Privacy Policy and Cookie Policy

Privacy Policy and Cookie Policy



The security and privacy of your personal information is of great importance to GRAVO DESIGN GMBH (hereinafter “GRAVO”) and we comply with all applicable data protection laws when processing your personal information, where “personal information” or “data” means the one specified below have meaning.


This data protection declaration informs you about the processing of your data in connection with your visit to our website www.gravodesign.info (hereinafter "website") and your use of the additional services offered by GRAVO.


We reserve the right to change this privacy policy at any time. Such changes will be posted on our website and, unless otherwise stated, will be effective immediately. Therefore, we encourage you to periodically review this privacy statement to access the latest version.


Responsible body

Responsible for data processing within the meaning of the General Data Protection Regulation (“GDPR”) is:

Gravo Design Ltd

Wangenerstr. 145/3

88212 Ravensburg

Germany

Email: gravodesign@email.de

Mobile: 49 17623620676


1. Personal Data/Data

Personal data is any information relating to an identified or identifiable natural person; an identifiable natural person is a person who can be identified, directly or indirectly, in particular by means of identification features such as name, identification number, location data or an online identifier.


2. Processing of data

The 'processing' of data has the meaning described in Article 4 of the GDPR: ''processing' means an operation or set of operations carried out on personal data or on a set of personal data, whether or not automated collected, recorded, organized, structured, stored, adapted or modified, accessed, queried, used, transmitted, disseminated or otherwise made available, aggregated or combined, restricted, deleted or destroyed.”

We only process your data to the extent required and to the extent permitted by law, e.g. B. if this is necessary for contractual purposes or to enable you to use our website or if you have expressly consented. This also applies to data exchange within our group of companies. In particular, we process your data for the following purposes and on the basis of the following legal bases:


2.1 Data collected for the technical provision of the website

For the purpose of the technical provision of the website, it is necessary for us to process certain automatically transmitted information about you so that your browser can display our website and you can use the website. This information is automatically recorded each time you visit our website and stored in our server log files. This information relates to the computer system of the requesting computer. The following information is collected in the process:

  • IP address
  • Browser type / version (eg: Firefox 59.0.2 (64 bit));
  • Browser language (eg: German);
  • Operating system (eg: Windows 10);
  • Internal resolution of the browser window;
  • screen resolution;
  • javascript activation;
  • Java on / off;
  • cookies on / off;
  • color depth;
  • access time


We process your personal data for the technical realization of our website on the following legal basis:

  • to fulfill a contract or to carry out pre-contractual measures in accordance with Article 6 (1) (b) GDPR if you visit our website to obtain information about our products and services; and
  • to safeguard our legitimate interests in accordance with Art. 6 Para. 1 Letter f GDPR, in order to make the website technically available to you. It is in our legitimate interest to offer you an attractive, technically functioning and user-friendly website.


2.2 Contact Form

If you have any questions, we offer you the opportunity to contact us via a contact form provided on the website.

Data processing for the purpose of contacting us takes place in accordance with Article 6 Paragraph 1 Clause 1 Letter a GDPR on the basis of your voluntarily given consent. The personal data collected by us for the use of the contact form will be automatically deleted after the request you have made has been dealt with. You will be asked to provide some personal information as well as the relevant product information.


For this purpose we collect the following data:

  • E-mail address
  • First and Last Name
  • company name
  • Street
  • Postal code
  • City
  • country
  • phone number
  • And additional data that you send us as part of your request

We process the aforementioned data for the purpose described on the following legal basis:

  • to safeguard our legitimate interests in accordance with Art. 6 Para. 1 Letter f GDPR; our legitimate interest is to respond appropriately to customer inquiries.


2.3 Marketing Purposes

With your express consent (consent by ticking an appropriate box) or to the extent permitted by law, we may use your information for purposes related to the marketing of our products and services or those of our business partners (“Marketing Purposes”). This includes: (1) sending you newsletters, press releases, event announcements and other similar communications about the products or services we offer; (2) market or promote our products or services; (3) solicit suggestions from you about how to improve our products or services; (4) inform you about third party offers which we think may be of interest to you or your business and which relate to our products or services; (6) other purposes that we notify you at the time we obtain your consent.

You can revoke your consent to the use of your data for marketing purposes at any time with effect for the future. In this case, please contact our data protection officer using the contact details given in Section 6.

For this purpose we collect the following data:

  • E-mail address
  • MISCELLANEOUS

We process the aforementioned data for the purpose described on the following legal basis:

  • If you have given us your consent as part of a double consent procedure in accordance with Article 6 (1) (a) GDPR;
  • If you have given us your e-mail address in connection with the purchase of goods or services or if we send you personalized advertising to protect our legitimate interests in accordance with Article 6 (1) (b) GDPR; our legitimate interest is based on our economic interests in carrying out advertising measures and target group-oriented advertising.

