Your personal data and how we protect them

What is personal data? 

Personal data is information that can be assigned to your person. This includes, for example, your name, your address, your telephone number and your e-mail address.

How does Gemtech protect your personal data? 

At gemtech.eu and in the mobile applications, your personal data is encrypted during the ordering process and within your customer account using SSL over the Internet. Within the mobile applications, the contents of the order process are analyzed by so-called parsing and displayed in the application. Credit card data is collected, processed and stored in encrypted form exclusively by our payment service provider Ingenico Payment Services. You can recognize a secure connection by the fact that the address displayed in the browser starts with "https://..." instead of "http://..." and a padlock appears at the bottom right-hand edge of the window. We protect our website and other systems by technical and organizational measures against loss, destruction, access, modification or distribution of your data by unauthorized persons.

When and why do we use your data?

When does Gemtech use and process personal data? We know that the careful handling of your personal data is very important to you. Since Gemtech attaches great importance to data protection, we strictly adhere to the legal provisions of the Federal Data Protection Act and the Telemedia Act when collecting, processing and using data. In principle, you can use our website and our mobile applications without leaving any personal data behind. The personal data and information you provide us with is used by Gemtech to process orders, deliver goods and process payments. The delivery of the article ordered by you is carried out by a transport company commissioned by us. To this end, we will send your e-mail address to this carrier so that the carrier can provide you with information on the status of your shipments and a specific delivery date by e-mail. If you no longer wish to receive this service, you can object to the transmission of your e-mail address at any time. Your objection should be sent to info@gemtech.eu. Furthermore we need your data to inform you about orders, products, services and offers of Gemtech. We only use e-mail advertising to the extent permitted by law or if you have specifically authorized us to do so. If you register for our newsletter, we use the data required for this or separately communicated by you in order to send you our e-mail newsletter on a regular basis. When using the contact form service of our technical customer service, your personal data will be passed on and processed by the IT service provider Bazaarvoice. The company provides technical and administrative support from our technical specialists so that we can answer your questions as quickly as possible.
We collect, store and process your data for the entire processing of your purchase, including any subsequent guarantees, for our service, technical administration and our own marketing purposes. Your personal data will be deleted if there are no legal storage obligations to the contrary and if you have asserted a claim for deletion, if the data is no longer required to fulfil the purpose for which it was stored or if its storage is inadmissible for other legal reasons. If your account information is merged via an automatic or duplicate check initiated by you, you agree that information from the old account (payment experience, orders, etc.) is transferred to the new account.

What does Gemtech do with personal data?

Your personal data are stored in our EDP primarily for optimal order processing and customer care.
Inventory data, such as previous purchase orders and payment experiences, are included in the selection of possible payment methods made available to you.

For the purpose of deciding on the establishment, execution or termination of the contractual relationship, we collect or use probability values that include transaction data and microgeographically aggregated information in their calculation. 

We save the contract text and send you the order data by e-mail. You can view the GTC at any time. You can view your past orders in our customer login area.

Customer account

For each customer who registers accordingly, we set up password-protected direct access to his stored inventory data (customer account). Here you can view data about your completed, open and recently sent orders and manage your address data, bank details and the newsletter. You undertake to treat the personal access data confidentially and not to make them accessible to any unauthorised third parties. We cannot accept liability for misused passwords, unless we are responsible for the misuse. Once you have finished communicating with us, you should close the browser window or mobile applications, especially if you share your computer or mobile devices with others.

How do we use cookies and similar technologies?

 Does Gemtech use cookies?

A cookie is a small data file that we transfer to your computer when you surf the Gemtech site. A cookie can only contain information that we ourselves send to your computer - private data cannot be read out with it. If you accept the cookies on our site, we do not have access to your personal information, but we can identify your computer using the cookies. Like many webshops, we use cookies to personalize the internet shop and the mobile applications for you and so that you can fill up and manage your shopping basket during your session with orders. 
Most of the cookies we use are deleted from your hard disk at the end of the browser session (so-called session cookies). 
Other cookies remain on your computer and enable us to recognize your computer on your next visit (so-called permanent cookies). These cookies make it unnecessary for you to re-enter your e-mail address for subsequent orders. 
If you do not want to take advantage of cookies, you can modify the cookie handling in the security settings of your browser. Usually the setting option can be found in the Tools menu under Settings or Internet Options. However, we will then no longer be able to offer you some of the functionalities of our Internet shop and mobile applications. To use our shopping cart, temporary cookies must be enabled.

