Privacy policy

G DATA privacy policy for the company website:

Thank you for visiting our website. In the following, we would like to inform you about which personal data G DATA processes and for what purposes. We will also inform you about other important data protection details, such as your rights.

1. Responsible body and data protection officer

The controller for the data processing described below within the meaning of data protection regulations is the:

G DATA CyberDefense AG
Königsallee 178 a
D-44799 Bochum
Germany
E-mail: info@remove-this.gdata.de
You can also send further questions about data protection by e-mail to: dsgvo@remove-this.gdata.de

Our external data protection officer is
Ali Tschakari
Bitkom Servicegesellschaft mbH
Albrechtstrasse 10
10117 Berlin
You can send enquiries to the following e-mail address: datenschutz@remove-this.bitkom-consult.de

2. General information on data processing:

a) Scope of the processing of personal data

We only process our users' personal data to the extent necessary to provide our website.

b) Legal basis for the processing of personal data

G DATA processes personal data exclusively on the basis of the General Data Protection Regulation.
Insofar as we obtain your consent for the processing of personal data, Art. 6 para. 1 sentence 1 lit. a) GDPR serves as the legal basis.
Art. 6 para. 1 sentence 1 lit. b) GDPR serves as the legal basis for the processing of personal data required for the fulfilment of a contract to which the data subject is a party. This also applies to processing operations that are necessary for the initiation of a contract (pre-contractual measures). 
Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 sentence 1 lit. c) GDPR serves as the legal basis.
If the processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 sentence 1 lit. f) GDPR serves as the legal basis for the processing.

c) No automated decision-making

Automated processing of personal data consisting of the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements does not take place within the scope of the data processing described.

3. Purposes and legal bases of data processing

a) Hosting

When you visit our website, our web server saves standardised information about your end device and the browser used in a log file. We process this data in order to be able to analyse errors on our server and attempts at misuse. In detail, this data record consists of

• the name of the website accessed,
• the date and time of the request,
• the amount of data transferred,
• the message about the successful retrieval,
• the IP address of the requesting computer,
• the specific address of the page accessed on our website,
• if applicable, the page from which you reached us,
• the transmitted identifier of the browser.

We process this data on the basis of our legitimate interest in the secure and stable provision of our website (see Art. 6 para. 1 lit. f) GDPR in conjunction with Section 25 para. 2 no. 2 TDDDG). The functionality of our website is not guaranteed without the described processing.
We at G DATA host our company website ourselves. The server location is Bochum, Germany.

b) Processing of orders

aa) Ordering process

You can order a selection of G DATA products and services via our website. We collect all the data required to carry out and process an order when you place your order. 
We process this data in fulfilment of our (pre-)contractual obligations (cf. Art. 6 para. 1 lit. b) GDPR).

c) Service requests

aa) Enquiries via contact form

We have included several contact forms on our website that can be used to contact us electronically, e.g. to make support enquiries. If you contact us via our contact form or by means of personal messages, the data entered in the input mask will be transmitted to us and stored. 
All personal data collected is used to process and respond to your contact enquiry. The fields marked with "*" are mandatory fields. Fields not marked with an "*" (telephone / e-mail / comment) are purely voluntary. In order to transfer this data, you must confirm that you have taken note of the privacy policy. 
We process mandatory data to fulfil our legitimate interest in the efficient processing and handling of enquiries (cf. Art. 6 lit. f) GDPR). We process additional voluntary information in the contact forms on the basis of your consent (see Art. 6 para. 1 lit. a) GDPR), which you can revoke at any time with effect for the future by sending an e-mail to info@remove-this.gdata.de. If your enquiry is product or service-related, we process your data in fulfilment of our (pre-)contractual obligations (see Art. 6 para. 1 lit. b) GDPR).

bb) Submitting suspicious files, apps or URLs

On our website, you also have the option of sending us suspicious files, apps or URLs. If you contact us via our form, the data entered in the input mask will be transmitted to us and stored. We process this data exclusively for troubleshooting and rectification by G DATA and its technology partners.
All personal data collected is used to process and respond to your contact enquiry. The fields marked with "*" are mandatory fields. Fields not marked with an "*" (telephone / e-mail / comment) are purely voluntary information
We process mandatory data to fulfil our legitimate interest in the efficient processing and handling of enquiries (cf. Art. 6 lit. f) GDPR). We process additional voluntary information in the contact forms on the basis of your consent (see Art. 6 para. 1 lit. a) GDPR), which you can revoke at any time with effect for the future by sending an e-mail to info@gdata.de. If your enquiry is product or service-related, we process your data in fulfilment of our (pre-)contractual obligations (see Art. 6 para. 1 lit. b) GDPR).

