Data Protection

Data protection declaration for customers, suppliers and users of our Website

Goldhofer AG is delighted to note your interest in our company and our products. The following information is designed to give you – as a customer or prospect for our products and services or as a supplier or visitor to our website – an overview of the ways in which your personal data are processed by our company and about your rights deriving from data protection legislation.

We take the protection of your personal data very seriously, and we process them only in compliance with the provisions of the EU’s General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (FDPA).

In the following we describe which data are processed in the context of our business relationship and during your visit to our website.

1. Responsible companies

This data protection declaration applies to both Goldhofer AG and Goldhofer Airport Technology GmbH (hereinafter referred to as the “Group”). With regard to personal data processed in the course of use of the website, Goldhofer AG has sole responsibility in terms of data protection law. With regard to processing in the context of business dealings, the responsibility lies with the company with which a direct contractual relationship exists.

The contact details of the responsible companies are as follows:

Goldhofer AG
Donaustr. 95
87700 Memmingen/Germany
Phone: +49 8331 15-0
Fax: +49 8331 15-239
email: info@goldhofer.com

and

Goldhofer Airport Technology GmbH
Donaustr. 95
87700 Memmingen/Germany
Phone: +49 8331 15-0
Fax: +49 8331 15-239
email: info@goldhofer.com

2. Data protection officer

Riscreen GmbH
Hauptplatz 37
85276 Pfaffenhofen
datenschutz@goldhofer.com
www.riscreen.de

3. Personal data

Personal data means any details of the personal or material circumstances of an identified or identifiable natural person. This includes information such as IP addresses, given name and surname, address, telephone number or date of birth. Information that cannot be directly linked to your actual identity, such as statistical information regarding the number of users of a website, does not constitute personal data.

4. Categories of processed data for customers and suppliers

The following categories of data are regularly processed in the context of our business relationships with you:

• Personal master data (name, date of birth, place of birth, nationality)
• Contract master data (contractual relationship, product or contract interest)
• Authentication data (ID data)
• Communications data (telephone, e-mail, address, IP address)
• Customer history
• Invoice and payment data
• Planning and control data
• Advertising and sales data
• Information from third parties, e.g. credit agencies or public directories

5. Categories of processed data for users of our website

When you access our website your Internet browser automatically transfers data to our web server for technical reasons. Once the connection has been established between your Internet browser and our web server, the following data are recorded:

• Date and time of the request
• Name of the requested file
• URL of the website from which the file is requested
• Access status
• Web browser and operating system used
• Full IP address of the requesting computer
• Volume of data transferred

6. Legal basis and purpose of data processing

Goldhofer AG and Goldhofer Airport Technology GmbH and our third-party service providers process your personal data on the basis of the following legal provisions and for the following purposes:

6.1 Contractual basis (preparation, execution, termination), Art. 6(1)(b) GDPR

• Answering questions and taking steps prior to entering into a contract
• Preparation, negotiation and performance of a contract
• Granting access to certain data and offers

6.2 Legal obligation, Art. 6(1)(c) GDPR

• Responding to an official or court order
• Meeting certain statutory duties in particular relating to taxation law

6.3 Legitimate interests, Art. 6(1)(f) GDPR

• Direct marketing and optimization of the website (eTracker)
• Administrative purposes within the Group
• Improvement of products and services
• Communication with customers and prospects by e-mail or telephone
• Preservation of evidence for the establishment, exercise or defense of legal claims
• Prevention of misuse or other illegal activities within the company
• Guaranteeing IT security
• Video surveillance to safeguard domiciliary rights and collect evidence in cases of burglary (cf. Art. 4 FDPA)
• Measures for building and plant security (e.g. access controls)
• Data exchange with credit agencies (e.g. SCHUFA) to assess credit and default risks

6.4 Consent, Art. 6(1)(a) GDPR

• Sending advertising such as price information in the absence of a business relationship
• Contact made via the website
• Photographs taken at events

7. Withdrawal of consent

You have the right to revoke the consent you have granted us for the processing of your personal data at any time with future effect. The legality of the processing of your data performed prior to revocation remains unaffected.

8. Disclosure of data

Within the Group, those units have access to your data which require them for the fulfillment of contractual and legal obligations or for internal administrative purposes.

