Privacy Policy
1. Data Protection at a Glance
Data Collection on Our Website
GRANNEX GmbH & Co. KG (hereinafter “GRANNEX”) takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations as well as this privacy policy.
When you use this website, various types of personal data are collected. Personal data is any information relating to an identified or identifiable natural person. This includes, among other things, information such as civil name, address, telephone number, and date of birth. This privacy policy explains what data we collect, how we use it, and for what purpose.
We would like to point out that data transmission over the internet (e.g. communication by email) may have security gaps. Complete protection of data against access by third parties is not possible.
Who Is Responsible for Data Collection on This Website?
Data processing on this website is carried out by GRANNEX. Our contact details can be found in the website’s legal notice (imprint).
Which Data Do We Collect?
We collect, store, and process only data provided by users in the course of their submissions for the purpose of handling inquiries and, where applicable, processing orders or contracts. Depending on the purpose of data collection, this may include title, name, address, email address, telephone number, fax number, or IP address.
How Do We Collect Your Data?
Your data is collected, on the one hand, when you provide it to us—for example, by entering data into a contact form. Other data is collected automatically by our IT systems when you visit our website. This primarily concerns technical data (e.g. internet browser, operating system, or time of page access). This data is collected automatically as soon as you access our website.
What Do We Use Your Data For?
Some of the data is collected to ensure proper provision of the website. Other data may be used to analyze user behavior.
What Rights Do You Have Regarding Your Data?
You have the right at any time to obtain free information about the origin, recipient, and purpose of your stored personal data. In particular, you have the right to receive data that we process automatically on the basis of your consent or in fulfillment of a contract, in a commonly used, machine-readable format, either for yourself or for a third party (right to data portability). If you request the direct transfer of data to another data controller, this will be done only insofar as it is technically feasible.
You also have the right to request the correction, blocking, or deletion of this data. For this and for further questions regarding data protection, you can contact us at any time using the address provided in the legal notice. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.
Analysis Tools and Third-Party Tools
When visiting our website, your browsing behavior may be statistically evaluated. This is done primarily using cookies and analysis programs. The analysis of your browsing behavior is generally anonymous and cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. Detailed information and options to object are provided below.
2. General Information and Mandatory Disclosures
Information on the Data Controller
The data controller responsible for data processing on this website is:
GRANNEX GmbH & Co. KG
Dornierstraße 11
49090 Osnabrück
Germany
Phone: +49 (0) 541-77040-0
Email: datenschutz@grannex.de
Managing Directors authorized to represent the company:
Markus Börger, Hendrik Scheuschner, Shannon Hellmann
The data controller is the natural or legal person who alone or jointly decides on the purposes and means of processing personal data (e.g. names, email addresses, etc.).
Contract Processing
Upon full completion of the contract, user data will be blocked for further use and deleted after the expiry of statutory retention periods under tax and commercial law, unless the user has explicitly consented to further use of their data.
Withdrawal of Consent to Data Processing
Many data processing operations are only possible with your explicit consent. You may revoke your consent to the storage and use of your data at any time with effect for the future. An informal email to datenschutz@grannex.de is sufficient. The legality of data processing carried out prior to the revocation remains unaffected.
Email Advertising Without Newsletter Subscription and Right to Object
If we receive your email address in connection with the sale of a product or service and you have not objected, we reserve the right, pursuant to Section 7 (3) UWG, to send you regular offers for similar products from our range by email. This serves to safeguard our legitimate interests in advertising our products. You may object to this use of your email address at any time by sending a message to datenschutz@grannex.de or via a link provided in the promotional email, without incurring any costs other than the transmission costs at basic rates.
SSL or TLS Encryption
This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries sent to us. You can recognize an encrypted connection by the change in the browser address line from “http://” to “https://” and the lock symbol in the browser bar. If SSL or TLS encryption is enabled, data transmitted to us cannot be read by third parties.
Encrypted Payment Transactions
If you are required to provide payment data (e.g. bank account number) after concluding a paid contract, this data is required for payment processing.
Payment transactions via common payment methods (Visa/MasterCard, direct debit) are carried out exclusively via an encrypted SSL or TLS connection. In the case of encrypted communication, your payment data cannot be read by third parties.
Anonymous / Pseudonymized Use of the Website
This website can be visited without providing personal data. No pseudonymous usage profiles are created. In particular, there is no link between pseudonymized usage data and personal data.
