II. Why your personal data is processed
We process your personal data so that we can:
- Identify you as our contractual partner
- Inform you about new projects and give you the opportunity to actively participate in tender processes
- Send correspondence to you
- Send invoices
- Assert contractual and statutory legal claims, and establish a legal defence
III. Legal basis for data processing
Your personal data is processed in compliance with the regulations of both the applicable national data protection laws and the EU General Data Protection Regulation (EU GDPR), applying the following provisions:
- Based on your consent pursuant to Art. 6, para. 1, lit. 1 (a) of the EU GDPR
Insofar as you have expressly or implicitly given GOLDBECK consent to process personal data for specific purposes, this processing is lawful on the basis of said consent. Any consent given can be withdrawn at any time. This also applies to the revocation of declarations of consent that were granted to GOLDBECK before the EU General Data Protection Regulation came into force, i.e. before 25 May 2018.
- Insofar as is necessary for the fulfilment of contractual obligations in accordance with Art. 6, para. 1, item 1, lit. b) of the EU GDPR
Upon your request or after commissioning for a specific project or other delivery and service, the data agreement is established for the purposes stated under Section II and is necessary for the appropriate handling of the project and for the mutual fulfilment of obligations arising from the contract.
- To protect the legitimate interests of GOLDBECK pursuant to Art. 6, para. 1,
lit. (f) of the EU GDPR
Based on the contractual relationship already established between you and GOLDBECK in the past, GOLDBECK has a legitimate interest in processing and transmitting your personal data within the GOLDBECK Group for internal administrative purposes. The processing of your personal data is necessary so that we can continue to share calls for tender with you for potential projects and continue our cooperation in the future.
- To fulfil a legal obligation pursuant to Art. 6, para. 1, lit. 1 (c) of the EU GDPR
GOLDBECK processes your personal data for the fulfilment of legal obligations, e.g. for infection control for the purpose of implementing corresponding Covid measures.
IV. Your rights
As a data subject within the meaning of the German Data Protection Act (Datenschutzgesetz), you have the right:
- To withdrawal of consent (pursuant to Art. 7, para. 3 of the EU GDPR)
Once you have given GOLDBECK your consent, you may withdraw it at any time. From this point on, GOLDBECK may no longer continue to process your data based on this consent.
- To information (pursuant to Art. 15 of the EU GDPR)
You can request information about the personal data GOLDBECK has processed pertaining to you. You may notably request information about the processing purposes, the categories of personal data concerned, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling, including meaningful information on the details of such technology.
- To rectification (pursuant to Art. 16 of the EU GDPR)
You can request the rectification of any inaccurate personal data or the completion of any incomplete personal data stored by GOLDBECK with immediate effect.
- To erasure (pursuant to Art. 17 of the EU GDPR)
You may request the erasure of your personal data as stored by GOLDBECK unless the processing of said data is necessary in order to exercise the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the assertion, exercise or defence of legal claims.
- To restriction of processing (in accordance with Art. 18 of the EU GDPR)
You may request the restriction of the processing of your personal data insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data for our processing purposes, but you need it for the assertion, exercise or defence of legal claims, or you have objected to the processing pursuant to Art. 21 of the EU GDPR.
- To data portability (pursuant to Art. 20 of the EU GDPR)
You have the right to receive your personal data that you have provided to GOLDBECK in a structured, conventional and machine-readable format, or to request that it be transferred to another controller.
- To complaint (pursuant to Art. 77 of the EU GDPR)
You can lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace, or the registered office of our company.
VI. Storage and deletion
Your personal data as collected by GOLDBECK will be stored by us beyond the end of our business relationship for a period of 10 calendar years and then erased, unless GOLDBECK is obliged to store the data for a longer period due to tax or commercial law retention and documentation obligations pursuant to Art. 6, para. 1, item 1, lit. c) of the EU GDPR.
Furthermore, a longer retention period may also be necessary for the preservation of evidence under national statutes of limitation.
