GUMAK Media

We, as the operators of this website, take the protection of your data seriously (when we refer to the website, this also includes its subpages). Your data will be treated confidentially and in accordance with legal regulations, in particular the GDPR (General Data Protection Regulation) and the German Federal Data Protection Act (BDSG).

By accessing this website and using its functions, your personal data will be processed in various ways. “Personal data” means any information relating to an identified or identifiable natural person. The term “processing” refers to any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction (Art. 4 No. 2 GDPR).

Please note that data transmissions over the internet can be subject to security vulnerabilities. These vulnerabilities may not be reliably protected against access by third parties. This applies particularly to communication via email. Nevertheless, we continuously use security technologies that meet the current state of the art and are considered reasonable.

With the following privacy policy, we would like to inform you about which personal data we process, for what purpose, and what rights you and we have in relation to the processing.

Name and address of the data controller

The controller within the meaning of the GDPR (General Data Protection Regulation) and other legal provisions in the Member States of the European Union relating to responsibility for data protection is:

GUMAK Media eK
CEO: Gulliame Amaho Ike
Brühler Straße 41
50968 Cologne
Germany

Tel.: +49 (0) 221 – 7691 -52
Fax: +49 (0) 221 – 7691 -54
Email: info@gumak.de
Website: www.gumak.de

Duration of storage/time of deletion of your personal data

In principle, we process your data – particularly in the form of storage – only as long as this is necessary within the framework of the legal bases stated for the respective processing purpose. If we do not provide specific information regarding the duration of storage or the time of deletion of your data, this will be determined on a case-by-case basis.

Contractual and statutory retention and documentation obligations must be observed. Corresponding periods/deadlines can be contractually agreed upon or arise, among other things, from the German Commercial Code (HGB) and the German Fiscal Code (AO), and can already amount to 10 years or more. They are justified in Art. 6 para. 1 sentence 1 lit. a), lit. b) and/or lit. c) in conjunction with Art. 17 para. 3 lit. b) and/or lit. c) GDPR, § 35 para. 3 BDSG (new).

Furthermore, retention and documentation obligations may be in our legitimate interest, provided that your interests worthy of protection do not override this. For example, it may be in our legitimate interest to retain and store personal data, including data embodied in documents, photos, and records, in order to secure evidence in the event of legal disputes until the statute of limitations expires. Statutes of limitations can be shorter or longer, depending on the subject matter of the claim, and can even be up to 30 years. The legal basis for this is Art. 6 para. 1 sentence 1 lit. f) in conjunction with Art. 17 para. 3 lit. e) GDPR. We refrain from specifically listing all circumstances relevant to the statute of limitations, as this would limit the transparency of this privacy policy.

Finally, we may refrain from deleting personal data pursuant to Section 35 Paragraph 1 of the German Federal Data Protection Act (BDSG) if, in the case of non-automated data processing, deletion is impossible or only possible with disproportionate effort due to the specific nature of the storage, and your interest in deletion is considered minor. In this case, processing will be restricted pursuant to Article 18 of the GDPR instead of deletion. This does not apply if your personal data has been processed unlawfully.

Visit our website

When you access our website and while you remain on the website, the following general data is essentially collected and temporarily stored in the log files of our servers:

Types and versions of the browser you are using;
The operating system you use to access our website;
Websites that may access our website (also called referrer URL);
The IP address (Internet Protocol address) used to access our pages;
Date and time of access;
Name of your internet service provider, through which you obtain access to the internet (access provider);
Websites that you access via our website.

This data is processed in our legitimate interest for technical purposes, in particular for the continuous and secure operation of the connection, for customer service purposes to optimize the user-friendliness of our system, and for documentation purposes for the potential prosecution of criminal offenses or civil claims, as well as for defending against attacks on our system. In our view, there is no reason to assume that you have an overriding, legitimate interest in preventing us from processing the data for the aforementioned purpose, especially since you voluntarily choose to access our website.

The legal basis for the aforementioned processing of data is Art. 6 para. 1 sentence 1 lit. f) GDPR.

The anonymous data from the server log files are stored separately from all personal data provided by you.

When you visit our website and its subpages, we also use cookies and analytics tools. Please refer to the explanations below under ___ (Cookies) and ___ (Analytics Tools).

Contact form / Mailto function

We provide a contact form and mailto functions on our website for your use. This allows you to contact us via our website, for example, to ask questions about existing contractual relationships or to offer suggestions. If you use this option, we will store your email address and, if applicable, your name so that communication can take place. Providing your name is required for the contact form so that we can address you personally. Whether you provide further personal data (such as name, address, or telephone number) when using this contact function is entirely up to you. If you do provide such data, we will process your name, address, and telephone number.

If you attach files to your emails, these will also be stored, along with any personal data they may contain.

