Privacy Policy of GerRusCo GmbH and BeeOurly service by GerRusCo GmbH
September 6, 2024
We appreciate your interest in our website https://beeourly.com/ and https://gerrusco.com. We are aware that the protection of your privacy while using our website is an important concern to you. Therefore, complying with legal regulations regarding data protection is a matter of course for us. Furthermore, it is important to us that you, as a customer, always know when and how we collect, store, and use your data.
In the following, we inform you about the collection and other processing (e.g. storage, querying, modification, sharing) of personal data when using our website. Personal data includes all data that can be attributed to you personally, such as name, address, email addresses, and user behavior.
If, within the scope of using our website, we process personal data or if we rely on commissioned service providers for individual functions, offers, or services of our website that involve data processing, or if we intend to use your data for advertising purposes, we will inform you in detail below about the respective processes, in particular, the data processed in each case. We will also indicate the intended storage duration or at least the defined criteria for the storage duration, as well as the relevant legal basis for the respective processing.
I. Name and Address of the Data Controller
The data controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states, as well as other data protection regulations, is:
GerRusCo GmbH; represented by the managing directors Horst Krumbach and Natalia Peryazeva,
Zehntweg 4a
52078 Aachen
Germany
Email: datenschutz@gerrusco.com
Website: https://gerrusco.com
II. Collection and Storage of Personal Data, as well as Nature, Purpose, Legal Basis, and Duration of their Use
Section 1: When Visiting the Website
During the purely informational use of the website, i.e., if you do not register or otherwise provide us with information, we only collect personal access data in so-called server log files that your browser transmits to our server. The following data is collected within the scope of the server log files:
IP address
Date and time of the request
Time zone difference from Greenwich Mean Time (GMT)
Content of the request (specific page)
Access status/HTTP status code
Amount of data transferred in each case
Website from which the request originates
Browser
Operating system and its interface
Language and version of the browser software.
These data are collected solely to ensure the smooth operation of the website in terms of stability and security, as well as to improve our offering, after which they are discarded. The legal basis for data processing is Art. 6(1)(f) of the GDPR. Our legitimate interest arises from the aforementioned purposes of data collection.
The data are also stored in the log files of our system. The user's IP addresses or other data that would allow the data to be associated with a user are not affected. Storage of these data in conjunction with other personal user data does not occur.
The collection of data for the provision of the website and the storage of data in log files is essential for the operation of the website. Consequently, there is no possibility for the user to object.
The data are deleted as soon as they are no longer necessary for the purpose of their collection. In the case of data collection for the provision of the website, this occurs when the respective session is terminated.
Furthermore, we use cookies and analytical services while your visiting our website. Further explanations regarding this matter are provided in Section III. of this Privacy Policy.
Section 2: When Using Additional Services, Features, and Offers on Our Website
In addition to the purely informational use of our website, we offer various features that you can use if interested. To utilize these features, you will typically need to provide further personal data, which we will use to provide the respective service and which will be subject to the principles of data processing mentioned earlier. The features are described in more detail below.
(1) Contact Form
When you contact us through our inquiry form or general inquiry, the data voluntarily provided by you (your email address, first and last name, and potentially phone number, place of residence, and postal code) will be stored by us to respond to your question. The response will be sent via email or, if provided, by phone number.
The legal basis for processing is Art. 6(1)(a) and (b) of the GDPR, based on your voluntarily given consent or to respond to your inquiry.
The data collected in this context will be deleted after your inquiry has been resolved, or processing will be restricted if legal retention obligations exist.
Section 3: Privacy Policy for Data Collected from Google APIs
BeeOurly use and transfer to any other app of information received from Google Accounts will adhere to Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.
III. Use of Cookies
Section 1: Scope of Data Processing
To make your visit to our website user-friendly and efficient and to enable the use of certain functions, we use cookies on various pages. These are small text files that are stored on your end device and store certain settings and data for exchange with our system via your browser. Certain information flows to the entity that sets the cookie (in this case, us) through the cookies. Cookies cannot execute programs or transmit viruses to your computer.
Cookies do not contain personal data and cannot be directly associated with any user. Please note that certain cookies are set as soon as you enter our website. This website uses the following types of cookies:
Necessary/Functional Cookies: These cookies are necessary to enable the operation of our website. This includes, for example, cookies that allow you to log into the customer area or add items to the shopping cart.
Transient Cookies: These are automatically deleted when you close the browser. This includes session cookies in particular. They store a session ID, which can be used to assign various requests from your browser to the shared session. As a result, your computer can be recognized when you return to our website. Session cookies are deleted when you log out or close the browser.
Persistent Cookies: These are automatically deleted after a predefined period, which can vary depending on the cookie. You can delete cookies at any time in the security settings of your browser.
