Data protection

Thank you for your interest in our offer. Data protection is particularly important to us. The GAC Innovation GmbH website can generally be used (exceptions under 4.) without providing any personal data. However, if a data subject wishes to use our company’s special services via our website, it may be necessary to process personal data. If the processing of personal data is necessary and there is no legal or contractual basis for such processing, we generally obtain the consent of the person concerned.

The processing of personal data, for example the name, address, e-mail address or telephone number of a data subject, is always carried out in accordance with the General Data Protection Regulation and in accordance with the country-specific data protection regulations applicable to GAC Innovation GmbH. With this data protection declaration we would like to inform the public about the type, scope and purpose of the personal data we collect, use and process. Furthermore, data subjects are informed about their rights by means of this data protection declaration.

As the person responsible for data protection, GAC Innovation GmbH has implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed via this website. Nevertheless, internet-based data transmissions can generally have security gaps, so that absolute protection cannot be guaranteed. For this reason, every person concerned is free to transmit personal data to us in alternative ways, for example by telephone.

  1. Definitions

This data protection declaration is based on the terms defined by the European legislator in the General Data Protection Regulation (GDPR). Our data protection declaration should be easy to read and understand for the public as well as for our customers and business partners.

  1. Name and address of the person responsible for processing

The person responsible for processing your personal data in connection with the use of the www.group-gac.de website within the meaning of the General Data Protection Regulation, the Federal Data Protection Act and other applicable data protection laws is::

GAC Innovation GmbH

Sonnenstraße 31

80331 München

Deutschland

Telefon: +49(0) 89 26204522

E-Mail: contactinfo@group-gac.de

  1. Cookies

The GAC Innovation GmbH website uses cookies. Cookies are text files that are stored and stored on a computer system via an internet browser.
Numerous websites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier for the cookie. It consists of a string of characters through which websites and servers can be assigned to the specific Internet browser in which the cookie was stored. This enables the visited websites and servers to distinguish the individual browser of the person concerned from other internet browsers that contain other cookies. A specific internet browser can be recognized and identified via the unique cookie ID.

3.1 Technically necessary cookies
Most of the cookies that we use are technically necessary to enable you to use our website and the services offered on it. Some elements of our website require that the calling browser can be identified even after changing pages.
Our legitimate interest in data processing lies in the aforementioned purposes; The legal basis is Article 6 (1) subparagraph. 1 lit f GDPR. The data will not be merged with other personal data and will not be used for advertising purposes. Session cookies are deleted after the end of the respective browser session, at the latest after seven days.
Please note that you may not be able to use all functions of our website to their full extent if you do not accept cookies.

3.2 Google Analytics web analysis
We use Google Analytics, a web analysis service from Google Inc. (“Google”), for the purpose of tailoring our website to requirements and continuously optimizing it. We only do this if you have consented to its use via our cookie banner. In this case, the legal basis for data processing is Art. 6 Para. 1 Subpara. 1 lit. a GDPR. Consent given can be revoked at any time. Please note that the revocation will only take effect in the future. Processing that took place before the revocation is not affected.
Google Analytics uses so-called “cookies”, text files that are stored on your computer and that enable your use of the website to be analyzed. In this context, pseudonymised usage profiles are created and cookies are used. The information generated by the cookie about your use of this website such as
• the date and time of the request,
• the page from which the file was requested,
• the provider through whom the page was requested,
• the web browser used,
• the operating system used,
• the access status (file transferred, file not found etc.),
• the types of files accessed, or
• the name and size of the file retrieved.
On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading the browser plug-in available under the following link and install: http://tools.google.com/dlpage/gaoptout?hl=de

3.3 Use of Microsoft Advertising
On the website we use technologies from Microsoft Advertising (https://about.ads.microsoft.com/de-de), which are provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (“Microsoft” ) are provided and operated. Microsoft places a cookie on your device if you have reached our website via a Microsoft Bing ad. In this way, Microsoft and we can recognize that someone clicked on an ad, was redirected to our website and reached a previously specified target page (“conversion site”). We only find out the total number of users who clicked on a Bing ad and were then redirected to the conversion site. Microsoft collects, processes and uses information via the cookie, from which usage profiles are created using pseudonyms. These usage profiles are used to analyze visitor behavior and are used to display advertisements. No personal information about the identity of the user is processed.
The use of cookies and the UET function serve to optimize our advertising. The legal basis is Art. 6 Para. 1 S. 1 f GDPR. Use for marketing purposes is a legitimate interest within the meaning of the GDPR.
You can use the settings in your browser to specify that cookies are blocked and deleted. You can also object to the use of the data by Microsoft for receiving interest-based advertising by deactivating the corresponding setting via the following link: https://account.microsoft.com/privacy/ad-settings/
Bing Ads and UET are services of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. Microsoft is certified under the EU-US Privacy Shield, an agreement that guarantees compliance with the data protection regulations applicable in the EU. For more information on how Microsoft handles your data, see Microsoft’s privacy policy at: https://privacy.microsoft.com/de-de/privacystatement

