We take data protection seriously
The protection of your personal data is a matter of great importance to us. Below, we set out what personal data we process when you use our website and our digital services, the purposes for which this processing takes place, the legal basis on which it is carried out, and the rights you have as a data subject.
We treat your personal data confidentially and in accordance with the applicable data protection regulations.
DATA PROTECTION IN DETAIL
Responsibility for data processing
The data controller within the meaning of the General Data Protection Regulation (GDPR) is:
GODELMANN GmbH & Co. KG
Industriestraße 1
92269 Fensterbach
Germany
Email: info@godelmann.de
Further details and contact information can be found in the legal notice on our website.
Data Protection Officer
You can contact our Data Protection Officer as follows:
Christian Volkmer
Projekt 29 GmbH & Co. KG
Ostengasse 14
93047 Regensburg
Tel.: 0941 2986930
Email: anfragen@projekt29.de
Website: www.projekt29.de
Security
We take appropriate technical and organisational measures to protect personal data against loss, destruction, unauthorised access, unauthorised alteration or unauthorised disclosure. Our security measures are continuously reviewed and adapted in line with technical developments and taking into account the respective risks.
The transmission of personal data via our website is always encrypted. In particular, we use the TLS (Transport Layer Security) encryption protocol for this purpose.
However, complete security when transmitting data over the internet cannot be guaranteed.
Data subjects’ rights
You have the right at any time to access, rectify, erase or restrict the processing of your stored data, the right to object to the processing, as well as the right to data portability and the right to lodge a complaint in accordance with the provisions of data protection law.
Right of access:
You may request information from us as to whether and to what extent we process your data.
Right to rectification:
If we process your data and it is incomplete or inaccurate, you may at any time request that we rectify or complete it.
Right to erasure:
You may request that we erase your data if we are processing it unlawfully or if the processing disproportionately infringes upon your legitimate interests. Please note that there may be reasons preventing immediate erasure, for example in the case of statutory retention obligations.
Irrespective of whether you exercise your right to erasure, we will erase your data immediately and in full, provided that no contractual or statutory retention obligations prevent this.
Right to restriction of processing:
You may request that we restrict the processing of your data if
Right to data portability:
You may request that we provide you with the data you have supplied to us in a structured, commonly used and machine-readable format, and that you may transmit this data to another data controller without hindrance from us, provided that
Where technically feasible, you may request that we transfer your data directly to another data controller.
Right to object:
If we process your data on the basis of a legitimate interest, you may object to this data processing at any time; this would also apply to profiling based on these provisions. We will then no longer process your data, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims. You may object to the processing of your data for the purposes of direct marketing at any time without giving reasons.
Right to lodge a complaint:
You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data. The supervisory authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA).
Further information can be found at: https://www.lda.bayern.de/
DETAILS OF DATA PROCESSING
Sources and categories of personal data
We process your personal data to the extent that it is necessary for the establishment, content or amendment of a contractual relationship between us and you (master data). Customer details may include, in particular: name, title, contact details (postal address, telephone number, email address), date of birth, etc.
We also process your usage data. Usage data is data generated by your behaviour whilst using our website and our services, in particular your IP address, the start and end times of your visit to our website, and information about which content you have accessed on our website.
We collect the aforementioned data either directly from you (e.g. through your visit to the website) or, insofar as this is permitted under data protection laws, from third parties or from publicly available sources (e.g. commercial and association registers, the press, the media, the internet). As part of contract fulfilment, we may also receive data from third parties, for example from the payment service provider used.
Data transfers to third countries outside the EU
When using certain services, personal data may also be transferred to recipients in countries outside the European Union (EU) or the European Economic Area (EEA), or processed there.
The transfer of personal data to third countries takes place only in accordance with the legal requirements set out in Articles 44 et seq. of the GDPR. Where an adequacy decision by the European Commission exists for the third country in question, the data transfer may be based on this. Otherwise, appropriate safeguards – such as the Standard Contractual Clauses adopted by the European Commission – may serve as the basis for the data transfer.