You can configure your browser settings according to your preferences and, for example, reject third-party cookies or all cookies. Your browser can also be configured to always notify you when a cookie is being created. Please consult the respective provider of your browser for this purpose. We would like to point out that if you reject cookies, you may not be able to use all the functions of this website.
The legal basis for the use of cookies is Art. 6(1)(f) of the GDPR. Our legitimate interest arises from the aforementioned purposes of making our website more user-friendly and efficient.
IV. Use of Analytical Tools
For the purpose of tailored design and advertising, web analysis services are used on our website.
a. Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses "cookies," which are text files placed on your computer, to help the website analyze how users use the website. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States.
IP Anonymization
We have activated the IP anonymization function on this website. This means that your IP address will be truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with any other data held by Google.
You can prevent the storage of cookies by adjusting the settings of your browser software accordingly; however, please note that if you do this, you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=en.
In addition to the browser plugin, especially for browsers on mobile devices, you can prevent the collection of data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent the future collection of your data when you visit this website:
Deactivate Google Analytics
The opt-out cookie applies only in this browser and only to our website and is stored on your device. If you delete the cookies in this browser, you will need to set the opt-out cookie again.
Data Processing Agreement
We have entered into a data processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
We use Google Analytics to analyze and improve the use of our website regularly. The statistics obtained allow us to improve our offering and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has subjected itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6(1)(f) of the GDPR. Our legitimate interest arises from the aforementioned purposes.
Third-party information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of use: http://www.google.com/analytics/terms/us.html, Privacy overview: http://www.google.com/intl/en/analytics/learn/privacy.html, and Privacy policy: http://www.google.com/intl/en/policies/privacy.
Privacy Policy for Using Google reCAPTCHA
We use the Google service reCAPTCHA to determine whether a user's input in our contact or newsletter form is made by a human or a computer. Google checks the following data to determine whether you are a human or a computer: the IP address of the device you are using, the website you are visiting on which the captcha is embedded, the date and duration of the visit, the recognition data of the browser and operating system type used, Google account information if you are logged into Google, mouse movements on the reCAPTCHA areas, and tasks that require you to identify images. The legal basis for the described data processing is Art. 6(1)(f) of the General Data Protection Regulation. We have a legitimate interest in this data processing to ensure the security of our website and protect ourselves against automated inputs (attacks).
V. Links to Our Social Media Profiles
Our website contains links to our social media profiles:
Facebook
Instagram
LinkedIn
When you visit our page, generally no personal data is initially transferred to the providers of the social network. Only if you click on the link and thereby access our page on the respective social network, the provider of the social network receives the information that you have visited the corresponding website of our online offering. Additionally, the data mentioned in Section III, §1 of this declaration is transmitted. According to the respective providers, the IP address is anonymized immediately after collection in Germany in the case of Facebook and LinkedIn. By clicking on the link, therefore, personal data about you is transmitted to the respective provider of the social network and stored there (in the case of US providers, in the USA). Since the provider collects data, particularly via cookies, we recommend that you delete all cookies through your browser's security settings before clicking on the link.
We have no influence on the collected data and data processing procedures, nor are we aware of the full extent of data collection, the purposes of processing, or the retention periods. We also do not have information about the deletion of collected data by the provider of the social network.
The provider of the social network stores the data collected about you as usage profiles and uses them for purposes of advertising, market research, and/or the tailored design of its website. Such evaluations are carried out, especially (even for users not logged in), to display tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the formation of these user profiles, and to exercise this right, you must contact the respective provider of the social network as the data protection responsible entity. Through the links, we offer you the possibility to interact with social networks and other users, so that we can improve our offering and make it more interesting for you as a user. The legal basis is Art. 6(1)(f) of the GDPR. Our legitimate interest arises from the purposes mentioned.
The data transfer takes place regardless of whether you have an account with the provider of the social network and are logged in there. If you are logged in, your data collected by us will be directly associated with your existing account at the respective provider. If you activate the link and, for example, share the page, the plug-in provider also stores this information in your user account and shares it with your contacts publicly. We recommend that you regularly log out after using a social network, especially before clicking on the link, as this way you can avoid being associated with your profile by the provider.
For further information about the purpose and scope of data collection and its processing by the provider of the social network, refer to the respective privacy policies of these providers. There, you will also find additional information about your related rights and privacy protection settings.
Addresses of the respective plug-in providers and URLs with their privacy notices:
Facebook and Instagram:
Meta Platforms Ireland Limited, ATTN: Privacy Operations, Merrion Road, Dublin 4, D04 X2K5, Irland
https://www.facebook.com/privacy/policy/?entry_point=about_fb
LinkedIn:
LinkedIn Corporation, 1000 W. Maude Ave Sunnyvale, CA 94085, USA
https://www.linkedin.com/legal/privacy-policy; further information on data collection: https://www.linkedin.com/legal/user-agreement-summar, https://www.linkedin.com/legal/cookie-policy, https://www.linkedin.com/legal/california-privacy-disclosure, https://www.linkedin.com/legal/professional-community-policies.
