PRIVACY POLICY
Name and address of the controller and data protection officer
I. Name and address of the responsible person
The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the Member States as well as other data protection provisions is:
Gefriertrocknung Greven GmbH
Am Eggenkamp 17
48268 Greven
T +49 2571 507-0
E gefriertrocknung-greven@groco.de
II. Contact with the Data Protection Officer
Said-Elham Sadat
Martin Luther King Way 42-44
48155 Münster
T +49 251-7187903
GENERAL INFORMATION ON DATA PROCESSING
1. Scope of processing of personal data
We generally only process our users' personal data to the extent necessary to provide a functional website and our content and services. The processing of our users' personal data generally only occurs with the user's consent. An exception applies in cases where prior consent cannot be obtained for practical reasons and the processing of the data is permitted by law.
2. Legal basis for the processing of personal data
If we obtain the consent of the data subject for processing personal data, Article 6 (1) (a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.
For the processing of personal data necessary to fulfill a contract to which the data subject is a party, Article 6 (1) (b) GDPR serves as the legal basis. This also applies to processing operations necessary to implement pre-contractual measures.
Insofar as the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 (1) (c) GDPR serves as the legal basis.
In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 (1) (d) GDPR serves as the legal basis.
If processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 (1) (f) GDPR serves as the legal basis for processing.
3. Data deletion and storage period
The personal data of the data subject will be deleted or blocked as soon as the purpose for which they were stored no longer applies. Storage may also occur if this has been provided for by European or national legislators in EU regulations, laws, or other provisions to which the controller is subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need to continue storing the data for the conclusion or fulfillment of a contract.
4. SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the website operator, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from ‘http //’ to ‘https //’ and by the lock symbol in your browser line.
5. Your rights as a data subject
As a data subject within the meaning of the General Data Protection Regulation (GDPR), you have the following rights:
-
Right to information pursuant to Art. 15 GDPR: You have the right to request information about the personal data we have stored about you at any time.
-
Right to rectification pursuant to Art. 16 GDPR: You have the right to have incorrect or incomplete personal data rectified.
-
Right to erasure pursuant to Art. 17 GDPR: You have the right to request the erasure of your personal data, provided that there is no legal obligation to retain it.
-
Right to restriction of processing pursuant to Art. 18 GDPR: You may request that the processing of your data be restricted.
-
Right to object pursuant to Art. 21 GDPR: You have the right to object to the processing of your personal data at any time for reasons arising from your particular situation.
-
Right to data portability pursuant to Art. 20 GDPR: You have the right to receive your data in a structured, commonly used and machine-readable format or to have it transferred to another controller.
-
Right to withdraw consent pursuant to Art. 7(3) GDPR: You may withdraw your consent at any time with effect for the future. The lawfulness of the processing carried out until the withdrawal remains unaffected.
-
Right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR: If you believe that the processing of your personal data violates applicable data protection law, you have the right to lodge a complaint with a data protection supervisory authority.
The competent supervisory authority for our company is:
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW)
Kavalleriestraße 2–4
40213 Düsseldorf
Phone 0211 38424-0
Email poststelle@ldi.nrw.de
Website: www.ldi.nrw.de
To exercise your rights or if you have any questions about the processing of your personal data, you can contact us at any time:
Gefriertrocknung Greven GmbH
Am Eggenkamp 8–10
D-48268 Greven
Email: datenschutz@groco.de
For data protection-related concerns, we recommend that you contact our data protection officer directly. They are available as an independent contact person for questions regarding data protection in our company.
Contact details for the data protection officer:
Email: datenschutz@dsb-ms.de
DATA COLLECTION ON OUR WEBSITE
1. Website hosting
Our website is hosted by an external service provider (Wix.com Ltd., Yunitsman 5 St, Tel Aviv, Israel). The personal data collected on our website is processed on the servers of the hosting service provider. This may include, in particular, IP addresses, meta and communication data, website accesses and other data generated via our website.
The hosting service provider is used for the purpose of secure, stable and efficient provision of our website in accordance with Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the professional and reliable provision of our online offering.
A data processing agreement has been concluded with the hosting service provider in accordance with Art. 28 GDPR, which ensures that the data is processed exclusively in accordance with our instructions and protected by appropriate technical and organisational measures.
2. Server log files
When you use the website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR):
– IP address
– Date and time of the request
– Time zone difference to Greenwich Mean Time (GMT)
– Content of the request (specific page)
– Access status/HTTP status code
– Amount of data transferred
– Website from which the request originates
– Browser
– Operating system and its interface
– Language and version of the browser software.