Further information on possible transfers to third countries and the safeguards used in each case can be found, where relevant, in the descriptions of the individual services set out in this privacy policy.
Disclosure of data, data processing on behalf of others
We never disclose your personal data to third parties without authorisation. However, we may disclose your data to third parties in particular if you have consented to such disclosure, if the disclosure is necessary to fulfil our legal obligations, or if we are authorised or obliged to disclose data on the basis of statutory provisions or official or court orders. This may, in particular, involve the provision of information for the purposes of criminal prosecution, to avert danger or to enforce intellectual property rights.
We transfer personal data to third parties if and to the extent that this is necessary for the performance of the contract, for example to the companies responsible for delivering the goods or to the bank commissioned to process payments. No further transfer of data takes place, or only if you have expressly consented to such transfer. The legal basis for this data processing is Article 6(1), first sentence, point (b) of the GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures.
In certain circumstances, we may also transfer your data to external service providers who process data on our behalf and in accordance with our instructions (data processors) in order to simplify or alleviate our own data processing. Each data processor is bound by a contract in accordance with Article 28 of the GDPR. In particular, this means that the data processor must provide sufficient guarantees that it will implement appropriate technical and organisational measures to ensure that processing is carried out in accordance with the requirements of the GDPR and that the protection of your rights as a data subject is guaranteed. Despite engaging data processors, we remain responsible for the processing of your personal data within the meaning of data protection legislation.
Purpose of data processing
We generally process personal data only for specified, explicit and legitimate purposes. The specific purposes of the respective data processing are set out in the individual sections of this privacy policy.
Our processing purposes include, in particular, the technical provision and secure operation of our website, the handling of contact and customer enquiries, the initiation and fulfilment of contractual relationships and orders, the conduct of recruitment processes and, where the relevant legal conditions are met, the sending of newsletters and the analysis and optimisation of our website and our marketing activities.
Personal data is, as a general rule, not processed in a manner incompatible with the original purposes for which it was collected. The principle of purpose limitation is set out in Article 5(1)(b) of the GDPR.
The specific legal basis for processing depends on the particular purpose of the processing and, where necessary, is specified in this privacy policy in relation to the respective processing activity. The possible legal bases for the lawful processing of personal data arise in particular from Article 6(1) of the GDPR.
Retention period
Unless otherwise specified in individual cases, we store data collected from you only for as long as is necessary for the respective purpose, unless statutory retention obligations prevent its erasure, e.g. under commercial or tax law.
SPECIFIC PROCESSING ACTIVITIES
In the following, we would like to set out as transparently as possible which data we process from you, on what occasions, on what legal basis and for what purpose.
DATA PROCESSING IN BUSINESS TRANSACTIONS
Prospective customer data
If you are interested in our services, you can contact us at any time. By contacting us, you consent to the processing and storage of the data you provide (in particular your email address) for the purpose of dealing with your enquiry.
We process the data you provide to us exclusively until the respective purpose of your enquiry has been fulfilled, unless statutory retention periods prevent this. If the purpose of your enquiry is to exercise your rights as a data subject, the provisions set out in the section ‘Your rights as a data subject’ apply.
The legal basis for the use of the data you provide to us by contacting us is Article 6(1), first sentence, point (a) of the GDPR (consent of the data subject). You may withdraw your consent at any time with effect for the future. To do so, please use the contact details provided in the legal notice or the form provided above. Please note, however, that we will then no longer be able to process your enquiry.
Customer data
When you order goods from us, it is necessary for the conclusion of the contract and the processing of your order that we process certain data about you for the purpose of fulfilling the contract. We generally receive this data directly from you when you place your order.
Furthermore, it may be necessary to pass on your data to third parties, e.g. banks/payment service providers, logistics companies, etc. You can find further information on this in our General Terms and Conditions and below under ‘Third-party services’.
The legal basis for the use of your data is, in principle, Article 6(1), first sentence, point (b) of the GDPR (data processing for the performance of a contract). The legal basis for the data you voluntarily provide during the booking process is Article 6(1), first sentence, point (a) of the GDPR (consent of the data subject). You may withdraw your consent at any time with effect for the future. To do so, please use the contact details provided in the legal notice or the form provided above.