Facebook and LinkedIn are subjects to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
VI. Integration of Google Fonts
For an enhanced visual representation of various information on this website, Google Webfonts (http://www.google.com/webfonts/) are used. The webfonts are transferred to the browser's cache when the page is accessed, in order to utilize them for rendering. If the browser does not support Google Webfonts or restricts access, the text will be displayed in a default font.
For this purpose, the browser you use must establish a connection to Google's servers. As a result, Google becomes aware that our website was accessed via your IP address. The use of Google Web Fonts is in the interest of a consistent and appealing presentation of our online offerings. This represents a legitimate interest within the meaning of Art. 6(1)(f) of the GDPR.
You can configure your browser to prevent the loading of fonts from Google's servers (e.g., by installing add-ons like NoScript or Ghostery for Firefox). If your browser does not support Google Fonts or if you block access to Google's servers, the text will be displayed in the system's default font.
You can find information about the privacy conditions of Google Web Fonts here: https://developers.google.com/fonts/faq#Privacy
General information about privacy is available in the Google Privacy Center: http://www.google.com/intl/en-EN/privacy/
VII. Google Maps
On this website, we use the service provided by Google Maps. This allows us to display interactive maps directly on the website and enable you to use the map function conveniently.
By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. Additionally, the data mentioned in Section III, §3 of this declaration is transmitted. This occurs regardless of whether Google provides a user account through which you are logged in, or whether no user account exists. If you are logged into Google, your data will be directly associated with your account. If you do not wish to be associated with your profile on Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for advertising, market research, and/or the tailored design of its website. Such evaluations are carried out, especially (even for users not logged in) to provide tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the formation of these user profiles, and to exercise this right, you must contact Google.
For further information about the purpose and scope of data collection and its processing by the plug-in provider, refer to the privacy policies of the provider. There, you will also find additional information about your related rights and privacy protection settings: http://www.google.com/intl/en/policies/privacy. Google processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
Information about the third-party provider: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
VIII. Integration of YouTube Videos
We have embedded YouTube videos into our online offering, which are stored on http://www.YouTube.com and can be played directly from our website. These videos are all embedded in "enhanced privacy mode," meaning that no data about you as a user will be transmitted to YouTube unless you play the videos. Only when you play the videos will the data mentioned in Section III, §2 of this declaration be transmitted. We have no control over this data transmission.
By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. Additionally, the data mentioned in Section III, §1 of this declaration is transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in, or whether no user account exists. If you are logged into Google, your data will be directly associated with your account. If you do not wish to be associated with your profile on YouTube, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for advertising, market research, and/or the tailored design of its website. Such evaluations are carried out, especially (even for users not logged in) to provide tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the formation of these user profiles, and to exercise this right, you must contact YouTube.
For further information about the purpose and scope of data collection and its processing by YouTube (YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA; subsidiary of Google), refer to the privacy policy. There, you will also find additional information about your related rights and privacy protection settings: https://www.google.com/intl/en/policies/privacy. Google processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
IX. Your Rights
If your personal data is processed, you have the following rights with regard to your personal data:
Right to Information, Art. 15 GDPR:
You can request confirmation from the controller as to whether personal data concerning you is being processed by them.
If such processing is being carried out, you can request the controller to provide the following information:
The purposes for which the personal data is being processed;
The categories of personal data being processed;
The recipients or categories of recipients to whom the personal data concerning you has been or will be disclosed, particularly recipients in third countries or international organizations; in the latter cases, you can request to be informed about the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer;
The planned duration of storage of the personal data concerning you or, if specific information about this is not possible, the criteria for determining the storage duration;
The existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the controller, or a right to object to this processing;
The existence of a right to lodge a complaint with a supervisory authority;
All available information about the origin of the data, if the personal data is not collected from the data subject;
The existence of automated decision-making, including profiling, pursuant to Art. 22(1) and (4) GDPR, and, at least in these cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
Right to Rectification, Art. 16 GDPR:
You have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
Right to Erasure (Right to be Forgotten), Art. 17 GDPR:
a) Obligation to Erase
You have the right to obtain from the controller the erasure of personal data concerning you without undue delay, and the controller has the obligation to erase personal data without undue delay where one of the following grounds applies:
The personal data concerning you are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
You withdraw your consent on which the processing is based according to Art. 6(1)(a) or Art. 9(2)(a) GDPR, and there is no other legal ground for the processing.
You object to the processing pursuant to Art. 21(1) GDPR (see Section X) and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21(2) GDPR.
The personal data concerning you have been unlawfully processed.
The erasure of personal data concerning you is required for compliance with a legal obligation in Union or Member State law to which the controller is subject.
