Privacy Policy for GTK Data GmbH
One of our main priorities is the privacy of our customers and other interested parties. Your personal data and the confidential treatment of your personal data have the highest priority for us. We take this task very seriously.
This Privacy Policy describes what information we collect and record and how we use this information.
If you have additional questions or require more information about our Privacy Policy, please do not hesitate to contact us.
Contact details of GTK Data GmbH (Data Controller):
GTK Data GmbH
represented by the managing directors
Dr. Angela Harth, Willi Schröder
Siegfriedstr. 28
53179 Bonn, Germany

Telefon: +49 (0)228 96 76 24-0

Fax: +49 (0)228 96 76 24-29

E-Mail: mail@gtk-data.com

Data categories
We process the following personal data:
Contact details: first name and last name, e-mail address, depending on the type of request also the address, telephone numbers, position, client and/or corresponding company or institution, IP-address and IP-location, exit-pages and URLs, number, duration and time of visit, search engine and keywords used to find the GTK Data site.
Data relating to consultation services: contents of inquiries, communication in the context of the consulting services, documents, file notes; invoices.

The legal basis for collecting and using personal information described in this Privacy Policy depends on the information we collect and the specific context in which we collect the information. We process your data in different ways depending on whether you visit our website, express an interest in our services, or whether you are our client, supplier, business partner or job applicant:

• GTK Data GmbH needs to perform a contract with you, see Art. 6 para 1 lit. (b) GDPR.
• You have given GTK Data GmbH permission to do so, see Art. 6 para 1lit. (a) GDPR.
• Processing your personal information is in GTK Data GmbH legitimate interests, see Article 6 para. 1 (f) GDPR.
• GTK Data GmbH needs to comply with the law, see Art. 6 para. 1 lit. (c) GDPR

Service offering, potential client and client relation:
If you enquire about our services, the processing is based on Art. 6 para. 1 lit (b) GDPR in order to take steps at your request prior to entering into a contract.
Personal data we collect in the precontractual phase:
Name, E-mail address, telephone number, other personal data that you provide to us, IP Address and IP location, referring (exit pages and URLs), number, duration and time of visits (your interaction with the Website), search engines, key-phrases and keywords used to find our site.

Personal data we collect in the contractual phase:
Name, E-mail address and other contact details, your role and function

Processing of Personal Data relating to our suppliers and business partners
Your Personal Data is processed, first and foremost, for the purpose of concluding, maintaining, and fulfilling our contracts. We may refer clients to you or you may refer clients to us. We do so based on a referral agreement and the processing is based on the performance of such referral agreement (Art. 6 para. 1 lit. (b) GDPR)
We mainly process the Personal Data you provide us with. We collect name, E-mail address and other contact details, your role and function in the company, business activity.

Recipients
For GTK Data to be able to achieve the objectives described above, it may be necessary to disclose your Personal Data in certain cases.
The personal data collected - is intended for GTK Data’s sales, commercial, HR and accounting departments. It may be transmitted to GTK companies and GTK Data’s subsidiaries, or to third-party data processors which GTK Data is authorized to use within the context of the performance of its services.
In this context, personal data may be transferred to an EU or non-EU country. GTK Data implements guarantees ensuring the protection and security of this data, in compliance with applicable rules and regulations.
GTK Data does not transfer or make otherwise available personal data to third parties for marketing purposes.
In addition, personal data may only be disclosed to third parties for purposes other than marketing in the following cases:

• with your consent,
  
• at the request of the competent legal authorities, upon judicial request, or in the context of a legal dispute.

Retention of personal data
GTK Data GmbH will retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our policies.

For clients and for business partners:

all data necessary for tax purposes, especially contracts, invoices and other bookkeeping documents as well as relevant correspondence in relation to our contractual relationship we store for a period of ten years. All other data will be kept for a period of 6 years.

Obligation to cooperate and provide personal data
It may be necessary for the fulfilment of a service that you provide us with personal data. If you are not willing to do so, we may not be able to provide our service(s).

Third country data transfer
Prior to a data transfer to a third country, we ensure an appropriate level of data protection as demanded by GDPR.

Data security
We handle personal data only as permitted by data protection regulations.           

We use a variety of technical and organisational measures to help protect your personal data from unauthorised access, disclosure, modification, loss or destruction in accordance with applicable data protection laws. If we store or process personal data, it occurs in a high-security data centre in Germany. In order to protect the security of your Personal Data during transfer, we use encryption techniques (e.g., SSL) over HTTPS. Our servers are secured by firewall and virus protection. Back-up and recovery procedures as well as roles and authorization policies are in place. When handling Personal Data, our employees are obliged to comply with the regulations of GDPR.

