Privacy Statement

§ 1 Information about the collection of personal data

(1) The following statement contains information about the collection of personal data when our website is used. Personal data are all data which concern you personally, such as your name, address, email addresses, and user behavior.

(2) The controller in accordance with Article 4(7) of the EU General Data Protection Regulation (GDPR) is GOM GmbH, Schmitzstr. 2, 38122 Braunschweig, Germany, info@gom.com (see “Imprint”). You can contact our data protection officer at gom@2b-advice.com or 2B Advice GmbH, Joseph Schumpeter Allee 25, 53227 Bonn, Germany.

(3) If you contact us by email or using a contact form, we will store the data you provide (your email address and if applicable your name and telephone number) in order to respond to your inquiry. We will erase the data provided in this connection when their storage is no longer necessary or, if any statutory retention requirements apply, restrict their processing.

(4) If we use external service providers to provide individual functions on our website or wish to use your data for advertising purposes, we provide detailed information about the relevant operations below. We also state the applicable criteria relating to the duration of storage.

§ 2 Your rights

(1) You have the right to request the following from us in relation to personal data concerning you:

  • right to request access
  • right to request rectification or erasure
  • right to request restriction of processing
  • right to object to processing
  • right to data portability.

(2) You also have the right to complain to a data protection supervisory authority regarding the processing of your personal data by us.

§ 3 Collection of personal data when you visit our website

(1) If you use the website purely for informational purposes, i.e. if you do not register or provide us with any other information, we collect only the personal data that your browser sends to our servers. When you view our website, we collect the following data, which we require for technical reasons in order to display our website to you and ensure stability and security (the lawful basis for this is Article 6(1)(f) of the GDPR):

  • IP address
  • data and time of request
  • timezone difference with Greenwich Mean Time (GMT)
  • content of request (specific page)
  • access status/HTTP status code
  • volume of data transferred
  • website the request originated from
  • browser
  • operating system and interface
  • language and version of browser software.

(2) As well as collecting the aforementioned data, we also place cookies on your computer when you use our website. Cookies are small text files which are placed on your hard drive and linked to your browser which pass on certain information to the entity setting the cookie (in this case us). Cookies cannot run programs or introduce viruses to your computer. They are used to make our website as a whole more user-friendly and efficient.

(3) Use of cookies:

a) This website uses cookies of the following types, the scope and functioning of which are explained below:

  • transient cookies (see point b)
  • persistent cookies (see point c).

b) Transient cookies are erased automatically when you close your browser. In particular they include session cookies. These contain a “session ID”, which allocates various requests from your browser to a common session. This means that your computer will be recognized if you return to our website. Session cookies are erased when you log out or close your browser.

c) Persistent cookies are erased automatically after a specified period, which may vary from cookie to cookie. You can delete cookies via the security settings in your browser at any time.

d) You can configure your browser as desired, e.g. you can set it to reject third-party cookies or to reject all cookies. Please note that you may not be able to use all of this website’s functions if you do so.

e) If you have an account with us, we use cookies so that we can identify you on future visits. Otherwise, you would need to log in every time you visit.

f) We use HTML5 storage objects, which are stored on your device. These objects store the necessary data regardless of the browser you use and have no automatic expiration date. To disable processing of Flash cookies, you will need to install an add-on such as “Better Privacy” for Mozilla Firefox (https://addons.mozilla.org/de/firefox/addon/betterprivacy/) or the Adobe Flash cookie killer for Google Chrome. You can disable the use of HTML5 storage objects by setting your browser to private mode. We also recommend that you delete your cookies and browser history manually on a regular basis.

§ 4 Use of Google Analytics

(1) This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer to permit analysis of how you use the site. The information generated by the cookie about your use of the website will normally be transmitted to and stored on a Google server in the United States. However, if IP anonymization is enabled on this website, Google will truncate your IP address in a member state of the European Union or signatory state to the Agreement on the European Economic Area before transmitting it. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google will use this information on behalf of the operator of this website to analyze your use of the website, compile reports on website activity and provide other services connected with web use to the website operator.

(2) The IP address transmitted to Google Analytics by your browser will not be combined with any other data held by Google.

(3) You can configure your browser software to reject cookies, but you are advised that you may not be able to make full use of all of the functions of this website if you do so. You can also prevent the data generated by the cookie relating to your use of the website (including you IP address) from being sent to and processed by Google by downloading and installing the browser add-on available at the following link: tools.google.com/dlpage/gaoptout.

