Privacy Policy

This Pri­vacy Policy in­forms you about the type, scope and pur­pose of the pro­cessing of per­sonal data (here­in­after re­ferred to as "Data") within our on­line ser­vice and the web pages, func­tions and con­tent as­so­ci­ated with it as well as ex­ternal on­line pres­ences, such as our so­cial media pro­file. (here­in­after col­lect­ively re­ferred to as "On­line Ser­vice"). With re­gard to the terms used, such as "per­sonal data" or their "pro­cessing", we refer to the defin­i­tions in Art­icle 4 of the Gen­eral Data Pro­tec­tion Reg­u­la­tion (GDPR).

Con­trol­ler:

Gira Gi­er­siepen GmbH & Co. KG
Dah­li­en­str. 12
42477 Rade­vorm­wald
Co­logne Dis­trict Court, HRA 16352
Man­aging Dir­ector: Chris­tian Felt­gen, Dominik Marte, Se­bastian Marz
Tele­phone num­ber: 02195-​602-0
Email ad­dress: info@gira.com

Data pro­tec­tion of­ficer:

Dr. Gregor Scheja (Scheja & Part­ners GmbH & Co. KG)
Ad­e­nauer­allee 136
D-​53113 Bonn
Tele­phone num­ber: +49 228 2272260 Fax: +49 (0) 228-​227 226-​26
Email ad­dress: info@scheja-​partner.de

SSL-​secure con­tact: https://www.scheja-​partner.de/kon­takt/kon­takt.html Web­site: https://www.scheja-​partner.de/

Types of data pro­cessed:

• User-​related data
• Con­tact de­tails
• Con­tent data
• Con­tract data
• Pay­ment data
• Usage data
• Metadata / com­mu­nic­a­tion data

Pro­cessing of spe­cial cat­egor­ies of data (Art­icle 9(1) GDPR):

No spe­cial cat­egor­ies of data are pro­cessed.

Cat­egor­ies of data sub­jects:

• Cus­tom­ers / in­ter­ested parties / sup­pli­ers.
• Vis­it­ors and users of the On­line Ser­vice.

In the fol­low­ing we refer to the data sub­jects col­lect­ively also as "Users".

Pur­pose of pro­cessing:

• Pro­vi­sion of the On­line Ser­vice, its con­tents and func­tions.
• Pro­vi­sion of con­trac­tual per­form­ance, ser­vice and cus­tomer sup­port.
• Re­sponse to con­tact re­quests and com­mu­nic­a­tion with Users.
• Mar­ket­ing, ad­vert­ising and mar­ket re­search.
• Se­cur­ity meas­ures.

Last up­dated: 25/05/2018

1. Ap­plic­able legal bases

   In ac­cord­ance with Art­icle 13 GDPR, we in­form you of the legal bases of our data pro­cessing. If the legal basis is not men­tioned in the Pri­vacy Policy, the fol­low­ing ap­plies: The legal basis for ob­tain­ing con­sent is Art­icle 6(1)(a) and Art­icle 7 GDPR, the legal basis for the pro­cessing for the ful­fil­ment of our ser­vices and the ex­e­cu­tion of con­trac­tual meas­ures as well as re­spond­ing to en­quir­ies is Art­icle 6(1)(b) GDPR, the legal basis for pro­cessing to ful­fil our legal ob­lig­a­tions is Art­icle 6(1)(c) GDPR, and the legal basis for pro­cessing to pro­tect our le­git­im­ate in­terests is Art­icle 6(1)(f) GDPR. In the event that vital in­terests of the data sub­ject or an­other nat­ural per­son re­quire a pro­cessing of per­sonal data, Art­icle 6(1)(d) GDPR ap­plies as the legal basis.

2. Changes and up­dates to the Pri­vacy Policy

   We ask you to keep your­self reg­u­larly in­formed about the con­tents of our Pri­vacy Policy. We will adapt the Pri­vacy Policy as soon as changes in the data pro­cessing car­ried out by us make this ne­ces­sary. We will in­form you as soon as the changes re­quire your co­oper­a­tion (e.g. con­sent) or other in­di­vidual no­ti­fic­a­tion.

3. Se­cur­ity meas­ures

   We shall take ap­pro­pri­ate tech­nical and or­gan­isa­tional meas­ures to en­sure a level of se­cur­ity ap­pro­pri­ate to the risk, in ac­cord­ance with Art­icle 32 GDPR, tak­ing into ac­count the state of the art, the costs of im­ple­ment­a­tion and the nature, scope, con­text and pur­poses of pro­cessing as well as the risk of vary­ing like­li­hood and sever­ity for the rights and freedoms of nat­ural per­sons; the meas­ures shall in­clude in par­tic­u­lar safe­guard­ing the con­fid­en­ti­al­ity, in­teg­rity and avail­ab­il­ity of data by con­trolling phys­ical ac­cess to the data, as well as the ac­cess, input, trans­mis­sion, se­cur­ity of avail­ab­il­ity and its sep­ar­a­tion. Fur­ther­more, we have es­tab­lished pro­ced­ures that guar­an­tee the ex­er­cise of rights of the data sub­jects, de­le­tion of data and re­ac­tion to data risks. Fur­ther­more, we already con­sider the pro­tec­tion of per­sonal data dur­ing the de­vel­op­ment or se­lec­tion of hard­ware, soft­ware and pro­ced­ures, in ac­cord­ance with the prin­ciple of data pro­tec­tion by design and by de­fault (Art­icle 25 GDPR).

   The se­cur­ity meas­ures in­clude in par­tic­u­lar the en­cryp­ted trans­mis­sion of data between your browser and our server.

4. Co­oper­a­tion with pro­cessors and third parties

   1. If we dis­close data to other per­sons and com­pan­ies (pro­cessors or third parties) in the con­text of our pro­cessing, trans­mit it to them or oth­er­wise grant them ac­cess to the data, this is done only on the basis of legal per­mis­sion (e.g. if trans­fer of the data to third parties, such as pay­ment ser­vice pro­viders in ac­cord­ance with Art­icle 6(1)(b) GDPR, is re­quired for ful­fil­ment of the con­tract), where you have given your con­sent, a legal ob­lig­a­tion provides for this or on the basis of our le­git­im­ate in­terests (e.g. when using agents, web hosts, etc.).

