Privacy Policy for visiting our website
Responsible Body (Controller)
The company responsible for data processing on this website is
Gi-Unit GmbH
Köpenicker Str. 9
10997 Berlin
E-Mail: info@gi-unit.de
Tel.: +49 30 97006 868
Fax: + 49 30 97006 135
www.gi-unit.de
We process and use your personal data exclusively in accordance with the statutory data protection regulations, in particular the General Data Protection Regulation (GDPR).
Nature, Scope, Purpose, and Legal Basis of Processing Your Personal Data When Visiting the Website
When you visit our website for information purposes, our servers located in Germany store only the personal data that your browser transmits to our servers in a log file on the basis of Art. 6 (1) lit. f GDPR.
The following data is collected when you visit our website and stored by us until automated deletion:
- data and time of access
- name and URL of the retrieved file
- website from which access is made
- operating system of your computer, and browser used by you
- IP address
- name of your Internet service provider
The collection and processing of the date, time, name, and URL of the retrieved file as well as the website from which the access takes place is carried out for the purpose of enabling the use of the website (connection establishment), correctly delivering the contents of our website, and permanently ensuring system security and stability.
Data processing with regard to information on the operating system and browser used, as well as the name of the Internet service provider, is used to enable the technical administration of the network infrastructure and the optimization of our Internet offering, as well as for internal statistical purposes.
The IP address is only evaluated in the event of attacks on our network infrastructure and for statistical purposes. The processing of this data is based on our legitimate interest in protecting our website from unauthorized access.
Storage Duration and Deletion
Gi-Unit processes and stores personal data of the data subject only for the period necessary to achieve the purpose of storage or if required by the GDPR or other regulations, in particular statutory retention periods. In the case of a visit to our website, your data will be stored for a maximum of 7 days for the purpose of detecting and defending against attacks.
If the purpose of storage no longer applies or if a prescribed storage period expires, the personal data will be routinely blocked or deleted in accordance with the statutory provisions.
Request by E-mail, Phone, or Fax
If you contact us by e-mail, telephone, or fax, your inquiry including all resulting personal data (name, inquiry) will be stored and processed by us for the purpose of processing your request. We do not pass on this data without your consent.
The processing of this data is based on Art. 6 (1) lit. b GDPR, if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on your consent (Art. 6 (1) (a) GDPR) or is based on our legitimate interest in the effective processing of the enquiries to us.
We store the data you transmit to us until the purpose for data storage no longer applies (e.g., after your request has been processed), you revoke your consent to storage, or request us to delete it. Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.
Cookies
No cookies are set when you visit our website.
Web Fonts
The fonts we use are stored on our own servers. This means that data is not transferred to third parties.
Data Security
We use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments. See also above ISO 27001 certificate for the highest security.
Recipients of Personal Data
We have commissioned a service provider to host this website. External hosting is carried out in the interest of secure, fast, and efficient provision of our website (Art. 6 para. 1 lit. f GDPR). The service provider carries out the hosting of the website as a processor (Art. 28 GDPR) in accordance with our instructions and on the basis of a data processing agreement.
Your Rights as Data Subject
- Right of Access (Art. 15 GDPR): You have the right to request confirmation as to whether personal data concerning you is being processed. If this is the case, you have a right to information about this personal data and to the information listed in detail in Art. 15 GDPR.
- Right to Rectification (Art. 16 GDPR): You have the right to request without undue delay the rectification of any inaccurate personal data concerning you and, where applicable, the completion of any incomplete data.
- Right to Erasure (Art. 17 GDPR): You have the right to request that personal data concerning you be erased without delay, provided that one of the reasons listed in detail in Art. 17 GDPR applies.
- Right to Restriction of Processing (Art. 18 GDPR): You have the right to request the restriction of processing if one of the conditions listed in Art. 18 GDPR applies, e.g., if you have objected to the processing, for the duration of the review by the controller.
- Right to Data Portability (Art. 20 GDPR): In certain cases, which are detailed in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, common, and machine-readable format or to request the transfer of this data to a third party.
- Right of Withdrawal (Art. 7 GDPR): If the processing of data is based on your consent, you are entitled to revoke your consent to the processing of your personal data at any time in accordance with Art. 7 (3) GDPR. Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected.
Right to Object to Data Collection in Special Cases and to Direct Advertising (Art. 21 GDPR)
If the data processing is based on our legitimate interest (Art. 6 para. 1 lit. f GDPR), you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this data protection declaration. If you lodge an objection, we will no longer process your personal data concerned unless we can prove compelling reasons for processing which are worthy of protection and which outweigh your interests, rights, and freedoms, or unless the processing serves to assert, exercise, or defend legal claims (objection in accordance with Art. 21 Para. 1 GDPR). If your personal data are processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing, including profiling, insofar as it is linked to such direct marketing. If you object, your personal data will no longer be used for the purpose of direct advertising (objection according to Art. 21 para. 2 GDPR).
Right to Complain to a Supervisory Authority (Art. 77 GDPR)
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you are of the opinion that the processing of data concerning you violates data protection provisions. The right of complaint can be asserted in particular before a supervisory authority in the Member State of your habitual residence, your place of work, or the place of the alleged infringement.
Assertion of Your Rights
Unless otherwise described above, to assert your data subject rights, please contact the controller (see above) in writing (by mail or by e-mail).
Adjustments
We reserve the right to update this Privacy Policy from time to time. Updates to this Privacy Policy will be posted on our website. Changes will apply as of their publication on our website.
Status of Data Protection Information: December 2023