Providing your personal data in the aforementioned context is voluntary and at your instigation for the purpose of communicating with us. We process this data based on our legitimate interest in customer-oriented communication. In our view, there is no reason to assume that you have an overriding, legitimate interest in preventing us from processing your data for the stated purpose, especially since you are voluntarily choosing to provide your data. Therefore, the processing is covered by Article 6(1)(f) GDPR. Depending on the content of the communication, Article 6(1)(b) GDPR may also be considered as a legal basis, for example, if the communication serves contractual measures – including pre-contractual and post-contractual measures.

The timing of your data deletion depends on the content of the communication and cannot be determined in advance. However, unless we have legal obligations to retain or document the data, or overriding legitimate interests, the data will be deleted after the communication has ended.

Telephone, fax and email contact

On our website, we provide telephone and fax numbers and email addresses through which you can also contact us. If you provide us with personal data during a telephone call, fax, or email, this data will be processed.

Phone

When you call us, we may collect your name and other data, such as your home address, email address, telephone number, the date and time of your call, and the reason for your call, insofar as this is necessary for the effective processing of your request. This data is collected by us personally requesting it from you.

We assume that your call relates to the initiation of a contractual relationship, measures concerning an existing contractual relationship, or post-contractual obligations arising therefrom. In this respect, Article 6(1)(b) serves as the legal basis for the processing.

Furthermore, the processing is carried out in our overriding interest for the purposes of documentation to support any legal claims and for potential criminal prosecution. We have no reason to believe that your legitimate interests in protecting your personal data outweigh our legitimate interests in processing your data. The legal basis for this processing is Article 6(1)(f) GDPR.

Fax

Faxes received by us, including your personal data contained therein, are processed to the extent necessary for the effective handling of the request expressed in the fax.

If the fax is sent to us in relation to the initiation of a contractual relationship, measures relating to an existing contractual relationship or to post-contractual obligations arising therefrom, Art. 6 para. 1 sentence 1 lit. b) serves as the legal basis for the processing.

E-mail

We also process incoming emails, including your personal data contained therein or in attachments to the email, insofar as this is necessary for the effective handling of the request expressed in the email.

If the email is sent to us in relation to the initiation of a contractual relationship, measures relating to an existing contractual relationship or to post-contractual obligations arising therefrom, Art. 6 para. 1 sentence 1 lit. b) serves as the legal basis for the processing.

Cookies

When you use our website, we use cookies. These are text files that are stored on your computer system. Unless otherwise stated, cookies generally serve technical purposes to simplify the use of our website, which also benefits you. Some cookies may be technically necessary for certain functions of our website to work at all. Our legitimate interest in processing this data arises from the aforementioned purposes. We have no reason to believe that your legitimate interests in protecting your personal data outweigh our legitimate interest in processing your data through cookies. The legal basis for processing data obtained through cookies is therefore Article 6(1)(f) GDPR.

You have the option to disable cookies. To do this, you must access your browser settings and activate the corresponding blocking and/or deletion functions. Please note that blocking certain cookies may prevent you from using our website.

We inform you about the use of cookies via a banner as soon as you visit our website.

Social Media Plugins

We use social media plugins on our website to make our offerings more well-known and attractive. We use plugins from the following social media networks:

Facebook

We use Facebook plugins on our website, which are indicated by the “LIKE” or “SHARE” button or a Facebook link to our Facebook pages. These plugins are offered by Facebook, Inc.

When you visit our website pages that have such a plugin installed, the plugin’s content is transmitted from Facebook to your browser and stored there. Facebook then receives the information that your browser has accessed a page with a plugin. This occurs even if you are not a Facebook member, or—if you are—if you are not logged in to Facebook. The information collected by the plugin, which includes your IP address, is transmitted to and stored on a Facebook server in the USA.

If you are logged into Facebook while visiting our pages that contain a Facebook plugin, Facebook can associate your visit to our website with your Facebook account. Facebook may use the collected information for advertising purposes. For this purpose, Facebook creates analytics profiles, for example, to evaluate the effectiveness of advertisements or to share your activity on our website with other Facebook members. You can prevent your Facebook membership from being linked to your visit to our website by logging out of Facebook before visiting our site.

For information on the purpose and scope of data collection and the further processing and use of data by Facebook, as well as your related rights and privacy settings, please refer to Facebook’s privacy policy:

https://www.facebook.com/about/privacy/

YouTube

Our website integrates plugins from the video network YouTube, operated by YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube is a subsidiary of Google. Simply by hosting the videos on this website, mechanisms are automatically triggered when you visit our site that store cookies and plugins from YouTube on your device. Simultaneously, accessing our pages with embedded YouTube videos typically establishes a connection to Google’s “DoubleClick” advertising network.