We are obliged under commercial and tax law to store your address, payment and order details.
To prevent unauthorised access by third parties to your personal data, in particular financial data, the booking process via the website is encrypted using TLS technology.
Applicant data
If you are interested in working for our company, you can apply for advertised vacancies via our dedicated careers page at https://godelmann-jobs.de/ or submit a speculative application to us. Applications may also reach us via other channels, such as by email, post or in person.
We use an external recruitment platform to manage and administer our recruitment processes. This also applies to applications that are not submitted directly via our careers page. In such cases, the applicant data required to conduct the recruitment process may be transferred by us to the recruitment platform and processed there.
The processing of your applicant data serves, in particular, to process your application, communicate with you and conduct the recruitment process.
Further information on the processing of personal data as part of the application process, in particular regarding the data processed, the relevant legal bases, the retention period and your data protection rights, can be found in the separate data protection information on our careers page at jobs-godelmann.de.
AI Chatbot
We provide an AI-powered chatbot on our website through which general information about our company, our products, and our services can be obtained.
The use of the chatbot is voluntary. Before using the chatbot, the chatbot terms of use are displayed and must be accepted. Please do not submit any sensitive personal data or confidential information through the chatbot.
The legal basis for the processing of data transmitted in connection with the use of the chatbot is Article 6(1)(f) of the GDPR. Our legitimate interest lies in providing website visitors with a modern digital communication and information service.
DATA COLLECTION WHEN VISITING OUR WEBSITE
Server log files
When you access a web page and each associated retrieval of data from a server, general information is automatically transmitted to the respective server providing the content. This data transmission takes place automatically and is a fundamental part of communication between devices on the internet.
The data transmitted by default includes, amongst other things, the following information: your IP address, product and version information about the browser and operating system used (known as the ‘user agent’), the website from which you accessed our site (known as the ‘referrer’), the date and time of the request (known as the ‘timestamp’). In addition, the HTTP status and the volume of data transferred as part of this request are recorded.
This information is logged by the server, stored in a table and retained there for a short period (so-called server log files). By analysing these log files, we can identify and subsequently rectify errors on the website, determine the website’s traffic load at specific times and, based on this, make adjustments or improvements. This also enables us to ensure the security of the server by tracing the IP addresses from which attacks on our server were carried out. We do not combine this data with other data sources.
Your IP address is stored only for the duration of your use of the website and is subsequently deleted immediately or rendered partially unrecognisable by truncation. The remaining data is stored for a limited period of time.
The legal basis for the use of server log files is Article 6(1), first sentence, point (f) of the GDPR (legitimate interest in data processing). This legitimate interest arises from the necessity of operating and maintaining our website, as explained above. You may object to the processing of your data on the basis of our legitimate interest at any time, subject to the conditions set out in Article 21 of the GDPR. To do so, please use the contact details provided in the legal notice. However, we would like to point out in advance that the processing of your data in server log files is mandatory within the meaning of Article 21(1) of the GDPR, as the website cannot be operated at all without it.
Usercentrics Consent Management Platform
We use the Consent Management Platform (CMP) from Usercentrics on our website to collect, manage and document the choices you make regarding the use of services and technologies that require your consent. The provider is Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany. This provider information is in accordance with Usercentrics’ current privacy policy.
When you visit our website, the Consent Management Platform processes information that is necessary to record and store your consent decisions and to assign them to the services used on our website in accordance with your selection. Technical information may also be processed in the process. The consent management platform serves, in particular, to manage your data protection and consent settings and to enable verification of these. Usercentrics describes its CMP as a solution for managing data processing services; the storage information relating to the respective services is displayed in the consent banner.
The provisions of Section 25 of the TDDDG also apply to the storage of information on your device or access to information stored there.
Where Usercentrics processes personal data on our behalf, such processing takes place on the basis of a data processing agreement in accordance with Article 28 of the GDPR.
Further information on the processing of personal data by Usercentrics can be found at: https://usercentrics.com/privacy-policy-cmp/
Cookies and Web Storage
Our website uses cookies and similar technologies such as web storage. This may involve storing information on your device or reading information already stored on your device.
