Privacy policy

1) Introduction and contact details of the controller

Protecting your personal data is important to us. Below we inform you about the collection, processing and use of personal data when using this website. Personal data means any information relating to an identified or identifiable person.

The controller within the meaning of the GDPR is:
GEPVOLT SE, Max-Volmer-Straße 23, 40724 Hilden, Germany
Phone: +49 2103 99550-0
Email: verwaltung@gepvolt.com

2) Data collection when visiting the website

When using this website for information purposes only, data is automatically transmitted that is necessary for technical operation (server log files): page accessed, date and time of access, amount of data, referrer URL, browser and operating system used, and an anonymised IP address. Processing is based on Art. 6(1)(f) GDPR to ensure functionality and security. Data is not passed on to third parties.

This website uses SSL/TLS encryption for secure transmission of your data, recognisable by “https://” and the padlock symbol in the browser address bar.

3) Hosting

This website is hosted by Raidboxes GmbH, Hafenstraße 32, 48153 Münster, Germany. When you access the website, the host processes the technically required data (see server log files above) on our behalf. The legal basis is our legitimate interest in the secure and efficient provision of this website (Art. 6(1)(f) GDPR). A data processing agreement (DPA) pursuant to Art. 28 GDPR is in place with the host, ensuring that personal data is processed confidentially and in accordance with our instructions.

4) Cookies

This website uses cookies to provide certain functions and improve usability. Cookies are only set if you have given consent (Art. 6(1)(a) GDPR), if they are required for contract performance (lit. b), or if they serve our legitimate interest in a functional website (lit. f). These may be temporary (session) cookies or persistent cookies; their storage duration can be found in your browser settings. You can control or disable storage via your browser settings; disabling cookies may limit functionality.

5) Contact

When you contact us (e.g. by email or form), personal data is processed to handle your enquiry (Art. 6(1)(f) GDPR, and additionally lit. b when initiating a contract). Data is deleted after processing is complete unless statutory retention obligations apply.

6) Web analytics and marketing tools

If you have given consent (Art. 6(1)(a) GDPR), this website uses services for web analytics and optimisation, including Google Analytics 4 (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, Ireland). Data collected includes page views, time on site, browser and truncated IP addresses. Transfer to the USA is possible; the level of data protection is ensured by the EU-US Data Privacy Framework. You can revoke your consent at any time via the cookie consent tool.

7) Other services

Google Tag Manager: used to integrate and manage website tools without collecting data itself. A data connection to servers in the USA may exist. Use only with consent (Art. 6(1)(a) GDPR).

Vimeo: when embedded videos are loaded, connection data is transmitted to Vimeo LLC. Cookies only with prior consent (lit. a).

Google Web Fonts: for consistent font display; use only with consent (lit. a).

8) Cookie consent tool

We use a cookie consent tool to document your consents in a legally compliant manner. It stores your settings in a technically necessary cookie (Art. 6(1)(f) and lit. c GDPR).

9) Data subject rights

• Right of access pursuant to Art. 15 GDPR
• Right to rectification pursuant to Art. 16 GDPR
• Right to erasure pursuant to Art. 17 GDPR
• Right to restriction of processing pursuant to Art. 18 GDPR
• Right to data portability pursuant to Art. 20 GDPR
• Right to object pursuant to Art. 21 GDPR
• Right to withdraw consent pursuant to Art. 7(3) GDPR
• Right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR

10) Storage period

The storage period depends on the type and purpose of processing as well as applicable statutory retention periods. Data processed on the basis of consent is stored until consent is withdrawn; data processed on the basis of legitimate interests until objection is raised.