What can we transport for you?
Via del Paese 12 - 39040 Varna - T (+39) 0472 480008 - info@gueterkofler.com
This Privacy Policy shall give you an overview of what happens to your personal data (hereinafter also referred to as "Data") in our company and to inform you of the data protection claims and rights to
which you are entitled in line with the European General Data Protection Regulation ("GDPR") and and the respective national regulations applicable to our business relations with customers inside and
outside our country of domicile, in particular the German Federal Data Protection Act ("BDSG") or the Decreto Legislativo 10 agosto 2018, n. 101 ("Codice in materia di protezione dei dati personal"). We
therefore ask you to take note of this Privacy Policy and if necessary, to print it out or save it.
Personal data is all data with which you can be personally identified. Your personal data may be processed for various purposes. Basically, the data processing operations by MC ADMINISTRATION SERVICE SRL
(hereinafter also referred to as “Güter Kofler“, or "We") can divide into the following areas of application:
• In connection with the websites https://gueterkofler.de, https://gueterkofler.it and
https://gueterkofler.com (each hereinafter referred to as "Website") or comparable external online presences, such as our social media profiles (“Website and external online presences
hereinafter also referred to collectively as "Internet Presences"), we process data of the visitors which are exchanged between their internet-capable end devices and the server operated by us,
as well as data which are communicated to us in the context of the use of the website. Details of this can be found in Part B.
• General information on data protection, data processing procedures and data subject rights, which applies to all data processing procedures carried out for us, can be found in Part A below.
Please visit each section for quick and contextual information on specific processing situations.
“Controller” according to the GDPR and other national data protection laws of the member states as well as other provisions of data protection law is:
MC ADMINISTRATION SERVICE SRL
Via del Paese 12
39040 Varna
Telefone: T (+39) 0472 480008
E-Mail: info@gueter-kofler.com
If you contact us with questions about our services, enter into contractual negotiations with us, accept one of our offers or if other contractual agreements exist with us, we process the Data you provide
in this context. Which Data is processed in detail depends largely on the relevant objects of purchase or the services that you obtain from us or that you request. The processing of your Data in this
context is usually mandatory for the preparation, conclusion and execution of the contract. If you do not provide us with this Data, this may force us to refuse to conclude a contract or execute the order,
or that we would no longer be able to perform an existing contract.
Insofar as we use Data in the context of initiating or fulfilling a contract with a customer, business or cooperation partner, our interest in handling your Data lies in enabling and maintaining the
exchange with the customer or the respective business or cooperation partner, typically in the context of a contract or also other relationship. If you act as a contact person - typically in your function
as an employee of such a party - you generally have no overriding opposing interest, insofar as this interaction with us is part of your area of responsibility, so that a right to object is regularly
excluded.
However, you are not obliged to give your consent to Data processing with regard to Data that is not relevant for the performance of the contract or that is not required by law.
If your personal data is processed, you are a "data subject" within the meaning of the GDPR, which may entitle you to the rights described below. Insofar as you assert rights against Güter Kofler as the responsible body, we recommend that you address these to our contact details mentioned above.
In accordance with Art. 15 GDPR, you can request confirmation from us as to whether personal data relating to you is being processed by us and to what extent we are processing your data.
If personal data concerning you is incorrect or incomplete, you have a right to correction and/or completion pursuant to Art. 16 GDPR.
If the legal requirements of Art. 17 GDPR are met, you can demand that we erase your data if we process it unlawfully or if the processing disproportionately interferes with your legitimate protection
interests. Please note that there may be reasons that prevent an immediate erasure, e.g. in the case of legally regulated storage obligations.
Irrespective of the exercise of your right to erasure, we will immediately and completely erase your data in order to fulfil our statutory obligations to erase after the processing purpose has ceased to
apply, provided there is no legal or statutory retention period to the contrary.
In the cases specified in Art. 18 GDPR, you may request us to restrict the processing of your data. If you have restricted the processing of your personal data, this data - apart from its storage - may only be processed with your consent or for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the European Union or a member state.
Pursuant to Art. 20 GDPR, you have the right to have data provided by you, which we process automatically on the basis of your consent or in fulfilment of a contract, transferred to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another responsible person, this will only be done as far as it is technically feasible. The right to data transfer does not apply to the processing of personal data necessary for the performance of a task in the public interest or in the exercise of official authority assigned to the person responsible.
If we process your data on the basis of a legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR, you may object to this data processing at any time for reasons arising from your particular
situation; this also applies to profiling based on these provisions (see Art. 21 GDPR). If you file an objection, we will no longer process your personal data concerned unless we can prove compelling
legitimate grounds for the processing which override your interests as a data subject or for the establishment, exercise or defence of legal claims.