Use of the data for e-mail advertising and your right to object:

If we have received your e-mail address in connection with the conclusion of the contract and the provision of our products, we reserve the right to regularly send you offers for similar products from our range by e-mail, provided that you have not objected to this Object to the use of your e-mail address at any time by sending a message to the contact option described below or via a link provided for this purpose in the promotional e-mail, without incurring any costs other than the transmission costs according to the basic tariffs.


2.4 Online Applications

You can submit your application online using our online application form. The data received as part of online applications will only be used to process your application.

The personal data that we process about you includes the data that we collect directly from you either as part of your application process with us or through other interactions with us. This can also include sensitive personal data, eg health data or religious information.

If you decide to take part in our application process, we process the following data as well as all data that you transmit to us as part of your application:

  • first name and surname;
  • existing skills, job titles and positions;
  • Birth date;
  • photograph;
  • previous job titles;
  • skills and credentials;

2.5 Legal Compliance and Law Enforcement

Regulatory compliance:

We also process your personal data to fulfill other legal obligations that we have in connection with the processing of your order. This includes, in particular, retention periods under commercial law, trade law or tax law.

We process your data for the purposes described on the following legal basis:

  • To fulfill a legal obligation to which we are obliged in accordance with Art. 6 Para. 1 Letter c GDPR in connection with commercial, trade or tax law, insofar as we are obliged to collect and store your data.

Prosecution:

We also process your personal data in order to assert our rights and enforce our legal claims. We also process your personal data to be able to defend ourselves against legal claims. Finally, we process your personal data to the extent necessary to prevent or prosecute criminal offences.

We process the aforementioned data for the purposes described on the following legal basis:

  • to protect our legitimate interests in accordance with Art. 6 Para. 1 Letter f GDPR, insofar as we assert legal claims or defend ourselves in legal disputes or we prevent or investigate criminal offenses.

3. Cookies and Social Plugins

We use cookies and social plugins on our website, which may involve the processing of your personal data.

Cookies are text files that are stored on or by the internet browser when you visit a website on your computer. A cookie contains a specific character string that enables the browser to be uniquely identified when the website is called up again. Some cookies are only used for the functionality of the website, others are used for analysis purposes.

In particular, we use the following cookies on our website:

3.1 Cookies for the technical provision of the website

Some cookies are only used for the technical provision of the website. It is necessary for us to process certain automatically transmitted information about you so that your browser can display our website and you can use the website. Some functions of our website cannot be offered without the use of cookies. The following information is stored in the cookies and transmitted to us, which is required for the technical provision:

  • Cookie ID
  • Products in the shopping cart / selected services
  • credentials
  • etc.

3.2 Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses cookies to analyze how the website is used. The information generated by the cookies about your use of this website is transmitted to a Google server in the USA and stored there.

IP anonymization is enabled on this site. This means that your IP address will be shortened in the member states of the European Union or other contracting parties to the Agreement on the European Economic Area. Only in exceptional cases will the entire IP address first be sent to a Google server in the USA and shortened there.

Google will use this information on our behalf to evaluate your use of this website, to compile reports on website activity and to provide other services related to website activity and internet usage.

The IP address that your browser transmits as part of Google Analytics is not associated with other Google data. You can prevent the installation of cookies by setting your browser software accordingly; we would like to point out to you however that in this case you can if applicable not use all functions of this website in full. You can also opt-out of Google Analytics for the future by downloading and installing the Google Analytics Opt-out Browser Add-on for your current web browser: https://tools.google.com/dlpage/gaoptout?hl=en.


3.3 Google Tag Manager

We use the Google Tag Manager on our website. Google Tag Manager is an application that allows marketers to manage website tags from a single desktop interface. The Google Tag Manager service itself (which implements the tags) is a cookie-free domain and does not collect any personal data. The Google Tag Manager service triggers other tags, which in turn may collect data. The Google Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, it will be retained for all tracking tags implemented with Google Tag Manager.


3.4 Facebook Connect

Facebook Connect is a tool from Facebook Inc. (1601 S. California Ave, Palo Alto, CA 94304, USA; Facebook). It is a tool integrated into third party websites - like ours - that allows the user to log into those websites without having to register for those websites. The user can log in to these websites via Facebook Connect with their Facebook profile credentials. To use Facebook Connect, you need a Facebook account. After successfully logging in to the third-party website using Facebook credentials, a connection is established between the Facebook profile and the website using Facebook Connect. In addition to the login functionality, Facebook Connect can be used to create content from the website on or through the user's Facebook profile. For example, the website may ask the user to post content on the user's behalf. User information typically transmitted when using Facebook Connect includes: name, Facebook profile, age, gender, and Facebook "friends" list. For more information on Facebook's use of personal data, see Facebook's privacy policy https://www.facebook.com/help/238318146535333?helpref=hc_global_nav.