The personal data concerning you have been collected in relation to the offer of information society services referred to in Art. 8(1) GDPR.
b) Information to Third Parties
Where the controller has made the personal data concerning you public and is obliged pursuant to Art. 17(1) GDPR to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.
c) Exceptions
The right to erasure does not apply to the extent that processing is necessary:
for exercising the right of freedom of expression and information;
for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
for reasons of public interest in the area of public health in accordance with Art. 9(2)(h) and (i) as well as Art. 9(3) GDPR;
for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89(1) GDPR in so far as the right referred to in Section a) is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
for the establishment, exercise or defense of legal claims.
Right to Restriction of Processing, Art. 18 GDPR:
Under the following circumstances, you can request the restriction of processing of your personal data:
If you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;
The processing is unlawful, and you oppose the erasure of the personal data and request the restriction of their use instead;
The controller no longer needs the personal data for the purposes of the processing, but you require them for the establishment, exercise, or defense of legal claims; or
You have objected to processing pursuant to Art. 21(1) GDPR (see Section X), pending the verification whether the legitimate grounds of the controller override yours.
Once processing of the personal data is restricted, except for storage, your personal data may only be processed with your consent or for the establishment, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
If you have obtained restriction of processing in accordance with the above conditions, you will be informed by the controller before the restriction of processing is lifted.
Right to Notification, Art. 19 GDPR:
If you have asserted the right to rectification, erasure, or restriction of processing against the controller, the controller shall communicate any rectification or erasure of personal data or restriction of processing carried out to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort.
You have the right to be informed about those recipients by the controller.
Right to Data Portability, Art. 20 GDPR:
You have the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used, and machine-readable format. You also have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where:
The processing is based on consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR or on a contract pursuant to Art. 6(1)(b) GDPR; and
The processing is carried out by automated means.
In exercising this right, you also have the right to have your personal data transmitted directly from one controller to another, where technically feasible. This right shall not adversely affect the rights and freedoms of others.
Your right to erasure remains unaffected.
The right to data portability shall not apply to processing of personal data that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Right to Object, Art. 21 GDPR:
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you, including profiling based on those provisions. Further information on this can be found in Section X of this privacy policy.
Right to Withdraw Consent:
You have the right to withdraw your consent to the processing of your personal data at any time by notifying the controller. Please note that the withdrawal will only take effect for the future. The lawfulness of processing based on consent before its withdrawal shall not be affected.
Automated Decision-Making in Individual Cases, Including Profiling, Art. 22 GDPR:
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision:
(1) Is necessary for entering into or the performance of a contract between you and the controller;
(2) Is authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or
(3) Is based on your explicit consent.
In cases (1) and (3), the controller shall implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express your point of view, and to contest the decision.
Decisions based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, shall not be based on special categories of personal data referred to in Article 9(1) GDPR, unless Article 9(2)(a) or (g) GDPR applies and suitable measures to safeguard your rights and freedoms and legitimate interests are in place.
Right to Lodge a Complaint with a Supervisory Authority, Art. 77 GDPR:
You also have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement, if you consider that the processing of your personal data infringes the GDPR. The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Art. 78 GDPR.
X. Right to Object Pursuant to Article 21 GDPR
Right to Object in Individual Cases:
You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on Article 6(1)(e) GDPR (processing of data in the public interest) and Article 6(1)(f) GDPR (processing for the purposes of legitimate interests pursued by the controller or a third party), including profiling based on those provisions. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.
Right to Object to Processing for Direct Marketing Purposes:
In certain cases, we process your personal data for direct marketing purposes. You have the right to object at any time to the processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. If you object to processing for direct marketing purposes, we will no longer process your personal data for such purposes. The objection in the abEmail: datenschutz@gerrusco.comnformally and should preferably be directed via email with the subject line "Objection" to:
GerRusCo GmbH
Zehntweg 4a
52078 Aachen
Germany
datenschutz@gerrusco.com
XI. Data Security:
We strive to store your personal data in a manner that ensures they are not accessible to third parties by employing all technical and organizational measures available. However, complete data security cannot be guaranteed in email communication, so we recommend using postal mail for transmitting confidential information.
For the purpose of security and protecting the transmission of confidential content, such as inquiries you send to us as the site operator, this site uses SSL encryption. You can recognize an encrypted connection by the change of the browser's address line from "http://" to "https://" and the lock symbol in your browser's address bar. When SSL encryption is activated, the data you transmit to us cannot be read by third parties.
XII. Consent for Newsletter:
Our free newsletter regularly informs you via email about new products and special promotions. The data you enter here are used solely for personalizing the newsletter and will not be shared with third parties. You can unsubscribe from the newsletter at any time or withdraw your consent by sending an email to datenschutz@gerrusco.com. Your data will be deleted within 6 months after the newsletter subscription ends, provided that legal retention obligations do not prevent deletion. By submitting the data you enter, you consent to data processing and confirm our privacy policy.