Cookies are small files or units of information that can be stored on your device. They may, for example, be used to save certain settings, maintain a session or recognise a browser on a subsequent visit.
With web storage technologies, information is stored within the browser. These include, for example, local storage and session storage. Whether and which of these technologies are used depends on the functions and services you use on our website.
We distinguish between technologies that are technically necessary and those that require your consent.
Technically necessary technologies
Certain cookies and similar technologies are necessary to ensure that our website and the functions you have expressly requested can be provided from a technical perspective.
Under Section 25(2) of the TDDDG, consent to the storage or retrieval of information on your device is not required, amongst other things, where this is strictly necessary to provide a digital service you have expressly requested.
Insofar as personal data is processed in connection with these technically necessary processes, the processing is carried out on the relevant legal basis under the GDPR. Where necessary, this is described in more detail in this privacy policy in relation to the respective service or processing operation.
Technologies requiring consent
We only use cookies and similar technologies that are not technically necessary – in particular for analysis, statistical, marketing or personalisation purposes – in accordance with the consent you have previously given.
In such cases, the storage of information on your device or access to information stored there takes place on the basis of your consent in accordance with Section 25(1) of the TDDDG. Where personal data is processed in this context, such processing takes place on the basis of your consent in accordance with Article 6(1)(a) of the GDPR. Section 25(1) of the TDDDG generally requires consent, based on clear and comprehensive information, for the storage of and access to such data.
Your consent is voluntary and may be amended or withdrawn at any time with future effect via the cookie or data protection settings on our website.
You can find out which services and technologies on our website require consent by checking the settings on our consent management platform. Usercentrics explains that the CMP manages the relevant data processing services and can display the associated cookies or storage information in the consent banner.
Contacting us
Our website offers ways to contact us directly. By contacting us, you consent to the processing and storage of the data you provide (in particular your email address) for the purpose of dealing with your enquiry.
We process the data you provide to us exclusively until the respective purpose of your enquiry has been fulfilled, unless statutory retention periods prevent this. If the purpose of your enquiry is to exercise your rights as a data subject, the information set out in the section ‘Your rights as a data subject’ applies.
We require the following information from you:
The legal basis for the use of the data you provide when contacting us is Article 6(1)(a) of the GDPR (consent of the data subject). You may withdraw your consent at any time with effect for the future. To do so, please use the contact details provided in the legal notice or the form provided above. Please note, however, that we will then no longer be able to process your enquiry.
The legal basis for the processing of mandatory information is Article 6(1), first sentence, point (f) of the GDPR (legitimate interest in data processing). We have set out this legitimate interest in the list above.
You may object to the processing of your data on the basis of our legitimate interest at any time, subject to the conditions set out in Article 21 of the GDPR. To do so, please use the contact details provided in the legal notice.
Newsletter
We offer you the opportunity to subscribe to our newsletter and receive regular information about our company, our products, news and offers.
To subscribe to our newsletter, we require your email address. Subscription takes place via the double opt-in procedure. After subscribing, you will receive an email asking you to confirm your subscription. Only after this confirmation will you be added to our newsletter mailing list. The double opt-in procedure serves, in particular, to provide evidence of your consent. Rapidmail also describes the double opt-in procedure as the recommended method for documenting consent to receive a newsletter.
The processing of your data for the purpose of sending the newsletter to which you have subscribed is based on your consent in accordance with Article 6(1)(a) of the GDPR.
You may withdraw your consent at any time with future effect. To do so, you may, in particular, use the unsubscribe link included in every newsletter or contact us via the contact details provided.
In addition, we may send B2B existing customers information about our own similar goods or services by email, provided that the legal requirements for doing so are met.
This requires, in particular, that we have obtained your email address in connection with the sale of a product or service, we use the address for direct marketing of our own similar goods or services, you have not objected to this use, and you are informed, both when your email address is collected and on each occasion it is used, that you may object to its use at any time. The requirements for this are set out in Section 7(3) of the Unfair Commercial Practices Act (UWG).