Your rights with respect to Processing of Personal Data
GDPR and other applicable data protection laws protect certain rights of data subjects. In particular:

Right of Access
You have the right to obtain confirmation about your Personal Data that are being processed and the purposes of the processing.

Right of Rectification
You have the right to request that any personal data that is inaccurate or incomplete is corrected by us.

Right to Erasure or "right to be forgotten"
You have the right to request that we erase your personal data, provided that there are no valid grounds for its retention, for example in cases where we have to keep personal data to comply with legal obligation or because a court case is in progress.

Right to Data Portability
You have the right to receive the personal data that you have provided to us in a digital format or to request the direct transmission of your personal data to another entity that becomes responsible for your personal data, however only if technically feasible.

Right to Withdraw Consent or Right of Opposition
You have the right to withdraw your consent at any time with effect for the future. You may also object to the processing based on Art 6 para. 1 lit. (f) GDPR, provided that no legitimate interests exist prevailing over your interests, rights and freedoms.

Right of Limitation
You have the right to request the limitation of the processing of your personal data, in the form of: (i) suspension of processing or (ii) limitation of the scope of processing to certain categories ofp data or purposes of processing.

Right to complain
If you believe that the processing of personal data concerning you is unlawful, you may lodge a complaint with a data protection supervisory authority having jurisdiction over the place where you reside or work or over the place of the alleged infringement.

The supervisory authority for GTK Data GmbH office is

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia, PO Box 20 04 44, 40102 Düsseldorf, Germany, E-Mail: poststelle@ldi.nrw.de
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Postfach 20 04 44, 40102 Düsseldorf, E-Mail: poststelle@ldi.nrw.de

We value your data subject rights under GDPR and provide you with an easy way to submit us privacy related request like a request to access or erase your personal data. If you want to make use of your data subject rights, please use: mail@gtk-data.com

Log Files
GTK-Data.com follows a standard procedure of using log files. These files log visitors when they visit websites. The information collected by log files include internet protocol (IP) addresses, browser type, Internet Service Provider (ISP), date and time stamp, referring/exit pages, and possibly the number of clicks. These are not linked to any information that is personally identifiable. The purpose of the information is for analysing trends, administering the site and tracking users' movement on the website. This data is not merged with other data sources. This data is recorded on the basis of Art. 6 Sect. 1 lit. (f) GDPR.

reCAPTCHA
To protect your requests, we use the service reCAPTCHA of the company Google LLC (Google). The service is used to distinguish whether the input is made by a human being or abusive by automated, machine processing. The service includes the sending of the IP address and possibly other data required by Google for the reCAPTCHA service to Google. For this purpose, your input is transmitted to Google and further used there. However, your IP address will be shortened beforehand by Google within member states of the European Union or in the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of this service. The IP address transmitted by your browser as part of reCaptcha will not be merged with any other data held by Google. The deviating data protection regulations of Google apply to this data. You can find more information on Google's privacy policy at: https://policies.google.com/privacy?hl=de

Cookies and Web Beacons     

Cookies: 
Like any other website, GTK-Data.com uses 'cookies'. These cookies are used to store information including visitors' preferences, and the pages on the website that the visitor accessed or visited. The information is used to optimize the users' experience by customizing our web page content based on visitors' browser type and/or other information.
You can choose to disable cookies through your individual browser options. More detailed information about cookie management with specific web browsers can be found at the browsers' respective websites. You can set your browser so that you are informed about the setting of cookies, allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general or activate the automatic deletion of cookies when closing the browser.

The cookie settings can be managed under the following links for the respective browsers:

Google Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en   

Mozilla Firefox: https://support.mozilla.org/en-US/kb/block-websites-storing-cookies-site-data-firefox                                       

Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies                                         

Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac                 

Opera: https://help.opera.com/en/latest/
At this stage this website of GTK Data uses functional cookies only.

Use of Google Fonts
The processing is based on a legitimate interest of GTK Data. The legal basis for this is Art. 6 para. 1 li (f) GDPR. The legitimate interest of the website operator is search engine optimisation, user-friendliness through improved loading times and for international visitors to our website, lower administrative effort and uniform presentation across devices.

Changes to this Privacy Policy and data protection provisions
We reserve the right to modify this Privacy Policy, so it is always in compliance with the current legal requirements or to implement changes to services in the Privacy Policy, e.g., when introducing new services. In this case, your future visits to our website will be subject to the updated Privacy Policy. If you have additional questions regarding the processing of your Personal Data, please feel free to contact us directly through above contact options.

Online Privacy Policy Only
Our Privacy Policy applies only to our online activities and is valid for visitors to our website with regards to the information that they shared and/or collect in GTK-Data.com. This policy is not applicable to any information collected offline or via channels other than this website.

Consent
By using our website, you hereby consent to our Privacy Policy and agree to its terms.