   2. If we com­mis­sion third parties with the pro­cessing of data on the basis of a so-​called "order pro­cessing con­tract", this is done on the basis of Art­icle 28 GDPR.

5. Trans­fers to third coun­tries

   If we pro­cess data in a third coun­try (i.e. out­side the European Union (EU) or the European Eco­nomic Area (EEA)) or if this oc­curs in the con­text of the use of third-​party ser­vices or dis­clos­ure or trans­fer of data to third parties, this only takes place if it oc­curs for the ful­fil­ment of our (pre)con­trac­tual ob­lig­a­tions, on the basis of your con­sent, on the basis of a legal ob­lig­a­tion or on the basis of our le­git­im­ate in­terests. Sub­ject to legal or con­trac­tual per­mis­sions, we pro­cess or leave the data in a third coun­try only in the pres­ence of the spe­cial re­quire­ments of Art­icle 44 et seq. GDPR.

6. Rights of the data sub­jects

   1. You have the right to re­quest con­firm­a­tion as to whether the data con­cerned is being pro­cessed and to re­quest in­form­a­tion about this data as well as fur­ther in­form­a­tion and a copy of the data in ac­cord­ance with Art­icle 15 GDPR.

   2. Ac­cord­ing to Art­icle 16 GDPR, you have the right to re­quest the com­ple­tion of in­com­plete data con­cern­ing you or the rec­ti­fic­a­tion of in­ac­cur­ate data con­cern­ing you.

   3. In ac­cord­ance with Art­icle 17 GDPR, you have the right to de­mand that rel­ev­ant data be erased without undue delay or, al­tern­at­ively, to de­mand a re­stric­tion on the pro­cessing of the data in ac­cord­ance with Art­icle 18 GDPR.

   4. You have the right to re­quest to re­ceive the data con­cern­ing you that you have provided to us in ac­cord­ance with Art­icle 20 GDPR and to re­quest their trans­mis­sion to other con­trol­lers.

   5. Ac­cord­ing to Art­icle 77 GDPR you have the fur­ther right to lodge a com­plaint with the com­pet­ent su­per­vis­ory au­thor­ity.

7. Can­cel­la­tion right

   You have the right to re­voke your con­sent ac­cord­ing to Art­icle 7(3) GDPR with fu­ture ef­fect.

8. Ob­jec­tion right

   You can ob­ject to the fu­ture pro­cessing of the data con­cern­ing you in ac­cord­ance with Art­icle 21 GDPR at any time. The ob­jec­tion may be lodged in par­tic­u­lar against pro­cessing for dir­ect mar­ket­ing pur­poses.

9. Cook­ies and right of ob­jec­tion for dir­ect ad­vert­ising

   We use tem­por­ary and per­man­ent cook­ies, i.e. small files that are stored on the Users' devices. In part, cook­ies serve se­cur­ity pur­poses or are re­quired for the op­er­a­tion of our On­line Ser­vice (e.g. to view the web­site) or to save the User's de­cision when con­firm­ing the cookie ban­ner. In ad­di­tion, we or our tech­no­logy part­ners use cook­ies to meas­ure reach and for mar­ket­ing pur­poses, about which the Users will be in­formed in the course of the Pri­vacy Policy.

   A gen­eral ob­jec­tion to the use of cook­ies for on­line mar­ket­ing pur­poses can be de­clared for a large num­ber of ser­vices, es­pe­cially in the case of track­ing, via the US site http://www.aboutads.info/choices/ or the EU site http://www.your­on­linechoices.com/. Fur­ther­more, the stor­age of cook­ies can be achieved by de­ac­tiv­at­ing them in the browser set­tings. Please note that in this case it may not be pos­sible to use all func­tions of this On­line Ser­vice.

10. Eras­ure of data

    1. The data pro­cessed by us will be erased or their pro­cessing re­stric­ted in ac­cord­ance with Art­icles 17 and 18 GDPR. Un­less ex­pressly stated in this Pri­vacy Policy, the Data stored by us will be erased as soon as it is no longer re­quired for its in­ten­ded pur­pose and the eras­ure does not con­flict with any stat­utory stor­age ob­lig­a­tions. If the data is not de­leted be­cause it is ne­ces­sary for other and leg­ally per­miss­ible pur­poses, its pro­cessing is re­stric­ted. This means that the data is blocked and not pro­cessed for other pur­poses. This ap­plies, for ex­ample, to data that must be re­tained for com­mer­cial or tax reas­ons.

    2. In ac­cord­ance with legal re­quire­ments, data is stored spe­cific­ally for 6 years in ac­cord­ance with Sec­tion 257 para. 1 of the [Ger­man Com­mer­cial Code] (trad­ing books, in­vent­or­ies, open­ing bal­ance sheets, an­nual fin­an­cial state­ments, com­mer­cial let­ters, ac­count­ing doc­u­ments, etc.) and for 10 years ac­cord­ing to Sec­tion 147 para. 1 of the Ger­man Fiscal Code (books, re­cords, man­age­ment re­ports, ac­count­ing doc­u­ments, com­mer­cial and busi­ness let­ters, doc­u­ments rel­ev­ant for tax­a­tion, etc.).

11. Pro­vi­sion of con­trac­tual ser­vices

    1. We pro­cess user-​related data (e.g. names and ad­dresses as well as con­tact in­form­a­tion of Users), con­tract data (e.g. ser­vices which have been used, names of con­tact per­sons, pay­ment in­form­a­tion) for the pur­pose of the ful­fil­ment of our con­trac­tual ob­lig­a­tions and ser­vices in ac­cord­ance with Art­icle 6(1)(b) GDPR. The entries marked as man­dat­ory in on­line forms are re­quired for the con­clu­sion of the con­tract.