VII. Disclosure of personal data by GOLDBECK
GOLDBECK will not disclose your personal data to third parties for purposes other than those listed below. GOLDBECK will only pass on your personal data to third parties:
- if you have previously expressly consented to disclosure to third parties in accordance with Art. 6, para. 1, item 1, lit. a) of the EU GDPR;
- insofar as this is necessary for the processing of contractual relationships with you in accordance with Art. 6, para. 1, item 1, lit. b) of the EU GDPR;
- in the event that a legal obligation exists for the disclosure pursuant to Art. 6 para. 1, item 1, lit. c) of the EU-GDPR.
Where we work with commissioned data processors, we ensure by means of separate contracts (known as commissioned data processing agreements) that your data is protected by the processor in the same way as it is protected by us.
VIII. Transmission to other countries
As a matter of principle, data is not transferred to bodies in countries outside the EU. However, such transfers may take place under the certain conditions, including but not limited to:
- Transfers to certified recipients, in particular on the basis of Binding Corporate Rules (BCRS), EU Standard Data Protection Clauses (SCCs) (Articles 45 and 47 GDPR);
- Transfers based on UK Standard Contractual Clauses
- Transfers on the basis of your previously declared consent for this purpose (Art. 49 para. 1, item 1, lit. a)of the EU GDPR);
- Transfers that serve to initiate or fulfil the contract (Art. 49, Para. 1, item 1, lit. b) of the EU GDPR and Art. 49, Para. 1, Item 1, lit. c) of the EU GDPR);
- Transfers that are necessary for the assertion, exercise or defence of legal claims (Art. 49, Para. 1, Item 1, lit. e) of the EU GDPR).
IX. Protection
Email communication with GOLDBECK is always encrypted, provided that your server supports encryption.
X. Online presences in social media
GOLDBECK maintains an online presence within social media networks and platforms to communicate with business partners, interested parties and users who are active in these channels and to keep them informed about our services.
You can also access these online pages via the icons on this website. When accessing the respective networks and platforms, the terms and conditions and the data processing guidelines of the respective operators apply; you confirm your consent to these terms and conditions when signing up to the networks and platforms in question.
Unless otherwise stated in our privacy policy, we process the data of users if they communicate with us via these social networks and platforms, e.g. write posts or send messages via our online channels.
XI. Social media plug-ins
Social media plugins are not used. These have been replaced by the links described in X. We use plug-ins for the social networks Facebook, Instagram, X, Xing, LinkedIn and YouTube on our website on the basis of Art. 6, para. 1, item 1, lit. f) of the EU GDPR. The purpose of this is to raise the profile of our company and to enable us to analyse, optimise and improve the commercial efficiency of our website. The legal purpose behind this is to be regarded as a legitimate interest as defined in the EU GDPR.
The respective providers of these plug-ins are responsible for ensuring that they operate in compliance with the relevant data protection regulations. We embed these plug-ins using the two-click method to ensure we can protect visitors to our website to the best possible extent.
a) Facebook social plug-ins
Our website uses social media plug-ins from the social network facebook.com, which is operated by Facebook Ireland Ltd, 4 Grand Central Square, Grand Canal Harbour, Dublin 2, Ireland (‘Facebook’). The plug-ins can display interaction elements or content (e.g. videos, graphics or text contributions) and are recognisable by one of the Facebook logos (white ‘f’ on a blue tile, the term ‘Like’, or a ‘thumbs up’ sign) or else are marked with the words ‘Facebook social plug-in’. The list and appearance of Facebook social plug-ins can be viewed here:
https://developers.facebook.com/docs/plugins/.
Facebook uses standard contractual clauses approved by the European Commission and, where applicable, relies on adequacy decisions issued by the European Commission regarding specific countries for data transfers from the EEC to the US and other countries.