3.5 Pardot

We use Pardot forms or form processors on our website and landing pages to collect information about visitors and transform anonymous visitors into identified customers. Pardot forms are designed and managed entirely in Pardot. Form editors connect Pardot to our external forms so that we can feed information about customers into Pardot. Pardot tracks visitor and customer activity on our website and landing pages by setting cookies on their browsers. Cookies are set to remember preferences (such as form field values) when a visitor returns to our site. Pardot also sets a cookie for logged-in users to maintain the session and remember table filters. Pardot uses first-party cookies for tracking purposes and third-party cookies for redundancy. Using first and third-party cookies together is standard in the marketing automation industry. Pardot cookies do not store any personally identifiable information, only a unique identifier. Pardot sets first-party cookies on our tracker subdomains and Pardot domains. Pardot uses third-party cookies on https sites and when our account has not set up a tracker subdomain. Pardot sets three types of cookies:

  • The visitor cookie consists of a unique visitor ID and the unique identifier for your account. For example, the cookie name "visitor_id12345" stores the visitor value "1010101010" and "12345" is the account identifier. This cookie is set for visitors by the Pardot tracking code.
  • If your account honors opt-in preferences, the pi_opt_in cookie will be set with a true or false value if the visitor opts in or out of tracking.
  • A session cookie called "pardot" is set when you are logged in as a Pardot user. This cookie is not set in a visitor's browser.


3.6 GA Audiences

Our website uses GA Audience, a service provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, United States ("GA Audience"). GA Audience uses cookies, which are stored on your computer or other mobile devices (e.g. smartphones, tablets, etc.) and which enable an analysis of the use of the respective devices. Some of this data is evaluated across devices. In doing so, Google Audience gains access to the cookies created as part of the use of Google AdWords and Google Analytics. During use, data such as IP addresses and user activities are transmitted to a Google Inc. server and stored there. Google Inc. may also transfer this information to third parties if this is required by law or if third parties process this data.

You can prevent personal data (in particular your IP address) from being collected, passed on and processed by disabling JavaScript in your browser or installing a tool such as “NoScript”. You can also prevent Google from collecting and processing the information generated by the cookie about your use of this website (including your IP address) by downloading and installing the following browser plugin http://tools.google.com/dlpage/ gaoptout?hl=en. Further information on the subject of data protection when using GA Audience can be found under the following link: https://support.google.com/analytics/answer/2700409?hl=en&ref_topic=2611283.


3.7 DoubleClick

Sometimes we run advertising campaigns using DoubleClick, a service provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google"). We and third parties, including Google, jointly use first-party cookies (like the Google Analytics cookie) and third-party cookies (like the Google DoubleClick cookie) to inform about, optimize and serve ads based on past visits based on our website and to document how ad impressions, other uses of ad services, and interactions with those ad impressions and ad services are related to visits to our website.

You can prevent the installation of cookies by setting your browser software accordingly; we would like to point out to you however that in this case you can if applicable not use all functions of this website in full.

You can prevent the collection of data generated by downloading and installing the browser plug-in using the following link: https://adssettings.google.com/u/0/authenticated?hl=en-GB under DoubleClick opt-out extension. Alternatively, you can disable double-click cookies on the Digital Advertising Alliance website by clicking on the following link http://optout.aboutads.info/?c=2#!/

Information about DoubleClick cookies and how to control them can be found here: http://www.google.co.uk/policies/privacy/ads/.


3.8 LinkedIn Marketing Solutions

This website uses LinkedIn Marketing Solutions, a tool provided by LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland), which is used to increase the reach of the website's marketing. With every connection to a website that contains LinkedIn functions, a connection to the LinkedIn servers is established. One of these functions is the attribution of a user's visit to the website that uses LinkedIn Marketing Solutions to the user's LinkedIn profile. LinkedIn uses cookies to provide its technical functionality. You can prevent the setting of cookies in your system by configuring your Internet browser accordingly. In addition, you can prevent the use of a marketing analysis based on LinkedIn Marketing Solutions by following this link: https://www.linkedin.com/psettings/guest-controls. Please note that the above configuration can be deleted if you delete all cookies stored in your system.

Further information on the use of personal data by LinkedIn can be obtained directly from LinkedIn. You can view LinkedIn's privacy policy here https://www.linkedin.com/legal/privacy-policy.


3.9 Use of Social Plugins

We use social plugins from various social network providers such as Twitter, Facebook or Google on our website. If you click on the button of such a plugin, it will be activated and your browser will connect to the server of the respective social network provider. The functions of the plugin are not activated by simply visiting our site, but only by clicking on the corresponding button.