    2. Users can op­tion­ally cre­ate a user ac­count, par­tic­u­larly so that they can view their or­ders. Dur­ing the re­gis­tra­tion pro­cess, the re­quired in­form­a­tion will be com­mu­nic­ated to the Users. The user ac­counts are not pub­lic and can­not be in­dexed by search en­gines. If Users have ter­min­ated their user ac­count, their data with re­gard to the user ac­count will be erased, sub­ject to their re­ten­tion being re­quired for com­mer­cial or tax reas­ons, ac­cord­ing to Art­icle 6(1)(c) GDPR. It is up to the Users to save their Data be­fore the end of the con­tract if they have given no­tice of ter­min­a­tion. We are en­titled to ir­re­triev­ably erase all user data stored dur­ing the term of the con­tract.

    3. We store the IP ad­dress and the time of the re­spect­ive user ac­tion of those who re­gister, re-​register and use our on­line ser­vices. The data is stored on the basis of our le­git­im­ate in­terests as well as the User's pro­tec­tion against mis­use and other un­au­thor­ised use. In prin­ciple, this data is not passed on to third parties, un­less it is ne­ces­sary for the pur­suit of our claims or there is a legal ob­lig­a­tion in ac­cord­ance with Art­icle 6(1)(c) GDPR.

    4. We pro­cess usage data (e.g. the vis­ited web­sites of our On­line Ser­vice, in­terest in our products) and con­tent data (e.g. entries in the con­tact form or user pro­file) in ac­cord­ance with Art­icle 6(1)(f) GDPR in a user pro­file in order to show the User e.g. product in­form­a­tion based on their pre­vi­ously used ser­vices (dir­ect ad­vert­ising).

    5. Eras­ure takes place after the ex­pir­a­tion of stat­utory war­ranty and com­par­able ob­lig­a­tions, the ne­ces­sity of the stor­age of the data is checked every three years; in the case of stat­utory archiv­ing ob­lig­a­tions the eras­ure takes place after these have ex­pired (end of com­mer­cial law (6 years) and tax law (10 years) stor­age ob­lig­a­tion); de­tails in the cus­tomer ac­count re­main up to its de­le­tion.

12. Con­tact

    1. When con­tact­ing us (via con­tact form or email), the User's de­tails for the pro­cessing of the con­tact en­quiry and its hand­ling are pro­cessed in ac­cord­ance with Art­icle 6(1)(b) GDPR.

    2. User in­form­a­tion can be stored in our Cus­tomer Re­la­tion­ship Man­age­ment Sys­tem ("CRM Sys­tem") or com­par­able re­quest or­gan­isa­tion.

    3. We de­lete the re­quests if they are no longer ne­ces­sary. We re­view the re­quire­ment every two years; re­quests from cus­tom­ers who have a cus­tomer ac­count are stored per­man­ently and are linked to the cus­tomer ac­count de­tails for de­le­tion. In the case of stat­utory archiv­ing ob­lig­a­tions, eras­ure of data takes place after these have ex­pired (end of com­mer­cial law (6 years) and tax law (10 years) stor­age ob­lig­a­tion).

13. Com­ments and posts

    1. If users leave com­ments or other posts, their IP ad­dress will be stored for 7 days on the basis of our le­git­im­ate in­terests pur­su­ant to Art­icle 6(1)(f) GDPR.

    2. This takes place for our se­cur­ity, if someone leaves un­law­ful con­tent (in­sults, for­bid­den polit­ical pro­pa­ganda, etc.) in com­ments and posts. In this case we can ourselves be pro­sec­uted for the com­ment or post and are there­fore in­ter­ested in the iden­tity of the au­thor.

14. Col­lec­tion of ac­cess data and log files

    1. On the basis of our le­git­im­ate in­terests as defined in Art­icle 6(1)(f) GDPR, we col­lect data about each ac­cess to the server on which this ser­vice is loc­ated (so-​called server log files). Ac­cess data in­cludes the name of the re­ques­ted web­site, file, date and time of ac­cess, volume of data trans­ferred, no­ti­fic­a­tion of suc­cess­ful re­trieval, browser type along with ver­sion, the op­er­at­ing sys­tem of the user, re­fer­rer URL (pre­vi­ously vis­ited page), IP ad­dress, and the re­quest­ing pro­vider.

    2. Log file in­form­a­tion is stored for a max­imum of seven days for se­cur­ity reas­ons (e.g. to in­vest­ig­ate mis­use or fraud) and then de­leted. Data whose fur­ther stor­age is re­quired for evid­en­tial pur­poses are ex­cluded from eras­ure until the re­spect­ive in­cid­ent has been fi­nally cla­ri­fied.

15. On­line pres­ence on so­cial media

    1. We main­tain an on­line pres­ence within so­cial net­works and plat­forms in order to com­mu­nic­ate with cus­tom­ers, in­ter­ested parties and users act­ive there and to in­form them about our ser­vices. When call­ing up the re­spect­ive net­works and plat­forms, the terms and con­di­tions and the data pro­cessing guidelines apply to their re­spect­ive op­er­at­ors.

    2. Un­less oth­er­wise stated in our Pri­vacy Policy, we pro­cess Users' data as long as they com­mu­nic­ate with us within so­cial net­works and plat­forms, e.g. write posts on our on­line web­sites or send us mes­sages.

16. Cook­ies & reach meas­ure­ment

    1. Cook­ies are in­form­a­tion that is trans­ferred from our web server or third-​party web serv­ers to the User's web browser and stored there for later re­trieval. Cook­ies can be small files or other types of in­form­a­tion stor­age.

    2. We use "ses­sion cook­ies" which are only stored on our web­site for the dur­a­tion of your cur­rent visit (e.g. in order to store your login status or the shop­ping cart func­tion, without which use of our On­line Ser­vice would be im­possible). A ran­domly gen­er­ated unique iden­ti­fic­a­tion num­ber, a so-​called ses­sion ID, is stored in a ses­sion cookie. A cookie also con­tains in­form­a­tion about its ori­gin and the stor­age period. These cook­ies can­not store any other data. Ses­sion cook­ies are de­leted when you have fin­ished using our On­line Ser­vice and log out or close your browser, for ex­ample.

