Data Protection Declaration

4. Individual Services

We use the specified services either based on our legitimate interest under point (f) of Art. 6(1) GDPR, based on your consent under point (a) of Article 6(1) GDPR or based on a contractual relationship existing with you under point (b) of Article 6(1) GDPR. On the one hand, measures implemented based on point (f) of Article 6(1) GDPR are intended to ensure a needs-based design and the continuous optimisation of our website. On the other hand, we use the measures to statistically capture the use of our website and to evaluate its use to optimise our offering for you. These interests are to be considered legitimate in the sense of the aforementioned regulation.

For information on the respective data processing purposes and data categories, please refer to the relevant tools.

4.1 Google marketing services

This website uses the marketing and remarketing services (in short “Google marketing services”) of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

The Google marketing services allow us to display ads for and on our website in a more targeted manner to present only ads to users which potentially correspond to their interests. In the case of users being displayed advertisements of products for which they showed interest on other websites, this is referred to as “remarketing”. For this purpose, a Google code is executed directly by Google when our and other websites, on which Google marketing services are active, are accessed and so-called (re)marketing tags (invisible graphics or code, also referred to as “web beacons”) are embedded into the website.

The set cookies note

• what websites the user visits,
• in what contents the user is interested and
• what offers the user clicked on, as well as
• technical information about the browser and the operating system,
• referring websites,
• visiting time and
• further information on the use of the online offering.

In addition, the user’s IP address is captured. In this regard, we inform you within the scope of Google Analytics that the IP address is abbreviated in EU member states or other contracting states to the Agreement on the European Economic Area and is transmitted as a whole to a Google server in the USA and abbreviated there only in exceptional cases. The IP address is not amalgamated with data of the user within other Google offerings. The information indicated above can also be connected to such information from other sources. If the user visits other websites afterwards, advertisement matching the user’s interests may be displayed.

4.2 Google Analytics

This website uses Google Analytics, a web analysis service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter “Google”). Google Analytics uses marketing cookies, which allow for an analysis of your use of the website. The information regarding your use of this website which is generated by the cookie is generally transferred to a server of Google in the USA and retained there. We enabled the IP anonymisation on this website so that your IP address will first be shortened by Google within the member states of the European Union or in other contracting states to the Agreement on the European Economic Area.

Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to analyse your use of the website, to compile reports about the website activities and to provide further services relating to the use of the website use and the Internet to the website operator. The IP address transferred by your browser in connection with Google Analytics will not be amalgamated with other Google data.

You may prevent the installation of the cookies by changing the settings of the browser software accordingly; however, we would like to draw your attention to the fact that, in this case, it might not be possible to use all functions of this website to the fullest extent.
In addition, you may prevent the collection of the data created by the cookie and related to your use of the website (incl. your IP address) as well as the processing of such data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=en-GB.

4.3 Google Tag Manager

This website uses Google Tag Manager of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter “Google”). Google Tag Manager allows to manage website tags via an interface. The Tag Manager tool itself (which implements the tags) is a cookie-free domain and does not capture personal data. The tool triggers the implementation of other tags that may collect data on their part. Google Tag Manager does not access such data. In case of any deactivation on domain or cookie level, it remains in effect for all tracking tags that were implemented using Google Tag Manager.

​​​​​​​4.4 Google Ads

This website uses Google Ads (formerly “Google AdWords”), a service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter “Google”). When you click on an advertisement placed by Google, a tracking cookie will be placed on your computer for conversion tracking. These cookies have a limited term of validity and contain no personal data, which means they do not serve personal identification. If you visit specific sites of our website and the cookie has not expired yet, Google and we can see that you had clicked on the ad and had then been forwarded to this site. Every Google Ads customer receives a different cookie. It is therefore impossible to track cookies via the websites of Ads customers.

The information obtained by means of the conversion cookies serves to compile conversion statistics. In doing so, we receive data on the total number of users who have clicked on one of our ads and have been forwarded to a site equipped with a conversion tracking tag. We do not, however, receive any information which can be used to identify users personally.

You may also disable advertising personalised for you in the settings for advertising on Google by setting your browser in such a way that cookies from the “www.googleadservices.com” domain will be blocked. Instructions for this can be found at https://support.google.com/ads/answer/2662922?hl=en-GB. Further information and the Google Privacy Policy can be found at: https://policies.google.com/privacy?gl=de&hl=en-GB.

​​​​​​​4.5 DoubleClick

This website uses “DoubleClick”, an online marketing tool of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter “Google”). DoubleClick uses cookies to present advertisements relevant to you. In doing so, a pseudonymised identification number (ID) is assigned to your browser to verify what ads were displayed in your browser and what ads were accessed. The cookies do not contain personal information.