(4) This website uses Google Analytics with the “anonymizeIp()” feature. This truncates IP addresses before they are processed, meaning that they cannot be associated with a specific individual. If this data collected concerning you contains any identifying information, identification is immediately ruled out and the personal data is deleted without delay.

(5) We use Google Analytics to analyze and regularly improve use of our website. We use the statistics obtained to improve our website and make it more relevant for you. For those exceptional cases in which personal data are transmitted to the USA, Google adheres to the EU-US Privacy Shield Framework, www.privacyshield.gov/EU-US-Framework. The lawful basis for the use of Google Analytics is Article 6(1)(f) of the GDPR.

(6) Details of third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.
Terms of Service: https://www.google.com/analytics/terms/us.html,
privacy overview: https://support.google.com/analytics/answer/6004245,
and privacy policy: https://policies.google.com/privacy.

(7) This website also uses Google Analytics for the cross-device analysis of visitor flows, which it does using a user ID. You can disable cross-device analysis of your activity under “My data", “personal data” in your customer account.

(8) This website uses Google conversion tracking (Google AdWords), an analytics service provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). Google AdWords places a cookie (“conversion cookie”) on your computer if you come to our website from a Google ad. These cookies expire after 30 days and are not used to identify you personally. If you visit certain of our pages when the cookie is still active, we and Google can see that someone has been redirected to our website by clicking the ad. Each AdWords customer receives a different cookie. Therefore, cookies cannot be tracked across the websites of AdWords customers. The information obtained using conversion cookies is used to generate conversion statistics for AdWords customers who have opted to use conversion tracking. AdWords customers are told the total number of users who have clicked on their ad and been redirected to a web page containing a conversion tracking tag. However, they receive no information which would enable users to be personally identified. If you do not wish to participate in tracking activities, you can refuse the relevant cookies, for instance by configuring your browser to reject the automatic placement of cookies in general. You can also disable conversion tracking cookies by setting your browser to refuse cookies from the domain “googleadservices.com”.

§ 5 Use of social media plugins

(1) We currently use the following social media plugins: Facebook, Instagram, Twitter, Xing, LinkedIn, YouTube. We use the “two-click solution” for these plugins This means that if you visit our website, no personal data will be passed on to the plugin provider in the first instance. You can view the plugin provider by selecting the box over the initial letter of its name or logo. We give you the opportunity to communicate directly with the plugin provider via the button. Only if you enable the selected field by clicking it will the plugin provider be informed that you have accessed the relevant page on our website. The data specified in section 3 of this statement is also sent. In the case of Facebook and Xing, the providers have stated that in Germany the IP address is anonymized immediately. If you enable the plugin, personal data concerning you will be sent to the plugin provider and stored by it (in the USA in the case of US providers). As plugin providers primarily use cookies to collect data, we recommend that you delete all cookies via your browser’s security settings before clicking on the grayed-out box.

(2) We have no influence over the data collected and the processing operations performed, nor do we have knowledge of the full scope of the data collection, the purposes of the processing, or storage periods. We also have no information regarding erasure of data collected by plugin providers.

(3) The plugin provider stores the information it collects about you as a user profile, which it uses for advertising and market research purposes and/or to tailor its website to the needs of users. In particular, this analysis is carried out (even for users who are not logged in) to serve relevant advertising and in order to inform other social network users of your activities on our website. You have the right to opt out of the creation of these user profiles, but to exercise this right you must refer to the plugin provider. We provide the plugins to enable you to interact with the social networks and other users so that we can improve our website and make it more interesting for you as a user. The lawful basis for the use of plugins is Article 6(1)(f) of the GDPR.

(4) The data will be passed on regardless of whether or not you have an account with the plugin provider and are logged into that account. If you are logged in to an account with the plugin provider, the data collected on our website will be directly linked with that account. If once the button is activated you click on it and e.g. link to the page, the plugin provider will also store this information in your user account and inform your contacts publicly. We recommend that you log out regularly after using social networks, especially before activating a button, as this will prevent your actions being linked to your profile with the plugin provider.

(5) For further information regarding the purpose and scope of the collection and processing of data by the plugin provider, please see the privacy statements of those providers as specified below. Here you will also find further information about your rights in this regard and settings you can use to protect your privacy.