If you visit our website and click on such a button while logged into your account with the relevant social network provider, information indicating that you have visited our website will be forwarded to that social network provider. The social network provider can then store this information and link it to your profile. To avoid this, you must log out of your account before clicking on the relevant button.

To find out more about the purpose and scope of the data collection and use by the social network provider and your associated rights and settings for protecting your privacy, please see the data protection guidelines of the respective social network provider.


4. Data Storage

If you normally only visit and view our website without actively using it (see below), your data will only be stored for as long as is necessary for the specific purpose for which it was collected and then deleted. If data is no longer required, we will therefore delete it immediately, unless statutory retention periods apply. In this case, the data will be blocked for purposes other than legal storage purposes and deleted after the respective retention period has expired.

If you actively use our website (filling out a contact form, placing an order), we can also store your personal data for a longer period of time if we need to protect ourselves against any legal claims. In this case, we will store your personal data until any legal claims arising from the business relationship with you have expired, which is generally between 12 and 36 months, but can be up to 30 years depending on the claim and the situation.

In the case of cookies, you have the option of deleting them at any time using the corresponding functions in your browser.


5. Your rights as a data subject

According to the legal provisions of the GDPR, you as the data subject have the following rights, which you can assert against us:

Right to information: You are entitled to request confirmation from us at any time within the framework of Art. 15 GDPR as to whether we are processing personal data about you. If this is the case, you are also entitled according to Art. 15 DSGVO, information about this personal data as well as other specific information (including processing purposes, categories of personal data, categories of recipients, planned retention period, origin of the data, use of automated decision-making processes and, in the case of transfers to third countries, to request the relevant guarantees) and to obtain a copy of the data.

Right to rectification: According to Art. 16 GDPR, you have the right to rectification of the personal data stored about you if it is incorrect or inaccurate.

Right to erasure: You are entitled, under the conditions of Art. 17 GDPR, to demand that we delete your personal data immediately. A right to erasure does not exist, among other things, if the processing of personal data is for

(i) exercising the right to freedom of expression and information,

(ii) compliance with a legal obligation to which we are subject (e.g. statutory record keeping requirements); or

(iii) the establishment, exercise or defense of legal claims is necessary.

Right to restriction of processing: Under the terms of Art. 18 GDPR, you have the right to request us to restrict the processing of your personal data.

Right to data transferability: You are entitled, under the conditions of Art. 20 GDPR, to request that we provide you with the personal data that you have sent to us in a structured, up-to-date and machine-readable form.

Right of revocation: You have the right to revoke your consent to the processing of personal data at any time with effect for the future, without incurring any costs other than the transmission costs according to the basic tariffs.

Right to object: You have the right to object to the processing of your personal data under the terms of Art. 21 GDPR, which means that we must stop processing your personal data. The right of objection only exists within the intended limits of Art. 21 GDPR. In addition, our interests may prevent the termination of processing, so that we are entitled to process your personal data despite your objection.

Right to complain to a supervisory authority: You have the right to lodge a complaint with a supervisory authority, in particular in the member state of your place of residence, your place of work or as a result of an alleged infringement, under the conditions of Article 77 GDPR if you believe that the processing of the personal data concerning you violates the GDPR. The right to complain does not affect other administrative or judicial remedies.

Below you will find the contact details of the supervisory authority.


6. Regulatory Authority

You have the right to lodge a complaint with the competent supervisory authority. For us this is:

State Commissioner for Data Protection and Freedom of Information Baden-Württemberg

Koenigstrasse 10a

70173 Stuttgart, Germany

Phone: 49 711/615541-0

FAX: 49 711/615541-15

email: poststelle@lfdi.bwl.de


8. Information on the right to object, Art. 21 GDPR

You have the right at any time to object to the processing of your data on the basis of Art. 6 Para. 1 f GDPR (data processing on the basis of a balance of interests) or Art. 6 Para. 1 e GDPR (data processing in the public interest) if it There are reasons for this that arise from your particular situation. This also applies to profiling based on this provision within the meaning of Art. 4 No. 4 GDPR.


If you object, we will no longer process your personal data unless we can demonstrate compelling and applicable grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the establishment, exercise or defense of legal claims.


In individual cases, we also process your personal data for direct marketing purposes. If you do not wish to receive advertising, you have the right to object to it at any time; this also applies to profiling insofar as it is associated with such direct advertising. We will consider this contradiction in the future.

We will no longer process your data for direct marketing purposes if you object to the processing for these purposes.

The objection can be lodged informally and is to be addressed to


Gravo Design Ltd

Wangenerstr. 145/3

88212 Ravensburg

Germany

Email: gravodesign@email.de

Mobile: 49 17623620676


Last update: April 2023



Share by: