Privacy policy

Your trust is very important to us and the protection of your data is a matter of trust. We respect your/ private information and privacy. Therefore we observe the legal regulations when processing your personal data. Responsible authority

Responsible Body
The responsible body within the meaning of the data protection laws is:

Grondmet GmbH
Luegallee 79
D-40545 Düsseldorf
Phone: +49 (0)211 57725-0
Mail: info@grondmet.com

Data protection officer: Steven Gassmann

The provider is responsible in terms of the Data Protection Basic Regulation and other national data protection laws of the member states as well as other data protection regulations. With the following declaration we inform you about the type, scope and purposes of the collection, processing and use of your data in connection with the visit of the website and a possible further use of the contents and services.

Summary

The provider stores and processes your personal data (hereinafter collectively referred to as processing) in compliance with the relevant data protection regulations, in particular the Basic Data Protection Regulation (DSGVO), the Federal Data Protection Act (BDSG) and the Telemedia Act (TMG).

If you call up the provider's website, the provider processes certain usage data to enable you to use his offer. The provider processes further data if you inform him of this or if you give your consent to do so. You will find more detailed information below.

I. General information on data processing

1. Definitions
a. Personal data

Personal data shall mean any information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, a location data, an on-line identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

b. Stock data

Inventory data are personal data of a user, which are necessary for the establishment, content design or modification of a contractual relationship between the service provider and the user regarding the use of telemedia.

c. Usage data

Usage data are personal data of a user, which are necessary to enable and invoice the use of telemedia. This includes, in particular, features for identifying the user, information about the beginning and end as well as the scope of the respective use and information about the telemedia used by the user.

d. Processing

Processing is any operation or set of operations, performed with or without the aid of automated means, which is performed upon personal data, such as collection, recording, organisation, organisation, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

e. Pseudonymisation

Pseudonymisation is the processing of personal data in such a way that the personal data cannot be attributed to a specific data subject without the inclusion of additional information, provided that this additional information is kept separately and is subject to technical and organisational measures which ensure that the personal data is not attributed to an identified or identifiable natural person;

f. Cookies

Cookies are small text files that are stored on your computer. Cookies always have a period of validity, which can be limited to the end of the user session (so- called session cookies) or can exist for a longer period of time (so-called permanent cookies). These permanent cookies remain on your computer and enable the provider or its partner companies (so-called third party cookies) to recognize your computer on your next visit. You can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or reject them in certain cases or generally. If cookies are not accepted, the functionality of the website may be limited.

g. Website

A website, also known as a web presence, is the presence of a private or business provider of telemedia in the

2. the existence of appropriate guarantees
a. Pseudonymisation

As far as the provider collects usage data, he always stores them under pseudonyms (in the case of cookies, e.g. via a unique session key). The provider does not combine pseudonymous data with the data about the bearer of the pseudonym (such as inventory data).

b. Use of encryption technologies

When transferring data between your computer or mobile device and the provider's server, the provider uses the SSL (Secure Socket Layer) security system. This technology is intended to protect your data from being read by unauthorised third parties and offers a very high standard of security. You can recognize that your data is transmitted in encrypted form by the closed display of a key or lock symbol in the lower status bar of your browser.

c. Principles for the determination of storage periods

If you enter data into the contact, order or registration forms of the provider, the provider processes these data exclusively for the purposes stated in each case. All processed personal data will be deleted by the provider after expiry of the storage period.

d. Principle of data minimization

The provider observes the principle of data minimization. This means that data is processed only to the extent necessary for the purposes of the processing, as is appropriate and necessary for the provision of a functional website and in relation to the content and services offered. Processing is carried out either on the basis of prior consent or if permitted by legal regulations.

II. Processing

1. processing operations in the case of the use of forms

(Newsletter registration, download of documents and contents, contact form)

Within the framework of customer relationship management, the provider provides various contact forms, which you can use to receive documents from the provider in a one-time subscription or the newsletter on a permanent basis and to inform yourself about further services of the provider.

Data collection (inventory data) - title, first name and surname - company or business
- Address of the company
- Job function
- email address
- Phone number
- Information about the company, such as company size, industry information, organizational structures and needs

The legal basis for the processing of data is Art. 6 para. 1 lit. a DSGVO, if you have given your consent to the provider, and furthermore Art. 6 para. 1 lit. f DSGVO. If the purpose of the contact is to initiate a contract, Art. 6 para. 1 lit. b DSGVO is also a legal basis for data processing.

Any data provided by you will be deleted immediately after your request has been processed, or in the event that it has not been processed, at the latest 12 months after the last contact. The inquiry is deemed to have been completed when it is clear from the circumstances that the matter in question has been conclusively clarified. However, the provider will not delete your data if in the meantime another reason for processing your data (e.g. the fulfilment of a contract) arises.

You have the possibility at any time to revoke your consent to the processing of your personal data or to object to data processing which is not based on consent. The exercise of the revocation or objection can be made in particular by e-mail to the above- mentioned contact e-mail address. In this case, all personal data that the provider has stored in the course of your contact will be deleted.

Your right of revocation does not generally refer to such data which the provider requires in the context of the fulfilment of a contract or of pre-contractual measures. However, you may be entitled to further rights.

2. Processing in case of sending e-mails
You can contact the provider using the e-mail addresses provided on the website. The provider processes the data you provide to answer your contact request.

Data collection (inventory data) - first and last name

- Company
- Street
- POSTCODE
- Place
- Country
- Phone - Fax - E-mail
- Web

In the case of sending an e-mail, only the above- mentioned inventory data will be processed if you inform the provider of this. The legal basis for the processing of the data is Art. 6 para. 1 lit. a DSGVO, if you have given your consent to the provider, and furthermore Art. 6 para. 1 lit. f DSGVO. If the purpose of the contact is to initiate a contract, Art. 6 para. 1 lit. b DSGVO is also a legal basis for data processing.

You have the possibility at any time to revoke your consent to the processing of your personal data or to object to data processing which is not based on consent. The exercise of the revocation or objection can be made in particular by e-mail to the contact e- mail address given above. In this case, all personal data that the provider has stored in the course of your contact will be deleted.

3. Processing of log data

When accessing the website of the provider or telemedia used by the provider (described below), your Internet browser automatically transmits certain data to the server of the provider or to the third parties named below for technical reasons. The following data is collected separately from other data that you may transmit to the provider, either by the provider or by the third parties and used for the aforementioned purposes:

Data collection (usage data)
- Name of the website or url you are visiting
- Date and time of the retrieval,
- Access status / Http status code,
- amount of data transferred in each case,
- Web page through which the request comes,
- Browser software and software version
- Operating system and version,
- IP address (anonymised, shortened by the last 3 digits),

- randomly generated key number of the cookie or session. The legal basis for the storage of data and log files is Art. 6 para. 1 lit. f DSGVO.

If the data is stored in log files, the usage data is deleted after 7 days at the latest. Storage beyond this period is possible in accordance with data protection law permits. In this case, the IP addresses are deleted or alienated, so that it is no longer possible to assign the Internet page retrieval to your computer.

The collection of data for the provision of the website and the storage of the data in log files is mandatory for the operation of the website. There is therefore no possibility of objection on the part of the user.