When you launch a function on this website that contains a plug-in like this, your device establishes a direct connection with the Facebook servers. The content of the plug-in is transmitted by Facebook directly to your device and integrated by it into the website. The data processed during this process can be used to create user profiles. We therefore have no influence on the scope of the data that Facebook collects with the help of this plug,-in and any information we provide to you in this regard is according to the best of our knowledge.
Due to the integration of the plugins, Facebook receives the information that you have accessed the corresponding page of the website. If you are logged in to Facebook, Facebook can match the visit to your Facebook account. If you interact with the plug-ins – e.g. by clicking the Like button or posting a comment – the corresponding information is transmitted from your device directly to Facebook and stored there. If you are not a member of Facebook, there is still a possibility that Facebook will learn and store your IP address. According to Facebook, only an anonymised IP address will be stored in Germany.
The purpose and scope of the data collection and the further processing and use of the data by Facebook, together with your rights in this regard and settings options for protecting your privacy, can be found in Facebook’s privacy policy:
https://www.facebook.com/about/privacy/.
If you are a Facebook member and do not want Facebook to collect data about you via this website and link it to your membership data as stored with Facebook, you must log out of Facebook and delete its cookies before using our website. Further settings and objections to the use of data for advertising purposes can be configured within the Facebook profile settings:
https://www.facebook.com/settings?tab=ads or via the US site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/.
The settings are platform-independent, i.e. they are applied to all devices such as desktop computers and mobile devices.
b) Instagram
Our website may use functions and content of the Instagram service, which is provided by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. This may include content such as images, videos, texts and buttons, which you can use to show your appreciation and subscribe to the authors of the content or our posts. You can also use the button to access the GOLDBECK Instagram account.
If you are a member of the Instagram platform and you launch any of the aforementioned content or functions, Instagram will be able link this activity to your Instagram profile. Instagram privacy policy:
https://help.instagram.com/519522125107875
c) X
Our website may use functions and content of the X service, which is provided by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. This may include content such as images, videos, texts and buttons, which you can use to show your appreciation and subscribe to the authors of the content or our posts. You can also use the button to access the GOLDBECK X account.
If you are a member of the X platform and you launch any of the aforementioned content or functions, X can link this activity to your X profile.
X uses standard contractual clauses approved by the European Commission and, where applicable, relies on adequacy decisions issued by the European Commission regarding certain countries for data transfers from the EEC to the US and other countries.
Privacy policy: https://x.com/en/privacy
Opt-out: https://x.com/settings/account/personalization
d) XING
Our website also uses plug-ins from XING, a service provided by New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany. This may include content such as images, videos, texts and buttons, which you can use to show your appreciation by sharing and commenting on the content via XING. You can also use the button to access the GOLDBECK XING account.
If you are a member of XING and you launch any of the aforementioned content or functions, XING can link this activity to your XING profile. You can find XING’s privacy policy at https://privacy.xing.com/en
e) YouTube
Our website also uses plug-ins from YouTube, offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This may include content such as images, videos, texts and buttons, which you can use to show your appreciation by sharing and commenting on the content via YouTube. You can also use the button to access the GOLDBECK YouTube account.
If you are a member of YouTube and you launch any of the aforementioned content or functions, YouTube can link this activity to your profile there. You can find YouTube’s privacy policy at: policies.google.com/privacy
f) Kununu
Our website also uses plug-ins from Kununu, offered by kununu GmbH, Neutrogasse 4-8, Top 3.02, 1010 Vienna, Austria. New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany, is responsible for data protection. This may include content such as images, videos, texts and buttons, which you can use to show your appreciation by sharing and commenting on the content via Kununu. You can also use the button to access the GOLDBECK Kununu page.
If you are a member of Kununu and you launch any of the above-mentioned content or functions, Kununu can link this activity to your profile there. You can find Kununu’s privacy policy at:
g) LinkedIn
Our website also uses plug-ins from LinkedIn, a service provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. This may include content such as images, videos, texts and buttons, which you can use to show your appreciation by sharing and commenting on the content via LinkedIn. You can also use the button to access the GOLDBECK LinkedIn page.
