We are very pleased with your interest in GB infraVelo GmbH. Protecting your personal data during its collection, processing and use during your visit to our Website is an important concern for us. We therefore protect your personal data within the scope of the legal regulations.
1. What personal data is collected?
We collect your personal data when you provide it to us. This can include personal data that you enter on a contact form. Our IT systems also automatically collect other personal data when you visit our Website. This would mainly be technical information (e.g. your internet browser and operating system or the time of page retrieval). Some of the personal data is collected to ensure that the Website is error-free. Other personal data may be used to analyse your user behaviour.
What rights do you have regarding your personal data?
You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to request that this personal data be corrected, erased or blocked. If you have any additional questions on the subject of data protection, you can contact us at any time at the address provided in the site notice. You also have the right to lodge a complaint with the responsible supervisory authority. You have the right to request the restriction of the processing of your personal data under certain circumstances. For details, please refer to the “Right to restriction of processing” section of the Privacy Policy.
Analysis tools and other tools provided by third parties
Your surfing behaviour can be subjected to statistical analysis when you visit our Website. This is done primarily with cookies and analysis programs. Analysis of your surfing behaviour is usually anonymous; the surfing behaviour cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. You will find detailed information in this regard in the following Privacy Policy.
2. General notes and required information
Who is the data controller, and whom can I contact?
The data controller for this Website is:
GB infraVelo GmbH
Ullsteinhaus
Mariendorfer Damm 1
12099 Berlin
Telefon: +49 (0) 30 700 906 301
E-Mail: info@infravelo.de
You can reach our company Data Protection Officer at:
Grün Berlin GmbH Data Protection Officer
Mariendorfer Damm 1
Ullsteinhaus
E-Mail: datenschutz@gruen-berlin.de
Additional information on data protection within Grün Berlin GmbH and its companies can be found at:
https://gruen-berlin.de/datenschutz
Revocation of your consent to data processing
Many data processing operations require your explicit consent. You can revoke consent you have already given at any time. All you need to do is send us an informal message by e-mail. The legality of any data processing carried out before revocation remains unaffected by the revocation.
Right to object to the collection of personal data in special cases and the right to object to direct marketing (Art. 21 GDPR)
If data processing is based on Art. 6 (1) (e) or (f) GDPR, you have the right to object to the processing of your personal data at any time on grounds relating to your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this Privacy Policy. If you lodge an objection, we will no longer process your affected personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or unless the processing serves to assert, exercise or defend against legal claims (objection according to Art. 21 (1) GDPR).
If your personal data is processed for the purpose of direct marketing, you have the right to lodge an objection to the processing of personal data concerning you for the purpose of such marketing at any time; this also applies to profiling, insofar as the profiling is related to such direct marketing. If you object, your personal data will subsequently no longer be used for the purpose of direct marketing (objection according to Art. 21 (2) GDPR).
Right to lodge a complaint with the responsible supervisory authority
In the event of violations of the GDPR, data subjects have a right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, of their place of work or of the place in which the alleged violation occurred. The right to lodge a complaint is without prejudice to any other administrative or judicial remedy.
SSL and TLS encryption
This site uses SSL and TLS encryption for security purposes and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the padlock icon on your browser line. If SSL or TLS encryption is enabled, third parties cannot read the personal data you transmit to us.
Access, blocking, erasure and correction
Within the framework of the applicable legal provisions, you have the right to information about your stored personal data, its origin and recipient and the purpose of the data processing at no charge and at any time, and, if applicable, you have the right to have this data corrected, erased or blocked. If you have any additional questions on the subject of personal data, you can contact us at any time at the address provided in the site notice.
Right to restriction of processing
You have the right to request the restriction of processing of your personal data. You can contact us about this at any time at the address provided in the site notice. The right to restriction of processing exists in the following cases: If you dispute the accuracy of your personal data held by us, we will usually need time to verify this. For the duration of the review, you have the right to request the restriction of the processing of your personal data.
If the processing of your personal data has happened/is happening illegally, you can request the restriction of data processing instead of erasure. If we no longer need your personal data, but you need it to exercise, defend or enforce legal claims, you have the right to request restriction of the processing of your personal data instead of erasure. If you have lodged an objection pursuant to Art. 21 (1) GDPR, it is necessary to weigh your interests and our interests against each other. As long as it has not yet been determined whose interests should prevail, you have the right to demand restriction of the processing of your personal data.
If you have restricted the processing of your personal data, then apart from being stored, such data may only be processed with your consent or for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person or for reasons of vital public interest of the European Union or a Member State.
3. Data collection on our Website
Note about cookies
Cookies are used to make our Website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser. Cookies do not damage your computer and do not contain any viruses.
Most of the cookies we use are known as “session cookies,” which are automatically deleted at the end of your visit. Other cookies continue to be stored on your terminal device until you delete them. These cookies make it possible for us to recognise your browser on your next visit. You can set your browser so that you are informed when cookies are set and only allow cookies on a case-by-case basis, exclude the acceptance of cookies only for certain cases or in general and enable automatic deletion of cookies when you close your browser. If cookies are disabled, the functionality of this Website may be limited.
