38424-0
Fax: +49 211 38424-10

1.2 VERSION
This Data Protection Statement is valid as of 11.09.2018. Registered customers will be
informed about changes in the Data Protection Statement. Earlier versions of the Data
Protection Statement are available on the website or from our Data Protection Officer.