    3. We ad­di­tion­ally use per­man­ent cook­ies, also called per­sist­ent cook­ies. Per­sist­ent cook­ies are auto­mat­ic­ally de­leted after a pre­de­ter­mined period of time, which may vary de­pend­ing on the cookie. You can de­lete the cook­ies in the se­cur­ity set­tings of your browser at any time.

    4. If Users do not want cook­ies to be stored on their com­puter, they are asked to de­ac­tiv­ate the cor­res­pond­ing op­tion in the sys­tem set­tings of their browser. Cook­ies already saved can be de­leted in the sys­tem set­tings of the browser. The ex­clu­sion of cook­ies can lead to func­tional re­stric­tions of this On­line Ser­vice.

       My cookie set­tings for Gira web­sites

    5. You can opt out of the use of cook­ies for reach meas­ure­ment and ad­vert­ising pur­poses by vis­it­ing the Net­work Ad­vert­ising Ini­ti­at­ive opt-​out page (http://op­tout.net­work­ad­vert­ising.org/) and ad­di­tion­ally the US web­site(http://www.aboutads.info/choices) or the European web­site (http://www.your­on­linechoices.com/uk/your-​ad-choices/).

17. Google Ana­lyt­ics

    1. On the basis of our le­git­im­ate in­terests (i.e. in­terest in the ana­lysis, op­tim­isa­tion and eco­nomic op­er­a­tion of our On­line Ser­vice within the mean­ing of Art­icle 6(1)(f) GDPR), we use Google Ana­lyt­ics, a web ana­lyt­ics ser­vice of Google LLC ("Google"). Google uses cook­ies. The in­form­a­tion gen­er­ated by the cookie about the User's use of the On­line Ser­vice is gen­er­ally trans­mit­ted to and stored on a Google server in the USA.

    2. On our be­half, Google will use this in­form­a­tion to eval­u­ate the use of our On­line Ser­vice by the User, to com­pile re­ports on the activ­it­ies within this On­line Ser­vice and to provide us with other ser­vices re­lated to the use of this On­line Ser­vice and the In­ter­net. Pseud­onym­ous usage pro­files of Users may be cre­ated from the data pro­cessed in this re­spect.

       We use Google Ana­lyt­ics to dis­play ad­vert­ise­ments placed within the ad­vert­ising ser­vices of Google and its af­fil­i­ates only to those Users who have shown an in­terest in our On­line Ser­vice, or who have cer­tain char­ac­ter­ist­ics (e.g. in­terests in spe­cific top­ics or products de­term­ined by the web pages they visit), that we sub­mit to Google (so-​called “re­market­ing” or “Google Ana­lyt­ics audi­ences”). With the as­sist­ance of Re­market­ing Audi­ences we want to also en­sure that our ads are in keep­ing with the Users’ pos­sible in­terests, rather than being seen as a nuis­ance.

    3. We only use Google Ana­lyt­ics with ac­tiv­ated IP an­onymisa­tion. This means that Google trun­cates the IP ad­dresses of Users within the Mem­ber States of the European Union or in other sig­nat­ory states to the Agree­ment on the European Eco­nomic Area. Only in ex­cep­tional cases will the full IP ad­dress be trans­mit­ted to a Google server in the USA and be trun­cated there.

    4. The IP ad­dress trans­mit­ted by the User's browser is not as­so­ci­ated with any other data held by Google. Users can pre­vent cook­ies from being stored using the ap­pro­pri­ate set­tings of their browser soft­ware; Users can like­wise pre­vent Google from col­lect­ing and pro­cessing the data gen­er­ated by cook­ies re­lat­ing to their use of the On­line Ser­vice by down­load­ing and in­stalling the browser plug-​in which is avail­able via the fol­low­ing link:https://tools.google.com/dlpage/ga­op­tout?hl=de.

    5. You can find fur­ther in­form­a­tion on data use by Google, set­tings and opt-​out op­tions on the Google web­sites:https://www.google.com/intl/de/policies/pri­vacy/part­ners ("how Google uses in­form­a­tion from sites or apps that use our ser­vices"), https://policies.google.com/tech­no­lo­gies/ads ("Data use for ad­vert­ising pur­poses"), https://adsset­tings.google.com/au­then­tic­ated ("Man­age in­form­a­tion that Google uses to show you ad­vert­ising").

18. Google re­market­ing/mar­ket­ing ser­vices

    1. On the basis of our le­git­im­ate in­terests (i.e. in­terest in the ana­lysis, op­tim­isa­tion and eco­nomic op­er­a­tion of our On­line Ser­vice as defined in Art­icle 6(1)(f) GDPR), we use the mar­ket­ing and re­market­ing ser­vices (“Google Mar­ket­ing Ser­vices” for short) of Google LLC, 1600 Am­phi­theatre Park­way, Moun­tain View, CA 94043, USA (“Google”).

    2. Google Mar­ket­ing Ser­vices allow us to show ads for and on our web­site in a more tar­geted man­ner, show­ing Users only those ads that are po­ten­tially of in­terest to them. If a User is shown ads for products in which they showed an in­terest on other web­sites, this is known as re­market­ing. To this end, Google ex­ecutes a code as soon as a User views our web­site or other web­sites for which Google Mar­ket­ing Ser­vices have been ac­tiv­ated, thereby in­cor­por­at­ing so-​called (re)mar­ket­ing tags (in­vis­ible graph­ics or code, also re­ferred to as web beacons) into the web­site. This al­lows a cus­tom­ised cookie, i.e. a small file, to be stored on the User’s device (com­par­able tech­no­lo­gies may also be used in­stead of cook­ies). The cook­ies can be placed by vari­ous do­mains in­clud­ing google.com, double­click.net, in­vite­media.com, ad­meld.com, google­syn­dic­a­tion.com or googlead­ser­vices.com. This file re­cords which web sites the User vis­its, what Con­tent they ex­press an in­terest in and which of­fers they click on, to­gether with tech­nical in­form­a­tion re­lat­ing to the browser and op­er­at­ing sys­tem, the re­fer­rer URL, the visit time and other de­tails re­gard­ing use of the On­line Ser­vice. The User’s IP ad­dress is like­wise logged; please note that with re­gard to Google Ana­lyt­ics, IP ad­dresses within Mem­ber States of the European Union or in other sig­nat­ory states to the Agree­ment on the European Eco­nomic Area are trun­cated and are only trans­mit­ted to a Google server in the USA in ex­cep­tional cases and then trun­cated. The User’s IP ad­dress is not com­bined with other User data within other Google ser­vices. Google may com­bine the afore­men­tioned in­form­a­tion with such in­form­a­tion from other sources. When Users sub­sequently visit other web­sites, they can be shown ads which are tailored to their in­terests.