You may object to the use of your email address for direct marketing at any time. To do so, you may, in particular, use the unsubscribe link contained in every relevant email.
We use an external newsletter service provider to send and manage our newsletters. Further information on the processing of your data by this service provider can be found in the section ‘External newsletter services – Rapidmail’.
SALES VIA EXTERNAL E-COMMERCE PLATFORMS
We maintain a brand shop or seller profile on the Amazon online platform and offer products for sale there.
When you visit our brand shop on Amazon or place an order with us via Amazon, personal data is initially processed by Amazon as part of the use of Amazon’s services. Depending on the specific use, Amazon processes, amongst other things, order details, delivery and billing addresses, contact details and payment information.
To the extent that this is necessary for the processing and fulfilment of an order placed with us via Amazon, we receive and process the personal data required for this purpose. Our processing is carried out for the purpose of performing and fulfilling the contract concluded with you on the basis of Article 6(1)(b) of the GDPR.
Any further processing of personal data within Amazon’s services is carried out under Amazon’s own responsibility in accordance with the data protection regulations applicable there. For Amazon.de, Amazon currently names Amazon Europe Core S.à r.l., Amazon EU S.à r.l. and Amazon Media EU S.à r.l., each at 38, avenue John F. Kennedy, L-1855 Luxembourg, as well as Amazon Digital Germany GmbH, Anni-Albers-Str. 21, 80807 Munich, as the data controllers for the personal data collected and processed by Amazon Europe.
Further information on the processing of your personal data by Amazon can be found in Amazon’s current privacy policy: Amazon.de Privacy Policy
THIRD-PARTY SERVICES
To simplify our data processing and to expand the functionality of our website, we use third-party services and resources, such as plugins, external content, software or other external service providers (services). In doing so, personal data may also be transferred to the service provider. Where data processing is carried out on our behalf, we have contractually obliged the service providers, in accordance with Article 28 of the GDPR, to process your data only in accordance with our instructions.
Where data processing is carried out on our behalf, the relevant service providers are engaged as data processors in accordance with Article 28 of the GDPR. Specifically, we use the following services:
WhatsApp in the application process
As part of certain job vacancies, we offer the option of contacting us via WhatsApp and initiating or carrying out the application process via this communication channel.
If you contact us via WhatsApp, the personal data you provide during the course of the communication will be processed. This may include, in particular, your telephone number, your name, your messages, as well as any other information and documents you provide voluntarily. We use this data exclusively to communicate with you in connection with your application and to carry out the application process.
When using WhatsApp, data is also processed by the WhatsApp provider. We have only limited influence over the nature and scope of this data processing. Information on the processing of personal data by WhatsApp can be found in WhatsApp’s privacy policy:
https://www.whatsapp.com/legal/privacy-policy-eea
Where we use WhatsApp as part of the recruitment process, the applicant data you provide will be processed for the purpose of conducting the recruitment process.
The use of WhatsApp to make contact during the recruitment process is voluntary. If you do not wish to use WhatsApp, the alternative application and contact options listed in the relevant job advertisement are available to you.
Hotjar
We use Hotjar on our website, a service for analysing user behaviour. Hotjar helps us to better understand how visitors use our website and interact with individual content and features. Among other things, Hotjar offers functions for analysing user behaviour. Hotjar describes its software as a service that enables website operators to examine user behaviour on their website beyond the scope of traditional web analytics.
When using Hotjar, information regarding interaction with our website may be processed. The purpose of this processing is to better understand how our website is used, to identify any potential usability issues and to optimise our online offering in terms of user-friendliness and functionality.
Hotjar is only used with your prior consent via our consent management platform. The processing of personal data is carried out on the basis of your consent in accordance with Article 6(1)(a) of the GDPR. Insofar as information is stored on or read from your device in this context, this is carried out on the basis of your consentin accordance with Section 25(1) of the TDDDG.
You may withdraw or amend your consent at any time with future effect via the cookie or privacy settings on our website.
Where Hotjar processes personal data on our behalf, such processing is carried out on the basis of a data processing agreement in accordance with Article 28 of the GDPR.