September 6, 2024
We appreciate your interest in our website https://beeourly.com/ and https://gerrusco.com. We are aware that the protection of your privacy while using our website is an important concern to you. Therefore, complying with legal regulations regarding data protection is a matter of course for us. Furthermore, it is important to us that you, as a customer, always know when and how we collect, store, and use your data.
In the following, we inform you about the collection and other processing (e.g. storage, querying, modification, sharing) of personal data when using our website. Personal data includes all data that can be attributed to you personally, such as name, address, email addresses, and user behavior.
If, within the scope of using our website, we process personal data or if we rely on commissioned service providers for individual functions, offers, or services of our website that involve data processing, or if we intend to use your data for advertising purposes, we will inform you in detail below about the respective processes, in particular, the data processed in each case. We will also indicate the intended storage duration or at least the defined criteria for the storage duration, as well as the relevant legal basis for the respective processing.
I. Name and Address of the Data Controller
The data controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states, as well as other data protection regulations, is:
GerRusCo GmbH; represented by the managing directors Horst Krumbach and Natalia Peryazeva,
Zehntweg 4a
52078 Aachen
Germany
Email: datenschutz@gerrusco.com
Website: https://gerrusco.com
II. Collection and Storage of Personal Data, as well as Nature, Purpose, Legal Basis, and Duration of their Use
Section 1: When Visiting the Website
During the purely informational use of the website, i.e., if you do not register or otherwise provide us with information, we only collect personal access data in so-called server log files that your browser transmits to our server. The following data is collected within the scope of the server log files:
IP address
Date and time of the request
Time zone difference from Greenwich Mean Time (GMT)
Content of the request (specific page)
Access status/HTTP status code
Amount of data transferred in each case
Website from which the request originates
Browser
Operating system and its interface
Language and version of the browser software.
These data are collected solely to ensure the smooth operation of the website in terms of stability and security, as well as to improve our offering, after which they are discarded. The legal basis for data processing is Art. 6(1)(f) of the GDPR. Our legitimate interest arises from the aforementioned purposes of data collection.
The data are also stored in the log files of our system. The user's IP addresses or other data that would allow the data to be associated with a user are not affected. Storage of these data in conjunction with other personal user data does not occur.
The collection of data for the provision of the website and the storage of data in log files is essential for the operation of the website. Consequently, there is no possibility for the user to object.
The data are deleted as soon as they are no longer necessary for the purpose of their collection. In the case of data collection for the provision of the website, this occurs when the respective session is terminated.
Furthermore, we use cookies and analytical services while your visiting our website. Further explanations regarding this matter are provided in Section III. of this Privacy Policy.
Section 2: When Using Additional Services, Features, and Offers on Our Website
In addition to the purely informational use of our website, we offer various features that you can use if interested. To utilize these features, you will typically need to provide further personal data, which we will use to provide the respective service and which will be subject to the principles of data processing mentioned earlier. The features are described in more detail below.
(1) Contact Form
When you contact us through our inquiry form or general inquiry, the data voluntarily provided by you (your email address, first and last name, and potentially phone number, place of residence, and postal code) will be stored by us to respond to your question. The response will be sent via email or, if provided, by phone number.
The legal basis for processing is Art. 6(1)(a) and (b) of the GDPR, based on your voluntarily given consent or to respond to your inquiry.
The data collected in this context will be deleted after your inquiry has been resolved, or processing will be restricted if legal retention obligations exist.
Section 3: Privacy Policy for Data Collected from Google APIs
BeeOurly use and transfer to any other app of information received from Google Accounts will adhere to Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.
III. Use of Cookies
Section 1: Scope of Data Processing
To make your visit to our website user-friendly and efficient and to enable the use of certain functions, we use cookies on various pages. These are small text files that are stored on your end device and store certain settings and data for exchange with our system via your browser. Certain information flows to the entity that sets the cookie (in this case, us) through the cookies. Cookies cannot execute programs or transmit viruses to your computer.
Cookies do not contain personal data and cannot be directly associated with any user. Please note that certain cookies are set as soon as you enter our website. This website uses the following types of cookies:
Necessary/Functional Cookies: These cookies are necessary to enable the operation of our website. This includes, for example, cookies that allow you to log into the customer area or add items to the shopping cart.
Transient Cookies: These are automatically deleted when you close the browser. This includes session cookies in particular. They store a session ID, which can be used to assign various requests from your browser to the shared session. As a result, your computer can be recognized when you return to our website. Session cookies are deleted when you log out or close the browser.
Persistent Cookies: These are automatically deleted after a predefined period, which can vary depending on the cookie. You can delete cookies at any time in the security settings of your browser.
You can configure your browser settings according to your preferences and, for example, reject third-party cookies or all cookies. Your browser can also be configured to always notify you when a cookie is being created. Please consult the respective provider of your browser for this purpose. We would like to point out that if you reject cookies, you may not be able to use all the functions of this website.