Using DoubleClick cookies enables Google and its partner websites only to place ads based on previous visits to our or other websites on the Internet. The information generated by the cookies is transferred by Google to a server in the US and retained there for evaluation purposes. Google transfers the data to third parties only under legal regulations or as part of order data processing. Google will not amalgamate your data with other data captured by Google in any case. By using our websites, you agree to the processing of the data collected about you by Google and to the manner of data processing described above as well as to the purpose specified.

We use DoubleClick for marketing and optimisation purposes. Herein also lies our legitimate interest in the processing of the aforementioned data. The legal basis is point (f) of Article 6(1) GDPR.

You may prevent both the capture of the data generated by the cookies and related to your use of the websites and the processing of such data by Google by downloading and installing the browser plug-in available at the link (https://www.google.com/settings/ads/onweb/) under ‘DoubleClick deactivation extension’.

​​​​​​​4.6 Google Maps

This website uses the Google Maps service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter “Google”), via an API. In this context, it is necessary to retain your IP address. The information obtained in this way is usually transmitted to a Google server in the USA and retained there. We do not have any influence on such data transmission. Due to our legitimate interest in displaying our online offering appealingly and in ensuring that the locations indicated by us on the website can be found easily, the legal basis follows from point (f) of Article 6(1) GDPR. Further information on data protection can be found on the Internet at: https://policies.google.com/privacy?hl=en-GB.

​​​​​​​4.7 Google Web Fonts

This website uses Google Web Fonts of Google (Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) for the uniform display of fonts. When you access a site, your browser thus loads the required web fonts into your browser cache accurately display text and fonts. At the same time, your browser contacts the servers of Google, informing Google that our website was accessed via your IP address. Due to our legitimate interest in displaying our online offering uniformly and appealingly and in ensuring that the locations indicated by us on the website can be found easily, the legal basis follows from point (f) of Article 6(1) GDPR.

Further information on data protection can be found on the Internet at: https://policies.google.com/privacy?hl=en-GB and at https://developers.google.com/fonts/faq.

​​​​​​​​​​​​​​4.8 YouTube

This website uses YouTube, a web video portal of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter “Google”). YouTube enables video publishers to upload video clips free of charge and other users to watch, evaluate and comment such video clips at no charge. YouTube allows the publication of all kinds of videos, which is why both full film and television programmes, but also music videos, teasers or videos produced by users themselves are retrievable via the web portal.

Every time one of the individual sites of this website is accessed, which is operated by the controller responsible for processing and into which a YouTube component (YouTube video) was integrated, the respective YouTube component automatically prompts the web browser on the data subject’s IT system to download a presentation of the corresponding YouTube component from YouTube. Further information on YouTube can be retrieved at www.youtube.com/intl/en-gb/about/. Within this technical process, YouTube and Google are provided with information about the specific subpage the data subject visits on our website.

Where the data subject is logged into YouTube at the same time, the access of a subpage containing a YouTube video enables YouTube to see the specific subpage the data subject visits on our website. This information is collected by YouTube and Google and assigned to the respective YouTube account of the data subject.

YouTube and Google are informed by the YouTube component about the data subject’s visit to our website every time the data subject is logged into YouTube while retrieving our website, regardless of whether or not the data subject clicks on a YouTube video. If the data subject does not want such information to be transferred to YouTube and Google in this way, the data subject may prevent the transfer by logging out of his or her YouTube account before accessing our website.

The data protection provisions published by YouTube are retrievable at https://policies.google.com/privacy?hl=en-GB and provide insight into the collection, processing and use of personal data by YouTube and Google.

​​​​​​​​​​​​​​4.9 Contact form and e-mail contact

If you send us enquiries using the contact form or by e-mail, we retain your data from the enquiry form including the contact data specified there by you or from your e-mail for processing the enquiry and in case follow-up questions arise. We will not pass such data on to others without your consent.

The data entered into the contact form is thus exclusively processed based on your consent (point (f) of Article 6(1) GDPR). You may withdraw such consent at any time.. To do so, sending us an informal message by e-mail is sufficient. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

The data entered into the contact form by you remains with us until you request its erasure, withdraw your consent to its retention or the purpose for the data retention no longer applies (e.g., when your enquiry has been dealt with). Imperative legal provisions, in particular retention periods, remain unaffected.

​​​​​​​4.10 Applications

Our web presence offers you the possibility to submit applications for vacancies at Grenzebach by e-mail or via our application portal.

