Privacy policy
The authority responsible with regard to the GDPR and the BDSG is:
Grillo-Werke AG Weseler Straße 1 47169 Duisburg Tel.: +49 203 5557-0 Fax: +49 203 5557-440 info@grillo.de
www.grillo.de
Authorised Executive Board of Directors: Ulrich Grillo (Chairman), Pascal Hagemann
Data Protection Officer:
ASB Informationstechnik GmbH
Data Protection officer
Buschstr. 76
47166 Duisburg
datenschutz@grillo.de
1. The reasons for data collection
We collect and process your data to provide our website and to give you the best possible service through convenient access to our services.
2. What data is collected, processed or used?
Visit our website
When you access our websites, our servers automatically collect information of a general nature, in particular for the purpose of establishing the connection, functionality and system security. This includes the type of browser used, the operating system used, the domain name of the Internet service provider, the connection data of the computer used (IP address), the website from which you visit us (referrer URL), the pages you visit on our site, the search term if you come to our site via a search engine, files you have downloaded from our site (e.g. PDF or Word documents) as well as the date, time and duration of the visit. It is not possible for us to draw conclusions about specific persons from this data due to pseudonymisation. We do not combine this data with other data sources. The legal basis for the processing of your personal data is Art. 6 para. 1 lit. f DSGVO.
Contact form
If you contact us via the contact form, you must provide your first and last name, your e-mail address and your message to us. The data will be stored by us for the purpose of processing your enquiry and in case of follow-up questions. We do not pass on this data without your consent. The legal basis for the processing of your personal data is Art. 6 para. 1 lit. f DSGVO.
3. Deletion
Personal data will be deleted or blocked as soon as the purpose for storing it no longer applies or if you request its deletion. Data will also be deleted if a storage period prescribed by the relevant regulation expires, unless further storage is necessary for the conclusion or fulfillment of a contract, or if you have given your consent to this effect.
4. Cookies
Cookies are used so that the use of the websites and preferences of the website visitors can be made attractive. For example, your details for the selection of a country or a language are stored in this way. Cookies are text files that are placed on your hard drive to enable identification of the browser when you return to the website.
You can prevent the storage of cookies on your hard drive by adjusting the appropriate settings in your browser. Cookies that have already been set can be deleted at any time. Please refer to your browser’s instructions to learn how to delete cookies or prevent their storage. If you do not accept cookies, this may impair your ability to use our online services.
Die Rechtsgrundlage für die Verarbeitung von Cookies ist Art. 6 Abs. 1 lit. f DSGVO. Unser berechtigtes Interesse an der Verwendung von Cookies liegt in der Zurverfügungstellung einer attraktiven Website sowie in der Auswertung des Nutzerverhaltens zur Verbesserung unseres Angebotes. Einige Funktionen unserer Website könne ohne den Einsatz von Cookies nicht angeboten werden. Für diese ist auch erforderlich, dass der Browser nach einem Seitenwechsel wiedererkannt wird.
5. Data security
We secure our website and other systems against loss, destruction, access, alteration, or distribution of your data by unauthorized persons through technical and organizational measures. Despite regular checks and continuous improvement of our security measures, complete protection against all risks is not possible.
6. Automated decision making
Automated decision-making, including profiling, based on the data you provide to us does not take place. You are not obliged to provide us with your personal data. However, if you choose not to, we may be unable to provide some of the services mentioned under the purposes of processing.
7. Use of Google Analytics for web analysis
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses “cookies,” which are text files stored on your computer that allow an analysis of your use of the website. The information generated by the cookie about your use of this website is generally transmitted to and stored on a Google server in the USA. However, if IP anonymization is activated on this website, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. IP anonymization is active on this website. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website and internet usage to the website operator. The IP address transmitted by your browser within the scope of Google Analytics will not be merged with other data from Google. You can prevent the storage of cookies by adjusting the settings in your browser software; however, please note that if you do so, you may not be able to use all the features of this website to their full extent. The data will be deleted after 12 months. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available under the following link http://tools.google.com/dlpage/gaoptout?hl=de. As an alternative to the browser plug-in, you can use this link set an opt-out cookie to prevent Google Analytics from collecting data on this website in the future. This will place an opt-out cookie on your terminal device. If you delete your cookies, you must click the link again. You can find the terms of use and information on data protection at http://www.google.com/analytics/terms/de.html or at https://www.google.de/intl/de/policies/. We also use Google Analytics reports on demographic characteristics, in which data from interest-based advertising from Google and visitor data from third-party providers (e.g. age, gender and interests) are used. This data cannot be traced back to a specific person and can be deactivated at any time via the ad settings.
8. Google Tag Manager
Nature and Scope of Processing
We use Google Tag Manager provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is used to manage website tags through an interface and allows us to control the precise integration of services on our website.