If you are a member of LinkedIn and you launch any of the aforementioned content or functions, LinkedIn will be able to link this activity to your LinkedIn profile. You can find LinkedIn’s privacy policy at:
XII. Google Analytics
Our website uses the latest version of Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics allows us to record statistics based on the use of our website and optimise the user experience.
You can agree to or decline the use of Google Analytics at the beginning of your session via the pop-up window that queries your preferred data protection settings (‘cookie opt-in’). Please be aware that, if you choose to decline this service, you may not be able to benefit from the full functionality of our website, such as the display of Google Maps functions, the interactive location map or the GPS directions to the respective Goldbeck location.
Google Analytics uses ‘cookies’, which are text files placed on your computer by your web browser to help the website analyse how users interact with the site. The information generated by the cookies regarding your use of this website (including the anonymised IP address), such as the user’s language settings, time spent on the website and individual pages visited, is transmitted to a Google server in the USA and stored there. The analysis of your surfing behaviour is usually anonymous, which means that your surfing behaviour cannot be traced back to you. Google will use this data for the purpose of evaluating your use of the website, compiling reports on website activity for website operators, and providing other services relating to our website and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf (‘Google affiliates’).
By using our website, you consent to Google processing data pertaining to you in the manner and for the purposes set out above.
Please be aware that Google Analytics has been extended by the code ‘gat._anonymizeIp();’ on this website to ensure anonymised collection of IP addresses.
For more information on the use of data by Google Inc., see:
https://support.google.com/analytics/answer/6004245?hl=en
XIII. Google Maps
This website uses the map service Google Maps. This service is provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
To enable you to use the functions of Google Maps, it is necessary to save your IP address. This information is usually transmitted to and stored on a Google server in the USA. We have no control over this transfer of data.
The use of Google Maps is in the interest of making our websites visually appealing and making the locations mentioned by us on the website easy to find. This constitutes a legitimate interest within the meaning of Art. 6, Para. 1, lit. f of the GDPR.
If corresponding consent has been requested, this consent will be processed exclusively on the basis of Art. 6, Para. 1, lit. a of the GDPR and Section 25, Para. 1 of the German Telecommunications and Telemedia Data Protection Act (TDDDG), insofar as the consent also applies to the storage of cookies or access to information on the user's device within the meaning of the TDDDG. The consent can be withdrawn at any time.
The transfer of data to the USA is based on the standard contractual clauses of the European Commission. Details can be found here:
https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.
For more information on Google and the data collected, please refer to Google's privacy policy at the following link: Google Privacy Policy.
XIV. Google reCAPTCHA (F)
We use "Google reCAPTCHA" (hereinafter "reCAPTCHA") on this website. This service is provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
The aim of reCAPTCHA is to check whether the data entered on this website (e.g. in a contact form) is input by a human or an automated programme. To this end, reCAPTCHA analyses the behaviour of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor opens the website. To perform the analysis, reCAPTCHA evaluates various types of information (e.g. IP address, length of time the website visitor stays on the website, mouse movements made by the user). The interaction data collected during the analysis is forwarded to Google.
The reCAPTCHA analyses run completely are exclusively background processes. Website visitors are notified when Google reCAPTCHA is in use.
The storage and analysis of the data takes place on the basis of Art. 6, Para., 1 lit. f of the GDPR. We have a legitimate interest in protecting our website from abusive automated spying and SPAM.
GOLDBECK considers Google reCAPTCHA to be an essential tool for secure website use.
For more information on Google reCAPTCHA and the data collected, please refer to Google's privacy policy and terms and conditions at the following links:
https://policies.google.com/privacy?hl=de and https://policies.google.com/terms?hl=de.
XV. Google Tag Manager
This website uses the Google Tag Manager. This service allows website tags to be managed via an interface. The Google Tool Manager only implements tags; it does not place cookies on your device or collect any personal data. The Google Tag Manager triggers other tags on websites outside of GOLDBECK’s scope of responsibility that may collect personal data. However, Google Tag Manager does not access this data.