d) Advertising and marketing

aa) Newsletters and other marketing campaigns

If you give your consent, we will use your contact details (name, email address) to conduct surveys and marketing campaigns, including to send you our newsletter and information about product updates. In many places on our website, we offer you the opportunity to order newsletters on various topics or products. For the purpose of sending our newsletters, advertising, etc., we process your contact details, including your surname, first name, email address and/or telephone number. 
G Data CyberDefense AG uses the so-called double opt-in procedure to confirm your enquiry and e-mail address. This involves sending an e-mail to the e-mail address you have provided asking you to confirm your consent. In connection with the double opt-in procedure, we document the IP address, date and time of sending the web form as well as the IP address, date and time of confirmation of the double opt-in e-mail. If you do not complete the double opt-in, we will delete your contact details after one month. In this case, we will not send you any marketing content.
Our basis for sending you marketing content is your consent in accordance with Art. 6 (1) (a) GDPR. You can unsubscribe from receiving our newsletter at any time by sending an informal message to info@gdata.de. You will find a link to unsubscribe from the newsletter at the end of each newsletter.

bb) Analysing the recipient profiles

If you have given your consent to advertising and marketing communication, we carry out analyses, individual measurements, storage and evaluation of opening rates and click rates in recipient profiles. Based on our analyses, we create corresponding recipient profiles in order to better understand the interests of our recipients and to be able to design subsequent communications in line with their interests.
Please note that the sending of marketing content, such as newsletters, is always associated with analyses of your recipient profile. It is not possible to send marketing content without analysing your recipient behaviour.
Our basis for analysing your recipient profile is your consent in accordance with Art. 6 para. 1 lit. a) GDPR in conjunction with Section 25 para. 1 TDDDG. You can unsubscribe from our newsletter at any time by sending an informal message to info@gdata.de. You will find a link to unsubscribe from the newsletter at the end of each newsletter.

cc) Information on the shipping software

We use the "Inxmail" mailing software from Inxmail GmbH (https://www.inxmail.de/impressum) to send our newsletter. Your personal data is stored on the Inxmail servers. 
Inxmail uses this information to send and analyse the newsletter on our behalf. Furthermore, according to its own information, Inxmail may use this data to optimise or improve its own services, e.g. to technically optimise the sending and presentation of the newsletter or for economic purposes in order to determine which countries the recipients come from. However, Inxmail does not use the data of our newsletter recipients to write to them itself or to pass it on to third parties. Inxmail is the recipient of your personal data and acts as a processor for us.

dd) Personalised advertising and retargeting

We work together with various advertising partners and use retargeting technology for this purpose. Retargeting is a tracking process in which visitors to our website are marked and then targeted again on other websites with targeted advertising. 
We use retargeting to categorise website visitors into user groups. Depending on the respective user group, we then address website visitors on other websites or in apps with personalised advertising about our products and services. This data is processed for the purpose of making the online offer on our website even more interesting for you and to settle commission payments between us and our advertising partners.
For this purpose, cookies are also set by our advertising partners when you visit our website (see details below). In some cases, information is also collected that was found on other websites before you visited our site. This information is used to show you interest-based adverts from our advertising partners. No personal data is stored and no user profiles are merged with personal data about you. 
The basis for data processing is your consent, provided you have given it (pursuant to Art. 6 para. 1 lit. a) GDPR). For further details, please see our information on the use of cookies.

ee) Customer loyalty / advertising for similar goods and services

We use your data (name and email address) to send you email offers (within the scope of Section 7 (3) UWG) exclusively for similar products and services. The legal basis is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR.
We regard the use of this data for the purpose of direct advertising as processing that serves our legitimate interest. You can object to the corresponding processing of this data at any time by sending an informal message to [info@gdata].
We store the data used for the purpose of product-related direct advertising (name and e-mail address) until it is no longer required to fulfil the purpose for which it was collected or until an objection is made.

e) Use of cookies & tracking tools

aa) Information on the use of cookies

We use tracking technologies on our website, such as cookies, to measure and analyse our website and to continuously improve our content. To protect our users and partners, we can also recognise and ward off fraud and security risks. 
Cookies are small text files that are stored on your computer or other internet-enabled devices (e.g. smartphones and tablets) when you visit our website or use our web services. This information often consists of alphanumeric strings that uniquely identify your computer or device, but may also contain other information. 
Depending on where a cookie comes from, a distinction can be made between first-party cookies and third-party cookies: 

• First-party cookies - cookies that are generated and stored locally by the website operator as the controller or by a processor commissioned by the operator. Only the operator has access to these cookies.
• Third-party cookies - Cookies that are generated, set and retrieved by third-party providers who do not act as processors on behalf of the website operator.

Depending on the period of validity, a distinction can also be made between transient and persistent cookies:

• Transient cookies - cookies that are automatically deleted when you close the browser. These include session cookies in particular.
• Persistent cookies - cookies that remain stored on your end device for a specified period of time after you close your browser.

