Privacy Policy

We are pleased that you are visiting our website. The protection and security of your personal data when using our website is very important to us. Therefore, we would like to inform you below which personal data we collect when you visit our website and for what purposes it is used. This privacy policy applies to the online presence of Gerresheim serviert GmbH & Co. KG, which is accessible under the domain www.gerresheim-serviert.de and its subdomains ("our website").

Controller and Contact Details

Controller pursuant to the EU General Data Protection Regulation (GDPR):

Gerresheim serviert GmbH & Co. KG
Australiastr. 52B
20457 Hamburg, Germany
info@gerresheim-serviert.de
040 60017

Data Protection Officer:
INNAVIS Treuhand GmbH & Co. KG
Gutenbergstraße 1
26632 Ihlow Riepe, Germany
Mario Barthel

Purpose and Legal Basis

This privacy notice is designed to comply with the transparency obligations under the GDPR regarding the processing of personal data—i.e. any information relating to an identified or identifiable natural person. This includes information such as your name, address, email address, IP address, or user behavior on websites.
Data that cannot be linked to your identity (or only with a disproportionate effort), such as anonymized information, is not considered personal data.
The processing of personal data always requires a legal basis and a clear purpose. Personal data is deleted once the purpose of processing is fulfilled and there are no further legal obligations to retain the data.

Who Receives My Data?

Your personal data will only be disclosed to third parties if this is necessary for the intended purpose and legally permitted (e.g. based on your consent or our legitimate interests).
We may also share data with third parties for the establishment, exercise, or defense of legal claims—such as law enforcement, attorneys, courts, or tax consultants.
In cases where we use service providers to operate our website, they may process personal data as data processors pursuant to Article 28 GDPR. Further details are provided under the respective processing operations.

Cookies and Tracking Technologies

Cookies are small text files stored by your browser on your device. In addition to cookies, we may also use local storage in your browser. Some cookies are necessary for the technical operation of the website (e.g. to display content). Others are used for analytical or marketing purposes.

Cookies enable us to improve the usability and performance of our website, track your usage, and remember your preferences (e.g. language or region).

Details on cookies in use and consent management can be found in our Cookie Settings or Consent Manager.

Über die jeweiligen Dienste, für die wir Cookies einsetzen, informieren wir in den einzelnen Verarbeitungsvorgängen. Ausführliche Informationen zu den eingesetzten Cookies finden Sie in den Cookie-Einstellungen oder im Consent Manager dieser Website.

Your Rights Under the GDPR

You have the following rights under the GDPR:

• Right of access (Art. 15): Information about the data we store about you and the purposes of processing.
• Right to rectification (Art. 16): Correction of inaccurate or incomplete data.
• Right to erasure (Art. 17): Deletion of data no longer necessary, unless legal exceptions apply.
• Right to restriction (Art. 18): Limiting processing if certain conditions are met.
• Right to data portability (Art. 20): Transfer of your data in a structured format to another controller.
• Right to object (Art. 21): Objection to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent (Art. 7 para. 3): With effect for the future at any time.
• Right to lodge a complaint (Art. 77): With a supervisory authority in case of concerns about data protection compliance.

Data Processing in Detail

Provision of the Website

When accessing our website, your browser automatically sends the following data, which is stored temporarily in server log files:

• IP address
• Date and time of access
• Name and URL of the accessed file
• Referrer URL
• Browser type and operating system
• Access provider

[Our website is not hosted by us, but by a service provider who processes the aforementioned data on our behalf in accordance with Art. 28 GDPR]

Purpose and legal basis
This is necessary to ensure secure and stable operation (Art. 6 para. 1 lit. f GDPR). No right to object exists as this is essential for functionality. If further retention is legally required, the legal basis is Art. 6 para. 1 lit. c GDPR.

Retention
Data is stored for the duration of website usage and up to 7 days for technical purposes.

Contact Form
You may contact us using our online contact form. Required fields must be completed to process your inquiry.
Purpose and legal basis
Processing is based on your consent (Art. 6 para. 1 lit. a GDPR) or on contractual necessity (Art. 6 para. 1 lit. b GDPR).
Retention
Inquiries are stored for up to 3 years after processing or until consent is withdrawn.

Social Media Presence

We operate social media profiles on platforms such as Facebook, Instagram, and LinkedIn.

Data We Process

When you contact us via messages or comments, we process your username and the data you provide to respond.

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in communication and interaction).

Data Processed by the Platforms

Even without an account, platforms may collect technical data (e.g., IP, device info) and use cookies. We cannot control or access these processes.

For more details, please refer to each provider’s privacy policies:

• Facebook:https://www.facebook.com/privacy/policy

• Instagram:https://help.instagram.com/519522125107875

• LinkedIn:https://www.linkedin.com/legal/privacy-policy

We are joint controllers with Meta/LinkedIn for the content on our pages. However, the primary responsibility for Insights data lies with the platform provider.

Additional terms:

• Facebook: Page Insights Controller Addendum

• LinkedIn: Cookie Policy

Cookiebot
We use Cookiebot, a consent management tool provided by Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark. Cookiebot stores consent preferences via cookies or similar technology.

Purpose and legal basis
To fulfill legal obligations for cookie consent (Art. 6 para. 1 lit. c GDPR).

Retention
Storage duration is managed by Cybot. For more information: https://www.cookiebot.com/en/privacy-policy

Cookiebot CDN

Cookiebot's Content Delivery Network (CDN) ensures faster and secure delivery of content. Accessing the service connects you to servers of Cybot A/S and transmits your IP address and browser data.

Legal basis:
Legitimate interest in reliable and efficient service delivery (Art. 6 para. 1 lit. f GDPR).

Matterport

We use Matterport, a 3D virtual tour service provided by Matterport, Inc., 352 E. Java Dr., Sunnyvale, CA 94089, USA.

Accessing 3D content connects you to Matterport servers and transmits your IP address and possibly browser data.

Purpose and legal basis
Based on your consent (Art. 6 para. 1 lit. a GDPR and §25 para. 1 TDDDG).

Retention
Determined by Matterport. Privacy policy: https://matterport.com/de/node/44