Copyright ©2022 GEALAN Fenster-Systeme GmbH. All rights reserved. The information contained on this site is the property of GEALAN Fenster-Systeme GmbH or the named sources.
The contents may not be copied, altered, stored and/or published in whole or in part for any purpose without express written permission.
The trademarks used are copyrights of the respective companies.
All rights reserved. Errors and misprints excepted. The logos and company and product names used in this website are registered trademarks of the respective manufacturers.
External links from www.gealan.de to third-party websites lead to content owned or managed by the respective provider and are not the responsibility of www.gealan.de. These links are either discernible as such from the context or are separately indicated. We have no influence over the content provided on these websites and make no effort to claim ownership of said content. In particular we accept no responsibility for the statements contained therein. Responsibility can only be established if we had knowledge of breaches of law and were technically able and could be reasonably expected to prevent use of such websites (Section 5 Paragraph 2 of the German Teleservices Act (TDG)/German Legal Framework for Electronic Media (MDStV)). We have checked the external content to a reasonable extent for possible breaches of the law. Breaches of copyright, trademark rights and personal rights and infringements against competition law on third-party websites were not apparent, nor were we aware of any criminal offences.
GEALAN Fenster-Systeme GmbH, as the operator of this site, takes the protection of your personal data very seriously. We treat your personal data confidentially and in compliance with the EU General Data Protection Regulation (GDPR), the local legislation applicable in your country, the Federal Data Protection Act (BDSG), and the Telemedia Act (TMG).
This Data Privacy Statement clarifies the type, scope and purpose of the collection and use of data belonging to visitors and users of the GEALAN Fenster-Systeme GmbH website. If you have questions regarding data protection, please contact our data protection officers via email under firstname.lastname@example.org or the address entered below.
GEALAN Fenster-Systeme GmbH
Hofer Str. 80
D-95145 Oberkotzau, Germany
Phone: +49(0)9286 77-0
Fax: +49(0)9286 77-2222
Our data protection officer
Data protection officer
GEALAN Fenster-Systeme GmbH
D-95145 Oberkotzau, Germany
Collection and storage of personal data, type, purpose and use
We would like to point out that we will collect, store, process and use the personal data collected by us with our suppliers, customers, other business partners, and interested parties, in particular the name, address, phone number, email address, contact data of contact persons, customer number as well as order and delivery data, for the purpose of reminders, the establishment and handling of contractual and supply agreements, including delivery, payment and possible warranty or product liability.
Your personal data is necessary for the conclusion and handling of a contract. You are not obliged to provide this data. However, without this data, we are unable to conclude a contract with you. In this respect, your data will be processed based on article 6, para. 1, lit. b, GDPR.
Your data may also be processed based on your agreement according to article 6, para. 1, lit. a, GDPR (e.g. use of login areas).
Additionally, we collect, store, process and use such data for the purpose of maintaining the customer and/or business relationships, marketing and advertisement for our own products and services. In this respect, your data will be processed based on article 6, para. 1, lit. f, GDPR. Our justified interest in the processing of your data here results from our pursuit to promote and sell our own products and services, to improve our logistic processes and to optimise our services.
Additionally, we process data which received from credit agencies (e.g. Schufa) in the framework of the statutory requirements for the purpose of credit assessments of our suppliers, customers and other business partners. In this respect, your data will be processed based on article 6, para. 1, lit. f, GDPR. Our justified interest in the processing of such data results from our pursuit to receive the contractually owed compensation for our services (e.g. the remuneration). Furthermore, we do not make any automated decisions.
Disclosure of data to third parties
We do not forward any personal data to third parties, with the exception of
A transfer of data into a third country outside of the European Union which is not a member state of the Agreement on the European Economic Area shall only take place if such transfer of data is necessary for the fulfilment of a contract concluded between you and us (e.g. delivery into a third country).
Your data will be processed for the duration of the initiation and execution of a contractual or supply agreement and for the duration of the survival of obligations resulting from a contractual or supply agreement, e.g. any warranty or product liability obligations, as well as for the duration of statutory retention periods based on article 6, para. 1, lit. c, GDPR.
