• visit our website („users“),
• are in business contact with us („business contacts“).

Garlock processes your data in accordance with the applicable data protection laws, in particular Regulation (EU) 2016/679 (Basic Data Protection Regulation – „GDPR“).

In this privacy policy, Garlock refers to Garlock GmbH. You can contact Garlock by email at datenschutz@garlock.com or by post at

Garlock GmbH
PO box 210464
D-41430 Neuss

I. Responsibility for data processing

Garlock is responsible for the lawful processing of your personal data. Your representative in the European Union is Garlock GmbH, Postfach 210464, 41430 Neuss, Germany.

II. Data protection information for users

1. Data processed and processing purposes

1.1 User data

When calling up Garlock’s internet pages, the web servers automatically save various data about the accessing system. This includes the type of browser used, the browser version, the operating system used, the website from which the Garlock website is accessed, the sub-pages of the Garlock website accessed, the date and time of access, the internet protocol address (IP address), the internet service provider as well as data comparable to this data.

Garlock uses this data to make the website accessible, to detect and correct any technical problems that may occur and to prevent and, if necessary, track any misuse of Garlock’s services. Garlock also uses this data in an anonymous form, i.e. without the possibility of identifying the user, for statistical purposes and to improve the website. The legal basis for the processing of personal usage data is Article 6 paragraph 1 subparagraph 1 letter (f) GDPR.

1.2 Use of cookies (Art. 6 Para. 1 S. 1 lit. a, f GDPR, Section 25 (1, 2) TTDSG)

On our website, we are using so-called cookies. Cookies use to make our content more user-friendly, effective and secure. Cookies are small text-files, which are stored (locally) in your devices´ browser. Cookies are containing pseudonymous data only, in most cases even only anonymous data. Some cookies are persisting for a single browsing session (so-called session-cookies); others are active for a longer period of time (so-called persistent cookies, such as e.g. the ones used to save consent-settings). The latter kind of cookies is subject to auto-deletion after its pre-set expiration (usually 6 months). Besides our own cookies, we are also making use of cookies controlled by third parties. These may use the information contained in the cookies to, e.g. show you content or to track the sites you have visited.

Based on our legitimate interest (Art. 6 Para 1, S.1 lit a GDPR), we are using technically required cookies, which are mandatory to operate the website as such and to operate it technically perfect. Additionally, and again without your consent, we use cookies which´s sole purpose is to store or access information for transmitting messages or to offer services you expressly request, Section 25 II TTDSG.

With your consent, further cookies may be used, which enable us respectively third parties to analyse how our services are used. Therefore, we can design our content according to our users´ preferences. Additionally, we may measure a single ad´s effectiveness and to place it according to the users´ interest in certain themes. The legal basis, here, is your express consent (Art. 6 Para 1 S.1 lit a EU-GDPR, Section 25 Para 1 TTDSG).

You may revoke your consent anytime and with effect for the future, as well as you may change your cookie-settings via our consent-banner. Please remember, that all changes must be made per device.

Cookie Preferences

Should you have accounts with the third party providers of ours and be logged into these while surfing our website, your data may be linked to your respective account. Such linking may be prevented by refusing to consent into the use of the respective cookies, to withdraw such consent if previously declared or by logging off the respective accounts before surfing our website.

Most browsers accept cookies automatically. However, you may deactivate, restrict or delete cookies manually by your browsers´ settings or software-based. Should cookies be deactivated, our website may eventually not be used anymore or to a limited extent, only.

1.3 Web analysis and tracking

1.3.1 Google Analytics (Art. 6 Para. 1 S. 1 lit. a GDPR, Section 25 (1, 2) TTDSG)

The website also uses functions of the web analytics service Google Analytics. The provider is Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (“Google”). Google Analytics also uses cookies. The information generated by the cookie about the use of this website is usually transmitted to a Google server in the USA and stored there.

The website uses Google Analytics with the extension “anonymize IP”. This means that the user’s IP address collected by the Google Analytics cookie is truncated by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases, will the full IP address be transmitted to a Google server in the USA and only shortened there.

Google uses the information generated by the Google Analytics cookie on behalf of Garlock for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to Garlock. The IP address transmitted by the browser of the accessing system as part of Google Analytics is not merged with other data from Google. More information on terms of use and data protection is available at www.google.com/analytics/terms/de.html and at www.google.com/intl/de/analytics/privacyoverview.html, respectively. The legal basis for the processing of personal data using cookies is Article 6 (1) sentence 1 letter a GDPR.

The users’ personal data will be deleted or anonymised after 14 months. For more information on terms of use of and data protection at Google, please visit https://www.google.com/analytics/terms/de.html and https://policies.google.com/?hl=de.

