Mobile door communication

Data processing purposes:

• Private customer site: Use of all the site's session-based features
• Business customer site: Authentication, preferences and caching of user inputs

Categories of personal data:

• Private customer site: IP address, duration of session, user browser, end device
• Business customer site: Settings and preferences. Including name, address and e-mail if a contact form is filled out. (For reuse on another form within the same session), IP address (anonymised)

Legal basis and legitimate interests pursued, if applicable:

• Article 6(1)(f) GDPR
• Legitimate interests pursued: See data processing purposes

Recipients:Internal departments, in so far as access is necessary for task fulfilment

Third country transfer:None

Validity period of the cookie:

• Storage of data for the duration of the session, until the browser is closed
• Time of storage: When loading the page

Data processing purposes:Serves to maintain the status of the Home Assistant configuration when using the Gira Home Assistant

Categories of personal data:IP address, configuration ID – a personal reference is only available when configuration is completed (tradesperson selected and data entered)

Legal basis and legitimate interests pursued, if applicable:

• Article 6(1)(f) GDPR
• Legitimate interests pursued: See data processing purposes

Recipients:Internal departments, in so far as access is necessary for task fulfilment

Third country transfer:None

Validity period of the cookie:Duration of the session

Data processing purposes:Authentication in the Gira device portal (SDA portal)

Categories of personal data:IP address (anonymised)

Legal basis and legitimate interests pursued, if applicable:Article 6(1)(b) GDPR

Recipients:

• Internal departments, in so far as access is necessary for task fulfilment
• ISE Individuelle Software und Elektronik GmbH

Third country transfer:None

Validity period of the cookie:Duration of the session

Data processing purposes:Optimisation of the site for different browser types

Categories of personal data:IP address, duration of session, user browser, end device

Legal basis and legitimate interests pursued, if applicable:Article 6(1)(f) GDPR

Recipients:Internal departments, in so far as access is necessary for task fulfilment

Third country transfer:None

Validity period of the cookie:Duration of the session

Data processing purposes:Protection against cross-site scripts

Categories of personal data:IP address, duration of session, user browser, end device

Legal basis and legitimate interests pursued, if applicable:Article 6(1)(f) GDPR

Recipients:Internal departments, in so far as access is necessary for task fulfilment

Third country transfer:None

Validity period of the cookie:2 hours

Data processing purposes:Transmission of registration role for displaying relevant information and services

Categories of personal data:IP address (anonymised), target group classification (building owner/end user, specialised tradesperson, planner, wholesaler, architect)

Legal basis and legitimate interests pursued, if applicable:

• Use of the service: Section 25(1)(1) TTDSG
• Article 6(1)(f) GDPR
• Legitimate interests pursued: See data processing purposes

Recipients:Internal departments, in so far as access is necessary for task fulfilment

Third country transfer:None

Validity period of the cookie:6 months

Data processing purposes:Statistical analysis of website usage

Categories of personal data:IP address (anonymised/abbreviated), approximate region of the visitor, browser and plug-ins used, browser language setting, time of page view, load time, operating system, screen size, referrer, time of previous visits, number of visits

Legal basis and legitimate interests pursued, if applicable:

• Use of the service: Section 25(1)(1) TTDSG
• Subsequent processing of personal data: Article 6(1)(a) GDPR

Recipients:Internal departments, in so far as access is necessary for task fulfilment

Third country transfer:None

Validity period of the cookie:

• 12 months
• Time of storage: Following consent

Data processing purposes:Verification of whether data entry on websites is done by a human or by an automated program

Categories of personal data:

• Private customer site: IP address (anonymised), time spent by the visitor on the website, mouse movements made by the user
• Business customer site: IP address (anonymised), time spent by the visitor on the website, mouse movements made by the user, date and time of the visit to the website in question, internet address or URL of the website accessed

Legal basis and legitimate interests pursued, if applicable:

• Use of the service: Section 25(1)(1) TTDSG
• Subsequent processing of personal data: Article 6(1)(a) GDPR

Recipients:

• Internal departments, in so far as access is necessary for task fulfilment
• Google Ireland Ltd, Google LLC (USA)

Third country transfer:

• Third country: USA
• Adequacy decision/safeguards/exemption: Standard contractual clauses, copy to be requested via the contact details under Point 1, consent pursuant to Article 49(1)(a) GDPR

Validity period of the cookie:12 months

Data processing purposes:Analysis of website usage. Google Analytics examines, among other things, the location of visitors and the length of time spent on individual pages, thus enabling better page and feature optimisation.

Categories of personal data:Location, time or frequency of visits to our website, IP address (anonymised)

Legal basis and legitimate interests pursued, if applicable:

• Use of the service: Section 25(1)(1) TTDSG
• Subsequent processing of personal data: Article 6(1)(a) GDPR

Recipients:

• Internal departments, in so far as access is necessary for task fulfilment
• Google Ireland Ltd, Google LLC (USA)

Third country transfer:

• Third country: USA
• Adequacy decision/safeguards/exemption: Standard contractual clauses, copy to be requested via the contact details under Point 1, consent pursuant to Article 49(1)(a) GDPR

Validity period of the cookie:14 months

Data processing purposes:Management of website tags via an interface

Categories of personal data:IP address (anonymised)

Legal basis and legitimate interests pursued, if applicable:

• Use of the service: Section 25(1)(1) TTDSG
• Subsequent processing of personal data: Article 6(1)(a) GDPR

Recipients:

• Internal departments, in so far as access is necessary for task fulfilment
• Google Ireland Ltd, Google LLC (USA)

Third country transfer:

• Third country: USA
• Adequacy decision/safeguards/exemption: Standard contractual clauses, copy to be requested via the contact details under Point 1, consent pursuant to Article 49(1)(a) GDPR

Validity period of the cookie:14 months

Data processing purposes:Showing of videos

Categories of personal data:

• Private customer site: IP address (anonymised), time spent by the visitor on the website, mouse movements made by the user
• Business customer site: IP address (anonymised), time spent by the visitor on the website, mouse movements made by the user, date and time of the visit to the website in question, internet address or URL of the website accessed

Legal basis and legitimate interests pursued, if applicable:

• Use of the service: Section 25(1)(1) TTDSG
• Subsequent processing of personal data: Article 6(1)(a) GDPR

Recipients:Vimeo, LLC (USA)

Third country transfer:

• Third country: USA
• Adequacy decision/safeguards/exemption: Standard contractual clauses, copy to be requested via the contact details under Point 1, consent pursuant to Article 49(1)(a) GDPR

Validity period of the cookie:longer than 12 months

Data processing purposes:Hotjar allows us to create a kind of heat map of selected pages. This allows us to see how users navigate around the site. We can see where they click, how far they scroll and how they move around the page.

Categories of personal data:- IP address, heat maps of usage

Legal basis and legitimate interests pursued, if applicable:

• Use of the service: Section 25(1)(1) TTDSG
• Subsequent processing of personal data: Article 6(1)(a) GDPR

Recipients:

• Internal departments, in so far as access is necessary for task fulfilment
• Hotjar Ltd.

Third country transfer:None

Validity period of the cookie:12 months

Data processing purposes:Showing of videos

Categories of personal data:IP address, date and time and the website visited

Legal basis and legitimate interests pursued, if applicable:

• Use of the service: Section 25(1)(1) TTDSG
• Subsequent processing of personal data: Article 6(1)(a) GDPR

Recipients:Google Ireland Ltd, Google LLC (USA)

Third country transfer:

• Third country: USA
• Adequacy decision/safeguards/exemption: Standard contractual clauses, copy to be requested via the contact details under Point 1, consent pursuant to Article 49(1)(a) GDPR

Validity period of the cookie:longer than 12 months

Data processing purposes:Display of interactive maps

Categories of personal data:IP address (anonymised), date and time of the visit to the relevant website, internet address or URL of the website accessed

Legal basis and legitimate interests pursued, if applicable:

• Use of the service: Section 25(1)(1) TTDSG
• Subsequent processing of personal data: Article 6(1)(a) GDPR

Recipients:Google Ireland Ltd, Google LLC (USA)

Third country transfer:

• Third country: USA
• Adequacy decision/safeguards/exemption: Standard contractual clauses, copy to be requested via the contact details under Point 1, consent pursuant to Article 49(1)(a) GDPR

Validity period of the cookie:12 months

Data processing purposes:Doubleclick can be used to place and manage adverts on a website. When, where and how often they should appear is controlled by the operator via campaigns.