To the extent that personal data is processed for the purposes of direct marketing, you have the right to object to the processing of your personal data for the purposes of such marketing at any time. If you object to the processing for direct marketing purposes, your personal data will no longer be processed for such purposes.
Your rights as a data subject
The data protection supervisory authority responsible for us is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
D-91522 Ansbach, Germany
Telephone: +49 (0) 981 180093-0
Our offer is expressly not directed at minors.
All data received and processed within this online offer will be treated confidentially in accordance with the EU-DSGVO and will not be passed on to third parties.
Surfing our website without providing personal data
Outside of the password-protected GEALAN partner area, it is possible to use our website without providing personal data.
We then only learn
- your IP address
- the name of the website or file accessed and the time of access or retrieval,
- the domains via which you have accessed our website
- the amount of data transferred and
- whether the access or retrieval was successful.
The data is used exclusively for administration, optimisation of the website and to process your enquiries.
The IP address can be a personal data, because under certain conditions it is possible to find out the identity of the owner of the used internet access by information of the respective internet provider.
We only evaluate the IP address in the event of attacks on our Internet infrastructure. In this case, we have a legitimate interest within the meaning of Art. 6 (1) f) DSGVO in processing the IP address. This legitimate interest results from the need to ward off the attack on the internet infrastructure, to determine the origin of the attack in order to be able to take criminal and civil action against the person responsible, as well as to effectively prevent further attacks.
The IP address is deleted when we can exclude that no attack on our internet infrastructure has occurred from it. This happens regularly after seven days.
Furthermore, we record the domains from which our web visitors come. We also analyse this data to identify trends and compile statistics, but we delete the data afterwards.
In addition, this website contains links to other websites. The owner of this site is not responsible for the privacy practices or the content of such websites. If you have any questions or comments about our privacy practices, please contact us at email@example.com.
Surfing on our website with the provision of personal data
If you provide us with personal data (such as name, address or email address) voluntarily or in the context of registering for the GEALAN partner area, this data will not be passed on to third parties without your express consent or legal permission. If you register for the GEALAN partner area, a contract is concluded between us for the storage and availability of the respective profile.
In this case we process your data on the basis of Article 6 b) of the EU-DSGVO for the fulfilment of an existing contract between us or according to Article 6 a) EU-DSGVO on the basis of the consent given by you. The processing is carried out for the fulfilment of contractual services, the processing of payments, the delivery of contractually ordered products and services, the transmission of your address data to logistics companies for the delivery of goods, as well as for sending interesting information about products and promotions. Your data will be passed on within our company to the persons involved in the processing of the contract or the decision-making process. Any further disclosure to third parties that is not covered by legal requirements will only take place with your express consent. There is no automated decision-making.
We process your data only as long as it is necessary for the fulfilment of our contract or applicable legal provisions or due to the reason for your data transfer. As a rule, we do not independently delete the personal data you have entered in the GEALAN partner area. However, you have the option of changing individual data in your profile at any time. A complete deletion of the personal data stored in your profile will take place upon request by email (stating your user name) to firstname.lastname@example.org, as long as the further storage of this data is not permitted due to another permissible circumstance. Business documents will be stored in accordance with the statutory retention periods and subsequently deleted in accordance with data protection regulations.
Use of external service providers
We work with service providers who process certain data on our behalf. This is done exclusively in accordance with the applicable data protection law. In particular, we have concluded data processing on behalf agreements with our service providers that meet the requirements of Article 28 of the EU Data Protection Regulation.
In accordance with the GDPR, you have the following rights:
+ Right to information about the processing of your data.
You have the right to request information from us about whether and, if so, which of your personal data is being processed at GEALAN Fenster-Systeme GmbH. You have the right to the following information:
the purposes of processing
the categories of your personal data that are processed
the recipients or categories of recipients to whom the personal data have been or will be disclosed
if possible, the planned duration for which your personal data will be stored or, if this is not possible, the criteria for determining this duration;
if your personal data have not been collected from you, any available information about the source of the data
the existence of automated decision-making, including profiling, pursuant to Article 22 of the EU GDPR and, at least in such cases, meaningful information about the logic involved and the scope and intended effects of such processing for you.
