Effective date: January 8, 2018
What are Cookies and Other Tracking Technologies?
A cookie is a small text file that can be stored on and accessed from your device when you visit one of our Sites, to the extent you agree. The other tracking technologies work similarly to cookies and place small data files on your devices or monitor your website activity to enable us to collect information about how you use our Sites. This allows our Sites to recognize your device from those of other users of the Sites. The information provided below about cookies also applies to these other tracking technologies. For more information you can see the following reference pages: www.allaboutcookies.org and www.youronlinechoices.eu.
To administer our Sites and for research purposes, GTI also might contracted with third-party service providers to track and analyze statistical usage and volume information from our Site users. These third-party service providers use persistent Cookies to help us to improve the user experience, manage our Site content, and analyze how users navigate and utilize the Sites.
To ensure a high level of transparency and security, our privacy statement as set forth below will inform you about the nature, scope and purpose of any collection, use and processing of personal data recorded by us.
1. External Links
Our websites also reference and include links to third-party websites. As a rule, these are identified by stating the respective third-party Internet address or the company/product logo. GTI has no influence whatsoever on the contents and design of websites of other providers. By referencing/linking these external websites we do not adopt their contents as our own.
3. Categories of Personal Data that we process
Personal data refers to any information relating to an identified or identifiable natural person. GTI processes the following personal data, if you actively provide this information to us:
- first name, last name, date of birth, email address, country, job title, phone number, fax number, company name, used products of GTI and additional information that you provide when contacting us using our websites, especially information provided in free text fields of contact forms ("contact data");
- additional data that you provide to GTI in comments on the GTI websites, especially in forms of discussion boards and using the comment features of blogs ("comment data");
- additional data that you provide to GTI while applying for a job, e.g. your CV, certificates, attestations, etc. ("job application data");
- email address, phone number, name, company name and country provided when subscribing to a newsletter or other marketing information of GTI ("direct marketing data") (see section 7)
Besides that we also process the following personal data, which is passively collected:
- personal data sent by your web browser, i.e. information about your type of web browser, your operating system and selected settings (e.g. language, region, font size, font types and other configuration) may be collected ("browser data");
- your IP address, information about the amount of data transferred, stored in access log files ("usage data").
4. Purposes and Lawfulness of the Data Processing
GTI collects, processes, and uses your personal data to the extent required to fulfill the respective purposes.
The purposes for processing your contact data, comment data and job application data are: Providing services that you make use of using the GTI websites. These are amongst others: downloads, discussion boards, job applications, individual requests (e.g. using a contact form), blogs, and the registration for courses or other offerings of GTI. The lawfulness for the data processing is the performance of a contract or steps prior to entering into a contract. Using this personal data is required to provide the contractual obligations. Without this personal data you would not be able to receive the services offered by GTI.
In so far that you have given the consent, GTI will also use your personal data for marketing purposes, e.g. to send newsletters (see section 7). The lawfulness for processing this data is our legitimate interest, e.g. to improve our services, or your consent.
In so far that you have given the consent, we will also use your browser data for market research and the improvement of our websites and services, and to improve your user experience. The lawfulness for processing this data is your consent or our legitimate interest. In so far that you have given the consent, we will also collect your usage data for statistical purposes, for the analysis of advertisement on our websites, and for adapting the advertisement for our products and services to better match your interests. Log files are only used for statistical analysis of the visitors of the GTI websites. The data is deleted after having been analyzed. The lawfulness for processing this data for statistical purposes is our legitimate interest, e.g. internal organization, or your consent.
Providing the direct marketing data and browser data is optional. If you do now provide this data, you will not receive any direct marketing information from us and your data will not be used to improve your user experience and will not be used for statistical purposes. We will also use your usage data for internal system-specific purposes to secure the websites and IT systems from malicious attacks by third parties. The lawfulness is a balancing of interests of the conflicting interests of the security of the IT systems on our part and your potentially conflicting interests in a non-processing of the usage data by us. Taking into account the security and organizational measures of the processing of the usage data by GTI, we consider your rights and interests appropriately taken into account and protected.
Beyond these purposes, we use and process your data only if you have expressly granted your prior consent thereto and if you have been informed about such purposes. For example, you may stipulate in an online job application whether we may also review such application with respect to other positions in our company. Only if this is the case, we will use such data for the respective purpose.
In particular, GTI does not use your personal data for automated individual decisions and profiling.
5. Data recipients
Your personal data will be processed by persons of GTI in the respective departments who need to know the personal data.