Where the data subject objects to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes; this also applies to profiling insofar as it is connected with
such direct advertising. If you object, your personal data will no longer be used for direct marketing purposes. You can object to the processing of your data for the purpose of direct marketing at any
time without giving reasons.
Some data processing operations are only possible with your express consent pursuant to Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. Please note that even after withdrawing your consent, it may still be possible to process the data concerned in whole or in part on the basis of other legal principles.
Without prejudice to any other administrative or judicial remedy, every data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her
habitual residence, place of work or place of the alleged infringement if the data subject considers that the processing of personal data relating to him or her infringes upon GDPR.
A list of the data protection officers responsible for German data subjects (Art. 77 GDPR in conjunction with § 19 BDSG) and their contact details can be found in the following link:
https://www.bfdi.bund.de/DE/Service/Anschriften/anschriften_node.html.
If you are of the opinion that we violate national or European data protection law when processing your Data, please contact us in order to clarify any questions. Of course, you also have the right to
contact the supervisory authority responsible for our company headquarters:
Garante per la protezione dei dati personali
Piazza Venezia 11 -
00187 Rome (Italy)
Email: urp@gpdp.it
We mainly process the data that we receive directly from the data subjects in the course of a business initiation or in the course of the business relationship (see also Part C). In individual cases, we
also process data that we have received or acquired from other third parties such as credit agencies, creditor protection associations or authorities, or that we have obtained, received or acquired from
publicly accessible sources (e.g. telephone directories, company registers, press, Internet or other media).
Via our Website, we process data that we receive during your visit to the Website or that you actively communicate to us when using the Website, e.g. when using our contact form. Other data is automatically
collected by our IT systems when you visit the Website. These are mainly technical data (e.g. Internet browser, operating system or time of the page view). This data is collected automatically as soon as
you enter our Website. Details can be found under Part B.
In individual cases, we also process data that we have permissibly received or acquired from other third parties such as credit agencies, creditor protection associations or public authorities, or that we
have permissibly taken, received or acquired from publicly accessible sources (e.g. telephone directories, company registers, press, Internet or other media).
Among the personal data that we regularly process are personal master/contact data such as: First and last name, address, e-mail address, telephone number, fax, position in the company.
In addition, we also process the following additional personal data depending on the order/service:
• address data: street, house number, address additions (if necessary), postcode, city, country
• contact data: telephone number(s), fax number(s), e-mail address(es)
• registration data: Information about the service through which you have registered; timing and technical information about registration, confirmation and deregistration; data provided by you when
registering.
• offer data
• access data: date and time of the visit to our service; the page from which the accessing system accessed our site; pages called up during use; data for session identification (session ID);
in addition, the following information of the accessing computer system: Internet protocol address (IP address) used, browser type and version, device type, operating system and similar technical
information.
• information on the type and content of our business relationship such as contract data, order data, sales and document data, customer and supplier history, consulting documents.
• advertising and sales data,
• documentation data (e.g. consultation protocols, data from service meetings or support cases)
• information from your electronic dealings with us (e.g. IP address, log-in data),
• other data that we have received from you in the context of our business relationship (e.g. in discussions with customers),
• the documentation of declarations of consent
We process your data in accordance with the provisions of the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG) as amended, in particular on the following basis:
Personal data is processed on the basis of Art. 6 para. 1 lit. b GDPR in order to fulfil Güter Kofler‘s contractual obligations, in particular in connection with the sale and distribution of our goods and
services as well as all activities customary in the industry for the operation or administration of Güter Kofler (e.g. customer administration). The data may also be processed on a pre-contractual level as
part of initiating business with Güter Kofler or in the course of other contractual relationships with Güter Kofler.
For example, Art. 6 para. 1 lit. b GDPR, is the legal basis in the following cases:
• creating and maintaining a customer account or a supplier account
• offering and selling of Güter Kofler products and services
• sending of information relevant to the contract
Details for the purpose of this data processing can be found in the respective contract documents and terms and conditions.