    3. The User’s de­tails are pro­cessed within the Google Mar­ket­ing Ser­vices using pseud­onyms. In other words, Google does not re­cord or pro­cess the User’s name or email ad­dress, for ex­ample, and in­stead pro­cesses the rel­ev­ant data within pseudonym-​based user pro­files using cook­ies. This means the ads are not man­aged for and shown to a spe­cific­ally iden­ti­fi­able per­son from Google’s per­spect­ive, but for and to the cookie owner ir­re­spect­ive of who this cookie owner is. This does not apply if the User has ex­pli­citly al­lowed Google to pro­cess their Data without this pseud­onymisa­tion. The in­form­a­tion col­lec­ted by the Google Mar­ket­ing Ser­vices re­gard­ing a User is sent to Google and stored on Google serv­ers in the USA.

       The Google Mar­ket­ing Ser­vices used by us in­clude the on­line ad pro­gram Google Ad­Words. With Google Ad­Words, each Ad­Words cus­tomer is as­signed a dif­fer­ent con­ver­sion cookie. Cook­ies can there­fore not be traced via the web­sites of Ad­Words cus­tom­ers. The in­form­a­tion col­lec­ted with the aid of the cookie is used to gen­er­ate con­ver­sion stat­ist­ics for Ad­Words cus­tom­ers who have opted for con­ver­sion track­ing. The Ad­Words cus­tom­ers learn the total num­ber of Users who clicked on their ad and who were for­war­ded to a web­site fea­tur­ing a con­ver­sion track­ing tag. They do not, how­ever, re­ceive any in­form­a­tion with which a User can be per­son­ally iden­ti­fied.

    4. We can also use the Google Op­tim­izer ser­vice. Google Op­tim­izer al­lows us to un­der­stand, in the con­text of so-​called "A/B test­ing", how dif­fer­ent changes have an im­pact on a web­site (e.g. changes to the input fields, design etc.). Cook­ies are stored on the Users' devices for test­ing pur­poses. Only pseud­onym­ous User Data is pro­cessed.

    5. We can ad­di­tion­ally use Google Tag Man­ager to in­cor­por­ate Google’s ana­lysis and mar­ket­ing ser­vices into our web­site and man­age them.

    6. For more in­form­a­tion about Google's use of data for mar­ket­ing pur­poses, please see the over­view page:https://policies.google.com/tech­no­lo­gies/ads, Google's pri­vacy policy is avail­able at https://policies.google.com/pri­vacy

    7. If you wish to opt out of interest-​based ad­vert­ising by the Google Mar­ket­ing Ser­vices, you can do so using the set­tings and opt-​out op­tions offered by Google:https://adsset­tings.google.com/au­then­tic­ated

       .

19. Face­book, Cus­tom Audi­ences and Face­book Mar­ket­ing ser­vices

    1. On the basis of our le­git­im­ate in­terests in the ana­lysis, op­tim­isa­tion and eco­nomic op­er­a­tion of our On­line Ser­vice and for the pur­poses thereof, our On­line Offer uses the so-​called Face­book Pixel be­long­ing to the so­cial net­work Face­book, which is run by Face­book Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or, if you are res­id­ent in the EU, by Face­book Ire­land Ltd., 4 Grand Canal Square, Grand Canal Har­bour, Dub­lin 2, Ire­land (“Face­book”).

    2. The Face­book Pixel en­ables Face­book to identify vis­it­ors to our On­line Ser­vice as the tar­get group to be shown Face­book Ads. Ac­cord­ingly, we use the Face­book Pixel to show Face­book Ads placed by us only to those Face­book users who have also ex­pressed an in­terest in our On­line Ser­vice or who have cer­tain char­ac­ter­ist­ics (e.g. in­terests in spe­cific top­ics or products de­term­ined by the web pages vis­ited by them) that we sub­mit to Face­book (so called “Cus­tom Audi­ences”). With the as­sist­ance of the Face­book Pixel we want to also en­sure that our Face­book Ads are in keep­ing with the Users’ pos­sible in­terests, rather than being seen as a nuis­ance. Ad­di­tion­ally, the Face­book Pixel al­lows us to un­der­stand the ef­fect­ive­ness of Face­book Ads for stat­ist­ical and mar­ket re­search pur­poses by al­low­ing us to see whether Users were taken to our web­site upon click­ing on a Face­book Ad (known as con­ver­sion).

    3. Face­book pro­cesses the data in ac­cord­ance with its data policy. Ac­cord­ingly, gen­eral in­form­a­tion on the dis­play of Face­book ads can be found in Face­book’s data policy:https://www.face­book.com/policy.php. For spe­cific in­form­a­tion and de­tails about the Face­book Pixel and how it works, visit the help sec­tion of Face­book: https://www.face­book.com/busi­ness/help/651294705016616.

    4. You may re­voke your con­sent to the Face­book Pixel col­lect­ing data and using it to show you Face­book Ads. To set which types of ads are dis­played to you within Face­book you can ac­cess the page cre­ated by Face­book and fol­low the in­struc­tions there re­gard­ing the set­tings for use-​based ad­vert­ising:https://www.face­book.com/set­tings?tab=ads. The set­tings are platform-​independent, i.e. they are ap­plied to all devices such as desktop com­puters and mo­bile devices.

    5. You can opt out of the use of cook­ies for reach meas­ure­ment and ad­vert­ising pur­poses by vis­it­ing the Net­work Ad­vert­ising Ini­ti­at­ive opt-​out page (http://op­tout.net­work­ad­vert­ising.org/) and ad­di­tion­ally the US web­site(http://www.aboutads.info/choices) or the European web­site (http://www.your­on­linechoices.com/uk/your-​ad-choices/).

