Privacy Policy

Opens internal link in current windowData Privacy Statement for respondents

 

The Data Privacy Statement below applies to the collection of personal data on our website:

Name and contact details of the Data Controller responsible for processing data and the company Data Protection Officer 

This Privacy Policy applies to data processing performed by:

Data Controller: g/d/p Markt- und Sozialforschung GmbH and g/d/p Marktanalysen GmbH (in the following gdp), Richardstra├če 18, D-22081 Hamburg, email: contact@gdp-group.com, phone: +49 (0)40/29 8 76-0

The company Data Protection Officer at gdp can be reached at the aforementioned address, FAO Heike Iburg, or under
privacy@gdp-group.com.

 

Collection and storage of personal data and the nature and purpose of its processing

a. When visiting the website

When you call up our website under www.gdp-group.com, the browser you use on your device automatically sends information to our website server. This information is temporarily stored in what is referred to as a log file. The following information is collected without any action on your part and stored until it is deleted automatically after 30 days:

  • IP address of the querying computer,
  • Date and time of access,
  • Name and URL of the file retrieved,
  • Website from where access is made (referring URL),
  • Website that is accessed through our website;
  • Browser used and, if applicable, the operating system on your computer and the name of your access provider.

    We process the aforementioned data for the following purposes:

    • Ensuring the establishment of a smooth connection by our website,
    • Ensuring that our website is convenient to use,
    • Evaluating system security and stability and
    • For further administrative purposes.

    The legal basis for data processing is formed by Sec. 6 (1) (1) (f) GDPR. Our legitimate interest stems from the data collection purposes listed above. In no case do we use the data we collect to draw conclusions about you as an individual.

     
    b. Newsletters

    If, pursuant to Sec. 6 (1) (1) (a) GDPR, you have expressly consented, we will use your email address to send you our newsletter on a regular basis. Indicating an email address is sufficient for receiving our newsletter.

    If you purchase goods or services on our website and provide your email address here on the website, we can subsequently use it to send you a newsletter. In such cases, the newsletter will only send direct mail for our own similar goods or services. The legal basis for sending the newsletter as a result of the sale of goods or services in this case is Sec. 7 (3) Unfair Competition Act in conjunction with Sec. 6 (1) (1) (f) GDPR.

    Unsubscribing from our newsletter is possible at any time, regardless of whether it is sent out based on consent or legal permission. You can unsubscribe, for instance, by clicking on a link at the end of each newsletter. Alternatively, you can also send your unsubscribe request at any time by email to contact@gdp-group.com. No costs other than transmission costs according to the basic rates arise for you here.

    The data required for sending the newsletter will be deleted as soon as it is no longer needed for the purpose it was collected for, unless another legal basis for further processing applies. Your email address will therefore only be stored for the purpose of sending the newsletter until you revoke your consent or object to being sent the newsletter.


    c.  When using our contact form and email contact address

    For questions of any kind, we give you the chance to contact us over a form provided on our website. To do so you need to provide a valid email address so that we know who the enquiry came from and to be able to answer it. Further details can be provided voluntarily.

    Alternatively, contact can be established over the email address provided. In this case, the personal data you transmitted by email is stored.

    Data processing for the purpose of establishing contact takes place according Sec. 6 (1) (f) GDPR. If your reason for establishing contact with us is to conclude a contract, then the additional legal basis for processing your data is based on Sec. 6 (1) (b) GDPR.

    The personal data we collect is automatically deleted after the enquiry you made has been completed.


    Rights of data subjects

    Your rights: in accordance with Sec. 15 GDPR, you are entitled

    • To request information about the personal data on your person that we process. Specifically, you can demand information on the purposes of processing your personal data, the category of personal data, the categories of recipients to whom your data has been disclosed, the planned retention period, your right to have your data rectified, deleted, limited in processing or object to it completely, the existence of your right to complain, the source of your data if we did not collect it, and the existence of automated decision-making processes including profiling and, where appropriate, full and in-depth information on the details of this;
    • In accordance with Sec. 16 GDPR, you are entitled to demand that the personal data on your person that we store be promptly corrected, if incorrect, or amended;
    • In accordance with Sec. 17 GDPR, you are entitled to demand the deletion of personal data on your person that we store, insofar as its processing is not required for the purpose of exercising the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or for the pursuit, exercise or defence of rights;
    • In accordance with Sec. 18 GDPR, you are entitled to demand that the processing of your personal data is restricted, insofar as you dispute the accuracy of the data, and its processing is unlawful, but you reject its deletion and we no longer require the data, but you require it to assert, exercise or defend against legal claims or you have objected to its processing in accordance with Sec. 21 GDPR;
    • In accordance with Sec. 20 GDPR, you are entitled to receive the data that you have provided us with on your person in a standard, structured and machine-readable format, or to request that it be transmitted to another data controller;
    • In accordance with Sec. 7 (3) GDPR, you are entitled to revoke the consent you have granted to us once at any time. The consequence of this is that we are not permitted to continue processing your data in the future based on this consent and
    • In accordance with Sec. 77 GDPR, you can complain to a supervisory authority. As a rule, you can contact the supervisory authority at your usual place of residence or work, or our company headquarters.


    Right to object

    If your personal data is processed based on legitimate interests in accordance with Sec. 6 (1) (1) (f) GDPR, you are, in accordance with Sec. 21 GDPR, entitled to object to it being processed, insofar as there are reasons for this which arise from your specific situation or your objection is directed against direct marketing. In the latter case, you are generally entitled to object, which we will then implement without you needing to state any specific situation.

    If you would like to exercise your right to object or revoke your consent, please send an email to: contakt@gdp-group.com.

    Data Security

    We use the popular SSL (Secure Socket Layer) method when visiting our website, in conjunction with the highest level of encryption that your browser supports. Usually, this involves 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can see whether an individual single page on our website is encrypted by the presence of the locked key or padlock icon in the bottom status bar in your browser.

    We also apply suitable technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or total loss, destruction or unauthorised access by third parties. We improve our security measures continuously in line with technological developments.

    Updates and amendments to this Privacy Policy

    This Privacy Policy is currently valid and was last updated in May 2018.

    We may find it necessary to amend this Privacy Policy as a result of enhancements to our website and related services, or owing to amended legal or official requirements. You can call up and print our latest Privacy Policy at any time on our website under: https://www.gdp-group.com/en/privacypolicy/.