3. Use of cookies
Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is accessed again.
We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change.
We also use cookies on our website that enable an analysis of the surfing behaviour of users.
The user data collected in this way is pseudonymised by technical measures. Therefore, it is no longer possible to assign the data to the calling user.
The data is not stored together with other personal data of the user.
When accessing our website, users are informed about the use of cookies for analysis purposes via an information banner and referred to this privacy policy. In this context, there is also a reference to how the storage of cookies can be prevented in the browser settings.
When accessing our website, users are informed about the use of cookies for analysis purposes and their consent to the processing of personal data used in this context is obtained. In this context, reference is also made to this privacy policy.
Legal basis:
The legal basis for the use of technically necessary cookies is provided by Section 25(2)(2) of the German Telemedia Act (TDDG) in conjunction with Article 6(1)(f) of the GDPR. These cookies are necessary to ensure the operation of our website and to enable certain functions.
The legal basis for storing information on the user's device and accessing this information using cookies for analysis or marketing purposes is Section 25 (1) TDDDG. This processing is carried out exclusively on the basis of the prior consent of the user in accordance with Art. 6 (1) lit. a GDPR, which is obtained via our cookie banner.
Purpose
The purpose of using technically necessary cookies is to ensure basic functions and the secure provision of our website. Some functions of our website require that the browser be recognised even after a page change. The data collected by technically necessary cookies is not used to create user profiles.
Cookies for analysis or marketing purposes serve to better understand user behaviour on our website and to continuously improve our content and user experience. This allows us to learn, for example, how often certain pages are accessed or how users navigate through our site. This data processing only takes place with the prior consent of the user and on the basis of Section 25(1) TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR.
Duration of storage, objection and removal options:
Cookies are stored on the user's end device and transmitted to our website. As a user, you therefore have full control over the use of cookies.
You can deactivate, restrict or delete cookies that have already been stored at any time in your Internet browser settings. This can also be done automatically. Please note that if you deactivate technically necessary cookies, not all functions of our website may work properly.
For cookies that are set on the basis of your consent in accordance with Section 25 (1) TDDDG in conjunction with Art. 6 (1) lit. a GDPR (e.g. for analysis and marketing purposes), you can revoke your consent at any time with effect for the future. This can be done via our cookie banner or the corresponding settings under ‘Cookie settings’ on our website.
Information on the type, purpose and storage duration of the cookies used can be found in the cookie description.
4. Contact form and email contact
When you contact us by email, we process the personal data you provide for the purpose of processing your enquiry. This applies in particular to the following mandatory information that you provide in your message:
· Name
· Company
· Address
The legal basis for the processing of this data is Art. 6 para. 1 lit. b GDPR, as the processing is carried out for the purpose of implementing pre-contractual measures taken at your request.
In addition, when you send your email, your email service provider will usually also transmit your IP address and the date of dispatch. This information is processed for technical reasons in order to deliver the email and to check for possible security risks (e.g. spam or misuse). The legal basis for this is your consent in accordance with Art. 6 para. 1 lit. a GDPR, which you voluntarily give by contacting us.
You can revoke your consent at any time with future effect, e.g. by sending us a corresponding message by email.
Your data will not be passed on to third parties. The data will be used exclusively for processing your enquiry and will be deleted as soon as it is no longer required for the purpose and there are no legal obligations to retain it.
5. LinkedIn company profile
We maintain a publicly accessible company profile on the LinkedIn platform, provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (‘LinkedIn’). We use this page to provide information about our company, our services and current developments, and to get in touch with interested parties and customers.
When you visit our LinkedIn company page, LinkedIn processes personal data of users (e.g. IP address, device information, interactions with content), regardless of whether the data subject is registered with LinkedIn or not. This data processing is carried out under joint responsibility in accordance with Art. 26 GDPR. The relevant agreement on joint responsibility can be found here:
https://legal.linkedin.com/pages-joint-controller-addendum
The processing of personal data by us within the scope of our LinkedIn profile is based on our legitimate interest in a contemporary and informative external presentation and communication with interested parties in accordance with Art. 6 para. 1 lit. f GDPR.
Please note that LinkedIn may use cookies and similar technologies when you use the platform, the use of which – in particular for analysis and marketing purposes – requires consent in accordance with Section 25(1) of the German Telemedia Act (TDDDG) if you actively use the platform. For more information on the processing of personal data by LinkedIn, please refer to LinkedIn's privacy policy:
https://www.linkedin.com/legal/privacy-policy
If you contact us via LinkedIn, we will process the associated information exclusively for the purpose of processing your enquiry in accordance with Art. 6 para. 1 lit. b or lit. f GDPR, depending on the nature of the enquiry.