- contact data: any departments that might be involved to process your request
- comment data: marketing or the respective product departments that are responsible for operating the blogs or discussion boards
- job application data: HR and the departments that are responsible for the job position that you apply to
- direct marketing data: marketing and sales departments responsible for your region
- browser data and usage data: marketing and the IT departments that are responsible for operating the respective websites
GTI has contracted external data processing service providers to collect, process, or use personal data on behalf and according to the instructions of GTI. Such service providers support GTI, especially relating to hosting and operating the websites and blogs, marketing purposes, statistical analysis, improving the websites and sending our email newsletters. If these external companies have access to personal data, respective data processing agreements are in place. These service providers may be located outside the European Union or the European Economic Area (see section 6).
GTI is a globally operating corporation. In order to better process your matter, it might be necessary to forward your data to local subsidiaries or to local distribution partners, whose registered office might also be located in countries outside the European Union (see section 6). However, such data transfers only take place within the GTI group companies listed in Annex 1 and only for the aforementioned purposes. The lawfulness of the data export is our legitimate interest or legitimate interests of the recipients, e.g. internal administrative purposes, and no higher legitimate interests on your part, the fulfillment of legal obligations or your consent. Beyond that, we do not forward your data to other third parties, unless we are obliged to do so by virtue of statutory provisions or order of any judicial or other public authorities or you have explicitly given your consent for that purpose. In particular, your personal data will not be sold, leased or exchanged.
6. Data Transfers to Third Countries
The recipients of your personal data might be located outside the European Union or the European Economic Area and therefore might not have a data protection equivalent to EU data protection law.
Unless there is an adequacy decision by the EU Commission for these states or the transfer is based on an exemption provided for by the GDPR (e.g. express consent, assertion, exercise or defense of legal rights), we take all necessary measures to ensure that transfers to such organizations are adequately protected, e.g. by signing the standard contractual clauses stipulated by the EU Commission with the data recipients. You may request a copy of these reasonable warranties by contacting our Data Protection Department at: [email protected] A transfer of data to official authorities in countries outside the European Union or the European Economic Area (so-called third countries) takes place, if required by law, you have given us your express consent or this is legitimated by the legitimate interest of us or the third party for data protection purposes, e.g. internal administrative purposes and no higher legitimate interests on your part.
7. Information sent by Email
Provided that you have given GTI your email address for communication or direct marketing purposes and consented to the receipt of advertising and newsletters, we will process this personal data in order to communicate with you on the basis of your interests or to send you advertising. The legal basis for the processing of personal data for direct marketing purposes is your consent or our legitimate interest in direct mail communication. You can revoke your consent at any time and object to processing for direct marketing purposes at any time (see section 12). Providing your email address or telephone number for direct marketing purposes is voluntary. If you do not provide these to us, you will not receive any advertising from us.
8. Data Protection for Minors
The offers and services on this website are not directed at children. We therefore assume that we will not become aware of any personal data pertaining to children.
9. Technical and Organizational Data Protection
GTI implements the technical and organizational measures that are commercially reasonable in relation to the respective purpose of data protection, in order to protect the information provided by you against abuse and loss. Such data is stored in a secure operating environment that is not accessible to the public. In addition, each of our employees is instructed on data protection and obliged to enter into a confidentiality agreement.
10. Retention Periods
Your personal data will be kept by us as long as necessary to provide you with the requested service. If GTI no longer needs your personal data to comply with contractual or legal obligations, they will be deleted from our systems or anonymized accordingly, so that identification is not possible, unless GTI has to keep the information, including your personal data, to comply with legal or regulatory obligations (e.g. statutory retention periods which may arise from the commercial laws or tax laws and may in principle be 6 to 10 years or, if during the statutory limitation periods, which are regularly 3 years, but may be up to 30 years, evidence must be secured).
11. Data Subject Rights
Under applicable law, you have the right under certain circumstances to (i) request information about your stored personal data, (ii) rectification of your personal data, (iii) restriction of processing of your personal data, (iv) deletion of your personal data, (v) data portability, (vi) revocation of your consent for processing of your personal data . To exercise these rights, please contact our Data Protection Department at: [email protected] You also have the right to file a complaint with a data protection supervisory authority. Please feel free to direct any questions, comments, or complaints regarding this privacy statement or the privacy practices of GTI to our Data Protection Officer:
GTI German Trade & Invest GmbH
10587 Berlin - Germany
E.mail: [email protected]