This allows us to flexibly integrate additional services to evaluate user access to our website.
Purpose and Legal Basis
The use of Google Tag Manager is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG.
Storage Duration
The specific storage duration of the processed data is not within our control but is determined by Google Ireland Limited. For further information, please refer to the privacy policy for Google Tag Manager: https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/.
9. LinkedIn Insight Tag
This website uses the LinkedIn Insight Tag. The provider of this service is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
Data Processing by LinkedIn Insight Tag
With the help of the LinkedIn Insight Tag, we receive information about the visitors to our website. If a website visitor is registered with LinkedIn, we can analyze professional details (e.g., career level, company size, country, location, industry, and job title) of our website visitors and better tailor our site to the respective target groups. Furthermore, LinkedIn Insight Tags allow us to measure whether the visitors to our website make a purchase or perform another action (conversion measurement). Conversion measurement can also occur across devices (e.g., from PC to tablet). LinkedIn Insight Tag also offers a retargeting function, which allows us to show targeted advertising to visitors of our website outside of the website, without identifying the advertising target according to LinkedIn.
LinkedIn itself also collects so-called log files (URL, referrer URL, IP address, device and browser characteristics, and access time). IP addresses are truncated or hashed (pseudonymized) if used to reach LinkedIn members across devices. The direct identifiers of LinkedIn members are deleted by LinkedIn after seven days. The remaining pseudonymized data is then deleted within 180 days.
The data collected by LinkedIn cannot be assigned to specific individuals by us as the website operator. LinkedIn will store the personal data of the website visitors it collects on its servers in the USA and use it as part of its own advertising measures. For details, please refer to LinkedIn’s privacy policy at https://www.linkedin.com/legal/privacy-policy#choices-oblig.
Legal Basis
If consent has been obtained, the use of the aforementioned service is based solely on Art. 6 para. a GDPR and § 25 TTDSG. Consent can be revoked at any time. If no consent has been obtained, the use of this service is based on Art. 6 para. 1 lit. f GDPR; the website operator has a legitimate interest in effective advertising measures, including the use of social media.
The data transfer to the USA is based on the EU Commission’s standard contractual clauses. You can find details here:
https://www.linkedin.com/legal/l/dpa and
https://www.linkedin.com/legal/l/eu-sccs.
The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the United States that aims to ensure compliance with European data protection standards in data processing operations in the USA. Every company certified under the DPF is committed to adhering to these data protection standards. For more information, please refer to the provider at the following link: https://www.dataprivacyframework.gov/participant/5448.
Objection to the Use of LinkedIn Insight Tag
You can object to the analysis of usage behavior and targeted advertising by LinkedIn at the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
Furthermore, LinkedIn members can manage the use of their personal data for advertising purposes in their account settings. To prevent LinkedIn from linking data collected on our website with your LinkedIn account, you must log out of your LinkedIn account before visiting our website.
Data Processing Agreement
We have entered into a Data Processing Agreement (DPA) for the use of the aforementioned service. This is a contract required by data protection law that ensures that LinkedIn processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
10. Application and Use of Leadinfo
We use the lead generation service provided by Leadinfo B.V., Rotterdam, The Netherlands, which recognizes visits of companies to our website based on IP addresses and shows us related publicly available information, such as company names or addresses. In addition, Leadinfo places two first-party cookies for providing transparency on how our visitors use our website and the tool processes domains from provided form inputs (e.g. “leadinfo.com”) to correlate IP addresses with companies and to enhance its services.
For additional information, please visit www.leadinfo.com On this page: www.leadinfo.com/en/opt-out you have an opt-out option. In the event of an opt-out, your data will no longer be used by Leadinfo.
11. Rights of data subjects
Information, Blocking, Rectification, Restriction, and Deletion If your personal data is being processed, you are considered a data subject under the GDPR, and you have the right to request information about the data we have stored about you. Additionally, you have the right to request the rectification, blocking, restriction of processing, and/or deletion of your data. If you have asserted the right to rectification, erasure or restriction of processing, we are obliged to notify all recipients to whom the personal data relating to you has been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.
Right to Object
You have the right to object at any time to the processing of personal data concerning you that is carried out based on Art. 6 para. 1 lit. e) or f) GDPR. We will no longer process the personal data concerning you unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is for the establishment, exercise, or defense of legal claims.
Right to Withdraw Consent under Data Protection Law
You have the right to withdraw your consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of the processing carried out based on the consent before its withdrawal.
Right to Lodge a Complaint with a Supervisory Authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your residence, place of work, or the place of the alleged infringement, if you believe that the processing of personal data concerning you violates the GDPR.
The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 DSGVO.