A lock on the keyboard

Data Protection Statement

Privacy statement in accordance with the General Data Protection Regulation (GDPR)

Thank you for visiting our website. The aim of this privacy statement is to inform you about the type, purpose and scope of the collection and processing of data as well as the use of cookies within this website. If you have any questions, please do not hesitate to contact the data protection address indicated for the Company.

I. Name and address of the controller

The controller as defined in the General Data Protection Regulation (GDPR) and other national data protection laws of Member States as well as other data protection provisions is:

IMOS Gubela GmbH
Kniebisstraße 1
DE-77871 Renchen
Tel.: +49 7843/99511-0
Website: www.imos-gubela.de / www.imos-gubela.com / www.imos-gubela.it
Managing Director: Mr. Hans-Erich Gubela jun.

II. Kontact Data Protection Officer

IMOS Gubela GmbH
Kniebisstraße 1
DE-77871 Renchen
Tel.: + 49 7843/99511-0

III. Description and scope of data processing

1. General information regarding the extent of the processing of personal data
In principle, we only process personal data of our users, insofar as this is required for providing a functional website and for our contents and services. Personal data of our users is only periodically processed with the consent of the user.  An exception to this may be made where obtaining prior consent is not possible for factual reasons and processing of the data is permitted under statutory regulations.

2. Your visit to the website
Whenever our website is visited, our service providers necessary for operating the website – namely our providers and our analysis software (e.g. Google Analytics and/or Matomo, formerly Piwik) – capture data and information in an automated process from the computer system of the calling computer without collecting personal data. The following data is collected: information on the browser type and version used, user’s operating system, user’s internet service provider, user’s IP address, date, time and duration of access to the website, from which the user’s system entered our website, websites called up by the user’s system via our website. We cannot identify the individual user with this data. The information is statistically evaluated to improve the website.

3. Contact form and e-mail contact
If there is a contact form on our website, this may be used by the user for making electronic contact. If the user makes use of this option, the data entered in the input mask is transmitted to us and stored. The information is expressly sent on a voluntary basis and with the user’s consent. Insofar as the user provides information on the telephone or via an e-mail address, he/she also agrees that the Company may also contact him/her via this means of communication in order to answer his/her contact inquiry.

At the time the message is sent the following data is also stored: user’s IP address, date and time of registration. Your consent is obtained during the transmission process and reference is made to the privacy statement.

Alternatively, contact is possible via the e-mail address provided. In this case, the user’s personal data transmitted with the e-mail is stored. The data is used solely for processing the conversation.

IV. Legal basis for processing personal data

The EU General Data Protection Regulation (GDPR) serves as the legal basis for collecting and processing data together with national guidelines and laws, the German Civil Code (Bürgerliches Gesetzbuch, BGB), German Commercial Code (Handelsgesetzbuch, HGB), German tax law and customs regulations.

V. Purpose of data processing

The temporary storage of the IP address by the system is required to enable the website to be delivered to the user’s computer. The user’s IP address has to be stored for the duration of the session for this purpose. We also have a legitimate interest in processing data for these purposes under Article 6 (1) point. f GDPR. We only process personal data from the input mask of the contact form (if available) to process the contact made. Where contact is made by e-mail, this also constitutes the legitimate interest necessary for processing the data.

VI. Data deletion and storage period

The personal data of the person concerned is deleted or blocked as soon as the storage purpose ceases to apply. This applies to personal data entered on the input mask of the contact form (if available) and that sent by e-mail, if the conversation with the user has finished. The conversation is deemed to be finished if it can be determined from the circumstances that the matter concerned has been finally clarified. Where data is collected for the purposes of making the website available, this is the case if the session has ended.

Data may also be stored if this was provided for by the European or national legislature in directives, laws or other regulations, to which the controller is subject. Data is also blocked or deleted if the storage period stipulated by the above-mentioned standards expires, unless there is a necessity to store the data for an additional period of time to conclude or fulfil a contract.

VII. Possibility to object and remove

The user may at any time revoke his/her consent to the processing of personal data. The user writes to the data protection address indicated for the Company to revoke such consent. All personal data stored during the course of the contact is deleted in this case.

However, the collecting of data for the purposes of making the website available and storage of data in log files is essential for operating the website. Consequently, the user may not object.

VIII. Use of cookies

a) Description and extent of data processing
Our website uses cookies. Cookies are text files that are stored in the Internet browser or on the user’s computer system from the Internet browser. When a user calls up a website, a cookie can be stored on the user’s operating system. This cookie contains a characteristic sequence that enables the browser to be uniquely identified when the website is called up again. We use cookies to design our website in a user-friendly way.

b) Duration of storage, possibility to object and remove
Session cookies are stored in the user’s Internet browser until the browser window is closed and the session cookie is thereby deleted. Permanent cookies are used for repeated visits to the website and are stored in the user’s browser for a specified period of time (1 year or longer).

You can deactivate or restrict the transfer of cookies by adjusting the settings in your Internet browser. Cookies already stored can be deleted at any time. This can also be done in an automated manner. If cookies are deactivated for our website, it may no longer be possible to make full use all the functions of the website.