20. Face­book so­cial plug-​ins

    1. On the basis of our le­git­im­ate in­terests (i.e. in­terest in the ana­lysis, op­tim­isa­tion and eco­nomic op­er­a­tion of our On­line Ser­vice as defined in Art­icle 6(1)(f) GDPR), we use the so­cial plug-​ins (“plug-​ins”) of the so­cial net­work face­book.com, which is run by Face­book Ire­land Ltd., 4 Grand Canal Square, Grand Canal Har­bour, Dub­lin 2, Ire­land (“Face­book”). The plug-​ins can com­prise in­ter­ac­tion ele­ments or con­tents (e.g. videos, graph­ics or text posts) and can be re­cog­nised by one of the Face­book logos (e.g. white "f" on a blue tile, the terms “Like”, or a thumbs up sign) or fea­ture the phrase “Face­book So­cial Plug-​In”. A list of and the ap­pear­ance of Face­book so­cial plug-​ins can be found here:https://de­velopers.face­book.com/docs/plu­gins/.

    2. When a User ac­cesses a func­tion of this On­line Ser­vice con­tain­ing such a plug-​in, their device es­tab­lishes a dir­ect link with Face­book’s serv­ers. The plug-​in con­tents are sent dir­ectly to the User’s device by Face­book and are in­cor­por­ated into the On­line Ser­vice by the device. Usage pro­files of Users may be cre­ated from the pro­cessed data in this re­spect. We there­fore have no con­trol over the volume of data col­lec­ted by Face­book with the aid of this plug-​in and there­fore no­tify the Users on the basis of what we know.

    3. When the plug-​ins are in­cor­por­ated, Face­book is no­ti­fied when a User views the cor­res­pond­ing page of the On­line Ser­vice. If the User is logged in to Face­book, Face­book can as­sign this visit to their Face­book ac­count. If Users in­ter­act with the Plug-​ins, for ex­ample by click­ing on the ‘Like’ but­ton or adding a com­ment, the rel­ev­ant in­form­a­tion is sent dir­ectly to Face­book by their device and saved there. If the User is not a mem­ber of Face­book, Face­book is nev­er­the­less able to de­term­ine and log their IP ad­dress. Ac­cord­ing to Face­book, only an­onymised IP ad­dresses are logged in Ger­many.

    4. Users can learn about the pur­pose and ex­tent of Face­book’s data col­lec­tion and its fur­ther pro­cessing and use, and about the cor­res­pond­ing rights and set­tings for the pro­tec­tion of their pri­vacy in Face­book’s data policy:https://www.face­book.com/about/pri­vacy/.

    5. If a User is a Face­book mem­ber and does not wish Face­book to col­lect data on them via this On­line Ser­vice or com­bine such Data with their Face­book mem­ber­ship de­tails, they must log out of Face­book prior to using our On­line Ser­vice and must de­lete their cook­ies. Fur­ther set­tings and opt-​outs to the use of data for ad­vert­ising pur­poses are pos­sible within the Face­book pro­file set­tings:https://www.face­book.com/set­tings?tab=ads or via the US site http://www.aboutads.info/choices/ or the EU page http://www.your­on­linechoices.com/. The set­tings are platform-​independent, i.e. they are ap­plied to all devices such as desktop com­puters and mo­bile devices.

21. In ad­di­tion, we use the so­cial media net­work Face­book for the fol­low­ing pur­poses:
    - con­tact­ing
    us - com­ments and posts

    1. We would like to point out that you use this Face­book page and its func­tions under your own re­spons­ib­il­ity. This ap­plies in par­tic­u­lar to the use of the in­ter­act­ive func­tions (e.g. com­ment­ing, shar­ing, rat­ing). Al­tern­at­ively, you can also ac­cess the in­form­a­tion offered via this page on our web­site at www.part­ner.gira.de.
       
       
    2. When you visit our Face­book page, Face­book re­cords data in­clud­ing your IP ad­dress and other in­form­a­tion that is avail­able on your PC in the form of cook­ies. This in­form­a­tion is used to provide us, as the op­er­ator of the Face­book pages, with stat­ist­ical in­form­a­tion about the use of the Face­book page. Face­book provides more in­form­a­tion about this at the fol­low­ing link: http://de-de.face­book.com/help/pages/in­sights.
       
       
    3. The data col­lec­ted about you in this con­text is pro­cessed by Face­book Ltd. and may be trans­ferred to coun­tries out­side the European Union. The in­form­a­tion Face­book re­ceives and how it is used is de­scribed in gen­eral terms in Face­book's data usage guidelines. You will also find in­form­a­tion there about on how to con­tact Face­book and on the set­tings for ad­vert­ise­ments.
       
       The data usage guidelines are avail­able at the fol­low­ing link:
       http://en-gb.face­book.com/about/pri­vacy
       
       The com­plete Face­book data guidelines can be found here:
       https://en-gb.face­book.com/full_data_use_­policy
       
       
    4. The way in which Face­book uses the data from vis­its to Face­book pages for its own pur­poses, the ex­tent to which activ­it­ies on the Face­book page are as­signed to in­di­vidual users, how long Face­book stores this data and whether data from a visit to the Face­book page is passed on to third parties is not con­clus­ively and clearly stated by Face­book and is not known to us.
       
       
    5. When you ac­cess a Face­book page, the IP ad­dress as­signed to your end device is sent to Face­book. Ac­cord­ing to in­form­a­tion from Face­book, this IP ad­dress is an­onymised (in the case of "Ger­man" IP ad­dresses) and de­leted after 90 days. Face­book also stores in­form­a­tion about the end devices of its users (e.g. as part of the "login no­ti­fic­a­tion" func­tion); if ne­ces­sary, there­fore, Face­book is able to as­sign IP ad­dresses to in­di­vidual users.
       