The use of the aforementioned social media plugins is in our legitimate interest in optimizing our website and effectively marketing our services. The use of your personal data can be restricted and/or prevented through your browser settings or by deactivating cookies and plugins. Against this background, we have no reason to assume that your overriding, legitimate interests in protecting your personal data conflict with our legitimate interest in using the cookies and plugins mentioned here. The legal basis for the use of the specified analytics tools is therefore Article 6(1)(f) GDPR.

Share functions

Our website uses share functions from the social media networks Twitter, Facebook LinkedIn, Xing, WhatsApp and WeChat, as well as links to our profiles on Facebook, Xing and Instagram.

Google Fonts

We integrate fonts (“Google Fonts”) from the provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. You can prevent the use of this service and any potential transfer of data to Google by clicking the following opt-out function:

https://adssettings.google.com/authenticated .

Data sharing

Insofar as we disclose your data to third parties in unnamed cases, this is done only

We have obtained your explicit consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR,
The transfer of your data is necessary in our legitimate interest for the exercise of legal claims pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR, and there is no reason to assume that you have an overriding legitimate interest in not having your data transferred.
In the event that there is a legal obligation to disclose the data pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR, as well as
This is necessary for the performance of a contract with you in accordance with Article 6(1)(b) GDPR.

Your rights as a data subject

The GDPR grants you the following rights with regard to the processing of your personal data (“data”) by us:

In accordance with Article 15, paragraphs 1 and 2 of the GDPR, you can request information from us, in particular about
- The purposes of processing;
- The categories of data that are processed;
- The categories of recipients to whom your data has been or will be disclosed;
- If possible, the planned duration for which your data will be stored, or, if this is not possible, the criteria for determining this duration;
- The existence of a right to rectification or erasure of data concerning you or to restriction of processing by the controller or a right to object to such processing;
- The existence of a right to lodge a complaint with a supervisory authority;
- If the data is not collected from you, all available information about the origin of the data;
- The existence or non-existence of automated decision-making, including profiling (“profiling” means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or movements) and – where applicable – meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you;
- appropriate safeguards pursuant to Art. 46 GDPR when transferring your data to a third country or to an international organisation.
In accordance with Article 15 Paragraph 3 of the GDPR, you can request that we produce and provide you with a copy of your data free of charge, provided that this does not infringe on the rights or freedoms of other persons.
In accordance with Article 16 of the GDPR, you can request that we immediately rectify any inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data, including by means of a supplementary statement.
In accordance with Article 17 of the GDPR, you can request that we delete your data, insofar as…
- They are no longer necessary for the processing purposes;
- You withdraw your consent given pursuant to Art. 6 paragraph 1 letter a or Art. 9 paragraph 2 letter a GDPR and no other legal basis for the processing of the data applies;
- You may object to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you may object to the processing pursuant to Article 21(2) GDPR.
- Your data has been processed unlawfully;
- and insofar as the processing of the data is not necessary
  - To exercise the right to freedom of expression and information;
  - For compliance with a legal obligation which requires processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
  - For the establishment, exercise or defense of legal claims.
You can request the restriction of the processing of your data in accordance with Article 18 GDPR, insofar as
- The accuracy of the data is disputed by you, for a period of time that allows us to verify the accuracy of the data;
- The processing is unlawful and you object to the erasure of the data and instead request the restriction of its use;
- We no longer need the data for the purposes of processing, but you require it for the establishment, exercise or defense of legal claims, or
- You have objected to the processing pursuant to Article 21 paragraph 1 GDPR, pending verification of whether our legitimate grounds override yours.
In accordance with Article 20 of the GDPR, you can request from us to receive the data concerning you that you have provided to us in a structured, commonly used and machine-readable format, and you have the right to transmit this data to another controller without hindrance from us, provided that
- The processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) or on a contract pursuant to Article 6(1)(b) and
- The processing is carried out using automated procedures.
In accordance with Article 7(3) of the GDPR, you have the right to withdraw your consent to the processing of your data at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. You can withdraw your consent by email to: info@gumak.de
Pursuant to Article 21(1) of the GDPR, you have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on point (f) of Article 6(1) of the GDPR, including profiling based on those provisions. We will no longer process the data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of establishing, exercising or defending legal claims.
In accordance with Article 21 Paragraph 2 of the GDPR, if your data is processed for direct marketing purposes, you have the right to object at any time to the processing of your data for such marketing; this also applies to profiling insofar as it is related to such direct marketing.
Pursuant to Article 77 of the GDPR, without prejudice to any administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of your personal data infringes the GDPR.

Data security

During your visit to our website, we use the so-called SSL (Secure Socket Layer) protocol for encrypting communication, which corresponds to the current standard for security. We will continuously implement technological innovations to further enhance protection to the extent reasonably possible.

As of May 2018

Privacy Policy