We process your personal data based on Art. 88 GDPR i. c. w. section 26(1), (8) s. 2 BDSG to implement the application procedure as well as to handle the employment relationship in case of its realisation.

Your personal data is added to our applicant pool only with your consent under point (a) of Article 6(1) GDPR. Furthermore, we may process personal data concerning you to the extent that this is necessary to ward off legal claims asserted against us from the application procedure. The legal basis in this case is point (f) of Article 6(1) GDPR, with our legitimate interest being, for example, the burden of proof in the procedure under the German General Equal Treatment Act (AGG).

Personal data is retained for the aforementioned purposes as long as this is necessary to fulfil these purposes. To ward off legal claims asserted against us from the application procedure, your personal data is retained for a maximum period of 6 months. To add your application documents to the applicant pool, your personal data is retained for a maximum period of 12 months.

You may withdraw towards us your consent given to the addition of your application documents to the applicant pool without stating reasons at any time with effect for the future. Having received the withdrawal, we will no longer retain the personal data in the applicant pool and will erase it. The withdrawal is to be addressed to: Grenzebach Maschinenbau GmbH, Albanusstr. 1, 86663 Asbach-Bäumenheim, Hamlar, career@grenzebach.com.

Your data will be neither used for any automated decision-making or for any profiling nor disseminated to third parties on our part.

4.10.1 Applications by e-mail

In case of any application by e-mail, we collect data associated with your application. This may be general data on your person (e.g. first name, surname, address, phone number, e-mail address), information on your school and vocational education as well as on advanced vocational training or other information transmitted by you to us in connection with your application.

Please note that e-mails are principally not dispatched in encrypted form on the Internet. As a rule, e-mails are encrypted in transit, but not on the servers from and by which they are send out and received. We may thus not assume any responsibility for the transmission path of the application between the sender and its receipt on our server. Applicants are welcome to contact us on how to submit the application or to send us the application by mail.

4.10.2 Application via applicant portal

In case of any application via our applicant portal, we collect master data on your person and further framework data as well as data on your school and vocational education. Furthermore, you have the possibility to complement your application by further appendices you can upload into our applicant portal. All data you provide to us within the applicant portal is transferred to us via a secure, i.e. encrypted, connection.

Before sending out your application, you consent that we may use your data as part of the application procedure. You may withdraw such consent at any time without giving reasons. To do so, addressing an informal e-mail to the competent HR department (career@grenzebach.com) is sufficient.

4.11 Newsletter

You can subscribe to our newsletter on the website under the heading "Newsletter" or through further channels. 

The newsletter provides you with 

• up-to-date information on Grenzebach services and products 
• details of and invitations to selected events (e.g. trade fairs, customer events, training courses) organized by Grenzebach, or at which Grenzebach takes part 
• invitations to market research or customer surveys as well as 
• invitations to webinars. 

We only process your data to send you newsletters if you have given us your consent. Your consent to the processing of your personal data regards in particular: 

• E-mail address 
• Surname, first name, 
• Title, salutation 
• Selection of newsletter language 
• Selection of your picked interests 

To confirm your registration and consent, we use the double opt-in process. To document and proof your consent we will record your confirmation. 

Your consent serves the purpose of processing your personal data to send the newsletter and to adapt it to your requirements. In order to continuously improve our newsletter service and to be able to provide content which best suits your personal interests, we will evaluate your use of the newsletter in statistical and individual form (e.g. opening and click rates). This means, for example, that we will try to understand which information is of particular interest to you based on the content you click on in our newsletters. 

The revocation of your consent is possible at any time for the future. If you wish to revoke the consent you have given for the newsletter, you can easily do so via the "unsubscribe" link you can find in every newsletter or via any of the contact options provided here. 

The Grenzebach Group reserves the right to stop sending newsletters at any time. 

4.12 Microsoft Dynamics 365

We use cookies or tracking pixel from Microsoft Dynamics 365 on our website. Microsoft Dynamics 365 is provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Microsoft Dynamics sets the following cookies:

- Long-term behavioral-analysis cookie: This enables Dynamics 365 Marketing to score leads based on their level of interaction with a given website. The cookie contains no personal information but does uniquely identify a specific browser on a specific machine, and Dynamics 365 Marketing can use it to correlate this ID with an actual contact in the Dynamics 365 Marketing database.  The cookie remains active for two years.

Short-term, single-visit cookie: Dynamics 365 Marketing uses this cookie to group all page loads by a given visitor that are recorded by the same behavioural-analysis script and that occur within the configured timeframe.  It will consider all of these as part of a single "visit" to the website.