(6) Addresses of the plugin providers and URLs of their privacy policies:

§ 6 Embedding of YouTube videos

(1) We have embedded YouTube videos into our website. They are stored at www.YouTube.com and can be played directly from our website. All of these videos are embedded in “extended privacy mode”, which means that no data concerning you as a user are transmitted to YouTube if you do not play the videos. Only when you play the videos will the data specified in paragraph 2 be transmitted. We have no influence over this data transmission.

(2) When you visit the website, YouTube is notified that you have accessed the relevant page on our website. The data specified in section 3 of this statement is also sent. This happens regardless of whether or not you have a YouTube account or are logged into such account. If you are logged into Google, your data will be directly linked with your account. If you do not want the data to be associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as a user profile, which it uses for advertising and market research purposes and/or to tailor its website to the needs of users. In particular, this analysis is carried out (even for users who are not logged in) to serve relevant advertising and in order to inform other social network users of your activities on our website. You have the right to opt out of the creation of these user profiles, but to exercise this right you must refer to YouTube.

(3) For further information regarding the purpose and scope of the collection and processing of data by YouTube, please see the privacy statement. Here you will also find further information about your rights and settings you can use to protect your privacy: https://policies.google.com/privacy. Google processes your personal data in locations including the USA and adheres to the EU-US Privacy Shield Framework, https://www.privacyshield.gov/EU-US-Framework.

§ 7 Embedding of Google Maps

(1) We use Google Maps on this website. This enables us to present interactive maps directly on the website and allows you to make convenient use of the map functions.

(2) When you visit the website, Google is notified that you have accessed the relevant page on our website. The data specified in section 3 of this statement will also be sent. This happens regardless of whether or not you have a Google account or are logged into such account. If you are logged into Google, your data will be directly linked with your account. If you do not want the data to be associated with your Google profile, you must log out before activating the button. Google stores your data as a user profile, which it uses for advertising and market research purposes and/or to tailor its website to the needs of users. In particular, this analysis is carried out (even for users who are not logged in) to serve relevant advertising and in order to inform other social network users of your activities on our website. You have the right to opt out of the creation of these user profiles, but to exercise this right you must refer to Google.

(3) For further information regarding the purpose and scope of the collection and processing of data by Google, please see Google’s privacy statement. Here you will also find further information about your rights in this regard and settings you can use to protect your privacy: https://policies.google.com/privacy. Google processes your personal data in locations including the USA and adheres to the EU-US Privacy Shield Framework, www.privacyshield.gov/EU-US-Framework.

§ 8 Newsletter

(1) With your consent, you can also be subscribed to our newsletter, in which we provide information about our current offers. The advertised goods and services are specified in the declaration of consent.

(2) We use the “double opt-in” procedure for subscriptions to our newsletter. This means that after you sign up, we send an email to the email address provided by you asking you to confirm that you wish to receive the newsletter. If you do not confirm within 24 hours of signing up, your information will be blocked and then automatically deleted after one month. We also store the IP addresses from which you sign up and confirm, and the date of subscription and confirmation. We do this to verify your subscription and to enable us to clarify any misuse of your personal data.

(3) The only information you are required to provide in order to receive the newsletter is your email address. Other separately marked information is provided voluntarily and is used to address you personally. Once you have confirmed, we store your email address so that we can send you the newsletter. The lawful basis for this is Article 6(1)(a) of the GDPR.

(4) You may withdraw your consent and unsubscribe from the newsletter at any time. You can withdraw your consent by clicking on the link provided in every newsletter email, by sending an email to info@gom.com, or by getting in touch using the contact details given in the Imprint section.

(5) Please note that we analyze your user behavior in relation to the newsletter. To permit this analysis, the emails we send contain “web beacons” or “tracking pixels”, one-pixel image files that are stored on our website. For the purposes of the analysis we link the data specified in section 3 and the web beacons with your email address and an individual ID. Links in the newsletter also contain this ID. We do not create a user profile from the information obtained in this way, and use it only to carry out statistical evaluations on the recipients of the newsletter and to tailor the newsletter to users’ interests. To do this, we record the links you click on when you read the newsletter and draw conclusions about user interests. We do not link these data with your actions on our website.

You may opt out of this tracking at any time by clicking the link contained in each email or contacting us via another channel. This information will be stored for as long as you remain subscribed to the newsletter. If you unsubscribe, we store this information anonymously and for purely statistical purposes. Tracking of this kind is also not possible if you have set your email program not to display images. In this case, the newsletter will not be displayed in full and you may not be able to make use of all its functions. If you display the images manually, your actions will be tracked as described above.