Privacy Notice
grp Data Privacy Notice
Protecting the privacy of your personal data is important to grp GmbH, In der Stockwiese 26 85410 Haag/A., Germany (“grp”). Therefore, grp collects and processes personal data in compliance with applicable data protection law. This Data Privacy Notice shall provide you with information on the personal data grp collects and processes, the purposes of the collection and processing and your rights related thereto.
1. Categories of personal data processed, purpose of the processing and legal basis
When visiting grp’s website or in the context of your business relationship with grp, we may process the following personal data about you:
Contact information, such as full name, work address, work telephone number, work mobile phone number, work fax number and work email address;
Payment data, such as data necessary for processing payments and fraud prevention, including credit/debit card numbers, security code numbers and other related billing information;
Further information voluntarily provided by you (e.g., when registering on our website or contacting us with your inquiries ) or necessarily processed in the contractual relationship with grp; and
Information that is automatically sent to us by your web browser or device, such as your IP-address, device type, browser type, referring site, sites accessed during your visit, the date and time of each visitor request.
We process your personal data for the following purposes:
Providing the website’s services and functions;
Communicating with (prospect) customers about products of grp, e.g. by responding to inquiries or requests or providing you with information about our products;
Planning, performing and managing the (contractual) relationship with customers; e.g. by performing transactions and orders of products or services or processing payments;
Administrating and performing customer surveys, marketing campaigns, market analysis, sweepstakes, contests, or other promotional activities or events;
Enforcing the applicable terms of use, establishing or preserving a legal claim or defense, preventing fraud or other illegal activities, including attacks on grp’s information technology systems; and
Ensuring compliance with (i) legal obligations (such as record keeping obligations) and (ii) business partner compliance screening obligations (to prevent white-collar or money laundering crimes).
The legal basis for grp processing data about you is that such processing is necessary for the purposes of:
grp exercising its rights and performing its obligations in connection with any contract we make with you (Article 6 (1) (b) General Data Protection Regulation);
Compliance with grp’s legal obligations (Article 6 (1) (c) General Data Protection Regulation); and/or
Legitimate interests pursued by grp (Article 6 (1) (f) General Data Protection Regulation). Generally the legitimate interest pursued by grp in relation to our use of your personal data is the efficient performance or management of your use of the grp website and our business relationship with you.
In some cases, we may ask if you consent to the relevant use of your personal data. In such cases, the legal basis for grp processing that data about you may (in addition or instead) be that you have consented (Article 6 (1) (a) General Data Protection Regulation).
2. Processing of personal data to provide customers with further information on grp products
It is important to grp to provide its customers with updates and news on grp’s product portfolio. For this purpose, we use our customers’ email addresses to provide information on grp products similar to those ordered in the past.
The legal basis for grp processing personal data to provide customers with further information on grp products is Article 6 (1) (f) General Data Protection Regulation and § 15 (3) German Unfair Competition Act.
If you do not wish to receive such information from grp, you may object at any time by contacting: unsubscribe@grp.de
3. Cookies
We may use cookies within grp’s website. Cookies are small files that are stored on your terminal device which save certain settings and data and communicate them to our website via your browser.
We use cookies that are necessary for certain functions of our website (such as cookies that allow you to add products to your shopping cart).
In addition, we make use of Google Analytics, a web analysis service, which collects information on your interaction with the website in usage profiles for the purpose of analyzing your use of the website and allowing us to tailor the website to better match your interests. Usage profiles are created on pseudonymized basis only, i.e. grp does not link a usage profile to an individual user.
The legal basis for the use of Google Analytics is § 15 (3) German Telemedia Act and Article 6 (1) (f) General Data Protection Regulation.
You have the right to object to the creation of usage profiles with future effect by clicking here. By doing so, you will create a so-called exclusion cookie in your browser. It contains no personal data, but technically enables us to recognize your opt-out for the current and future visits of our website.
4. Links to other websites
This Privacy Notice applies only to this website and grp offerings and not to other websites or applications operated by third parties. We may provide links to other websites and applications which we believe may be of interest to you. grp is not responsible for the privacy practices of such other websites or applications.
5. Transfer and disclosure of personal data
grp may transfer your personal data to:
grp partner companies in connection with our business relationship with you;
Third parties which provide IT services to grp and which process such data only for the purpose of such services (e.g., hosting or IT maintenance and support services); and/or
Third parties in connection with complying with legal obligations or establishing, exercising or defending rights or claims.
6. Retention Periods
Unless indicated otherwise at the time of the collection of your personal data (e.g. within a form completed by you), we erase your personal data if the retention of that personal data is no longer necessary (i) for the purposes for which they were collected or otherwise processed, or (ii) to comply with legal obligations (such as retention obligations under tax or commercial laws).
7. Your rights
Under applicable data protection law you may have the right to:
Obtain from grp confirmation as to whether or not personal data concerning you are being processed, and where that is the case, access to the personal data;
Obtain from grp the rectification of inaccurate personal data concerning you;
Obtain from grp the erasure of your personal data;
Obtain from grp restriction of processing regarding your personal data;
Data portability concerning personal data, which you actively provided; and
Object, on grounds relating to your particular situation, to processing of personal data concerning you.
Further background information and explanations related to the rights described above are available on the European Commissions’ website “Rights for citizens”.
8. Data Privacy Contact
The data privacy officer of grp provides support with any data privacy related questions, comments, concerns or complaints or in case you wish to exercise any of your data privacy related rights.
The grp data privacy officer:
Dr. Ralf Bäuerle, r.baeuerle@grp-ak.de
We will always use best efforts to address and settle any requests or complaints you bring to its attention. Besides contacting us directly, you always have the right to approach the competent data protection authority with your request or complaint.
The data protection authority competent for grp is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 27
91522 Ansbach, Germany
Issued 07/2020