We will provide you with a copy of the personal data that is the subject of the processing. If we have reasonable doubts about the identity of the person requesting information, we will request additional information to confirm the identity of the data subject.
+ Right to rectification
You have the right to request that we correct any inaccurate personal data relating to you without undue delay. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data, including by means of a supplementary declaration.
+ Right to erasure
Your personal data will be deleted if you assert a right to deletion in writing and this does not conflict with statutory retention rights or obligations. In addition, we always delete your personal data if the data is no longer required to fulfil the purpose for which it was stored or if its storage is inadmissible for other legal reasons, and the deletion does not conflict with the legal retention periods.
+ Right to restriction of processing
You have the right to request a restriction in the processing of your personal data if the accuracy of the personal data is not given, for the period of time that allows GEALAN Fenster-Systeme GmbH to verify the accuracy of the personal data. If the processing is unlawful and you refuse the erasure of the personal data and instead request the restriction of the use of the personal data from us, we will follow your request. Data will also not be deleted if we need it for the assertion, exercise or defence of our own legal claims, or if you have objected to the processing in accordance with Article 21(1) EU DSGVO, as long as it has not yet been determined whether the legitimate grounds of GEALAN Fenster-Systeme GmbH outweigh your reasons.
+ Right to object to processing
You have the right to object at any time to the processing of your personal data that is carried out on the basis of Article 6 of the EU Data Protection Regulation. The GEALAN Fenster-Systeme GmbH shall no longer process the personal data in the event of the objection, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the assertion, exercise or defence of legal claims.
+ Right to data portability
You have the right to receive the personal data relating to you that you have provided to us in a structured, commonly used and machine-readable format and to transfer this data to another controller without hindrance from us. The prerequisite is that the processing is based on consent pursuant to Art. 6 or Art. 9 of the EU GDPR or on a contract and the processing is carried out with the help of automated processes. You also have the right to have the personal data transferred directly from GEALAN Fenster-Systeme GmbH to another responsible party, insofar as this is technically feasible.
+ Right to revoke your consent with effect for the future
You may revoke your consent at any time with effect for the future. There are no costs for a revocation, an objection or information. Please send your revocation by e-mail to email@example.com.
+ Right to complain to the data protection supervisory authority
If you are of the opinion that the processing of your personal data violates applicable data protection regulations, you have the right to complain to the supervisory authority responsible for your federal state at any time in accordance with Article 77 EU-DSGVO.
Consent with Cookiebot
Our website uses the consent technology provided by Cookiebot in order to collect your consent to the storage of specific cookies on your device or to the use of specific technologies and to document this consent in compliance with data protection law. The provider of this technology is Cybot A/S, Havnegade 39, 1058, Copenhagen, Denmark (hereinafter “Cookiebot”).
We have concluded a data processing agreement (DPA) with the abovementioned provider. This is an agreement which is required under data protection law and which ensures that the provider only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.
This website uses the map service Google Maps. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
It is necessary to store your IP address in order to use the functions of Google Maps. This information is generally transmitted to a Google server in the USA and stored there. The provider of this website has no influence on this data transmission. When Google Maps is activated, Google can use Google Web Fonts for the purpose of the uniform display of fonts. When you access Google Maps, your browser will load the required Web Fonts in your browser cache in order to correctly display text and fonts.
The use of Google Maps takes place in the interest of ensuring the appealing presentation of our online services and of making it easy to find the locations which are mentioned on our website. This constitutes a legitimate interest within the meaning of Article 6 (1) lit. f GDPR. Insofar as the corresponding consent has been requested, the processing takes place exclusively on the basis of Article 6 (1) lit. a GDPR and Section 25 (1) Teleservices Data Protection Act (TDDSG) insofar as the consent covers the storage of cookies or access to the information on the user’s device (e.g. device fingerprinting) within the meaning of the TDDSG. The consent may be withdrawn at any time.
Data transmission to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.
Data Privacy Statement for the Google Analytics web analytics service
Further information on the terms of service and data protection can be found at https://www.google.com/analytics/terms/gb.html or https://policies.google.com/.
Please note that on this website, Google Analytics has been extended with the “anonymizeIp” code in order to guarantee that IP addresses are recorded anonymously (IP masking).
Google Tag Manager
Google Tag Manager is a Google Inc. (“Google”) service which is used to add, update and manage tags.
Tags are small code elements on our website which help measure traffic and visitor behaviour and monitor the impact of online advertising and social media.
When you visit our website, the current tag configuration is sent to the user’s browser. This contains instructions on which tags should be enabled. The tool itself does not record personal data. The tool does however ensure that other tags which may record data are enabled.
More information on how Google Tag Manager works can be found here: https://support.google.com/tagmanager/ and in the use policies: https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/.
Data Privacy Statement for “Google Remarketing” and “Similar Audiences” function of Google Inc.
Data privacy statement for Google Inc. “Google AdWords Conversion Tracking”
The following information explains the contents of our newsletter as well as the registration, dispatch and statistical evaluation procedures and your rights of objection. By subscribing to our newsletter, you agree to receive it and to the procedures described.
We send newsletters and emails with promotional information (hereinafter "newsletter") only with the consent of the recipients or a legal permission. The contents circumscribed in the context of a registration for the newsletter are decisive for the consent of the users.
Double-Opt-In and Logging:
Registration for our newsletter is carried out in a so-called double opt-in process, i.e. after registration you will receive an e-mail in which you are asked to confirm your registration. This confirmation is necessary so that no one can register with other e-mail addresses. The registrations for the newsletter are logged in order to be able to prove the registration process according to the legal requirements. This includes the storage of the registration and confirmation time, as well as the IP address. Changes to your data stored at sendinblue are also logged.
Use of the shipping service provider "Sendinblue.com":
This website uses Sendinblue to send newsletters. The provider is Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany.
Sendinblue is a service that can be used, among other things, to organize and analyze the sending of newsletters. Sendinblue is a German, certified provider, which was selected in accordance with the requirements of the General Data Protection Regulation and the Federal Data Protection Act. You can find more information here: de.sendinblue.com/information-newsletter-receiver. The data you enter for the purpose of receiving the newsletter will be stored on Sendinblue's servers in Germany.
If you do not want Sendinblue to analyze your data, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in each newsletter message.
To sign up for the newsletter, it is sufficient to provide your email address. In addition, we use other data such as name and surname, country and customer group. This information is only used for personalization and segmentation of the newsletter.
Statistical collection and analyses:
The newsletters contain a so-called "web-beacon", i.e. a pixel-sized file that is retrieved from Sendinblue's server when the newsletter is opened. Within the scope of this retrieval, technical information, such as information about the browser and your system, as well as your IP address and the time of the retrieval are initially collected. This information is used for the technical improvement of the services based on the technical data or the target groups and their reading behavior based on their retrieval locations (which can be determined with the help of the IP address) or the access times.
The statistical surveys also include determining whether the newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to individual newsletter recipients. However, it is neither our nor Sendinblue's intention to observe individual users. The evaluations serve us much more to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.
Online Calling and Data Management:
You can cancel the receipt of our newsletter at any time, i.e. revoke your consents. At the same time, your consent to the sending of the newsletter via Sendinblue and the statistical analyses will expire. A separate cancellation of the sending via Sendinblue or the statistical analysis is unfortunately not possible.
You will find a link to cancel the newsletter at the end of each newsletter.
The data you provide us with for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from our servers as well as from the servers of Sendinblue after you unsubscribe from the newsletter. Data that has been stored by us for other purposes (e.g. e-mail addresses for the member area) remains unaffected by this.
