Privacy policy

Below we inform you about the details of privacy policy in our company.

The authority responsible with regard to the GDPR and the BDSG is:

Grillo-Werke AG
Weseler Straße 1
47169 Duisburg
Tel.: +49 203 5557-0
Fax: +49 203 5557-440
info@grillo.de
www.grillo.de

Authorized representative of the Management Board:
Ulrich Grillo (Chairman), Pascal Hagemann

Data Protection Officer:

ASB Informationstechnik GmbH
Beauftragter für den Datenschutz
Buschstr. 76
47166 Duisburg
datenschutz@grillo.de

1. The reasons for data collection

We collect and process your data to provide our website and to give you the best possible service through convenient access to our services.

2. What data is collected, processed or used?

Visiting our website
When you access our website, our servers automatically collect information of a general nature, in particular for the purpose of establishing a connection, functionality and system security. This includes the type of browser used, the operating system used, the domain name of the Internet service provider, the connection data of the computer used (IP address), the website from which you visit us (referrer URL), the pages you visit on our site, the search term if you come to our site via a search engine, files that you have downloaded from our site (e.g. PDF or Word documents) and the date, time and duration of the visit. It is not possible for us to draw conclusions from this data about specific persons due to pseudonymization. This data is not merged with other data sources. The legal basis for the processing of your personal data is Art. 6 para. 1 lit. f GDPR.

Contact form
If you contact us via the contact form, you must enter your first and last name, your e-mail address and your message to us. The data will be stored by us for the purpose of processing your request and in the event of follow-up questions. We will not pass on this data without your consent. The legal basis for the processing of your personal data is Art. 6 para. 1 lit. f GDPR.

3. Deletion

Personal data will be deleted or blocked as soon as the purpose for storing it no longer applies or if you request its deletion. Data will also be deleted if a storage period prescribed by the relevant regulation expires, unless further storage is necessary for the conclusion or fulfillment of a contract, or if you have given your consent to this effect.

4. Cookies

Cookies are used so that the use of the websites and preferences of the website visitors can be made attractive. For example, your details for the selection of a country or a language are stored in this way. Cookies are text files that are placed on your hard drive to enable identification of the browser when you return to the website.

You can prevent the storage of cookies on your hard disk by making the appropriate browser settings. Cookies that have already been set can be deleted at any time. Please refer to the relevant browser instructions to find out how to delete cookies or prevent their storage. If you do not accept cookies, this may impair your use of our website.
The legal basis for the processing of cookies is Art. 6 para. 1 lit. Our legitimate interest in the use of cookies lies in the provision of an attractive website and in the evaluation of user behavior to improve our offer. Some functions of our website cannot be offered without the use of cookies. These also require the browser to be recognized after a page change.

5. Data security

We secure our website and other systems against loss, destruction, access, alteration, or distribution of your data by unauthorized persons through technical and organizational measures. Despite regular checks and continuous improvement of our security measures, complete protection against all risks is not possible.

6. Automated decision making

Automated decision-making, including profiling, based on the data you provide to us does not take place. You are not obliged to provide us with your personal data. However, if you choose not to, we may be unable to provide some of the services mentioned under the purposes of processing.

7. Use of Google Analytics for web analysis

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses “cookies,” which are text files stored on your computer that allow an analysis of your use of the website. The information generated by the cookie about your use of this website is generally transmitted to and stored on a Google server in the USA. However, if IP anonymization is activated on this website, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. IP anonymization is active on this website. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website and internet usage to the website operator. The IP address transmitted by your browser within the scope of Google Analytics will not be merged with other data from Google. You can prevent the storage of cookies by adjusting the settings in your browser software; however, please note that if you do so, you may not be able to use all the features of this website to their full extent. The data will be deleted after 12 months.

We use the services of Stape (stape.io) to implement server-side tracking. Stape is a provider that provides server-side tagging services to make data processing and transmission in connection with Google Analytics efficient. The data is processed by Stape exclusively in accordance with our instructions and is not used for its own purposes. Stape complies with the applicable data protection requirements and ensures that your data is processed securely.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available under the following link http://tools.google.com/dlpage/gaoptout?hl=de.

As an alternative to the browser plug-in, you can use this link set an opt-out cookie to prevent Google Analytics from collecting data on this website in the future. This will place an opt-out cookie on your terminal device. If you delete your cookies, you must click the link again. The terms of use and information on data protection can be found at http://www.google.com/analytics/terms/de.html or at https://www.google.de/intl/de/policies/

Furthermore, we use the Google Analytics reports on demographic characteristics, in which data from interest-based advertising from Google and visitor data from third-party providers (e.g. age, gender and interests) are used. This data is not traceable to a specific person and can be deactivated at any time via the ad settings.