If deactivation has been carried out at the domain or cookie level, this will remain valid for all tracking tags, providing they are implemented using the Google Tag Manager.
XVI. Google Web Fonts
This site uses ‘web fonts’ provided by Google to ensure the uniform display of fonts. When you open a page, your browser loads the required web fonts into your browser cache to display text and fonts correctly. We have opted for the offline version of this service, in which the Google Fonts are stored locally on our web server. This means that the fonts can be managed like any other font family, with the help of CSS. The IP address and other data are not transmitted to Google.
The use of Google Web Fonts serves our interest in ensuring that our websites have a uniform and appealing appearance with regard to efficiency and cost-saving considerations. This constitutes a legitimate interest within the meaning of Art. 6, Para. 1, lit. f of the GDPR and Section 25, Para 2 (2) of the TDDDG. If your browser does not support Web Fonts, your computer will use a default font.
For more information on Google Web Fonts, see Google's privacy policy: https://www.google.com/policies/privacy/.
XVII. Google Marketing Services
On these websites, we use marketing services provided by Google LLC, 1600 Amphitheater Parkway Mountain View, CA 94043, USA. The data controller for users in the European Union/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
The services used include:
AdWords: The use of the Google service AdWords allows us to track conversion. We receive anonymised data about which Google ads you use to access our website. It is not possible for us to identify you based on this data. This data is only used to compile statistics.
XVIII. Ahrefs
We use Ahrefs to manage the quality of our websites. No user-related data is collected; this service merely generates statistics.
XIX. Usercentrics (cookie banner)
Usercentrics is a consent management platform that allows websites to protect user privacy and comply with the GDPR with regard to the use of cookies and tracking services. “Usercentrics” is a service provided by Usercentrics GmbH, Rosental 4, 80331 Munich, Germany, hereinafter referred to as “Usercentrics”.
We use the “Usercentrics” function to inform our website visitors about the use of cookies on our website and enable them to make a decision about the use of said cookies.
If a visitor consents to the use of cookies, the following data will be automatically logged:
- The user's IP number
- Date and time of consent
- End user browser user agent
- The URL of the provider
- An anonymous, random and encrypted key
The encrypted key and the cookie status are stored on the user's device using a cookie in order to establish the user’s cookie status on future visits to the website. This cookie is erased automatically after 12 months.
The legal basis for the storage of the data is provided by Art. 6, Para. 1, lit. c) of the GDPR in conjunction with Art. 7, Para. 1 of the GDPR, since Usercentrics is used to fulfil requirements in accordance with the TDDDG and the GDPR.
The user can prevent or stop the installation of the cookie and its storage, and thus their consent to the use of said cookie, at any time by adjusting their browser settings accordingly.
Further information on Usercentrics can be found at:
XX. ePrivacy regulation
When accessing our website for the first time, visitors have the option of either rejecting or consenting to the use of cookies. This is an active and autonomous decision. The setting can be adjusted at any time if the user wishes to change their decision in the future. For this purpose, we ask the user to select the fingerprint icon present in all areas of our website and adjust their data protection settings as appropriate in the window that then appears.
XXI. Amendment of this Privacy Policy
This privacy policy was last updated on 12 November 2024 and is currently valid. It may become necessary to amend the Privacy Policy in the course of further developments to our website and the information it includes, or to reflect changes in legal or official requirements.
You can find the latest version of our privacy policy on our website at: https://www.goldbeck.sk/
XXII. Contact/controller
This data protection information applies to the processing of data by GOLDBECK. The data controller is:
GOLDBECK GmbH, Ummelner Straße 4-6, 33649 Bielefeld, Germany.
You can contact our Group Data Protection Officer at:
GOLDBECK GmbH
Group Data Protection
Ummelner Straße 4-6
33649 Bielefeld, Germany
or via email at dataprotection@goldbeck.de