Your personal data will not be passed on to third parties outside the Group unless this is necessary for the execution of the contract or you have given your express consent or we can assert a legitimate interest or we are obliged to do so by a court or competent authority.

Service providers used by us in the context of order processing agreements and subcontractors may also receive data for these purposes. They include companies in the fields of IT services, logistics, printing services, telecommunications, debt collection, management consultancy and sales and marketing. Insofar as we engage external service providers for order processing purposes, they are carefully selected and have an obligation pursuant to Art. 28 GDPR to observe all provisions of data protection law.

Potential recipients of personal data also include the following:

• Public authorities and institutions (e.g. tax, judicial and law enforcement authorities) in the context of a statutory or official obligation
• Auditors, tax consultants or lawyers

9. Transfer of personal data to non-EU countries

Personal data may be transferred to parties located outside of the European Union (non-member countries) where

• it is necessary to fulfill your order (e.g. supply contracts),
• we have a statutory obligation to do so (e.g. tax reporting rules, combating criminal offenses),
• it is required to secure the company’s IT operations,
• we have a legitimate interest in such data transfer, or
• you have given your consent.

In the event of the transfer of data to a party in a non-member country, appropriate guarantees pursuant to Art. 44 ff. GDPR will ensure compliance with the level of data protection that applies in the European Union.

10. Price information

For purposes of customer-specific pricing, we store personal data such as given name, surname, contact details and name of company. We use this data exclusively to transmit the requested information and to keep a record of your consent. You can revoke your consent to the storage of the data, the e-mail address and their use for sending price information at any time with future effect. Please follow the instructions in the e-mail or write to us using the contact details provided.

11. External links

Our online offers include links to websites of third parties with which we have no contractual relationship. Once the link has been selected, we have no influence on the processing of any personal data such as the IP address or the URL on which the link is located. We can accept no responsibility for the processing of such personal data by third parties.

12. Cookies

12.1 General

Cookies are small files that your browser automatically creates and that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our site. Cookies do no damage to your end device and do not contain viruses, Trojans or other malware. Information is stored in the cookie that is generated in connection with the specific end device used.

There are consent-free cookies and cookies requiring consent. Consent-free cookies are those which are necessary in order to make use of our online offer or which serve IT security (strictly necessary cookies). The legal basis for such data processing is Art. 6 (1) (f) GDPR. On the other hand, cookies requiring consent serve to make the use of our offer more pleasant for you (preference cookies). For example, we use cookies to recognize that you have already visited individual pages on our website or that you have already logged into your customer account. In addition, also in the interest of user-friendliness, we use temporary cookies that are stored on your end device for a specified period of time. If you visit our website again in order to make use of our services, the system automatically recognizes that you have visited us before and remembers the information you have provided and settings you have entered so that you do not have to do so again. We also use cookies for statistical analysis of the use of our website and evaluation in order to optimize our offer for you and to display information specially tailored to you (marketing and statistics cookies). The legal basis for data processing with cookies requiring consent is Art. 6 (1) (a) GDPR. This data includes page views, length of visit, IP address, country, etc. We analyze this statistical data in order to improve our offer and to assess the acceptance of individual web pages.

12.2 The following cookies are used on our website:

12.3 Use of technologies of etracker GmbH

This website uses the technology of etracker GmbH (http://www.etracker.com) to collect and store data for marketing and optimization purposes. These files can be used to create pseudonymous user profiles. Cookies are used to permit statistical analysis of the use of this website during your visits and the display of use-related advertising content. Etracker cookies contain no information which permit identification of the user.

The data collected using etracker technologies will not be used to personally identify the visitor to this website and will not be merged with personal data relating to the bearer of the pseudonym without the express consent of the person concerned.

Data processing is carried out on the basis of the legal provisions of Art. 6 (1) (f) GDPR. Our legitimate interest within the terms of the GDPR is the optimization of our online offer and our website. As we consider the privacy of our visitors very important, data which might permit a connection to be established with any specific person such as IP address, login or device ID are anonymized or pseudonymized as soon as possible. No other use of the data is made, and they are not merged with any other etracker data or passed on to third parties. By clicking on this link, you can object to the collection and processing of data using the tracking technology of etracker GmbH at any time with effect for the future.