3.4 Google Optimize
Our website uses the web analysis and optimization service “Google Optimize”, which is provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (hereinafter “Google Optimize”). We use the Google Optimize service to increase the attractiveness, content and functionality of our website by showing new functions and content to a percentage of our users and statistically evaluating changes in usage. Google Optimize is a sub-service of Google Analytics (see section Google Analytics).
Google Optimize uses cookies, which enable you to optimize and analyze your use of our website. The information generated by these cookies about your use of our website is usually transmitted to a Google server in the USA and stored there. We use Google Optimize with activated IP anonymization so that your IP address is shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address is only transmitted to a Google server in the USA and shortened there in exceptional cases. Google will use this information to evaluate your use of our website, to compile reports on the optimization test and the associated website activities, and to provide us with other services relating to website activity and internet usage.
You can prevent the storage of cookies by setting your internet browser accordingly. You can also prevent Google from collecting the data generated by the cookie and relating to your use of our website (including your IP address) and from processing this data by Google by downloading the browser plug-in available under the following link and install: https://tools.google.com/dlpage/gaoptout?hl=de. For more information on data collection and processing by Google, please refer to Google’s data protection information, which you can access at http://www.google.com/policies/privacy.
The legal basis for data processing is Art. 6 Para. 1 S. 1 lit. f GDPR. Our legitimate interest follows from the purposes of data collection listed above.

  1. Collection of general data and information (log files)

The GAC Innovation GmbH website collects a series of general data and information each time the website is accessed by a data subject or an automated system. These general data and information are stored in the server’s log files. The
• The browser types and versions used
• the operating system used by the accessing system
• the website from which an accessing system reaches our website (so-called referrer)
• the sub-web pages that are accessed via an accessing system on our website
• the date and time of access to the website
• an internet protocol address (IP address)
• Other similar data and information that serve to avert danger in the event of attacks on our information technology systems.

When using this general data and information, GAC Innovation GmbH does not draw any conclusions about the person concerned. Rather, this information is needed to
• to correctly deliver the content of our website
• to optimize the content of our website
• to ensure the long-term functionality of our information technology systems and the technology of our website as well
• to detect and track attacks on our information systems
• To provide law enforcement authorities with the information necessary for law enforcement in the event of a cyber attack.
This collected data and information is therefore statistically evaluated by GAC Innovation GmbH on the one hand and with the aim of increasing data protection and data security in our company in order to ultimately ensure an optimal level of protection for the personal data processed by us.
Our legitimate interest in data processing lies in the aforementioned purposes; The legal basis is Article 6 (1) subparagraph. 1 lit. f GDPR.
The data in the server log files are stored separately from all personal data provided by a data subject. The log files are deleted after 14 days, unless their further storage is necessary for the purposes mentioned above.

  1. Processing of data that you provide to us

Due to legal regulations, the website of GAC Innovation GmbH contains information that enables quick electronic contact to our company and direct communication with us, which also includes a general address for so-called electronic mail (e-mail address). If you contact us by e-mail or using a contact form, the personal data you voluntarily submit will be saved automatically.

We process your data to answer your request; The legal basis for data processing is Art. 6 Paragraph 1 subparagraph. 1 lit. f GDPR (our legitimate interest lies in being able to answer your request). Insofar as the data processing is necessary for the implementation of pre-contractual measures (e.g. for inquiries about our products or services) or the fulfillment of a contract, the legal basis is also Art. 6 para. 1 subpara. 1 lit. b GDPR.

The data from your inquiries will be deleted when the respective conversation has ended and the matter in question has been finally clarified and statutory, statutory or contractual retention periods have expired. Retention periods apply in particular if your request leads to the conclusion of a contract with us (§ 147 Paragraph 1, Paragraph 3 AO, § 257 Paragraph 1, Paragraph 4 HGB: 6-year retention period for correspondence in connection with the conclusion of a contract, 10 -year retention period for accounting documents).

  1. Newsletter

6.1 Newsletter data
If you subscribe to the GAC Innovation GmbH newsletter distribution list, we will save your email address, the date and time of registration and the type of newsletter you have selected on a server. The only mandatory information for inclusion in the e-mail distribution list is your e-mail address. After your confirmation, we will save your e-mail address for the purpose of sending the newsletter. The legal basis is Art. 6 Para. 1 S. 1 lit. a GDPR. With your consent, you agree that you will receive the latest information on the GAC Innovation GmbH offer from us.
We use the so-called double opt-in procedure to register for our e-mail distribution list. This means that after you have registered, we will send you an email to the email address you provided. In this e-mail we ask you to confirm that your e-mail address will be added to our mailing list. If you do not confirm your registration within 5 days, your information will be automatically deleted. In addition, we save the IP addresses you use and the times of registration and confirmation. The purpose of the procedure is to be able to prove your registration and, if necessary, to clarify any possible misuse of your data.

