Our customers in the USA are serviced by JW Winco. Please, use the website jwwinco.com
Our customers in the USA are serviced by JW Winco. Please, use the website jwwinco.com
1. Protection of your personal data
The protection of your personal data is of the utmost importance to us. This website is operated by Otto Ganter GmbH & Co. KG, Triberger Straße 3, 78120 Furtwangen, telephone: 07723/65070, email: info@ganternorm.com (hereafter also “we”). We are the “controller” pursuant to the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG). If you would like to use this website, we will need to occasionally collect, save and use the following personal data for usage, arrangement of content, ordering, delivery and rendering of services as well as payment processing (in particular preparing, concluding, processing and reversing a purchase agreement) for our services: Last name, first name, title, mailing address, email address, telephone number, bank account information and password.
Your personal data (such as your name and contact details) that you provide to us, e.g. when ordering or by email, will only be used for correspondence with you and will be and processed for the purpose for which you provided the data. The legal basis for this is Art. 6 (1) (a) and (b) GDPR. We will only provide your data to the shipping company responsible for the delivery to the extent necessary to deliver the items. For payments, we will provide your payment data to the financial institution responsible for payment. Beyond that, we will only collect, process or use your data for purposes such as advertising as permitted by law or according to your express consent. If you provide your consent in electronic form by way of our Internet offering, we will observe the statutory notification duties and record your consent in suitable technical systems.
Insofar as we use third-party services for processing, the provisions of the GDPR will be observed. In particular, these service providers are carefully selected by us and commissioned in written or electronic form. They are also bound to follow our instructions and can be audited by us.
We will also offer you the option of registering with us. The advantage of this is that you will not have to reenter your data each time you visit. You can update or delete your profile at any time. The data is processed during registration pursuant to Art. 6 (1) (a) GDPR.
We will ensure that your personal data will not otherwise be made accessible to third parties, except as required by law or with your prior express consent. Insofar as we use third-party services for processing, the provisions of the GDPR and BDSG will be observed.
2. General information
While you are visiting our website, our web servers will collect general information that is transmitted by your browser to our server in order to operate our service, in particular your type of software and hardware, browser, computer IP address, which websites you visit and the time and length of your visit. However, this is not intended to draw conclusions about your personal data. This information is required for technical reasons to enable your visit to the website and ensure its stability and security. The legal basis for this is Art. 6 (1) (f) GDPR.
3. Technical security
We continuously update our technical and organizational safety measures to protect the data provided to us. These measures are intended to prevent unauthorized access, illegal deletion or manipulation and accidental loss of data.
4. Your rights
If desired, you can obtain free of charge information on all of the personal data that we have saved including the origin, recipients and categories of recipients to whom this data is sent, as well as the purpose of data processing. You may object to the processing of your personal data at any time. The law also entitles you to correct and delete your personal data and to restrict the processing of your personal data. You are also entitled to data portability. You can also register a complaint about our processing of your personal data with a data protection supervisory authority.
After you have granted your consent for your relevant personal data to be processed, you can withdraw this consent at any time. This does not affect the legality of data processing that took place from the time your consent was granted to the time of its withdrawal.
Should you have any questions with regard to the collection, processing or use of your personal data or with regard to exercising your rights, please feel free to contact the address in section 1 above or send an email to dsb@ganternorm.com.
5. Further information
We value your trust. So we seek to keep the lines of communication open at all times regarding the processing of your personal data. Should you have any questions that are not answered by this privacy statement or if you would like more information about a particular point, please feel free to contact us at any time.
Our data protection officer can be reached at dsb@ganternorm.com.
6. Storage duration
Personal data that has been provided to us through our website is only saved until the purpose for which it has been entrusted to us has been accomplished. As stipulated by commercial and tax law, the retention period duration for certain data can be up to 10 years.
7. Newsletter
You may receive a newsletter free of charge. The newsletter provides information about current offers, new products, coupons, events or other news from our company. You will only receive the newsletter after registering on our website. This can also be done during the ordering process. The legal basis for the data processing is your consent pursuant to Art. 6 (1) (a) GDPR.
We require your email address for you to register for the newsletter. We will send an email to this address asking you to confirm the registration. You will only receive our newsletter after you have provided your confirmation. If you do not confirm the registration within 24 hours, your information will be restricted from processing and automatically deleted after one month. We also save the IP addresses used by you and the times of registration and confirmation. The purpose of this double opt-in process is to verify your registration and enable any necessary investigation of the possible misuse of your data.
If you have only registered for the newsletter, we will only use your email address to send you the newsletter. We will save your email address until you no longer wish to receive the newsletter. Saving your email address allows us to send you the newsletter.