After you have unsubscribed from the newsletter distribution list, your e-mail address may be stored by us or the newsletter service provider in a blacklist to prevent future mailings. The data from the blacklist will only be used for this purpose and will not be merged with other data. This serves both your interest and our interest in complying with the legal requirements for sending newsletters (legitimate interest within the meaning of § 6 para. 1 lit. g KDG). The storage in the blacklist is not limited in time. You can object to the storage if your interests outweigh our legitimate interest.
For more details, please refer to the data protection provisions of Sendinblue at: https://de.sendinblue.com/datenschutz-uebersicht.
Conclusion of a contract for commissioned data processing
We have concluded a contract with Sendinblue in which we oblige Sendinblue to protect our customers' data and not to pass it on to third parties. This contract can be viewed at the following link: https://de.sendinblue.com/wp-content/uploads/sites/3/2021/04/AV_Muster_DE_18.02.2021.pdf
Legal basis Data Protection Regulation:
In accordance with the requirements of the Basic Data Protection Regulation (DSGVO) applicable as of May 25, 2018, we inform you that the consent to send newsletters to the registered email addresses is based on Art. 6 para. 1 lit. a, 7 DSGVO and § 7 para. 2 No. 3, or para. 3 UWG. The use of the dispatch service provider Sendinblue, performance of statistical surveys and analyses as well as logging of the registration process, are carried out on the basis of our legitimate interests pursuant to Art. 6 para. 1 lit. f DSGVO.
We would also like to point out that you can object to the future processing of your personal data in accordance with the legal requirements pursuant to Art. 21 DSGVO at any time. The objection can be made in particular against the processing for purposes of direct advertising.
Data processing by social networks
Our social media webpages are intended to give us as extensive an internet presence as possible. This constitutes a legitimate interest as described in Article 6(1) point f GDPR. Analytical processes initiated by the social networks may be founded on different legal bases which the social network operators must disclose (e.g. consent as described in Article 6(1) point a GDPR).
Controller and exercising of rights
When you visit one of our social media webpages (e.g. Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered by this visit. However, our responsibility and related ability to provide information are limited exclusively to the content we have created. In principle, you can exercise your rights (information, rectification, erasure, restriction of processing, data portability and complaints) both against us (with regard to content) and against the operator of the respective social media portal (e.g. Facebook). Please note that, despite our shared responsibility with the social media portal operators, we do not have complete control over the data processing operations of the social media portals. Our capabilities are limited by the company policy of the respective provider.
We cannot influence the period for which personal data pertaining to you is stored by the social network operators for their own purposes. Information can be obtained directly from the social network operators (e.g. in their data protection information, see below).
Individual social networks
We have a profile on Facebook. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. According to Facebook’s statement the collected data will also be transferred to the USA and to other third-party countries.
We have signed an agreement with Facebook on shared responsibility for the processing of data (Controller Addendum). This agreement determines which data processing operations we or Facebook are responsible for when you visit our Facebook Fanpage. This agreement can be viewed at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.
You can customize your advertising settings independently in your user account. Click on the following link and log in: https://www.facebook.com/settings?tab=ads.
We have a profile on Instagram. The provider is Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://help.instagram.com/519522125107875 and https://de-de.facebook.com/help/566994660333381.
We have a LinkedIn profile. The provider is the LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies. If you want to disable LinkedIn advertising cookies, please use the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out. Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.linkedin.com/legal/l/dpa und https://www.linkedin.com/legal/l/eu-sccs.
Updating this data privacy statement
From time to time this data privacy statement may have to be updated, for example by new legal provisions or official requirements, and new offers on our website. We will notify you of this. In general, we recommend that you open this data privacy statement regularly to check whether there are changes. Changes can be identified e.g. by an updated issue status at the bottom of the document.
Printing and saving this data privacy statement
This data privacy statement can be printed and saved directly, for example using the Print or Save function in your browser.
Use our manufacturer locator.
I want to receive newsletter "Reference Building of the Month" and GEALAN news via E-Mail (approx. twice a month) - free of charge and terminable at any time.