IX. Google Analytics

Privacy statement regarding the use of Google Analytics:

This website uses Google Analytics, a web analytics service provided by Google lnc. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA; "Google"). Google Analytics uses so-called “cookies”, which are text files stored on your computer and enable your use of the website to be analysed. The Information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address is truncated by Google beforehand within the Member States of the European Union or other signatories to the Agreement on the European Economic Area.

Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there. Google uses this information on behalf of the operator of this website for the purposes of analysing how you use the website, compiling reports on website activities and providing further services related to website and internet usage to the website operator. We also have a legitimate interest in processing data for these purposes. The legal basis for using Google Analytics is Section 15 (3) of the German Telemedia Act (Telemediengesetz, TMG) and Article 6 (1) lit. f GDPR. The data sent by us and linked to cookies, user IDs (e.g. user 10) or advertising IOs is automatically deleted after 14 months. Data, whose retention period has been reached, is automatically deleted once a month. Further information on the terms of use and data protection can be found under https://www.google.com/analytics/terms/de.html or under https://policies.google.com/?hl=de.

You can prevent the storage of cookies by appropriately adjusting your browser software; however, we would point out that if you do so you may not be able to make full use in this case of all the functions of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing the browser add-on.

Opt-out cookies prevent the future collection of your data when visiting this website. By clicking here, the opt-out cookie is installed and

Further information on the terms of use and data protection can be found under https://www.google.com/analytics/terms/de.html or under https://www.google.de/intl/de/policies/. We would point out that Google Analytics was expanded on this website to include the "gat._anonymizelp();" code to ensure the so-called anonymized collection of IP addresses (so-called IP masking). We also use Google Analytics to evaluate data from Adwords and the double-click cookie for statistical purposes. If you do not want this, you may deactivate this via the Ads Preference Managers (https://www.google.com/settings/ads/onweb/?hl=de).

Source reference: eRecht24, Data Protection Statement Google Analytics, www.datenschutzbeauftragter-info.de

X. Rights of the data subject

If your personal data is processed, you are a data subject as defined in the GDPR and have the following rights vis-à-vis the controller. Please refer to the GDPR for details regarding these.  If you want to assert your rights, please write to the data protection address indicated for the Company.

1. Your right of access
You may request the controller to confirm whether personal data concerning you is processed by us. Where this is the case, you may request information from the controller pursuant to Article 15 GDPR.

2. Your right to rectification
Pursuant to Article 16 GDPR you have the right to obtain rectification and/or completion from the controller, if the personal data processed concerning you is inaccurate or incomplete.

3. Your right to restrict processing
Under the conditions set out in Article 18 GDPR you may request a restriction on the processing of personal data concerning you. If the processing of personal data concerning you is restricted, this data may only be processed – with the exception of its storage - with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State. If the processing restriction is put in place in accordance with the above-mentioned conditions, you will be informed by the controller before the restriction of processing is lifted.

4. Your right to erasure
Pursuant to the conditions set out in Article 17 GDPR you may request the controller to erase the personal data concerning you without undue delay, unless an exception to the erasure obligation applies.

5. Your right of notification
If you have asserted the right vis-à-vis the controller regarding rectification, erasure or restriction of processing pursuant to Article 19 GDPR, the latter is required to communicate this rectification or erasure of data or restriction of processing to each recipient to whom the personal data concerning you has been disclosed, unless this proves impossible or involves disproportionate effort. You have the right vis-à-vis the controller to be informed of these recipients.

6. Your right to data portability
Pursuant to Article 20 GDPR you have the right to receive your personal data, which you have provided to the controller, in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to which the personal data was provided, if the GDPR conditions apply. In exercising this right, you also have the right to have your personal data transmitted directly from one controller to another where this is technically feasible. Freedoms and rights of others may not be adversely affected by this.  The right to data portability does not apply to processing personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

7. Your right to object
You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you, which is carried out based on Article 6 (1) point e) or f) GDPR. The controller shall no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for processing, which override your interests and freedoms, or the processing serves to establish, exercise or defend legal claims.

8. Your right to revoke the declaration of consent under data protection law
You have the right to revoke at any time your declaration of consent under data protection law. The revocation of consent does not affect the lawfulness of the processing carried out based on the consent until such revocation.

9. Your right: automated decision-making on a case-by-case basis, including profiling
Under the conditions of Article 22 GDPR you have the right not to be subject to a decision based solely on automated processing - including profiling -, which produces legal effects concerning you or similarly affects you. Exceptions to this are governed in Article 22 GDPR.

10. Right to lodge a complaint with a supervisory authority
Without prejudice to any other available administrative or judicial remedy you have the right to lodge a complaint with a supervisory authority, particularly in the Member State where you reside or work or in the location of the suspected violation, if you are of the opinion that the processing of personal data concerning you violates the GDPR. The supervisory authority, to which the complaint was submitted, informs the complainant of the status of and findings regarding the complaint including the possibility of a judicial remedy under Article 78 GDPR.

The address of the relevant regulatory authority is:
Landesbeauftragter für Datenschutz und Informationsfreiheit Baden-Württemberg
Königstraße 10a
70173 Stuttgart

XI. Applications

If our website has a contact e-mail address for your application, please only use this when contacting us.

XII. Amendments to the declaration of consent

We reserve the right to amend the declaration of consent at any time to comply with the applicable requirements.

As at 02.08.18

Related topics: