Privacy Policy
Below, we would like to explain what personal data we collect about you and how we use it. We will also inform you about your data privacy rights and explain who you can contact if you have any questions regarding the protection of your data.
About Us
Controller responsible for the processing of your data:
GADOT Germany GmbH
Gladbecker Str. 3
40472 Düsseldorf
E-Mail: info@gadot.com
Phone: +49 211 3871 0
Managing Directors: Thomas Brakmann, Wim de Windt
If you have any questions regarding this Privacy Policy, the processing of your data, your rights, or any other data protection matters, our Data Protection Officer will be happy to assist you.
Contact details of the Data Protection Officer:
GADOT Germany GmbH
Data Protection Officer
Gladbecker Str. 3
40472 Düsseldorf
E-Mail: Datenschutz@gadot.com
Scope of Application
This Privacy Policy applies to the website gadot.de. It is intended for visitors to our website.
Our website contains links to third-party websites that are not covered by this Privacy Policy.
The display of banner ads, text ads, or video ads before or during embedded videos is the responsibility of the respective operator.
Do I have to provide my data?
When you visit our website, user data is automatically stored. Some of the data collected is necessary to use the website. In addition, we process your data to protect our legitimate interests after a balancing of interests. This enables us to continuously improve the services we offer you. On the following pages, you will learn more about our interests and whether or how you can object to the use of your data or disable it yourself.
To use one of our services or to send an inquiry, you will be asked to provide your personal data. It is entirely up to you whether you wish to use these services and provide your data. We also offer services for which we only process your data if you have given us your consent. Granting consent is always voluntary, and any consent given can be revoked at any time.
Please note that if you provide information about other people, you must obtain their prior consent and inform them of the purposes of sharing this data as set out in this Privacy Policy.
We kindly ask you to also pass this information on to any individuals you involve in using our services.
Purposes of Processing, Legal Bases, and Data Processed
We distinguish between different types of processing, which we describe below. In tables, we detail the data processed for these purposes and the cookies used.
Provision of Services
To visit and use our website, your data must be collected. We process this data to safeguard our legitimate interest in providing a functioning website (Art. 6 (1) (f) GDPR).
Data Security
Every access to our website is stored and evaluated in a log file. We process this data for data security purposes. This processing is carried out to safeguard our legitimate interest in ensuring data security (Art. 6 (1) (f) GDPR).
Map Service
To use the map embedded on our website, the specified data must be processed. For this purpose, your data will only be processed and forwarded to the service provider Google Ireland Ltd (hereinafter “Google”) once you have given your consent by activating the map (Art. 6 (1) (a) GDPR). Through this, Google becomes aware that our website was accessed via your IP address. Google may also use the data to analyze user behavior as well as for market research and marketing purposes. You can find more information on how user data is handled in Google’s Privacy Policy.
Handling Inquiries
We process the data you provide to us when you have a question or a request. This includes, for example, data you send us by email. Processing your data is necessary for us to handle your inquiry. It is carried out to safeguard our legitimate interest in answering your questions and requests (Art. 6 (1) (f) GDPR).
Optimization of the Website Including Profiling
We are constantly improving our website to offer you an optimal user experience. For this purpose, statistical cookies are set (provided you agree) and the specified data about your use of our website is collected. This assigns you a unique User ID, which serves to identify your subsequent visits. We use your data to evaluate the usability, functionality, and attractiveness of our website as well as user behavior. To achieve this, your data is aggregated into non-personally identifiable statistics. This enables us to troubleshoot errors, optimize user navigation, and further develop our website and marketing activities. Your visit data will not be linked to your name or other personal details (should you provide them to us).
Processing is based on your consent (Art. 6 (1) (a) GDPR). To find out how to revoke your consent, please refer to the section “Information about cookies”.
Information About Cookies
If we use cookies that are necessary for the operation of the website, processing is based on our legitimate interest (Art. 6 (1) (f) GDPR) in providing a functioning website. Otherwise, all cookies are set only if you give us your consent (Art. 6 (1) (a) GDPR). In our consent manager, you will find further information on the purposes of these cookies, and you can grant, change, or withdraw your consent there at any time.
| Name | Provider | Purpose | Duration | Withdrawal of consent |
|---|---|---|---|---|
| cookies_and_content_security_policy | First-party cookie | Stores selection made in the cookie banner | 12 months | Not applicable |
| _gid | Sets individual user ID; can be used by Google to analyze user behavior, market research, and marketing. | 1 day | Delete cookies via browser settings / Cookie settings on our website | |
| _ga | Sets individual user ID; can be used by Google to analyze user behavior, market research, and marketing. | 24 months | Delete cookies via browser settings / Cookie settings on our website | |
| _gat_gtag_UA_192123247_1 | Used by Google Analytics to throttle request rate. | 1 minute | Delete cookies via browser settings / Cookie settings on our website |
Processed Data
| Data | Service Provision |
Data Security | Optimization and Analysis |
Map Service | Handling Inquiries |
|---|---|---|---|---|---|
| IP-address | x | x | x | ||
| Name of the retrieved file | x | x | |||
| Volume of data transferred | x | x | |||
| Web page accessed | x | x | x | ||
| Referrer URL (previously visited website) | x | x | x | ||
| Search terms that led users to our website | x | ||||
| User Agent (Browser data) | x | x | x | x | |
| Session Cookie | x | ||||
| Date and time of access | x | x | x | ||
| Last user activity (session timeout) |
|||||
| Ad and campaign IDs | x | ||||
| Marketing channel | x | ||||
| Current time | x | ||||
| Time of click |
|||||
| Keyword ID (external search) | x | ||||
| Visitor ID (non-personal) | x | ||||
| Operating system | x | ||||
| Browser information (type, version, resolution, language) | x | x | |||
| Screen resolution / color depth | x | ||||
| URL of the viewed page / downloads | x | ||||
| Cookie on/off | x | ||||
| JavaScript on/off | x | ||||
| Installed plugins |
|||||
| Mouse movement in the browser | |||||
| Statistik-Cookies | x | ||||
| Marketing-Cookies | x | ||||
| Salutation, name |
x | ||||
| Contact details (email, phone, address) |
x | ||||
| Subject / request |
x | ||||
| Message content |
x | ||||
| Time of message receipt |
x |
Other processing purposes
In addition, the above-mentioned data is used for the following purposes based on a balancing of interests (Art. 6 (1) (f) GDPR). The interests are specified below:
- In the event of a security incident in our company affecting your data, we are obliged to report the incident to the competent data protection supervisory authority (Art. 33 GDPR). As it is in our legitimate interest to comply with this statutory reporting obligation as quickly as possible, data relating to your person may be processed in the course of investigating the relevant security incident. Reports of these security incidents to data protection supervisory authorities do not contain any of your personal data.