       
    6. If you are cur­rently logged in to Face­book as a user, a cookie with your Face­book iden­ti­fic­a­tion is loc­ated on your end device. This en­ables Face­book to trace that you have vis­ited this page and how you have used it. This also ap­plies to all other Face­book pages. Face­book but­tons em­bed­ded into web­sites allow Face­book to re­cord your vis­its to these web­sites and as­sign them to your Face­book pro­file. This data can be used to offer con­tent or ad­vert­ising tailored to your in­terests.
    7. If you want to avoid this, you should log off from Face­book or dis­able the "stay logged in" func­tion, de­lete the cook­ies on your device, and exit and re­start your browser. This will de­lete Face­book in­form­a­tion that can be used to identify you dir­ectly. This al­lows you to browse our Face­book page without re­veal­ing your Face­book iden­tity. When you ac­cess in­ter­act­ive func­tions of the site (Like, Com­ment, Share, Mes­sages, etc.), a Face­book login screen ap­pears. If you log in, you are again iden­ti­fi­able to Face­book as a spe­cific user.
       
       In­form­a­tion about how you can man­age or de­lete ex­ist­ing in­form­a­tion about your­self can be found on the fol­low­ing Face­book sup­port pages:
       https://en-gb.face­book.com/about/pri­vacy
       
       As the pro­vider of the in­form­a­tion ser­vice, we do not col­lect or pro­cess any other data from your use of our ser­vice.
       
       Fur­ther in­form­a­tion about Face­book and other so­cial net­works and how you can pro­tect your data can also be found on young­data.de.
       
       

22. News­let­ter

    1. The fol­low­ing sec­tions ex­plain the con­tents of our News­let­ter, the re­gis­tra­tion, cir­cu­la­tion and stat­ist­ical ana­lysis pro­cesses, and your rights to opt out. By sub­scrib­ing to our News­let­ter, you con­sent to re­ceipt of the News­let­ter and to the pro­cesses de­scribed.

    2. Con­tent of the News­let­ter: We send news­let­ters, emails and other elec­tronic no­ti­fic­a­tions con­tain­ing ad­vert­ising in­form­a­tion (here­in­after “the News­let­ter”) only with the re­cip­i­ents’ con­sent or sub­ject to legal per­mis­sion. If the con­tents of the News­let­ter are out­lined spe­cific­ally upon re­gis­tra­tion, these are au­thor­it­at­ive for Users’ con­sent. Our News­let­ters oth­er­wise con­tain in­form­a­tion re­gard­ing our products, of­fers, pro­mo­tions and our com­pany.

    3. Double opt-​in and log­ging: Re­gis­ter­ing for our News­let­ter in­volves a so-​called double opt-​in pro­ced­ure. This means that after sign­ing up, you will re­ceive an email ask­ing you to con­firm your re­gis­tra­tion. This con­firm­a­tion is ne­ces­sary so that nobody can re­gister with third-​party email ad­dresses. Re­gis­tra­tion for the News­let­ter will be logged in order to prove that the re­gis­tra­tion pro­cess com­plies with legal re­quire­ments. This in­cludes the stor­age of the login and the con­firm­a­tion time, as well as the IP ad­dress.

    4. Login data: To sign up for the News­let­ter, you only need to provide your email ad­dress. We re­quest that you op­tion­ally provide your name so that you may be ad­dressed per­son­ally in the News­let­ter.

    5. Meas­ure­ment of suc­cess – the News­let­ters con­tain a so-​called web beacon, i.e. a pixel-​sized file which is ac­cessed by the Dis­patch Ser­vice Pro­vider’s server when the News­let­ter is opened. When this is ac­cessed, tech­nical in­form­a­tion is ini­tially logged re­gard­ing, for ex­ample, your browser and sys­tem, your IP ad­dress and the time at which it is ac­cessed. This in­form­a­tion is used for the tech­nical im­prove­ment of the ser­vices based on the tech­nical data or the tar­get groups and their read­ing be­ha­viour, the places from which it is ac­cessed (de­term­ined with the aid of IP ad­dresses) or the times at which it is ac­cessed. The stat­ist­ics logged also in­clude de­tails re­gard­ing whether the News­let­ters are opened, when they are opened and which links are clicked on. While this in­form­a­tion can be at­trib­uted to spe­cific News­let­ter re­cip­i­ents for tech­nical reas­ons, neither we nor the Dis­patch Ser­vice Pro­vider en­deav­our to mon­itor in­di­vidual Users. Rather, the ana­lyses allow us to identify our Users’ read­ing habits and to adapt our con­tent ac­cord­ingly or to dis­patch dif­fer­ent con­tent based on our Users’ in­terests.

    6. The dis­patch of the News­let­ter and meas­ure­ment of suc­cess are made on the basis of con­sent being provided by the re­cip­i­ents in ac­cord­ance with Art­icle 6(1)(1) and Art­icle 7 GDPR in con­junc­tion with Sec­tion 7 para. 2 point 3 of the Ger­man Act Against Fair Com­pet­i­tion (UWG) or on the basis of legal per­mis­sion in ac­cord­ance with Sec­tion 7 para. 3 UWG.

    7. The log­ging of the re­gis­tra­tion pro­ced­ure is car­ried out on the basis of our le­git­im­ate in­terests in ac­cord­ance with Art­icle 6(1)(f) GDPR and serves as proof of con­sent to re­ceive the News­let­ter.

    8. Ter­min­a­tion/re­voc­a­tion – you may ter­min­ate your sub­scrip­tion to our News­let­ter at any time, i.e. re­voke your con­sent. A link al­low­ing ter­min­a­tion of your sub­scrip­tion to the News­let­ter can be found at the end of each News­let­ter. If User have only signed up for the News­let­ter and have can­celled this re­gis­tra­tion, their per­sonal data is de­leted.
       
       

23. Live chat and di­gital Gira As­sist­ant
    

    For the pur­pose of op­er­at­ing a live chat sys­tem to an­swer live quer­ies or for fur­ther pro­cessing of en­quir­ies from the di­gital Gira As­sist­ant, we col­lect and pro­cess your name and the con­tents of the chat.
    
    If you wish to com­mu­nic­ate by tele­phone and email, your email ad­dress or tele­phone num­ber is col­lec­ted and pro­cessed via the live chat.
    