8. Google Tag Manager

Type and scope of processing
We use the Google Tag Manager of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is used to manage website tags via an interface and enables us to control the precise integration of services on our website.

This allows us to flexibly integrate additional services to evaluate user access to our website.

Zweck und Rechtsgrundlage
Der Einsatz von Google Tag Manager erfolgt auf Grundlage Ihrer Einwilligung gemäß Art. 6 Abs. 1 lit. a. GDPR and Section 25 (1) TTDSG.

Storage period
The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Tag Manager: https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/.

9. LinkedIn Insight Tag

This website uses the LinkedIn Insight Tag. The provider of this service is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

Data processing through LinkedIn Insight Tag
With the help of the LinkedIn Insight Tag, we receive information about visitors to our website. If a website visitor is registered with LinkedIn, we can, among other things, analyze the key professional data (e.g. career level, company size, country, location, industry and job title) of our website visitors and thus better tailor our site to the respective target groups. We can also use LinkedIn Insight Tags to measure whether visitors to our websites make a purchase or take another action (conversion measurement). Conversion measurement can also be carried out across devices (e.g. from PC to tablet). LinkedIn Insight Tag also offers a retargeting function that we can use to display targeted advertising to visitors to our website outside the website, whereby, according to LinkedIn, no identification of the advertising addressee takes place.

LinkedIn itself also collects so-called log files (URL, referrer URL, IP address, device and browser characteristics, and access time). IP addresses are truncated or hashed (pseudonymized) if used to reach LinkedIn members across devices. The direct identifiers of LinkedIn members are deleted by LinkedIn after seven days. The remaining pseudonymized data is then deleted within 180 days.

The data collected by LinkedIn cannot be assigned to specific individuals by us as the website operator. LinkedIn will store the personal data of the website visitors it collects on its servers in the USA and use it as part of its own advertising measures. For details, please refer to LinkedIn’s privacy policy at https://www.linkedin.com/legal/privacy-policy#choices-oblig.

Legal basis
Insofar as consent has been obtained, the above-mentioned service is used exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 TTDSG. Consent can be revoked at any time. If no consent has been obtained, the use of this service is based on Art. 6 para. 1 lit. f GDPR; the website operator has a legitimate interest in effective advertising measures, including the use of social media.

The data transfer to the USA is based on the EU Commission’s standard contractual clauses. You can find details here:
https://www.linkedin.com/legal/l/dpa and
https://www.linkedin.com/legal/l/eu-sccs.

The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the United States that aims to ensure compliance with European data protection standards in data processing operations in the USA. Every company certified under the DPF is committed to adhering to these data protection standards. For more information, please refer to the provider at the following link: https://www.dataprivacyframework.gov/participant/5448.

Objection to the Use of LinkedIn Insight Tag
You can object to the analysis of usage behavior and targeted advertising by LinkedIn at the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

Furthermore, LinkedIn members can manage the use of their personal data for advertising purposes in their account settings. To prevent LinkedIn from linking data collected on our website with your LinkedIn account, you must log out of your LinkedIn account before visiting our website.

Order processing
We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract prescribed by data protection law, which guarantees that it processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

10. Application and Use of Leadinfo

We use the lead generation service provided by Leadinfo B.V., Rotterdam, The Netherlands, which recognizes visits of companies to our website based on IP addresses and shows us related publicly available information, such as company names or addresses. In addition, Leadinfo places two first-party cookies for providing transparency on how our visitors use our website and the tool processes domains from provided form inputs (e.g. “leadinfo.com”) to correlate IP addresses with companies and to enhance its services.

For additional information, please visit www.leadinfo.com On this page: www.leadinfo.com/en/opt-out you have an opt-out option. In the event of an opt-out, your data will no longer be used by Leadinfo.

11. Rights of data subjects

Information, blocking, rectification, restriction and erasure
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the right to request information about your data stored by us. Additionally, you have the right to request the rectification, blocking, restriction of processing, and/or deletion of your data.

If you have exercised your right to rectification, deletion, or restriction of processing, we are obligated to notify all recipients to whom your personal data has been disclosed of this rectification, deletion, or restriction of processing, unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients.

Right to object
You have the right to object at any time to the processing of personal data concerning you which is based on Art. 6 para. 1 lit. e) oder f) DSGVO erfolgt, Widerspruch einzulegen. We will no longer process the personal data concerning you unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is for the establishment, exercise, or defense of legal claims.

Right to revoke the declaration of consent under data protection law
You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Right to Lodge a Complaint with a Supervisory Authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, particularly in the Member State of your residence, place of work, or the place of the alleged infringement, if you believe that the processing of personal data concerning you violates the GDPR.

The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 DSGVO.