Third party cookies

Gemtech uses advertising on other websites via advertising partners or advertising networks. These advertising partners use so-called third party cookies, which are activated by gemtech.eu after their visit, but can only be read out by the respective advertising partner. These third party cookies are used to measure the success of advertising measures used between the advertising partner and us. Our partner companies are not permitted to collect, process or use personal data via our website using cookies. Only the call of the gemtech.eu side and an advertising measure switched by the advertising partner is seized.

Log files

Whenever Gemtech pages are accessed, usage data is transmitted through the respective Internet browser and stored in log files, the so-called server log files. The data records stored in this way contain the following data: Date and time of access, name of the page accessed, IP address, referrer URL (originating URL from which you accessed the website), the amount of data transferred, as well as product and version information of the browser used.

Use of Google reCaptcha

To protect our online services we use so-called CAPTCHAs to decide whether the other party is a human being or a machine. This is done to determine whether entries were made via people or machines that are often misused. Because this query is retrieved from a Google server, Google will create a cookie for the duration of the query.

Google (Universal) Analytics

This website and mobile applications use Google (Universal) Analytics, a web analysis service provided by Google Inc. "("Google"). Google (Universal) Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. As we have IP anonymisation activated on this website, Google will reduce your IP address within Member States of the European Union or in other countries party to the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website and Internet use. The IP address transmitted by your browser within the framework of Google (Universal) Analytics is not merged with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser add-on available under the following Google Analytics deactivate link. 
We use Google (Universal) Analytics including the functions of Universal Analytics. Universal Analytics allows us to analyze the activities on our pages across devices (e.g. for access via laptop and later via a tablet). This is made possible by the pseudonymous assignment of a user ID to a user. Such an assignment occurs, for example, when you register for a customer account or log into your customer account. For non-registered users we use an anonymous ID. However, no personal data will be forwarded to Google. Even if Universal Analytics adds additional functions to Google (Universal) Analytics, this does not mean that it restricts data protection measures such as IP masking or the browser add-on. We will only perform session additions on registered and unregistered sessions of users if our users have not withdrawn their consent to such session additions through the browser add-on or by clicking on the Google (Universal) Analytics opt-out link, or if such merging is permitted under applicable laws and regulations. 

For reasons of transparency, we would like to point out that we use the Google Tag Manager. This manager does not collect any personal data. The Tag Manager makes it easier for us to integrate and manage our tags. Tags are small code elements used, among other things, to measure traffic and visitor behavior, to measure the impact of online advertising and social channels, to set up remarketing and targeting, and to test and optimize websites. For more information about the Google Tag Manager, see https://www.google.com/intl/de/tagmanager/use-policy.html

Microsoft / Bing

On our pages we use the Conversion Tracking of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. Microsoft Bing Ads will place a cookie on your computer if you access our website via a Microsoft Bing ad. Microsoft Bing and we can see in this way that someone has clicked on an ad, has been redirected to our website and has reached a previously defined target page (conversion page). We only see the total number of users who clicked on a Bing ad and were then redirected to the conversion page. No personal information about the identity of the user will be disclosed. 
If you do not want information about your behavior to be used by Microsoft as described above, you can refuse the setting of a cookie required for this purpose - for example, using a browser setting that generally deactivates the automatic setting of cookies. You can also prevent the collection of data generated by the cookie and related to your use of the website and the processing of this data by Microsoft by opting out. Further information on data protection and the cookies used at Microsoft and Bing Ads can be found on the Microsoft website at https://privacy.microsoft.com/de-de/privacystatement

Google AdWords

This website uses tools for "online marketing" from Google Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. This serves to recognize that a visitor has come across our website via a Google ad. Google uses cookies which are stored on your computer and enable an analysis of the use of the website. The cookies for the so-called "conversion tracking" are set when you click on an ad placed by Google. These cookies expire after 30 days and are not used for personal identification. If you wish to prevent "conversion tracking", you can set your browser to block cookies from the "googleadservices.com" domain. You can also exercise your right to opt-out. If you would like to learn more about these methods or to know what options you have to prevent this information from being used by Google, click here: https://www.google.com/settings/u/0/ads/authenticated

Facebook Custom Audience Pixel

We use "Custom Audiences Pixel" from Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook") to present interest-based advertisements to visitors to our website during their visit to Facebook. We have implemented a pixel from Facebook on our website, which establishes a direct connection to the Facebook servers when you visit our website. This information is transmitted to the Facebook server that you have visited our website and Facebook assigns this information to your personal Facebook user account. For more information about Facebook's collection and use of the data and your rights and choices about protecting your privacy, please see Facebook's privacy policy at https://www.facebook.com/about/privacy/. If you would like to object to the described connection with Facebook, you can do so by clicking on this link.