    We pro­cess your data in order to handle your re­quest, as well as to con­trol and im­prove our busi­ness and ser­vice pro­cesses, in­clud­ing the di­gital Gira As­sist­ant, which is in our le­git­im­ate in­terest. The legal basis for pro­cessing in this re­spect is Art­icle 6(1)(f) GDPR.
    
    The live chat con­tents, as well as the usage data, i.e. chat dur­a­tion, time stamp of mes­sages, num­ber of con­ver­sa­tions and ap­prox­im­ate loc­a­tion of the users, are stored for a max­imum of 1 month after the last mes­sage of the re­spect­ive trans­ac­tion. Af­ter­wards your per­sonal data and ques­tions will be ir­re­triev­ably de­leted. Usage data is also stored an­onym­ously for stat­ist­ical pur­poses. Per­sonal data will not be eval­u­ated.
    
    The di­gital Gira As­sist­ant is a so-​called chat bot that as­sists you in your search for in­form­a­tion and nav­ig­a­tion of our web­site. In ad­di­tion, the di­gital Gira As­sist­ant an­swers fre­quently asked ques­tions and/or helps you to sub­mit your re­quest to the ap­pro­pri­ate Gira con­tact.
    
    Cook­ies are used for the op­er­a­tion of the chat func­tions. Cook­ies are small text files which are stored loc­ally in the cache of the site vis­itor's in­ter­net browser. The cook­ies en­able re­cog­ni­tion of the site vis­itor’s in­ter­net browser so that the in­di­vidual users of the web­site’s chat func­tion can be dis­tin­guished.
    
    To pre­vent cook­ies being stored, you can set your In­ter­net browser so that cook­ies are no longer stored on your com­puter in the fu­ture or that cook­ies already stored are de­leted. How­ever, de­ac­tiv­at­ing all cook­ies may mean that the chat func­tion on our web­site can no longer be ac­cessed.
    
    

24. In­cor­por­a­tion of third-​party ser­vices and con­tent

    1. On the basis of le­git­im­ate in­terests (in­terest in the ana­lysis, op­tim­isa­tion and eco­nomic op­er­a­tion of our On­line Ser­vice as defined in Art­icle 6(1)(f) GDPR), con­tents and ser­vice of­fers from third parties are used to in­teg­rate their con­tents and ser­vices, such as videos or fonts (here­in­after col­lect­ively re­ferred to as “con­tent”), within our on­line ser­vice. This is al­ways sub­ject to the third-​party sup­plier being aware of the User’s IP ad­dress, as they are un­able to send con­tent to the User’s browser without an IP ad­dress. The User’s IP ad­dress is there­fore re­quired in order for the con­tent to be shown. We en­deav­our to only use con­tent from pro­viders who only use the IP ad­dresses to de­liver the re­spect­ive con­tent. Third-​party pro­viders may also use pixel tags (in­vis­ible graph­ics, also known as web beacons) for stat­ist­ical or mar­ket­ing pur­poses. Pixel tags allow in­form­a­tion, such as our web­site’s traffic, to be eval­u­ated. In ad­di­tion, the pseud­onym­ous in­form­a­tion may be stored in cook­ies on the User's device and may in­clude, but is not lim­ited to, tech­nical in­form­a­tion about the browser and the op­er­at­ing sys­tem, re­fer­ring web­sites, time of visit, and other in­form­a­tion re­gard­ing the use of our On­line Ser­vice and be linked to such in­form­a­tion from other sources.

    2. The fol­low­ing state­ment provides an over­view of third-​party pro­viders as well as their con­tent and links to their pri­vacy policies, which con­tain fur­ther in­form­a­tion on data pro­cessing and rights of re­voc­a­tion, some of which were men­tioned above (so-​called opt-​outs):

       If our cus­tom­ers make use of third-​party pay­ment ser­vices (e.g. PayPal or So­fortüber­weisung ("im­me­di­ate trans­fer" - an Ger­man on­line pay­ment sys­tem)), the terms and con­di­tions and pri­vacy no­tices of the re­spect­ive third-​party pro­viders apply, these can be viewed within the re­spect­ive web­sites or trans­ac­tion ap­plic­a­tions.

       Maps provided by the Google Maps ser­vice of third-​party pro­vider Google LLC, 1600 Am­phi­theater Park­way, Moun­tain View, CA 94043, USA. Pri­vacy policy: https://www.google.com/policies/pri­vacy/, Opt-​Out: https://www.google.com/set­tings/ads/.

       Videos on the You­Tube plat­form of the third-​party sup­plier Google LLC, 1600 Am­phi­theatre Park­way, Moun­tain View, CA 94043, USA. Pri­vacy policy: https://policies.google.com/pri­vacy, Opt-​Out: https://adsset­tings.google.com/au­then­tic­ated.

       This web­site uses "fonts.com", a font ser­vice of Lino­type GmbH, Werner-​Reimers-Straße 2-4, 61352 Bad Hom­burg, Ger­many ("fonts.com"). Each time this web­site is ac­cessed, files are loaded from a "fonts.com" server to dis­play the text in a par­tic­u­lar font. As a res­ult, your IP ad­dress may be trans­ferred to a "fonts.com" server and stored within the frame­work of the usual web­log. The fur­ther pro­cessing of this in­form­a­tion is the re­spons­ib­il­ity of "fonts.com". Please refer to the data pro­tec­tion in­form­a­tion of "fonts.com" for the cor­res­pond­ing terms and con­di­tions and set­ting op­tions: https://www.mono­type.com/legal/privacy-​policy

       Within our On­line Ser­vice, func­tions of the Twit­ter ser­vice or plat­form (here­in­after re­ferred to as “Twit­ter”) may be in­cor­por­ated. Twit­ter is provided by Twit­ter Inc., 1355 Mar­ket Street, Suite 900, San Fran­cisco, CA 94103, USA. The func­tions in­clude the dis­play of our posts on Twit­ter within our On­line Ser­vice, the link to our pro­file on Twit­ter and the pos­sib­il­ity of in­ter­act­ing with the posts and func­tions of Twit­ter, and to meas­ure whether users reach our On­line Ser­vice via the ads placed by us on Twit­ter (so-​called con­ver­sion track­ing).