Statistical Evaluation of Website Visits
When accessing this website or individual files, we process and store the following data: website from which the file was accessed, file name, date and time of access, amount of data transmitted, and confirmation of successful access (web log). These access data are used exclusively in non-personalized form for statistical purposes and to improve our website.
Objection to Promotional Emails
We hereby object to the use of contact data published as part of the legal notice obligation for sending unsolicited advertising and informational materials. The website operators expressly reserve the right to take legal action in the event of unsolicited advertising, such as spam emails.
3. Data Protection Officer
Appointment of a Data Protection Officer
We have appointed a data protection officer for our company. For inquiries regarding data protection, please contact our data protection officer at:
datenschutzbeauftragter@grannex.de
4. Data Collection on Our Website
Cookies
Our website uses cookies. Cookies are small text files stored on your device by your browser. Most cookies we use are so-called “session cookies” which are automatically deleted after your visit. Other cookies remain stored on your device until you delete them. These cookies allow us to recognize your browser on your next visit.
You can configure your browser to inform you about the use of cookies, allow cookies only in individual cases, exclude the acceptance of cookies in general, or automatically delete cookies when closing the browser. Disabling cookies may limit the functionality of this website.
Cookies required for electronic communication or for providing certain functions (e.g. shopping cart) are stored on the basis of Art. 6 para. 1 lit. f GDPR. Other cookies (e.g. for analysis purposes) are covered separately in this privacy policy.
Contact Form
If you send us inquiries via the contact form, your details including contact data will be stored for the purpose of processing your inquiry and for follow-up questions. These data will not be shared without your consent.
Processing is based on your consent (Art. 6 para. 1 lit. a GDPR). You may revoke your consent at any time by email. The legality of data processing prior to revocation remains unaffected.
Registration on This Website
You may register on our website to use additional functions. Data entered during registration is used exclusively for the purpose of using the respective service. Mandatory fields must be completed.
Registered users will be informed by email of important changes. Processing is based on consent (Art. 6 para. 1 lit. a GDPR). You may revoke your consent at any time.
5. Analytics Tools and Advertising
Web Analytics Using Google Analytics
1. Scope of the Processing of Personal Data
We use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies (see section above on cookies) that enable an analysis of your use of our website. The information generated by the cookies regarding your use of this website (including your IP address) is usually transmitted to a Google server in the USA and stored there.
By activating IP anonymization (Google Analytics has been extended on this website by the code “gat._anonymizeIp();”), Google truncates users’ IP addresses within Member States of the European Union or other Contracting States to the Agreement on the European Economic Area before transmission. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there.
For cases in which personal data is transferred to the USA, Google has committed itself to the EU‑US Privacy Shield.
On our behalf, Google uses this information to analyze your use of the website, to compile reports on website activity, and to provide other services related to website and internet usage. We use Google Analytics in conjunction with Google Optimize, which enables us to carry out A/B tests on our homepage. This allows us to present different versions of the homepage (e.g. with different layouts) to users and compare usage data. The data is aggregated with Google Analytics insights.
Google may transfer this information to third parties where required by law or where such third parties process the data on Google’s behalf. The IP address transmitted by your browser within the scope of Google Analytics will not be merged with other Google data.
2. Legal Basis for Processing
The legal basis for the use of Google Analytics is Art. 6 para. 1 sentence 1 lit. f GDPR.
3. Purpose of Processing
The processing of users’ personal data enables us to analyze their browsing behavior. Evaluating the compiled data allows us to improve our website and user experience continuously and to test and compare new or changed features. These purposes also constitute our legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR. IP anonymization sufficiently considers users’ interest in protecting their personal data.
4. Duration of Storage
The data is deleted as soon as it is no longer required for our recording purposes.
5. Right to Object and Removal
You can prevent cookies from being stored by adjusting your browser settings. In this case, you may not be able to use all website functions fully. You can also prevent Google from collecting and processing data generated by cookies and related to your website use (including your IP address) by downloading and installing the browser plugin available at the following link:
https://tools.google.com/dlpage/gaoptout
Google Analytics Remarketing
Our websites use Google Analytics Remarketing in combination with cross‑device features of Google Ads and Google DoubleClick. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
This function allows advertising target groups created with Google Analytics Remarketing to be linked with the cross‑device functions of Google Ads and Google DoubleClick. As a result, personalized, interest‑based advertisements adapted to your previous usage behavior on one device can also be displayed on other devices.
If you have given corresponding consent, Google links your web and app browsing history to your Google account. This enables identical personalized advertising messages to be displayed on all devices on which you are logged into your Google account.