The legal basis for the use of cookies is Art. 6(1)(f) of the GDPR. Our legitimate interest arises from the aforementioned purposes of making our website more user-friendly and efficient.
IV. Use of Analytical Tools
For the purpose of tailored design and advertising, web analysis services are used on our website.
a. Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses "cookies," which are text files placed on your computer, to help the website analyze how users use the website. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States.
IP Anonymization
We have activated the IP anonymization function on this website. This means that your IP address will be truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with any other data held by Google.
You can prevent the storage of cookies by adjusting the settings of your browser software accordingly; however, please note that if you do this, you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=en.
In addition to the browser plugin, especially for browsers on mobile devices, you can prevent the collection of data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent the future collection of your data when you visit this website:
Deactivate Google Analytics
The opt-out cookie applies only in this browser and only to our website and is stored on your device. If you delete the cookies in this browser, you will need to set the opt-out cookie again.
Data Processing Agreement
We have entered into a data processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
We use Google Analytics to analyze and improve the use of our website regularly. The statistics obtained allow us to improve our offering and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has subjected itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6(1)(f) of the GDPR. Our legitimate interest arises from the aforementioned purposes.
Third-party information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of use: http://www.google.com/analytics/terms/us.html, Privacy overview: http://www.google.com/intl/en/analytics/learn/privacy.html, and Privacy policy: http://www.google.com/intl/en/policies/privacy.
Privacy Policy for Using Google reCAPTCHA
We use the Google service reCAPTCHA to determine whether a user's input in our contact or newsletter form is made by a human or a computer. Google checks the following data to determine whether you are a human or a computer: the IP address of the device you are using, the website you are visiting on which the captcha is embedded, the date and duration of the visit, the recognition data of the browser and operating system type used, Google account information if you are logged into Google, mouse movements on the reCAPTCHA areas, and tasks that require you to identify images. The legal basis for the described data processing is Art. 6(1)(f) of the General Data Protection Regulation. We have a legitimate interest in this data processing to ensure the security of our website and protect ourselves against automated inputs (attacks).
V. Links to Our Social Media Profiles
Our website contains links to our social media profiles:
When you visit our page, generally no personal data is initially transferred to the providers of the social network. Only if you click on the link and thereby access our page on the respective social network, the provider of the social network receives the information that you have visited the corresponding website of our online offering. Additionally, the data mentioned in Section III, §1 of this declaration is transmitted. According to the respective providers, the IP address is anonymized immediately after collection in Germany in the case of Facebook and LinkedIn. By clicking on the link, therefore, personal data about you is transmitted to the respective provider of the social network and stored there (in the case of US providers, in the USA). Since the provider collects data, particularly via cookies, we recommend that you delete all cookies through your browser's security settings before clicking on the link.
We have no influence on the collected data and data processing procedures, nor are we aware of the full extent of data collection, the purposes of processing, or the retention periods. We also do not have information about the deletion of collected data by the provider of the social network.
The provider of the social network stores the data collected about you as usage profiles and uses them for purposes of advertising, market research, and/or the tailored design of its website. Such evaluations are carried out, especially (even for users not logged in), to display tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the formation of these user profiles, and to exercise this right, you must contact the respective provider of the social network as the data protection responsible entity. Through the links, we offer you the possibility to interact with social networks and other users, so that we can improve our offering and make it more interesting for you as a user. The legal basis is Art. 6(1)(f) of the GDPR. Our legitimate interest arises from the purposes mentioned.
The data transfer takes place regardless of whether you have an account with the provider of the social network and are logged in there. If you are logged in, your data collected by us will be directly associated with your existing account at the respective provider. If you activate the link and, for example, share the page, the plug-in provider also stores this information in your user account and shares it with your contacts publicly. We recommend that you regularly log out after using a social network, especially before clicking on the link, as this way you can avoid being associated with your profile by the provider.
For further information about the purpose and scope of data collection and its processing by the provider of the social network, refer to the respective privacy policies of these providers. There, you will also find additional information about your related rights and privacy protection settings.
Addresses of the respective plug-in providers and URLs with their privacy notices:
Facebook and Instagram:
Meta Platforms Ireland Limited, ATTN: Privacy Operations, Merrion Road, Dublin 4, D04 X2K5, Irland
https://www.facebook.com/privacy/policy/?entry_point=about_fb
LinkedIn:
LinkedIn Corporation, 1000 W. Maude Ave Sunnyvale, CA 94085, USA
https://www.linkedin.com/legal/privacy-policy; further information on data collection: https://www.linkedin.com/legal/user-agreement-summar, https://www.linkedin.com/legal/cookie-policy, https://www.linkedin.com/legal/california-privacy-disclosure, https://www.linkedin.com/legal/professional-community-policies.