Cookies that are required to carry out the electronic communication process or to provide certain features you want are stored on the basis of Art. 6 (1) (f) GDPR. The Website operator has a legitimate interest in storing cookies for technically error-free and optimised provision of its services.
Google Analytics
Insofar as you have given your consent, this Website uses Google Analytics 4, a Web analytics service provided by Google LLC. For users in the EU/EEA and Switzerland, the responsible entity is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).
Scope of the processing
Google Analytics uses cookies that enable analysis of your use of our Websites. The information collected about your use of this Website using cookies is usually transferred to a Google server in the United States and stored there.
With Google Analytics 4, anonymisation of IP addresses is enabled by default. Google anonymises your IP address by truncating it within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and truncated there. According to Google, the IP address that your browser transmits as part of Google Analytics is not merged with other Google data.
During your visit to the Website, your user behaviour is recorded in the form of “events”. Events can be:
- Page retrievals
- First visit to the Website
- Session start
- Your “click path”, interaction with the Website
- Scrolls (whenever a user scrolls to the end of the page (90%))
- Clicks on external links
- Internal search queries
- Interaction with videos
- File downloads
- Ads seen/clicked
- Language setting
The following is also recorded:
- Your approximate location (region)
- Your IP address (in truncated form)
- Technical information about your browser and the terminal device you are using (e.g. language setting, screen resolution)
- Your internet provider
- Referrer URL (the Website/advertising medium that referred you to this Website)
Purposes of the processing
On behalf of the operator of this Website, Google will use this information for the purpose of evaluating your [pseudonymous [NOT WITH USE OF USER ID]] use of the Website and to compile reports on Website activity. The reports provided by Google Analytics are used to analyse the performance of our Website [OPTIONAL: and the success of our marketing campaigns].
Recipients
Recipients of the personal data are/could be:
- Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as processor according to Art. 28 GDPR)
- Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States
- Alphabet Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States
It cannot be ruled out that the US authorities will access the personal data stored by Google.
Third-country transfer
Where data is processed outside the EU/EEA and there is no level of data protection equivalent to the European standard, we have established an appropriate level of data protection by concluding EU standard contractual clauses with the service provider. The parent company of Google Ireland, Google LLC, is based in California, United States. Transmission of data to the United States and access by US authorities to the personal data stored by Google cannot be ruled out. The United States is currently considered a third country from a data protection perspective. You do not have the same rights there as within the EU and EEA. You may not be entitled to legal remedies against access by the authorities.
Retention period
The data sent by us and linked to cookies is automatically deleted after 2 [OR: 14] months. Once a month, the system automatically erases data that has reached the end of its retention period.
Legal basis
The legal basis for this data processing is your consent according to Art.6 (1) (1) (a) GDPR [IF RELEVANT: Art. 49a GDPR].
Revocation
You can revoke your consent at any time with effect for the future by opening the cookie settings [SET THE LINK TO THE CONSENT TOOL SETTINGS HERE] and changing your selection there. The legality of the processing carried out on the basis of consent until revocation remains unaffected.
You can also set your browser software to prevent the storage of cookies from the outset. However, if you configure your browser to reject all cookies, you may experience limited functionality on this and other Websites. You can also prevent the collection of data generated by the cookie and related to your use of the Website (including your IP address) and the processing of this data by Google by doing the following:
a. Failing to give your consent to setting of the cookie or
b. Downloading and installing the browser add-on to disable Google Analytics HERE.
You can find more information about Google Analytics’ terms and conditions of use and Google’s privacy policy at marketingplatform.google.com/about/analytics/terms/de/ and policies.google.com.
Contact form
If you send us enquiries via the contact form, we will store your details from the enquiry form, including the contact details you provided there, for the purpose of processing the enquiry and for responding to follow-up enquiries. We do not share this data without your consent. Processing of personal data entered in the contact form is therefore based exclusively on your consent (Art. 6 (1) (a) GDPR). You can revoke this consent at any time. All you need to do is send us an informal message by e-mail. The legality of any data processing carried out before revocation remains unaffected by the revocation. The personal data you enter in the contact form will remain with us until you request that we erase it, you revoke your consent to store it or the purpose for storing the personal data no longer applies (e.g. after we have completed processing of your enquiry). Mandatory statutory provisions, including retention periods in particular, remain unaffected.
Enquiry by e-mail, phone or fax
If you contact us by e-mail, phone or fax, we will store and process your enquiry, including all resulting personal data (name, enquiry) needed for processing your enquiry. We do not share this data without your consent. Insofar as your enquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures, this data is processed on the basis of Art. 6 (1) (b) GDPR. In all other cases, processing is based on your consent (Art. 6 (1) (a) GDPR) and/or on our legitimate interests (Art. 6 (1) (f) GDPR), as we have a legitimate interest in effective processing of the enquiries addressed to us. The personal data you send to us in the contact form will remain with us until you request that we erase it, you revoke your consent to store it or the purpose for storing the personal data no longer applies (e.g. after we have completed processing of your request). Mandatory statutory provisions, including statutory retention periods in particular, remain unaffected.
Status 11-2022