On the basis of a weighing of interests, data processing may take place beyond the actual fulfilment of a contract in order to safeguard the legitimate interests of Güter Kofler or third parties. That is
permissible except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data. Data processing to safeguard
legitimate interests is carried out in the following cases, for example:
• provision of the Internet Presences, their functions and contents
• answering contact requests and communication with users
• transmission of data to companies and partners associated with us
• execution of payment transactions via external service providers
• use of debt collection service providers and lawyers to collect receivables and/or enforce them in court
• assertion of other legal claims and defence in legal disputes
• advertising or marketing
• market and opinion surveys
• measures for business management and further development of our services;
• maintaining databases on customers/prospects and service providers to improve our offering
• carrying out a risk assessment (due diligence) in the context of any company restructuring or a company acquisition or sale
• ensuring the IT security and IT operations of our company
• measures for building and facility safety
The processing of your data may be necessary in part for the purpose of fulfilling various legal obligations and requirements to which we are subject, e.g. from the German Commercial Code (Handelsgesetzbuch “HGB”) or the German Tax Code (Abgabenordnung “AO”).
If, in individual cases, you have given us your consent to process your data, it will be processed in accordance with the purposes and to the extent agreed in the declaration of consent. Consent given, e.g. for sending a newsletter, can be revoked at any time with effect for the future. For this purpose, please contact the contact data listed under A. No. I or No. II. Please note that processing which took place before the withdrawal is not affected by the withdrawal and under certain circumstances data processing may continue to be possible at least partially on the grounds of some other legal basis.
At Güter Kofler, those employees or organizational units who need your data to fulfil our contractual and legal obligations or to process or pursue our legitimate interests receive it.
Your data will be forwarded to companies for the initiation or execution of a contractual relationship (e.g. provision of a service or sale of goods) in accordance with Art. 6 para. 1 lit. b GDPR or -
depending on the type of concrete contractual relationship - and on the basis of our legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR, in particular to companies which we regularly use
in connection with the provision of our service or the execution of the contract. This applies to the following recipients or recipient categories:
• IT service provider (e.g. e-mail service providers, web hosting companies)
o Hostia uG, Heinestraße 7, 82216 Maisach (web development / maintenance)
o Amazon Web Services Inc, 410 Terry Avenue North Seattle WA 98109, USA (hosting)
• sales partners
• advertising partners
• insurances
• banks
• communication provider (telephone provider, fax provider)
• payment service providers
• shipping and logistics service providers
• credit bureaus
• accountants
• tax and legal advisors
If we use a service provider in the sense of order processing in accordance with Art. 28 GDPR, we shall nevertheless remain responsible for the protection of your data. Insofar as required by law, contract
processors are contractually obliged by means of an order processing agreement to treat your data confidentially and to process it only within the scope of providing the service. The processors commissioned
by us will receive your data insofar as they require the data to perform their respective services.
Your data will only be transferred to state institutions and authorities or collected for this purpose within the framework of mandatory national legal provisions or if you have commissioned us to do so.
Your personal data will only be used for the purpose for which you provided it to us or for which you gave us your consent and will be stored until this specific purpose has been fulfilled. After complete
processing of the purpose, or as soon as you request us to delete your data, your data will only be stored as long as it is necessary due to statutory limitation periods or retention periods (in particular
tax and commercial law nature).
However, the data will be deleted at the latest after expiry of all time limits unless you have expressly consented to further or other use. You can also assert rights during the retention periods, such as
blocking your data. See Part A. Point II.
Your data will be erased or blocked by us as soon as the purpose of storage no longer applies or you request us to erase it.
We process and in particular store your data in principle at most only until the termination of the business relationship or until the expiry of the applicable guarantee, warranty and limitation periods.
As part of our processing activities, in certain business transactions or areas of activity, personal data may also be transferred to locations in so-called third countries outside the EU or the EEA to which the EU Commission has not yet attested an adequate level of data protection, for example in the USA. If such data transfer should become necessary in individual cases, this will only be done on the basis of an adequacy decision of the European Commission, standard contractual clauses, suitable guarantees for compliance with data protection or your express consent.
In principle, you can visit our Websites and use them for information purposes without having to provide any personal details (e.g. register, place orders or otherwise provide information about yourself).
In this case, we process personal data of our users only to the extent necessary to provide a functional Website and our content and services or to the extent that cookies used on the Website provide us
with personal information when visiting the Website. For information on our own cookies used by us, please refer to Part B Section II. Other cookies enable our partner companies or third parties to
recognise your browser on your next visit, if applicable. For information on such third party cookies, please refer to Part B Section III.
In addition, the processing of personal data of our users is carried out regularly only with the consent of the user. An exception applies in those cases in which it is not possible to obtain prior consent
for factual reasons and the processing of the data is permitted by statutory provisions.