Facebook and LinkedIn are subjects to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
VI. Integration of Google Fonts
For an enhanced visual representation of various information on this website, Google Webfonts (http://www.google.com/webfonts/) are used. The webfonts are transferred to the browser's cache when the page is accessed, in order to utilize them for rendering. If the browser does not support Google Webfonts or restricts access, the text will be displayed in a default font.
For this purpose, the browser you use must establish a connection to Google's servers. As a result, Google becomes aware that our website was accessed via your IP address. The use of Google Web Fonts is in the interest of a consistent and appealing presentation of our online offerings. This represents a legitimate interest within the meaning of Art. 6(1)(f) of the GDPR.
You can configure your browser to prevent the loading of fonts from Google's servers (e.g., by installing add-ons like NoScript or Ghostery for Firefox). If your browser does not support Google Fonts or if you block access to Google's servers, the text will be displayed in the system's default font.
You can find information about the privacy conditions of Google Web Fonts here: https://developers.google.com/fonts/faq#Privacy
General information about privacy is available in the Google Privacy Center: http://www.google.com/intl/en-EN/privacy/
VII. Google Maps
On this website, we use the service provided by Google Maps. This allows us to display interactive maps directly on the website and enable you to use the map function conveniently.
By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. Additionally, the data mentioned in Section III, §3 of this declaration is transmitted. This occurs regardless of whether Google provides a user account through which you are logged in, or whether no user account exists. If you are logged into Google, your data will be directly associated with your account. If you do not wish to be associated with your profile on Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for advertising, market research, and/or the tailored design of its website. Such evaluations are carried out, especially (even for users not logged in) to provide tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the formation of these user profiles, and to exercise this right, you must contact Google.
For further information about the purpose and scope of data collection and its processing by the plug-in provider, refer to the privacy policies of the provider. There, you will also find additional information about your related rights and privacy protection settings: http://www.google.com/intl/en/policies/privacy. Google processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
Information about the third-party provider: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
VIII. Integration of YouTube Videos
We have embedded YouTube videos into our online offering, which are stored on http://www.YouTube.com and can be played directly from our website. These videos are all embedded in "enhanced privacy mode," meaning that no data about you as a user will be transmitted to YouTube unless you play the videos. Only when you play the videos will the data mentioned in Section III, §2 of this declaration be transmitted. We have no control over this data transmission.
By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. Additionally, the data mentioned in Section III, §1 of this declaration is transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in, or whether no user account exists. If you are logged into Google, your data will be directly associated with your account. If you do not wish to be associated with your profile on YouTube, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for advertising, market research, and/or the tailored design of its website. Such evaluations are carried out, especially (even for users not logged in) to provide tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the formation of these user profiles, and to exercise this right, you must contact YouTube.
For further information about the purpose and scope of data collection and its processing by YouTube (YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA; subsidiary of Google), refer to the privacy policy. There, you will also find additional information about your related rights and privacy protection settings: https://www.google.com/intl/en/policies/privacy. Google processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
IX. Your Rights
If your personal data is processed, you have the following rights with regard to your personal data:
Right to Information, Art. 15 GDPR:
You can request confirmation from the controller as to whether personal data concerning you is being processed by them.
If such processing is being carried out, you can request the controller to provide the following information:
The purposes for which the personal data is being processed;
The categories of personal data being processed;
The recipients or categories of recipients to whom the personal data concerning you has been or will be disclosed, particularly recipients in third countries or international organizations; in the latter cases, you can request to be informed about the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer;
The planned duration of storage of the personal data concerning you or, if specific information about this is not possible, the criteria for determining the storage duration;
The existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the controller, or a right to object to this processing;
The existence of a right to lodge a complaint with a supervisory authority;
All available information about the origin of the data, if the personal data is not collected from the data subject;
The existence of automated decision-making, including profiling, pursuant to Art. 22(1) and (4) GDPR, and, at least in these cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
Right to Rectification, Art. 16 GDPR:
You have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
Right to Erasure (Right to be Forgotten), Art. 17 GDPR:
a) Obligation to Erase
You have the right to obtain from the controller the erasure of personal data concerning you without undue delay, and the controller has the obligation to erase personal data without undue delay where one of the following grounds applies:
The personal data concerning you are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
You withdraw your consent on which the processing is based according to Art. 6(1)(a) or Art. 9(2)(a) GDPR, and there is no other legal ground for the processing.
You object to the processing pursuant to Art. 21(1) GDPR (see Section X) and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21(2) GDPR.
The personal data concerning you have been unlawfully processed.
The erasure of personal data concerning you is required for compliance with a legal obligation in Union or Member State law to which the controller is subject.