6.2 Facebook lead ads
GAC Innovation GmbH uses Facebook Lead Ads from Facebook Inc., 1601 Willow Road, Menlo Park, CA 94025, USA or – if you are based in Europe – Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (together “Facebook”) to collect contact details from interested parties who register via Facebook to receive information about our advisory services. Facebook transfers your email address to us and we save and process it in order to send you the desired content. We use the data you provide to us via Facebook Lead Ads exclusively for the purpose of establishing contact, as described in the respective form.
The legal basis for the data processing is your consent (Art. 6 Para. 1 lit. a GDPR), which you give us in the respective form. You can revoke your consent to our storage and use of the information provided via Facebook Lead Ads by unsubscribing from the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.
For all concerns in connection with (further) data processing by Facebook, please contact Facebook directly.

6.3 Google Lead Ads
GAC Innovation GmbH also uses Google Lead Ads from Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA or – if you are based in the European Economic Area or Switzerland – Google Ireland Limited, Gordon House, Barrow Street , Dublin 4, Ireland (collectively “Google”), in order to attract interested parties and collect their contact details. In doing so, Google transmits your e-mail address to us and we save and process it to inform you about our offers.
The data you provide via Google Lead Ads is also stored on Google’s servers and used by Google in accordance with Google’s privacy policy (https://policies.google.com/privacy?hl=de) and the Google Terms of Use ( https://policies.google.com/terms?hl=de) is used. Insofar as your information is transmitted to Google LLC in the USA, this transmission to a third country outside the EU is covered by an adequacy decision by the Commission within the meaning of Art. 45 GDPR, because Google LLC has submitted to the EU-US Privacy Shield ( https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
The legal basis for the data processing is your consent (Art. 6 Para. 1 lit. a GDPR), which you give us in the respective form. You can revoke your consent to our storage and use of the information provided by Google Lead Ads by unsubscribing from the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation. We store your data for as long as described in sections 6.1 and 6.2.
For all concerns in connection with (further) data processing by Google, please contact Google directly.

  1. Passing on your data

Within GAC Innovation GmbH, those departments have access to your personal data that need them to fulfill our contractual and legal obligations.
A data transfer to third countries (countries outside the European Economic Area – EEA) does not take place. We only pass on personal information if this is required by law (Art. 6 Paragraph 1 Subparagraph 1 lit. c GDPR) or the person concerned has consented (Art. 6 Paragraph 1 Subparagraph 1 lit. a GDPR , e.g. in the case of Google Analytics, see above). Under these conditions, recipients of personal data can e.g. B. be: IT service provider; Public bodies and institutions if there is a legal or official obligation.

  1. Your privacy rights

You have the right to information (Art. 15 DS-GVO), the right to correction (Art. 16 DS-GVO), the right to erasure (Art. 17 DS-GVO), the right to restrict the Processing (Art. 18 DS-GVO) and the right to data portability (Art. 20 DS-GVO). The restrictions according to Sections 34 and 35 BDSG apply to the right to information and the right to erasure.

You also have the right to object to data processing by GAC Innovation GmbH (Art. 21 GDPR).

If our processing of your personal data is based on your consent (Art. 6 Paragraph 1 Subparagraph 1 lit. a GDPR), you can revoke this at any time; the legality of the data processing carried out on the basis of the consent up to the point of revocation remains unaffected.
You can contact us at any time at contactinfo@group-gac.de to assert all of these rights as well as to further questions on the subject of personal data.
Regardless of this, you have the right to lodge a complaint with a supervisory authority – in particular in the EU member state of your place of residence, your place of work or the place of the alleged infringement – if you are of the opinion that the processing of your personal data is against the DS -GVO or other applicable data protection laws (Art. 77 DS-GV, § 19 BDSG).

  1. Obligation to provide data

As part of our business relationship, our contractual partners only have to provide the personal data that is necessary for the establishment, implementation and termination of a business relationship or that we are legally obliged to collect. Without this data, we will usually have to reject the conclusion of the contract or the execution of the order or we will no longer be able to carry out an existing contract and may have to terminate it.

The provision of personal data is partly required by law (e.g. tax regulations) or it can also result from contractual regulations (e.g. information on the contractual partner).

  1. No automated decision-making (Art. 22 Para. 1 and 4 GDPR)

As a responsible company, we do not use automatic decision-making or profiling.