Each time you access our Website, our system automatically collects data and information from the computer system of the accessing computer, which your Internet browser automatically transmits to us or our
web host (so-called log files). These server logfiles contain IP addresses or other data that enable an assignment to a user. This could be the case, for example, if the link to the Website from which the
user accesses the Website or the link to the Website to which the user switches contains personal data. The following information is collected:
• IP address from which the access took place
• date and time of access
• Internet sites from which the user's system accesses our website
• Internet sites that are accessed by the user's system via our website
• Possible errors
Prior to storage, each data set record is anonymised by our web host immediately upon collection by changing the IP address, in order to ensure a high level of data protection. Therefore, the server log
files themselves do not contain any IP addresses in explicit form or any other data that would allow them to be assigned to a certain user. This data is not stored together with other personal data of the
user.
The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR.
The temporary storage of the IP address by the system is necessary to enable delivery of the Website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of
the session.
In the case of storage of data in log files, deletion is possible with our provider after 30 days at the latest.
The data is stored in log files in order to ensure the functionality of the Website. The data is also used to optimise the Website and to ensure the security of our information technology systems.
Data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. In the case of the collection of data for the purpose of providing the Website, this is the
case when the session in question has ended.
The collection of data for the provision of the Website and the storage of data in log files is mandatory for the operation of the Website. Consequently, there is no possibility for the user to object.
Our Website uses cookies or similar methods and collects, processes and uses usage data (e.g. access times, visited websites) or meta and communication data (IP address, device information). Cookies are text
files with a characteristic string of characters that are stored in the Internet browser or by the Internet browser on the user's computer system and which enable the browser to be uniquely identified when
the offer is called up again. If a user calls up a Website, a cookie can be stored on the user's operating system. A cookie contains a characteristic string of characters. The use of these cookies serves to
make a website more user-friendly, effective and secure. When you visit a website on which a cookie is embedded, the data you enter is stored exclusively in the cookie on your computer. In this case, data
will only be transmitted to the servers of our offer when a page request is made.
Some cookies are deleted after the end of the browser session when your browser is closed (so-called session cookies). These cookies are technically necessary, e.g. so that you can log in to the application
and also remain logged in across pages while visiting our offer.
Other cookies remain on your device for a specified period of time and enable us to recognise your browser on your next visit (so-called persistent or protocol cookies). The purpose of the use of these
cookies is to be able to offer you an optimal user guidance as well as to "recognise" you and to be able to present you with the most varied website and new content possible during repeated use.
Cookies that originate from partner companies or third parties may be used, for example, to collect information for advertising, customised content or statistics ("third-party cookies"). To the extent
that we do not identify cookies as originating from third parties, the cookies originate from our offering ("first-party cookies"). We inform you separately about third-party cookies or "tracking"
technologies that we use in the following sections of this privacy policy.
Flash cookies are stored on your device as data elements of web pages if they are operated with Adobe Flash. Flash cookies have no time limit.
For more information about which cookies we use to make our website more user-friendly, what purpose they serve and what data is stored with them or transmitted to third parties, can be found in the
following list:
| Name of the Cookie | Purpose | Storage duration | Type of Cookie | Domain |
|---|---|---|---|---|
| gueterkofler session | Session | 2 hours | Strictly requiered Cookie | Internal use only |
| XSRF-TOKEN | Prevention of cross site requests | 2 hours | Strictly requiered Cookie | Internal use only |
The legal basis for the processing of personal data using cookies is Art. 6 para. 1 lit. f GDPR to protect our legitimate interests in the best possible functionality and security of the Website and a
customer-friendly and effective design of the site visit, unless we ask you for consent under Art. 6 para. 1 lit. a GDPR.
The purpose of using technically necessary cookies is to simplify the use of Websites for users. Some functions of our Website cannot be offered without the use of cookies. For these it is necessary that
the browser is recognized also after a page change.
As Cookies are stored on the user's computer and transmitted to our site by the user. Therefore, you as a user have full control over the use of cookies. In principle, it is also possible to use our Website without cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically.
This Website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator. You can recognize
an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
We design our Website with fonts from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, which are offered in Europe by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") and therefore use the "Google Web Fonts" service, which enables access to the Google font library. For the provision of the fonts, your browser loads the required Google Fonts into the browser cache. This is necessary so that your browser can display a visually improved representation of our texts and to correctly display the fonts used for this purpose. In this process, Google processes the IP address of the browser to which this content is to be delivered when you enter our Website, as well as other usage data that enable our Website to be identified. Data may also be transferred to Google in the USA. However, we have no influence on the scope and further use of Data collected and processed by Google through the use of Google Web Fonts.
The integration of Google Web Fonts is based on our legitimate interests according to Art. 6 para. 1 lit. f GDPR in the attractive design of our Website and the technically secure and simple integration
and display of fonts, their uniform presentation and the consideration of licensing restrictions when integrating the fonts.