For more information about how Microsoft Dynamics 365 operates, please see Microsoft's privacy policy, available at: https://privacy.microsoft.com/de-de/privacystatement.

5. Processing of business partner data

Grenzebach concludes various contracts (e.g. contracts with customers, suppliers, system partners, service agencies, repair processing and other business partners), in order to meet their economic purposes. The data collection as well as the data processing are used for the establishment, execution and termination of the contractual relationship. If necessary, the data are processed within the scope of fullfilment of the legal obligations of the state import and export control. The priority legal basis for this are Article 6, par. 1b and c) GDPR. As far as required we process your data based on Art. 6 par. 1 f) GDPR, in order to respect the interest of Grenzebach or third parties (e.g. authorities). This particularly applies in the company for the purpose of Inter-company control, the internal communication and other management purposes, but also for the respect of internal and world-wide compliance standards. Besides, the processing of personal data can be based on your consent as per Article 6, par. 1a) GDPR.

5.1 Which data categories are used by Grenzebach

The categories of personal data processed include especially your contact data (name of the company, address, first and last name of a contact person, mobile number, e-mail address of the corresponding partner, function and department of the contact partners), as well as the bank details depending on the purpose as well as the required VAT ID number. Should you request the shipping of spare parts to another location, you can inform us about the additional contact data, which we will then also collect and process for this purpose.

We should like to inform you that within the scope of the respective contractual relationship you will have to provide those personal and company data, which are needed for the establishment, the execution and the termination of the contractual relationship or the performance promise and their respective fulfilment or the collection of which we are legally obliged.

5.2 How long will your data be retained

We will erase your personal data as soon as they are no longer needed for the above-mentioned purposes or when you have made use of your right of objection. At the end of the contractual relationship, your personal data will be retained, as long as we are legally obliged to retain them. This is regularly the result to legal proof and obligations to retention, which are regulated, among other things, in the German Commercial Code (HGB) and the German Fiscal Code (AO). The retention periods after this time amount to up to ten years. Besides it can happen, that personal data are stored for the future, in which demands can be asserted to us.

6. Your rights

Of course, you retain control over any and all personal data you provide to us when visiting our website and using our services. You have the following rights and may exercise them free of charge:

​​​​​​​6.1 Right of access

You have the right to obtain access at any time to your personal data retained with us.

​​​​​​​​​​​​​​6.2 Right to withdraw given consents

You have the right to withdraw a consent once given to the processing of personal data at any time with effect for the future. In the case of withdrawal, we will erase the relevant data without delay where any further processing cannot be based on a legal basis for processing. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

​​​​​​​​​​​​​​6.3 Right to object

Where we process your personal data based on our outweighing legitimate interest in the context of balancing interests, you have the right to object, on grounds relating to your particular situation, at any time to such processing with effect for the future.

If you exercise your right to objection, we will cease processing the relevant data. Further processing remains reserved, however, if we have proof of compelling legitimate grounds for the processing which prevail over your interests, fundamental rights and freedoms or where the processing serves the establishment, exercise or defence of legal claims.

If your personal data is processed by us for the purposes of direct marketing, you have the right to object to the processing of personal data concerning you for the purposes of such kind of marketing at any time.

​​​​​​​6.4 Right to data portability

You have the right to request that your personal data be transferred by us to a different entity.

​​​​​​​6.5 Right to rectification, erasure or restriction of processing

You have the right to have your personal data be rectified, erased or its processing be restricted.

​​​​​​​6.6 Right to lodge a complaint

You have the right to lodge a complaint with a supervisory authority or our company to the extent that you have a reason for objection. To exercise rights towards our company, please approach the contact persons specified at the end of this Privacy Policy.

7. Duration of retention

The criterion for the duration of retention of personal data is the respective legal retention period. After expiry of the period, the corresponding data will be routinely erased, unless it is still required to achieve the necessary purposes.

8. Automated decision-making

There will be no automated decision-making based on the collected personal data.

9. Data security

We use the common SSL (Secure Socket Layer) procedure in combination with the respective highest degree of encryption that is supported by your browser. You can see whether an individual site of web presence is transmitted in encrypted form by the ‘closed’ icon of the key or lock symbol in the lower status line of your browser.

Apart from the above, we use appropriate technical and organisational security measures to protect your data against accidental or deliberate manipulations, partial or complete loss, destruction or access by unauthorised third parties. Our security measures are subject to continuous improvement in line with technological developments.

You can prevent the functionality of Google Analytics by clicking onto the following link. An opt-out cookie is set, which prevent your data from being collected when visiting this website: Google Analytics Opt-out