To support this function, Google Analytics collects Google‑authenticated IDs that are temporarily linked with our Google Analytics data to define and create cross‑device advertising target groups.
You can permanently object to cross‑device remarketing/targeting by disabling personalized advertising in your Google account.
The aggregation of collected data in your Google account is carried out exclusively based on your consent (Art. 6 para. 1 lit. a GDPR). For data collection processes not merged with your Google account, processing is based on Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in anonymized analysis of website visitors for advertising purposes.
Further information and Google’s privacy policy can be found at:
https://www.google.com/policies/technologies/ads/
Google Ads and Google Conversion Tracking
This website uses Google Ads, an online advertising program of Google Inc.
As part of Google Ads, we use conversion tracking. When you click on a Google ad, a conversion tracking cookie is set. These cookies are small text files stored on your device and expire after 30 days. They are not used for personal identification.
If a user visits certain pages on this website while the cookie is still valid, Google and we can recognize that the user clicked on the ad and was redirected to that page.
Each Google Ads customer receives a different cookie. These cookies cannot be tracked across Google Ads customers’ websites. The information collected via conversion cookies is used to compile conversion statistics for customers who have opted in. Customers learn the total number of users who clicked on their ad and were redirected to a conversion‑tracking page. They do not receive information that personally identifies users.
You can object to tracking by disabling the cookie via browser settings. You will then not be included in conversion tracking statistics.
The storage of conversion cookies is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize its website and advertising.
Further information on Google Ads and conversion tracking can be found at:
https://www.google.de/policies/privacy/
6. Payment Service Providers
PayPal
We offer payment via PayPal on our website. The provider of this service is PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L‑2449 Luxembourg (“PayPal”).
If you choose PayPal as the payment method, the payment data you provide will be transmitted to PayPal. Transmission is based on Art. 6 para. 1 lit. a GDPR (consent) and Art. 6 para. 1 lit. b GDPR (performance of contract). You may revoke your consent at any time. Revocation does not affect the legality of processing carried out in the past.
7. Special Functions of This Website
Consent Management Technology
This website uses consent technology to obtain and document your consent for the storage of cookies or the use of certain technologies in compliance with data protection regulations. The provider is CookieYes Limited, 3 Warren Yard, Warren Park, Wolverton Mill, Milton Keynes, MK12 5NW, United Kingdom, email: support@cookieyes.com.
When entering our website, a connection to the consent manager’s servers is established to record consents. A cookie is stored in your browser to associate given or revoked consent. Data is stored until deletion is requested, the cookie is deleted by the user, or the purpose ceases. Mandatory legal retention periods remain unaffected.
Legal basis is Art. 6 para. 1 lit. c GDPR.
Consent to the Use of JOIN Solutions AG
Based on a data processing agreement pursuant to Art. 28 GDPR, we use JOIN Solutions AG, Landsgemeindeplatz 6, 9043 Trogen, Switzerland (“join.com”) for certain steps in the recruitment process. Join.com processes and deletes applicant data after completion unless further processing consent is given. Data transfer security is ensured through an EU adequacy decision for Switzerland pursuant to Art. 45 GDPR.
8. Processing of Applicant Data
Purpose and Legal Basis
We process applicants’ personal data for recruitment purposes where necessary to decide on establishing an employment relationship. Legal basis: § 26 para. 1 in conjunction with para. 8 sentence 2 BDSG.
We may also process applicant data to defend legal claims arising from the application process. Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest, e.g. evidence under the General Equal Treatment Act).
If an employment contract is concluded, applicant data may be further processed pursuant to § 26 para. 1 BDSG for employment purposes.
Categories of Personal Data
We process data related to your application, such as name, address, contact details, qualifications, education, professional training, or publicly available professional profiles (e.g. LinkedIn, Xing).
Data Sharing
Personal data may be shared within affiliated companies where permitted. Data processing also occurs via processors under Art. 28 GDPR (e.g. hosting or applicant management systems).
Retention Period
Applicant data is stored as long as necessary for the application decision. If no employment relationship is established, data may be retained to defend legal claims.
Requirement to Provide Data
Providing personal data is neither legally nor contractually required. However, without such data, we cannot establish an employment relationship.
9. Changes to This Privacy Policy
Legal requirements, business decisions, or technical developments may require updates to this privacy policy. The most current version is always available on our website.
Last updated: 6 December 2023
Contact
GRANNEX GmbH & Co. KG
Dornierstraße 11
D-49090 Osnabrück
Tel.: 0541-77040-0
Fax: 0541-77040-78