1.3.2 Google Tag Manager (Art. 6 Para. 1 S. 1 lit. a GDPR, Section 25 (1, 2) TTDSG)

We use the service called Google Tag Manager from Google. “Google” is a group of companies and consists of Google Ireland Ltd (provider of the service), Gordon House, Barrow Street, Dublin 4, Ireland as well as Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA and other affiliated companies of Google LLC.

The Google Tag Manager is an auxiliary service and processes personal data itself only for technically necessary purposes. The Google Tag Manager takes care of loading other components, which in turn may collect data. The Google Tag Manager itself does not access this data. However, a connection to Google servers is already established for the use of the Google Tag Manager. Further information on the Google Tag Manager can be found in Google’s privacy policy.

The Google Tag Manager is only activated if consent to the use of Google Analytics has been given via the Consent banner.

If the data is transferred to the USA in the process, there is a risk that your data may be processed by US authorities for control and monitoring purposes without you possibly having any legal remedies.

1.5 Data transmitted in the context of contact

On the Garlock website, you have the possibility to get in contact with Garlock. Any personal data that is provided to Garlock in this context will be used exclusively for processing the respective enquiries. The legal basis for processing the data described above is, depending on the content of the respective contact, Article 6 paragraph 1 subparagraph 1 letter (b) or (f) GDPR.

1.6 Links to social media

On our website, you will find links to the social media services of Meta / Facebook, YouTube, Xing and LinkedIn. You can recognise links to the websites of the social media services by the respective company logo. If you follow these links, you will reach the Garlock GmbH company website at the respective social media service. When you click on a link to a social media service, a connection to the servers of the social media service is established. This transmits to the servers of the social media service that you have visited our website. In addition, further data is transmitted to the provider of the social media service. These are, for example:

– Address of the website on which the activated link is located.
– Date and time when the website was called up or the link was activated
– Information about the browser and operating system used
– IP address

If you are already logged in to the corresponding social media service at the time the link is activated, the provider of the social media service may be able to determine your user name, possibly even your real name from the transmitted data, and assign this information to your personal user account with the social media service. You can exclude this possibility of assignment to your personal user account if you log out of your user account beforehand.

The servers of the social media services are located in the USA and other countries outside the European Union. The data may therefore be processed by the provider of the social media service in countries outside the European Union. Please note that companies in these countries are subject to data protection laws that do not generally protect personal data to the same extent as they do in the member states of the European Union.

Please note that we have no influence on the scope, type and purpose of the data processing by the provider of the social media service. For more information on the use of your data by the social media services integrated on our website, please refer to the privacy policy of the respective social media service.

1.7 YouTube-PlugIn

YouTube is a video portal of YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA (hereinafter “YouTube”). We have integrated at least one plug-in from YouTube in our online services. When you activate the PlugIn, your browser establishes a direct connection with the YouTube servers. This transmits the information to YouTube that your browser has visited the corresponding page of our online services, even if you do not have a YouTube account or are not logged into your account. This information is transmitted by your browser directly to a YouTube server in the USA.

If you are logged into your YouTube account at the same time, it is also possible to assign the page view to your YouTube account and you would enable YouTube to assign your surfing behaviour directly to your personal profile.

If you wish to prevent this transmission and storage of your data and your behaviour on our online services by YouTube, you must log out of YouTube before visiting our site and delete any cookies placed by YouTube.

For more information on the collection and use of your data by YouTube, please refer to their privacy policy at https://www.YouTube.com/static?template=privacy_guidelines and Google’s privacy policy at https://www.google.com/policies/privacy/.

The legal basis for the processing of data is Section 25 (1) TTDSG and Article 6 (1) a GDPR.

We would like to point out that the consent you have given also relates to the transfer of at least part of your personal data to the USA as a third country pursuant to Art. 49 (1) a) GDPR. In the opinion of the European Court of Justice, there is no level of protection in the USA that is essentially equivalent to the GDPR. In addition, the legal protection options guaranteed to EU citizens by the Charter of Fundamental Rights of the European Union are limited. This concerns in particular legal protection options against the processing of personal data. There is a risk that your data will be processed by US authorities, for control and for monitoring purposes, without you being granted legal remedies. For this reason, the transfer of your data is therefore based on the consent you have given.

2. Storage period

Usage data is stored for a period of three years. Otherwise, the above-mentioned data will be deleted when knowledge of them is no longer required for the purposes described, unless legal provisions require longer storage.

III. Privacy information for business contacts

1. Processed data and processing purposes

Garlock processes the following categories of your personal data when you provide it to us, particularly when exchanging business cards or through letterheads and signatures in business communications:

– First and last name, title if applicable, job title, industry and company affiliation, and

– Contact information, particularly business address, telephone number and email address.