You are free to cancel the newsletter at any time and can withdraw your consent to being emailed the newsletter. You can cancel by clicking the link provided in each newsletter, by sending an email to info@ganternorm.com or by sending a message to the address in the masthead. We will then immediately delete all data associated with receiving the newsletter.
8. Shopping cart sharing function
We offer the ability for users who have placed products in the virtual shopping cart to share this shopping cart with another person and to send this other person a message (entered by the user).
The data of the sender (name and email address as well as the products in the shopping cart and content of the message) collected in this process will be used for the purpose of initiating and fulfilling a contract on the basis of Art. 6 (1) (b) GDPR.
The data of the recipient (i.e., the email address entered by the sender) will be processed on the basis of a legitimate interest of the controller pursuant to Art. 6 (1) (f) GDPR. The sender must ensure that the recipient consents (Art. 6 (1) (a) GDPR) to their data being processed in the scope of the shopping cart sharing function. The data may be shared with third parties if and insofar as a legal basis for doing so exists in the specific individual case. Furthermore, the data may be the subject of processing by a third party on behalf of the controller (e.g. hosting provider). For transfers of data to third countries, the additional requirements of Art. 44 et seq. GDPR will be complied with. The data subject rights described in section 4 of this privacy statement apply to the recipient as well.
The processed data is retained as long as necessary for processing of the request, however no longer than a period of three years, provided a longer period of retention is not necessary for the purpose of legal enforcement or defense or for the fulfillment of statutory requirements.
9. Use of Google Analytics
This website uses Google Analytics 4, a web analysis service of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).
The purpose behind the use of Google Analytics is to enable an analysis of your user interactions on websites and in apps and to use the resulting statistics and reports to improve our offering and make it more interesting to you as a user.
The interactions between you, as user of the website, and our website are recorded by us primarily through cookies, data about your device/browser, IP addresses and website or app activities. Google Analytics also records your IP addresses to ensure the security of the service and to provide the website operator within formation about the country, region or location of the respective user (known as “IP localization”). For your protection, we make use of the anonymization function (“IP masking”), meaning that Google abbreviates the IP addresses within the EU/EEA.
Google acts as processor, and we have concluded a corresponding contract with Google. The information on your use of this website provided by the cookie and the abbreviated IP addresses is generally sent to a Google server in the United States and processed there. For such cases, Google has provided assurances that it follows practices that comply with the previous EU-US Privacy Shield and has promised to comply with the applicable data protection laws in the international data transfer. We have agreed on standard contractual clauses with Google, which are intended to ensure compliance with a reasonable level of data protection outside the EU.
The legal basis for the collection and further processing of the information (for a maximum of 14 months) is the consent provided by you (Art. 6 (1) (a) GDPR, Section 25 (1) TDDDG [German Telecommunications Digital Services Data Protection Act]). You can revoke your consent at any time without affecting the permissibility of the processing prior to this revocation. In apps, you can reset the advertising ID in the settings of the Android or iOS operating system. The simplest way to revoke your consent is via our Consent Manager or by installing the browser add-on from Google, which can be obtained via the following link: tools.google.com/dlpage/gaoptout?hl=de/. Google Signals may be used on this website to create cross-device reports as an extension to Google Analytics 4. If you have activated ad personalization and linked your devices to your Google account, Google can – subject to your consent to the use of Google Analytics as per Art. 6 (1) (a) GDPR – analyze your usage behavior across these devices and create database models, including cross-device conversions. We do not receive any personal data from Google, only statistics. If you would like to stop the cross-device analysis, you can deactivate the “personalized advertising” function in the settings of your Google account. Instructions on how to do this can be found here: https://support.google.com/ads/answer/2662922?hl=de. More information on Google Signals can be found here: https://support.google.com/analytics/answer/9445345. Further information on the conditions of use and privacy can be found at www.google.com/analytics/terms/de.html or at www.google.com/intl/de/analytics/privacyoverview.html.
10. Use of Google Ads and Google Conversion Tracking
a. Google Ads
We use the Google Ads service, from Google Ireland Ltd., Gordon House Barrow Street Dublin 4, Ireland, to draw attention to our offerings by means of advertisements. If you reach our website via a Google ad, Google Ads will store a cookie on your device. The legal basis for the processing of your data is your consent as per Art. 6 (1) (a) GDPR, Section 25 (1) TDDDG.
The advertisements are delivered by Google via “ad servers”. For this purpose, we and other websites use “ad server cookies”, which allow for success measurement based on certain parameters, such as the display of ads or clicks by the user. Using the Google Ads cookies saved via our website, we can obtain information about the success of our advertising campaigns. These cookies are not intended to identify you personally.