Categories of personal data:IP address (anonymised)

Legal basis and legitimate interests pursued, if applicable:

• Use of the service: Section 25(1)(1) TTDSG
• Subsequent processing of personal data: Article 6(1)(a) GDPR

Recipients:

• Internal departments, in so far as access is necessary for task fulfilment
• Google Ireland Ltd, Google LLC (USA)

Third country transfer:

• Third country: USA
• Adequacy decision/safeguards/exemption: Standard contractual clauses, copy to be requested via the contact details under Point 1, consent pursuant to Article 49(1)(a) GDPR

Validity period of the cookie:14 months

Data processing purposes:Gira marketing and sales processes can be digitised and automated by tracking how Gira offers are used. By separating subscribers from website visitors, targeted and more personalised information can be provided. Increased attention enables more follow-up activities and increased customer satisfaction can also be achieved.

Categories of personal data:Date and time, type (object, e.g. eMailing, LeadPage), browser referrer, user agent, link ID (optional), object IDs, optional object-dependent information, individual transfer parameters, geocoordinates or alternatively IP-based geocoordinates (for forms with address entry) via Locr GmbH (recording postal addresses without first and last names) with server location in Germany

Legal basis and legitimate interests pursued, if applicable:

• Use of the service: Section 25(1)(1) TTDSG
• Subsequent processing of personal data: Article 6(1)(a) GDPR

Recipients:

• Internal departments, in so far as access is necessary for task fulfilment
• SC Networks GmbH

Third country transfer:None

Validity period of the cookie:12 months

Data processing purposes:Evaluation of website usage, campaign performance measurement

Categories of personal data:IP address, browser information, website visited, date and time of visit, device information, usage data, click path, geographical location

Legal basis and legitimate interests pursued, if applicable:

• Use of the service: Section 25(1)(1) TTDSG
• Subsequent processing of personal data: Article 6(1)(a) GDPR

Recipients:

• Internal departments, in so far as access is necessary for task fulfilment
• Meta Platforms Ireland Ltd, Meta Platforms, Inc. (USA)

Third country transfer:

• Third country: USA
• Adequacy decision/safeguards/exemption: Standard contractual clauses, copy to be requested via the contact details under Point 1, consent pursuant to Article 49(1)(a) GDPR

Validity period of the cookie:90 days

Data processing purposes:Evaluation of website usage, campaign performance measurement

Categories of personal data:IP address, browser information, website visited, date and time of visit, device information, usage data, click path, geographical location

Legal basis and legitimate interests pursued, if applicable:

• Use of the service: Section 25(1)(1) TTDSG
• Subsequent processing of personal data: Article 6(1)(a) GDPR

Recipients:

• Internal departments, in so far as access is necessary for task fulfilment
• Pinterest, Inc. (USA)

Third country transfer:

• Third country: USA
• Adequacy decision/safeguards/exemption: Standard contractual clauses, copy to be requested via the contact details under Point 1, consent pursuant to Article 49(1)(a) GDPR

Validity period of the cookie:12 months

Data processing purposes:Analysis of website usage, use of this information to serve tailored ads on LinkedIn (retargeting)

Categories of personal data:Device and browser properties, IP address, referrer URL and timestamps

Legal basis and legitimate interests pursued, if applicable:

• Use of the service: Section 25(1)(1) TTDSG
• Subsequent processing of personal data: Article 6(1)(a) GDPR

Recipients:

• Internal departments, in so far as access is necessary for task fulfilment
• LinkedIn Ireland Unlimited Company

Third country transfer:We do not transfer your personal data to third countries. With regard to the transfer of your personal data to third countries by LinkedIn, we refer to their privacy policy: https://www.linkedin.com/legal/privacy-policy

Validity period of the cookie:12 months

Data processing purposes:Evaluation of website usage, campaign performance measurement. Google Ads uses data to place adverts placed by Gira on websites, social media platforms, in search results and other digital platforms and to measure the success of advertising campaigns.

Categories of personal data:IP address, browser information, website visited, date and time of visit, device information, usage data, click path, geographical location

Legal basis and legitimate interests pursued, if applicable:

• Use of the service: Section 25(1)(1) TTDSG
• Subsequent processing of personal data: Article 6(1)(a) GDPR

Recipients:

• Internal departments, in so far as access is necessary for task fulfilment
• Google Ireland Ltd, Google LLC (USA)

Third country transfer:

• Third country: USA
• Adequacy decision/safeguards/exemption: Standard contractual clauses, copy to be requested via the contact details under Point 1, consent pursuant to Article 49(1)(a) GDPR

Validity period of the cookie:90 days