6. Google Analytics 4 (GA4)
We use Google Analytics 4, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), on this website. GA4 uses cookies and similar technologies to evaluate the use of our website and to compile reports on website activity.
Data processing is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with § 25 para. 1 TDDDG, which you can give via the cookie banner.
IP anonymisation is activated so that your IP address is truncated before being transmitted to Google.
This means that conclusions about your person cannot be drawn. Transfer to third countries (e.g. the USA) cannot be ruled out, but is based on EU standard contractual clauses.
You can revoke your consent at any time and deactivate Google Analytics, e.g. via your browser settings or via the following opt-out:
https://support.google.com/analytics/answer/181881?hl=de
Further information on data protection at Google can be found at:
https://support.google.com/analytics/answer/6004245?hl=de
https://policies.google.com/privacy?hl=de
7. Cookie description
We use various cookies on our website to ensure functionality, enable statistical analysis and provide you with a better user experience. These include technically necessary cookies and, if you have given your consent, cookies for analysis and marketing purposes.
You can revoke or adjust your consent to the use of cookies requiring consent at any time via our cookie banner. You can access this at any time via the corresponding link (‘Cookie settings’) at the bottom of our website.
Further information on the cookies used, their storage duration and purpose can be found in the following overview.
Cookies
-Cookie name: bSession
Provider: Wix.com
Purpose: Stores a unique ID for the duration of the browser session to monitor system performance and ensure user experience.
Duration: Session (deleted when the browser is closed)
Category: Technically necessary
Legal basis: Section 25 (2) No. 2 TDDDG, Art. 6 (1) lit. f GDPR
-Cookie name: consent-policy
Provider: Wix.com
Purpose: Stores the user's decision regarding consent to various cookie categories in order to comply with the legal requirements of the GDPR and TDDDG.
Duration: Usually 12 months (depending on configuration)
Category: Technically necessary
Legal basis: Section 25 (2) No. 2 TDDDG, Art. 6 (1) lit. c GDPR
-Cookie name: hs
Provider: Wix.com
Purpose: This cookie is set for security reasons, e.g. to protect against attacks such as cross-site request forgery (CSRF).
Duration: Until the end of the session (session cookie)
Category: Technically necessary
Legal basis: Section 25 (2) No. 2 TDDDG, Art. 6 (1) lit. f GDPR
-Cookie name: server-session-bind
Provider: Wix.com
Purpose: Binds the visitor's session to a specific server to ensure a stable and consistent connection to the website (load balancing).
Duration: Until the end of the session (session cookie)
Category: Technically necessary
Legal basis: Section 25 (2) No. 2 TDDDG, Art. 6 (1) lit. f GDPR
-Cookie name: ssr-caching
Provider: Wix.com
Purpose: This cookie is used to indicate whether a page has been delivered via server-side caching. It is used exclusively to optimise loading times.
Duration: Short-term (a few seconds to minutes)
Category: Technically necessary
Legal basis: Section 25 (2) No. 2 TDDDG, Art. 6 (1) lit. f GDPR
-Cookie name: svSession
Provider: Wix.com
Purpose: This cookie is used to identify visitors on repeat visits, store user settings and provide security features.
Duration: 2 years
Category: Functional
Legal basis: Section 25 (1) TDDDG, Art. 6 (1) lit. a GDPR (consent via cookie banner required)
-Cookie name: XSRF-TOKEN
Provider: Wix.com
Purpose: Serves to ensure the security of the website and protects against cross-site request forgery attacks.
Duration: Until the end of the session
Category: Technically necessary
Legal basis: Section 25 (2) No. 2 TDDDG, Art. 6 (1) lit. f GDPR
-Cookie name: _ga_4RBRZM6R9F
Provider: Google LLC
Purpose: Used to store and analyse sessions within Google Analytics 4. Recognises returning users and measures their interactions with the website.
Duration: 2 years
Category: Analysis
Legal basis: Section 25 (1) TDDDG, Art. 6 (1) lit. a GDPR (consent via cookie banner required)
-Cookie name: _ga
Provider: Google LLC
Purpose: Used to recognise visitors for the purpose of analysing website usage. Collects an anonymised ID to recognise returning users.
Duration: 2 years
Category: Analysis
Legal basis: Section 25 (1) TDDDG, Art. 6 (1) lit. a GDPR (consent required)
2025, May