Generally, Garlock collects this information directly from you as you provide it to us. In individual cases, Garlock receives personal data about you from your employer or third parties, e.g. through recommendations from (other) customers, suppliers and business contacts, or through lists of participants from organizers of industry trade fairs.

Garlock processes this data in order to establish or maintain a business relationship with your company. The legal basis for this processing is Art. 6 para. 1 lit. f GDPR.

2. Storage period

The above-mentioned data will be deleted when knowledge of them is no longer required for the purposes described, unless legal provisions stipulate longer storage.

3. Contact form (Art. 6 para. 1 lit. a, b DS-GVO)

Our website contains a contact form that can be used to contact us electronically. If you write to us via the contact form, we will process the data you provide in the contact form in order to contact you and answer your questions and requests.

The following data is collected:
– Name, first name (mandatory field)
– E-mail address (mandatory field)
– Company 
– Country (mandatory field)
– Telephone number
– Town 
– Postcode

The principle of data economy is observed in that only the name, the e-mail address and the country from which you are writing to us are mandatory. In addition, your IP address is processed due to technical necessity and for legal protection. All other data are voluntary fields and can be entered optionally (e.g. to answer your questions individually).
In order to protect the security and confidentiality of your data as best as possible, we implement appropriate security measures. Your enquiry is transmitted to us in encrypted form.
We use the service provider Salesforce (Salesforce.com Inc., One Market Street, Suite 300, San Francisco, CA 94105 USA.) to organise and manage contact requests. Salesforce processes your data in the USA, among other places. The necessary contracts, so-called standard contractual clauses, have been concluded with the service provider for this purpose.

IV. Transfer of data to external parties

For certain technical processes of data analysis, processing or storage, Garlock uses the support of external service providers (e.g. to obtain aggregated, non-personal statistics from databases or to store backup copies). These service providers are carefully selected and meet high data protection and data security standards. They are obliged to maintain strict confidentiality and process data only on behalf of and according to the instructions of Garlock. The legal basis for the involvement of these service providers is Article 28 GDPR.

Garlock cooperates with companies and other agencies that have special expertise in individual areas or on specific specialist topics (e.g. tax auditors, lawyers, consulting firms, logistics service providers). These entities are either subject to a professional secrecy obligation or have been sworn to secrecy by Garlock. Insofar as it is necessary to pass on personal data to these bodies, the legal basis for this depends on the content of the respective cooperation Article 6 paragraph 1 sentence 1 letter (b) or (f) GDPR.

Except in the cases explained in this privacy policy, Garlock will only pass on data to third parties without your express consent if Garlock is obliged to do so by law or by an official or court order.

V. Place of data processing

The Garlock website is operated by one.com A / S in Copenhagen, Denmark. One.com A / S manages information (including cookies) collected via the Garlock website on its servers in the EU. Only employees of Garlock and one.com can access the data. In accordance with Article 46 GDPR, Garlock and One.com have introduced standard data protection clauses to provide adequate guarantees for the transfer of data outside the EU.

VI. Your rights

Conclusively, we would like to notify you of your rights as a data subject. These rights are set out in Articles 15 – 22 GDPR, and include:

• The right of access (Art. 15 GDPR),
• The right to rectification (Art. 16 GDPR),
• The right to data portability (Art. 20 GDPR),
• The right to object to data processing (Art. 21 GDPR),
• The right to erasure / right to be forgotten (Art. 17 GDPR),
• The right to restriction of data processing (Art. 18 GDPR).

Please note the following with respect to your right to object:

When we process your personal data for the purpose of direct marketing, you have the right to object to this data processing at any time without providing the reasons for such objection. This also applies to profiling insofar as it is associated with direct marketing.

If you object to the processing for direct marketing, we will no longer process your personal data for such purposes. The objection is free of charge and can be made informally, where appropriate to: datenschutz@garlock.com.

Should we process your data to protect legitimate interests, you may object to such processing at any time for reasons that arise from your specific situation; this also applies to profiling based on these provisions.

We will then cease to process your personal information unless we can demonstrate compelling legitimate grounds for processing such information that outweigh your interests, rights and freedoms, or the processing is intended to assert, exercise or defend legal claims.

 

For any questions regarding the processing of personal data by Garlock, as well as to exercise your rights regarding the processing, you can contact Garlock at any time. For this purpose, please send a note to gst.privacy@garlock.com. The data protection officer of Garlock GmbH can be reached at datenschutz@garlock.com.

You also have a right of appeal to a data protection supervisory authority.