Further information on the processing of personal data by Hotjar and the data protection features provided there can be found in the provider’s privacy policy. Among other things, Hotjar provides functions for granting and withdrawing consent, as well as for protecting page content.
Further information can be found at: https://www.hotjar.com/privacy/
USE OF GOOGLE SERVICES
We use various services provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) on our website. In the course of using these services, personal data may be processed and, where applicable, transferred to other companies within the Google Group.
Where personal data is transferred to third countries outside the European Union or the European Economic Area, this is carried out in accordance with the legal requirements set out in Articles 44 et seq. of the GDPR. For data transfers to the USA, where the relevant conditions are met, the European Commission’s adequacy decision on the EU-US Data Privacy Framework may, in particular, serve as a basis. In addition, depending on the nature of the processing, other appropriate safeguards, in particular the European Commission’s standard contractual clauses, may apply.
Further information on the processing of personal data by Google can be found at: https://policies.google.com/privacy?hl=de
Google Analytics
We use Google Analytics 4, a web analytics service provided by Google, on our website. Google Analytics enables us to evaluate the use of our website and thereby analyse and optimise our online offering and our marketing activities.
When using Google Analytics, information may be processed relating in particular to the pages visited, the devices and browsers used, the origin of website visitors, the time and duration of the visit, and interactions with our website. The specific data collected depends on the respective configuration of Google Analytics and the events set up on our website.
Google Analytics uses IP addresses during data collection, amongst other things, to derive location information. According to Google, individual IP addresses of users from the European Union are not logged or stored. The IP address is used to derive general location information and is subsequently discarded. According to Google, the relevant IP queries for users from the EU are processed on servers within the EU before the measurement data is forwarded to Analytics servers for further processing.
Google Analytics provides us with analyses and statistics on the use of our website based on the data collected. This information helps us, in particular, to better understand how our website is used and to improve our online offering.
The use of Google Analytics is based on your consent in accordance with Article 6(1)(a) of the GDPR. Insofar as information is stored on or read from your device in the process, this is based on your consent in accordance with Section 25(1) of the TDDDG.
To manage your consent decisions, we use Google Consent Mode v2 in conjunction with our consent management platform. Google Consent Mode takes into account the consent decisions made via our consent management platform when managing Google services.
You may withdraw your consent at any time with future effect via the cookie or privacy settings on our website.
Further information on the processing of personal data by Google can be found at:
https://policies.google.com/privacy?hl=de
As part of Google Analytics, we use the ‘Google Signals’ feature. Google Signals enables Google Analytics to take into account additional information from users who are signed in to their Google Account and have enabled ad personalisation there. Google can link these users’ usage data across different devices. This enables us, in particular, to obtain cross-device analyses as well as demographic and interest-based reports, and to utilise remarketing features.
The cross-device reports provided to us via Google Analytics contain aggregated data. According to Google, no data relating to individual users is disclosed in this process.
The use of Google Signals is based on your consent in accordance with Article 6(1)(a) of the GDPR. Insofar as information is stored on or read from your device in the process, this is based on your consent in accordance with Section 25(1) of the TDDDG.
You may withdraw your consent at any time with future effect via the cookie or privacy settings on our website.
For users in the European Economic Area, Google requires the relevant consents for ad measurement and ad personalisation, and the transmission of the respective consent signals to Google.
According to Google, data relating to logged-in users in connection with Google Signals is deleted by default after 26 months. If a shorter retention period is set in Google Analytics, this shorter period applies.
Further information on data protection at Google can be found at: https://policies.google.com/privacy?hl=de
Google Web Fonts (locally hosted)
This website uses so-called Google Fonts to ensure a consistent display of typefaces. The fonts used are hosted locally on our server. Consequently, no connection is established with Google’s servers when you visit our website.
Further information on Google Fonts can be found at:
https://developers.google.com/fonts/faq
Google Maps
We use Google’s Google Maps service on our website. Google Maps enables us to embed interactive maps on our website and, for example, to show you our locations and how to get there.