The personal data concerning you have been collected in relation to the offer of information society services referred to in Art. 8(1) GDPR.
b) Information to Third Parties
Where the controller has made the personal data concerning you public and is obliged pursuant to Art. 17(1) GDPR to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that you have requested the erasure by such controllers of any links to, or copy or replication of, those personal data.
c) Exceptions
The right to erasure does not apply to the extent that processing is necessary:
for exercising the right of freedom of expression and information;
for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
for reasons of public interest in the area of public health in accordance with Art. 9(2)(h) and (i) as well as Art. 9(3) GDPR;
for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89(1) GDPR in so far as the right referred to in Section a) is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
for the establishment, exercise or defense of legal claims.
Right to Restriction of Processing, Art. 18 GDPR:
Under the following circumstances, you can request the restriction of processing of your personal data:
If you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;
The processing is unlawful, and you oppose the erasure of the personal data and request the restriction of their use instead;
The controller no longer needs the personal data for the purposes of the processing, but you require them for the establishment, exercise, or defense of legal claims; or
You have objected to processing pursuant to Art. 21(1) GDPR (see Section X), pending the verification whether the legitimate grounds of the controller override yours.
Once processing of the personal data is restricted, except for storage, your personal data may only be processed with your consent or for the establishment, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
If you have obtained restriction of processing in accordance with the above conditions, you will be informed by the controller before the restriction of processing is lifted.
Right to Notification, Art. 19 GDPR:
If you have asserted the right to rectification, erasure, or restriction of processing against the controller, the controller shall communicate any rectification or erasure of personal data or restriction of processing carried out to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort.
You have the right to be informed about those recipients by the controller.
Right to Data Portability, Art. 20 GDPR:
You have the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used, and machine-readable format. You also have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where:
The processing is based on consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR or on a contract pursuant to Art. 6(1)(b) GDPR; and
The processing is carried out by automated means.
In exercising this right, you also have the right to have your personal data transmitted directly from one controller to another, where technically feasible. This right shall not adversely affect the rights and freedoms of others.
Your right to erasure remains unaffected.
The right to data portability shall not apply to processing of personal data that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Right to Object, Art. 21 GDPR:
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you, including profiling based on those provisions. Further information on this can be found in Section X of this privacy policy.
Right to Withdraw Consent:
You have the right to withdraw your consent to the processing of your personal data at any time by notifying the controller. Please note that the withdrawal will only take effect for the future. The lawfulness of processing based on consent before its withdrawal shall not be affected.
Automated Decision-Making in Individual Cases, Including Profiling, Art. 22 GDPR:
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision:
(1) Is necessary for entering into or the performance of a contract between you and the controller;
(2) Is authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or
(3) Is based on your explicit consent.
In cases (1) and (3), the controller shall implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express your point of view, and to contest the decision.
Decisions based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, shall not be based on special categories of personal data referred to in Article 9(1) GDPR, unless Article 9(2)(a) or (g) GDPR applies and suitable measures to safeguard your rights and freedoms and legitimate interests are in place.
Right to Lodge a Complaint with a Supervisory Authority, Art. 77 GDPR:
You also have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement, if you consider that the processing of your personal data infringes the GDPR. The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Art. 78 GDPR.
X. Right to Object Pursuant to Article 21 GDPR
Right to Object in Individual Cases:
You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on Article 6(1)(e) GDPR (processing of data in the public interest) and Article 6(1)(f) GDPR (processing for the purposes of legitimate interests pursued by the controller or a third party), including profiling based on those provisions. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.
Right to Object to Processing for Direct Marketing Purposes:
In certain cases, we process your personal data for direct marketing purposes. You have the right to object at any time to the processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. If you object to processing for direct marketing purposes, we will no longer process your personal data for such purposes. The objection in the abEmail: datenschutz@gerrusco.comnformally and should preferably be directed via email with the subject line "Objection" to:
GerRusCo GmbH
Zehntweg 4a
52078 Aachen
Germany
datenschutz@gerrusco.com
XI. Data Security:
We strive to store your personal data in a manner that ensures they are not accessible to third parties by employing all technical and organizational measures available. However, complete data security cannot be guaranteed in email communication, so we recommend using postal mail for transmitting confidential information.
For the purpose of security and protecting the transmission of confidential content, such as inquiries you send to us as the site operator, this site uses SSL encryption. You can recognize an encrypted connection by the change of the browser's address line from "http://" to "https://" and the lock symbol in your browser's address bar. When SSL encryption is activated, the data you transmit to us cannot be read by third parties.
XII. Consent for Newsletter:
Our free newsletter regularly informs you via email about new products and special promotions. The data you enter here are used solely for personalizing the newsletter and will not be shared with third parties. You can unsubscribe from the newsletter at any time or withdraw your consent by sending an email to datenschutz@gerrusco.com. Your data will be deleted within 6 months after the newsletter subscription ends, provided that legal retention obligations do not prevent deletion. By submitting the data you enter, you consent to data processing and confirm our privacy policy.