Depending on their nature and purpose, user consent may be required for the use of certain cookies. In this respect, cookies can be differentiated according to whether the user's consent is mandatory for their use:

• Cookies that do not require consent - Cookies that are absolutely necessary so that the website operator, which has been expressly requested by the subscriber or user, can provide this service ("strictly necessary cookies"). We use strictly necessary cookies on the basis of our legitimate interest in the functional and secure provision of our website (pursuant to Art. 6 para. 1 lit. f) GDPR in conjunction with Section 25 para. 2 no. 2 TDDDG). As these cookies are absolutely necessary for the provision of our website, they cannot be deactivated via the cookie banner on this website.
• Cookies requiring consent - cookies that are used for all purposes other than those mentioned above. If your consent is required, we only use these cookies if you have given your consent in advance (pursuant to Art. 6 para. 1 lit. a) GDPR in conjunction with § 25 para. 1 TDDDG). When you visit our website, we display a cookie banner in which you can give your consent to the use of cookies on the website by clicking a button. You can revoke your consent at any time via your settings in our cookie banner:

4. Recipients or categories of recipients of the data

If it is necessary for the provision of the website and web services, we will pass on your data to external recipients. External recipients may be

• Service providers - Service providers that we use for the provision of certain services, e.g. in the provision of the website, our online shop, as well as for the communication and analysis of our website. Where such external service providers need to have access to personal data, we ensure that access to this data is limited to what is necessary for the provision of the respective service. In addition, these external service providers must of course comply with all applicable data protection regulations. Details of our service providers can be found in the descriptions of our processing purposes.
• Public authorities - authorities and state institutions, such as public prosecutors, courts or tax authorities, to which personal data may have to be transmitted in individual cases.

5. Third country transfer

Third countries are all countries outside the European Economic Area (EEA), including the United Kingdom (UK), Switzerland, the USA and Canada. The European Economic Area includes all countries of the European Union as well as the countries of the so-called European Free Trade Association. These are Norway, Iceland and Liechtenstein.
A third country transfer of your data is sometimes necessary when using our website if a G DATA service provider is based in a third country and does not offer data processing in Europe. Details of our service providers can be found in the descriptions of our processing purposes.
G DATA transfers personal data to third countries outside the EEA on the basis of an adequacy decision by the European Commission. If there is no adequacy decision of the European Commission for the respective third country, the transfer to a third country is based on appropriate safeguards within the meaning of Art. 46 (2) GDPR. Copies of these guarantees can be requested from us at the above address.

6. Storage duration of your data

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Data may also be stored if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which we as the controller are subject. 

• Log data is regularly deleted promptly, but at the latest after 7 days.

7. Your rights as a data subject

With regard to the data processing listed here, you are entitled to various data subject rights that are regulated in the GDPR.

Right to information (Art. 15 GDPR) - You have the right to request information from us about your stored personal data. On request, we will provide you with a copy of the data that is the subject of the processing.

Right to rectification (Art. 16 GDPR) - You can request that we rectify inaccurate personal data.

Right to erasure (Art. 17 GDPR) - You have the right to request that we erase your personal data. Among other things, we are obliged to erase your personal data if it is no longer necessary for the purposes for which it was collected or otherwise processed, if you have withdrawn your consent or if the data has been processed unlawfully.

Right to restriction (Art. 18 GDPR) - Under certain circumstances, you have the right to demand that we restrict processing. This includes if you dispute the accuracy of your personal data and we must verify your objection. In this case, your data may not be further processed by us, with the exception of storage, until the question of accuracy has been clarified.

Right to data portability (Art. 20 GDPR) - You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format, provided that the data processing is based on your consent or a contract.

Right to withdraw consent at any time (Art. 7 GDPR) - If the data processing by us is based on your consent, you have the right to withdraw your consent at any time. The lawfulness of the processing carried out on the basis of the consent until the revocation remains unaffected by the revocation. 

Right to object at any time (Art. 21 GDPR) - If the processing of your data by us is based on the performance of a task carried out in the public interest or in the exercise of official authority (Art. 6 para. 1 sentence 1 lit. e GDPR) or if the data processing is based on legitimate interests on our part, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation. We will then cease processing unless we can demonstrate compelling legitimate grounds for the processing which override your interests in the cessation of processing. 

You can object to the processing of your personal data for direct marketing purposes at any time without restriction.

To exercise your rights, please contact us directly at: info@remove-this.gdata.de

Right to lodge a complaint (Art. 77 GDPR) - You also have the right to lodge a complaint with a data protection supervisory authority. You can contact the data protection supervisory authority of your usual place of residence or our company headquarters. The address of the supervisory authority responsible for us is

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
Kavalleriestrasse 2 - 4
40213 Düsseldorf

8. Final provisions

G DATA reserves the right to amend this Privacy Policy at any time to ensure that it always complies with current legal requirements or to implement changes to the services in the Privacy Policy, e.g. when introducing new services or changes to the G DATA Business Software. 

Version 06/24