Push notifications

If push messages are enabled, the Apple Push Notification Service (iOS version) or Google Cloud Messaging (Android version) is used to deliver this feature. For the delivery of push messages it is necessary to transfer non-personal data (e.g. product names) to these services. To enable secure communication with the user's mobile device, a device token must be exchanged. This is the only way to identify the user's device when sending the push message.

Location information

For certain functions, we may need access to the location of your device. In such a case, we collect your current location via GPS so that we can quickly provide you with information about your immediate surroundings. Data about your location will only be used to process your request. Your location data is transmitted via an encrypted connection, e.g. to locate the nearest branch, whereby the data is anonymised after completion of your request and statistically evaluated to improve our service.

You have questions about data protection...we are here for you

Your right to information

According to the GDPR, you have a right to information.

 Who is responsible for data processing and to whom can you contact?  

Responsible is GEMTECH, s.r.o., Kukučínova 494/32, 058 01, Poprad, IČ: 36712868, e-mail: info@gemtech.eu.

Which data are processed and from which sources?

We process the data that we have received from you within the framework of the purchase contract or transaction, on the basis of consents or within the framework of your application to us or within the framework of your staff.

Personal data includes:

Your master/contact data, this includes, for buyers, e.g. first and last name, address, contact data (e-mail address, telephone number, fax), date of birth, bank or payment data. 
For applicants and employees this includes, for example, first and last name, address, contact data (e-mail address, telephone number, fax), date of birth, data from CV and references, bank data, religious affiliation. 
In the case of suppliers, this includes, for example, the name of their legal representatives, company, trade register number, VAT ID number, company number, address, contact person contact data (e-mail address, telephone number, fax), bank data. 
In addition, we also process the following other personal data: 

  • Information on the type and content of contract data, order data, sales and document data, customer and supplier history and consulting documents,
  • Advertising and sales data,
  • Information from your electronic traffic with Gemtech (e.g. IP address, log-in data),
  • other data that we have received from you in the course of our business relationship (e.g. in customer meetings),
  • data that we generate ourselves from master / contact data and other data, e.g. by means of customer requirements and customer potential analyses, the
  • documentation of your declaration of consent for the receipt of e.g. newsletters.

For what purposes and on what legal basis will the data be processed?

We process your data in accordance with the provisions of the Basic Data Protection Ordinance (DS-GVO) and the Federal Data Protection Act 2018 in the currently valid version: 

for the fulfilment of (pre-)contractual obligations (Art 6 Para. 1lit.b DS-GMO): Your data will be used to process your purchases online or in one of our branches or to process the contracts of your employees in our company. The data will be processed in particular during the initiation of business transactions and the execution of contracts with you. 

to fulfil legal obligations (Art 6 Para. 1 lit.c DS-GMO): A processing of your data is necessary for the purpose of fulfilling different legal obligations, e.g. from the Commercial Code or the Tax Code. 

to protect legitimate interests (Art 6 Para. 1 lit.f DS-GMO): On the basis of a balance of interests, data may be processed beyond the actual performance of the contract to protect the legitimate interests of us or third parties. Data processing to protect legitimate interests takes place in the following cases, for example: Advertising or marketing (see No. 4), Measures for business management and further development of services and products; Maintaining a group-wide customer database to improve customer service in the context of legal proceedings. 

within the scope of your consent (Art 6 Para. 1lit.a DSGVO): If you have given us your consent to the processing of your data, e.g. to the delivery of our newsletter, processing will only take place in accordance with the purposes and to the extent agreed in the declaration of consent. A given consent can be revoked at any time with effect for the future.

Processing of personal data for advertising purposes

You can object to the use of your personal data for advertising purposes at any time, either as a whole or for individual measures, without incurring any costs other than the transmission costs according to the basic rates. 
Gemtech is entitled under the local legal requirements of to use the e-mail address you provided when concluding the contract for direct advertising for its own similar goods or services. You will receive these product recommendations from us regardless of whether you have subscribed to a newsletter. 
If you do not wish to receive such recommendations from us by e-mail, you can object to the use of your address for this purpose at any time without incurring any costs other than the transmission costs according to the basic rates. A message in text form is sufficient for this. Of course, every e-mail always contains a unsubscribe link.