- As it is in our interest to ensure the security of our systems, we regularly conduct security and effectiveness tests in which your above-mentioned data may be processed.
- As it is in our interest to resolve legal disputes, we process your data for this specific purpose in such cases. It is also in our interest to retain evidence in the event of legal disputes until all relevant statutory limitation periods pursuant to Sections 195 et seq. of the German Civil Code (BGB) have expired. For this purpose, we store the relevant data relating to your person in accordance with these limitation periods. Erasure periods cannot be predicted in advance, as they depend on the specific matter in dispute and the corresponding statutory limitation period, which can be up to 30 years. The standard limitation period is 3 years.
- In addition, it is in our interest to investigate suspected cases and to hand over relevant information to law enforcement authorities in the event of a specific suspicion of a criminal offense.
- We conduct audits, internal reviews, and other control measures (e.g., monitoring by the data protection officer), as it is in our legitimate interest to comply with legal requirements, create transparency regarding our business processes, continuously optimize these processes, and prevent as well as detect actions harmful to our business. In doing so, documents or files containing your personal data may be processed.
- Errors can happen to anyone and can occur in any operational process and system. To allow us to optimize these processes and systems and reduce our error rate, we process the data available in our company to identify sources of error. This processing is carried out to safeguard our legitimate interest in improving our processes and systems.
- We process your data for testing IT systems and software products as well as for carrying out migrations. This processing is carried out to fulfill our legitimate interest in verifying the correctness of new products and the correctness and completeness of migrations.
Erasure periods (or retention period)
Data processed for data security purposes will be erased after 7 days.
Data used to optimize our website, including profiling, will be erased after 7 days.
Data processed to answer questions and requests will be erased as soon as the matter has been conclusively processed.
To preserve evidence, we retain data within the scope of statutory limitation provisions pursuant to Sections 195 et seq. of the German Civil Code (BGB). In this context, the storage period of your data may exceed the period specified above. Statutory limitation periods can be up to 30 years. The standard limitation period is 3 years.
Origin of the data
No data is collected from third parties
Information on automated individual decision-making
No automated individual decision-making takes place.
Which recipients receive your data?
The following list shows which recipients receive your data (“data recipients”). You can read about the specific data involved in the relevant sections of this privacy notice. Your data is partially disclosed based on legal or contractual obligations. In other cases, we use selected agents and service providers who act as data processors (pursuant to Art. 28 GDPR) on our behalf and may receive access to your data to the extent required in each case. Data processors are subject to numerous contractual obligations and, in particular, may only process your personal data on our instructions and exclusively for the performance of the tasks assigned by us.
- Auditors
- Data Protection Officer
- Data media destruction service providers
- Service providers for the optimization of our website
- Map service providers
- Recipient’s email service provider (for communication via email)
- IT service providers
- Lawyers, law enforcement agencies, public prosecutor’s offices, courts, opposing counsel, State or Federal Criminal Police Offices (in the event of legal disputes and specific suspicion of a criminal offense)
- Telecommunications service providers (when we communicate by phone)
- Shipping service providers (for written communication)
Data recipients in non-EU countries
Our IT service providers, map service providers, and service providers for website optimization have affiliated companies or subcontractors outside the EU that may access your data. The EU Commission determines which non-EU/EEA countries (third countries) offer an adequate level of data protection. The affiliated companies or subcontractors of our IT service providers have either submitted to the Data Privacy Framework (Decision No. C(2023) 4745 final of July 10, 2023), provided they are based in the USA; otherwise, our IT service providers are responsible for implementing EU Standard Contractual Clauses pursuant to Commission Decision No. (EU) 2021/914. A sample of these EU Standard Contractual Clauses can be found on the website of the EU Commissioner for Justice and in the Official Journal of the EU.
Your rights
Sie verfügen über das gesetzliche Recht auf:
- Access to the personal data stored about you (Art. 15 GDPR)
- Rectification and completion of your data stored by us (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Withdrawal of given consent (Art. 7 GDPR) with effect for the future. The lawfulness of the processing carried out up to the time of withdrawal remains unaffected.
- In addition, you have the right to express your point of view and to contest a decision based solely on automated processing (Art. 22 GDPR).
- You have the right to object to the processing of your data to safeguard our legitimate interests or the legitimate interests of a third party (Art. 21 GDPR) – You have the right to object at any time, on grounds relating to your particular situation, to such processing; this also applies to profiling based on these provisions within the meaning of Art. 4 No. 4 GDPR.
- Objection to direct marketing – You have the right to object at any time and without giving reasons to the processing of your data for the purpose of direct marketing.
To exercise these rights, you can contact us in particular via the contact details provided above.
You also have the legal right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).
This privacy policy is valid as of June 12, 2026.
