Privacy Policy
Data protection information for visitors to the website
We, Gersys GmbH, Hans-Urmiller-Ring 12a, 82515 Wolfratshausen, Telefon: +49 (0) 8171 42 88 55 0, E-Mail: beratung(@)starhead.de, set out below how we process your personal data on this website. Should you have any questions relating to data protection, please contact us at beratung(@)starhead.de.
Purpose, legal basis, categories of recipients, storage period for the data processing
Purpose: Presentation of the company as well as communication through the Internet
The purpose of data processing on this website is to provide information about the products and services of our company, combined with the opportunity for users to be able to make contact with the appropriate contact person in house.
In providing our website, we comply with the requirements of the EU General Data Protection Regulation (DSGVO), the German Federal Data Protection Act (BDSG), the German Digital Services Act (DDG) and the Telecommunications Digital Services Data Protection Act (TDDDG). We process personal data in particular in accordance with the following legal bases:
- Art. 6 (1)(a) GDPR for the processing of personal data with the consent of the data subject.
- Art. 6 (1)(b) GDPR for the processing of personal data necessary for the performance of a contract with the data subject, as well as for taking appropriate steps prior to entering into a contract.
- Art. 6 (1)(c) GDPR for the processing necessary for compliance with a legal obligation to which we are subject in accordance with applicable EU law or in accordance with the applicable law of a country in which the GDPR is applicable in whole or in part.
- Art. 6 (1)(f) GDPR for the processing of personal data necessary to protect the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject. Legitimate interests are, in particular, our commercial interest to be able to provide our website, the security of information, the enforcement of our own legal claims and the compliance with further legislation.
To this end, in the context of service provision, we use service providers that have been separately bound to maintain confidentiality and to protect data. This category of recipients includes IT and Hosting service providers, web agencies and external consultants. Data shall only be disclosed to a third party in the existence of overriding statutory provisions. If data is transferred to third countries, we observe the requirements of Art. 44 et seq. GDPR.
When you visit the website, a connection is established with your browser. The information collected, which is listed below, is stored in temporary system files and recorded automatically: IP address of your device, data and time of access, name and URL of files accessed, website from which access is initiated or from which you are directed to our site (referrer URL), browser used and, where applicable, the operating system of your device, as well as the name of your provider.
The data specified is processed by us for the purpose of seamlessly establishing a connection and for system security. The connection data created is automatically deleted is and is not retained for more than seven days. If the website is used improperly, log files, which need to be retained for evidence purposes, are saved until the incident is clarified.
Use of storage technologies on your device
This website uses storage technologies ("cookies” and/or your browser's memory) to enable storage of your use of the website. The information generated by cookies about your usage behaviour on this website is used to evaluate visitor behaviour on the website and to improve how we provide information.
If the use of storage technologies on your end device is necessary for the functionality of the website, we use this technology on the basis of our legitimate interests in improving our information offering and ensuring the functionality of the website and information security on the website. The legal basis for data processing is then Art. 6 (1) (f) and Section 25 (2) no. 2 TDDDG.
If cookies are used that are not necessary for the operation of the website, we will ask for your consent in advance. The legal basis for data processing is then Art. 6 para. 1 lit. a GDPR in conjunction with § 25 para. 1 TDDDG (consent).
The cookies will be deleted after two years. You can revoke your consent at any time via the cookie settings. Alternatively, you can clear your cache in your browser settings to remove the cookies.
The cookies are then deleted after two years at the latest. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. Data collection is anonymized; the data collected cannot be traced back to you personally.
Adobe Fonts
This website uses fonts (“Proxima Nova”) provided via the Adobe Fonts service of Adobe Systems Software Ireland Limited, 4–6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland. When you open a page, your browser loads the required fonts from Adobe's servers, which involves the transmission of your IP address to Adobe. Adobe does not set cookies in this process; only technical data required to provide and bill the fonts is collected. The legal basis is our legitimate interest in a consistent and appealing presentation of our website (Art. 6 (1) (f) GDPR). Further information: https://www.adobe.com/privacy/policies/adobe-fonts.html
Integration of YouTube videos
We use YouTube, a service for embedding videos provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The legal basis for this processing is your consent according to Art. 6 (1) (a) GDPR. The YouTube content is only loaded after your approval. The YouTube videos are embedded with deactivated tracking functions in its code. Further information on this can be found in Google's detailed privacy policy at: https://policies.google.com/privacy?hl=en-GB. Opt-Out: https://adssettings.google.com/authenticated. The possibility that data might be transmitted to a Google server in the USA cannot be excluded. Data transfer to the USA only occurs if the requirements of Art. 44 et seq. GDPR are fulfilled. When using this service, YouTube's terms of use apply. They can be found at: https://www.youtube.com/static?template=terms.
Contact form
If you contact us via our contact form, your data from the form will be processed for your request. The legal basis for the data transfer to us is your consent according to Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. The data will then be deleted. If no further retention obligation arises from your request (e.g. when placing an order), the data will be deleted after three years. Your data will be forwarded internally to the responsible contact person for processing your request. Your data will not be transferred to third parties without your explicit consent.
Your right to information, rectification, deletion, object and data portability
You may avail yourself of your right to information, rectification and deletion of data at any time. Simply contact us using one of the methods described above. Should you require data to be deleted, which we are still legally obligated to retain, access to your data will be restricted (blocked). The same applies to an appeal. You may avail yourself of your right to data portability if the recipient and ourselves have the technical means.
Right of appeal
You have the option at any time to lodge an appeal with a data protection supervisory authority.
Data security / encryption
This website uses “Hypertext Transfer Protocol Secure” (https). The connection between your browser and our server is encrypted.
Currentness and amendment of this data protection notice
We reserve the right to amend the content of this data protection notice at any time. This usually occurs due to further development or adjustment of the services used. You can view the current data protection information on our website. Date of this data protection notice: 08.07.2024.