Who receives my data?

If we use a service provider in the sense of order processing, we nevertheless remain responsible for the protection of your data. All contractors are contractually obliged to treat your data confidentially and to process it only within the scope of the provision of services. The contractors commissioned by us will receive your data if they require it to perform their respective services. These are, for example, IT service providers that we need for the operation and security of our IT system as well as advertising and address publishers for our own advertising campaigns. 
Your data will be processed in the Gemtech customer database. The Gemtech customer database supports the enhancement of the data quality of existing customer data (duplicate cleanup, moved/dead indicator, address correction), and enables enrichment with data from public sources. 
This data is made available to the group companies Gemtech to the extent necessary to process the contract. The storage of customer data is company-related and separate, with Gemtech acting as a service provider for the individual participating companies. 
If there is a legal obligation and in the context of legal prosecution, authorities and courts as well as external auditors may be recipients of your data. 
In addition, insurance companies, banks, credit agencies and service providers may also be recipients of your data for the purpose of initiating and fulfilling contracts.

How long will my data be stored?

We process your data until the end of the business relationship or until the expiry of the applicable statutory retention periods; in addition, until the end of any legal disputes in which the data is required as evidence. 

Is personal data transferred to a third country?

In principle, we do not transfer any data to a third country. A transmission will only take place in individual cases on the basis of an adequacy decision of the European Commission, standard contractual clauses, suitable guarantees or your express consent.

What data protection rights do I have?

You have a right to information, correction, deletion or restriction of the processing of your stored data, a right of objection against the processing as well as a right to data transferability and to a complaint in accordance with the requirements of data protection law. 

Right to information:

You can request information from us as to whether and to what extent we process your data.

Right to correction:

If we process your data that is incomplete or incorrect, you can request that we correct or complete it at any time.

Right of deletion:

You can request us to delete your data if we process it unlawfully or if the processing interferes disproportionately with your legitimate protection interests. Please note that there may be reasons that prevent immediate deletion, e.g. in the case of legally regulated storage obligations. 
Irrespective of the exercise of your right to deletion, we will delete your data immediately and completely, unless there is a legal transaction or legal obligation to retain it.

Right to limitation of processing:

You may request us to restrict the processing of your data if you dispute the accuracy of the data for a period of time that allows us to verify the accuracy of the data. the processing of the data is unlawful, but you refuse to delete it and instead request a restriction on the use of the data, we no longer need the data for the intended purpose, but you still need this data to assert or defend legal claims, or you have lodged an objection to the processing of the data.

Right to data transferability:

You may require us to provide you with the data you have provided to us in a structured, current and machine-readable format and to allow you to pass this data to another person in charge without our interference, provided that we process this data on the basis of an agreement you have given and revocable or to fulfil a contract between us, and this processing is carried out using automated methods. If it is technically feasible, you can ask us to transfer your data directly to another person responsible.

Right of objection:

If we process your data for legitimate reasons, you can object to this data processing at any time; this would also apply to profiling based on these provisions. We will then no longer process your data unless we can prove compelling reasons worthy of protection for the processing that outweigh your interests, rights and freedoms or the processing serves to assert, exercise or defend legal claims. You can object to the processing of your data for the purpose of direct advertising at any time without giving reasons.

Right of appeal:

If you are of the opinion that we violate German or European data protection law when processing your data, please contact us to clarify any questions. Of course, you also have the right to contact the supervisory authority responsible for you, the respective state office for data protection supervision. 
If you wish to assert any of the above rights against us, please contact our data protection officer. In case of doubt, we may request additional information to confirm your identity.

Am I obliged to provide data?

The processing of your data is necessary to conclude or fulfil your contract with us. If you do not provide us with this information, we will usually have to refuse to enter into the contract or will no longer be able to execute an existing contract and will therefore have to terminate it. However, you are not obliged to give your consent to the processing of data that is not relevant or legally required for the fulfilment of the contract.

Enquiries, Requests and Notifications 

If you have any questions about the protection of your personal information at Gemtecg or would like to request the personal data we hold about you to be disclosed to you, amended or deleted, please email us at info@gemtech.eu.

Copyright © 2014 - 2023 Gemtech s.r.o. All rights reserved.