The cookies set by Google allow Google to recognize your internet browser. If a user visits certain pages of the website of an Ads customer and the cookie stored on their computer is not yet expired, Google and the customer can recognize that the user clicked on the ad and was forwarded to this page. Every Ads customer is assigned a different cookie so that the cookies cannot be tracked via the websites of other Ads customers. Google Ads notifies Google that you have accessed the relevant part of our website or have clicked on one of our ads. If you are registered with one of Google’s services, Google can associate the visit with your account. Even if you have not registered with Google or have not logged in, the service provider may become aware of your IP address and save it.
When this marketing tool is used, your browser is automatically linked directly to the Google server. We ourselves do not independently collect personal data via the described advertising measures; we only provide Google with the opportunity to collect the data. We receive only statistical analyses from Google that provide information about which ads were clicked how often and at which prices. We do not receive any other data from advertising; in particular, we are unable to identify the users from this information.
You can revoke your consent at any time without affecting the permissibility of the processing prior to this revocation. The simplest way for you to revoke your consent is via our Consent Manager or via the following functions: a) by configuring your browser software accordingly; in particular, disabling third-party cookies prevents you from receiving ads from third-party providers; b) by configuring your browser to block cookies from the domain “www.googleadservices.com”, www.google.de/settings/ads, where this setting is cleared when you delete your cookies; c) by disabling the interest-specific advertising of the provider, which is part of the self-regulation campaign “About Ads”, via the link www.aboutads.info/choices, where this setting is cleared when you delete your cookies; d) by permanently disabling the ads in your Firefox, Internet Explorer or Google Chrome browser at the link www.google.com/settings/ads/plugin. Please note that in this case it may not be possible to make full use of all the functions of this website.
More information on data protection and privacy at Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland, can be found here: www.google.com/intl/de/policies/privacy und services.google.com/sitestats/de.html .
b. Google Conversion Tracking
We use Google Ads with the additional application “Google Conversion Tracking”. This is a method that allows us to evaluate the success of our advertising campaigns. This involves providing the advertisements with a technical measure, such as an ID, which allows us to determine how a user interacted with our website after clicking on the advertisements and whether our services were actually used. This provides us with statistical information about the total number of viewers of our ads, which ads are particularly popular and potentially additional information about the results of the ad.
In this respect, the legal basis for the processing of your data is also Art. 6 (1) (a) GDPR, Section 25 (1) TDDDG. Accordingly, your inclusion takes place only upon your consent. You can prevent or discontinue use of the conversion tracking function in the same way as described above for Google Ads.
11. Embedding of YouTube videos
We have embedded YouTube videos into our online offering, which are stored on YouTube.com and can be played directly from our website. The data described below is only transmitted when you play the videos. The legal basis for the display of the videos is Art. 6 (1) (a) GDPR, in other words, use of the embedded videos only takes place with your consent.
Upon visiting the website, YouTube receives the information that you have loaded the corresponding sub-page of our website. The basic data described above, such as IP address and time stamp, are also transmitted. This takes place independently of whether you are logged into an account provided by YouTube or whether you do not have such an account. If you are logged into Google, your data is associated directly with your account. If you do not wish the data to be associated with your YouTube profile, you must log out before activating the button. YouTube saves your data as a usage profile and uses it for the purpose of advertising, market research and/or individualized presentation of its website. Such utilization takes place in particular (even for users who are not logged in) for delivering individualized advertising and to inform other users of the social network about your activities on our website. You have a right to object to the creation of these user profiles, but you must exercise this right with respect to YouTube.
The collected information is stored on servers of Google, including in the USA. For such cases, the provider has provided assurances that it follows practices that comply with the previous EU-US Privacy Shield and has promised to comply with the applicable data protection laws in the international data transfer. We have agreed on standard data protection clauses with Google, which are intended to ensure compliance with a reasonable level of data protection outside the EU.
More information about the purpose and scope of the data collection and data processing by YouTube can be found in the privacy statement. There you will also find additional information about your rights and configuration options for protecting your privacy: www.google.de/intl/de/policies/privacy.
12. Links to other websites
Our website may contain links to other websites. We do not operate these websites, so we do not have any influence on their content and their privacy policy. We therefore recommend that you carefully read and review the privacy statements on these websites.
13. Changes to this privacy statement
Changes in the legal situation or relevant case law and adaptations to our business model may make it necessary to modify this privacy statement under certain circumstances. We therefore retain the right to adapt this privacy statement at any time. You may request the current privacy statement from us at any time or download it from https://www.ganternorm.com/de/footer/hinweise/datenschutz.
Status: July 2024
Otto Ganter GmbH & Co. KG
Tribergerstr. 3
78120 Furtwangen
Telefon (07723) 6507-0
Telefax (07723) 4659
E-Mail dsb@ganternorm.com