The collection of data for the provision of the Website is mandatory for the operation of our Website. Consequently, there is no possibility of objection on the part of the user.
Insofar as further processing of the data is carried out independently by Google Web Fonts as a data controller, Google is the sole responsible party for this. For further information on data protection
and the storage period of the data collected by Google, please refer to Google's privacy policy at: https://policies.google.com/privacy?hl=de&gl=de.
For information about Google Web Fonts, see: https://fonts.google.com/",
https://developers.google.com/fonts/faq?hl=de-DE&csw=1 and
https://www.google.com/fonts#AboutPlace:about.
We design our website with the help of a so-called Content Delivery Network (hereinafter referred to individually or collectively as "CDN"). A CDN is a network of high-performance servers that cache
content at various locations around the world. A CDN has two main tasks: to deliver content in the shortest possible time and to reduce the load on the web host by distributing traffic. CDNs transmit
two types of content: Static and dynamic content.
Static content is received by all website visitors in the same form, such as video content from streaming services or code frameworks (e.g. Javascript, jQuery). Dynamic content is first customized to the
user and only created at the moment of the request. This includes content that takes place via web applications, email or online stores and is personalized. To use the latter, information about the Website
visitor must first be transmitted to the CDN.
We use the CDN service "Bootstrap" provided by NetDNA LLC 3575 Cahuenga Blvd. West, Suite 330, Los Angeles, CA 90068, USA (hereinafter: "NetDNA"). More information on the handling of personal
data can be found in the privacy policy of Bootstrap at https://www.bootstrapcdn.com/privacy-policy/".
We also use the CDN service provided by Cloudflare Inc. 101 Townsend St., San Francisco, California 94107, USA (hereinafter "Cloudflare"). More information on the handling of personal data by
Cloudflare can be found in Cloudflare's privacy policy: https://www.cloudflare.com/security-policy/" and under
https://www.cloudflare.com/de-de/gdpr/introduction/"
We use jQuery technologies, which optimizes the loading speeds of the Website. For this purpose, program libraries of the CDN of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA,
in Europe provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: "Google") are used. If you have previously used jQuery on another page of the Google CDN,
your browser will fall back on the cached copy. If this is not the case, this requires a download, whereby data from your browser is transferred to Google in the USA. Details can be found at
https://developers.google.com/speed/libraries/#jquery as well as Google's privacy policy:
https://policies.google.com/privacy?hl=de&gl=de.
The use of the CDN is based on our legitimate interests according to Art. 6 sect. 1 lit. f GDPR in the attractive design of our Website and the technically secure and simple integration and presentation of
content, the technically correct and fast presentation of our Website and the relief of our IT infrastructure.
The collection of Data for the provision of the Website is mandatory for the operation of our Website. Consequently, there is no possibility for the user to object.
If the CDN carries out further independent processing of the data, they are the sole responsible party. For further information on data protection and the storage period of the data collected by the CDN,
please refer to their privacy policies and information.
Our Website may contain links to other websites. We have no influence whatsoever on the content or design of other providers' websites. The statements in this data protection declaration therefore do not
apply to external providers to whose offers or content we merely link with.
If you are forwarded via links from our Website to other websites, please inform yourself there about the respective handling of your data.
Our Website contains a contact form that can be used for electronic contact. If a user takes advantage of this option, the data entered in the respective input mask will be transmitted to us and stored.
Alternatively, it is possible to contact us via the e-mail address provided. In this case, the user's personal data transmitted with the e-mail will be stored.
The legal basis for the processing of data transmitted in the course of sending an e-mail or a contact request via contact form is Art. 6 Section 1 lit. f GDPR. If the e-mail contact or contact via contact
form is intended to close a contract, the additional legal basis for the processing is Art. 6 Section 1 lit. b GDPR.
The processing of the personal data disclosed by you serves us solely to process the contact. In the case of contacting us by e-mail, this also constitutes the necessary legitimate interest in processing
the data.
The other Data processed during the transmission process is used to prevent misuse of the contact form and to ensure the security of our information technology systems.
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form and those sent by e-mail,
this is the case when the respective conversation with the user has ended. The conversation is terminated when it can be inferred from the circumstances that the relevant facts have been conclusively
clarified and that no legal requirements call for longer storage.
If the user contacts us, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued.
In this event, all personal data stored in the course of contacting us will be deleted unless legal requirements require longer storage.
Due to the further development of our Website or our offers as well as due to changed legal or official requirements, it may become necessary to change this data protection declaration. You can access the current data protection declaration on our Website at any time and print it, if necessary
Via del Paese 12 - 39040 Varna - T (+39) 0472 480008 - info@gueterkofler.com