When using Google Maps, personal data may be processed. According to Google, this may include, in particular, the IP address, information about the browser, device and operating system, the date and time of the request, the referrer URL and location information. Location information may be determined, for example, on the basis of the IP address and, provided the relevant permissions have been granted, via GPS or other sensor data from the device being used.
The use of Google Maps is based on your consent in accordance with Article 6(1)(a) of the GDPR. Insofar as information is stored on or read from your device in the process, this is done on the basis of your consent in accordance with Section 25(1) of the TDDDG.
Google Maps is only activated once you have given your consent via our consent management platform. You may withdraw your consent at any time with future effect via the cookie or data protection settings on our website.
Where personal data is transferred to third countries in connection with Google Maps, the provisions described above under ‘Data transfers to third countries outside the EU/EEA’ apply.
Further information on the processing of personal data by Google can be found at:
https://policies.google.com/privacy?hl=de
YouTube
We use Google’s YouTube video service on our website to embed videos directly into our website and provide you with multimedia content.
When you use embedded YouTube videos, a connection may be established to Google’s servers. In doing so, personal data and technical information regarding the use of the embedded video may be processed.
YouTube content is only activated on our website once you have given your consent via our consent management platform.
The use of YouTube is based on your consent in accordance with Article 6(1)(a) of the GDPR. Insofar as information is stored on or read from your device in the process, this is based on your consent in accordance with Section 25(1) of the TDDDG.
You may withdraw your consent at any time with future effect via the cookie or data protection settings on our website.
Where personal data is transferred to third countries in connection with YouTube, the provisions set out above under ‘Data transfers to third countries outside the EU/EEA’ apply .
Further information on the processing of personal data by Google can be found at:
https://policies.google.com/privacy?hl=de
ADVERTISING, CONVERSION TRACKING AND MARKETING
We use various technologies on our website to measure and optimise our online advertising activities. These services enable us, in particular, to track whether users carry out specific actions on our website after coming into contact with one of our adverts.
The services described below are only used in accordance with the consent you have given via our consent management platform. You can withdraw your consent at any time with future effect via the cookie or privacy settings on our website.
Google Ads Conversion Tracking
We use Google Ads Conversion Tracking, a service provided by Google, to measure the success of our adverts placed via Google Ads and to optimise our advertising campaigns.
If you interact with one of our Google adverts and subsequently visit our website, Google may link that interaction with specific actions taken on our website. This enables us, for example, to determine whether an advert led to an action relevant to us being carried out on our website.
If consent is given, Google may, in connection with advertising measurement, use, amongst other things, cookies and identifiers for advertising purposes. Google also lists IP addresses, the full URL of the page visited (including any information relating to ad clicks), and first-party conversion cookies as data or technologies that may be processed subject to the relevant consent settings.
This processing serves the purposes of conversion tracking, performance monitoring and optimisation of our Google Ads campaigns.
Google Ads conversion tracking is only used if you have previously consented to the relevant data processing via our consent management platform. We use Google’s Basic Consent Mode for this purpose. This means that the relevant Google tags are blocked until the user gives their consent. According to Google, if consent is not given, no data is transferred to Google.
The legal basis for the processing of personal data is Article 6(1)(a) of the GDPR. Insofar as information is stored on or read from your device in this context, this is done on the basis of your consent in accordance with Section 25(1) of the TDDDG.
You may withdraw your consent at any time with future effect via the cookie or privacy settings on our website.
Meta Pixel
We use the Meta Pixel on our website to measure and optimise our advertising activities on Meta’s platforms, in particular Facebook and Instagram.
The Meta Pixel enables us to track whether users carry out specific actions on our website after interacting with one of our adverts. In particular, this allows us to measure the effectiveness of our advertising campaigns and optimise them.
When using the Meta Pixel, information about the use of our website and actions carried out may be transmitted to Meta.
The use of the Meta Pixel is based on your consent in accordance with Article 6(1)(a) of the GDPR. Insofar as information is stored on or read from your device in this context, this is based on your consent in accordance with Section 25(1) of the TDDDG.
You may withdraw your consent at any time with future effect via the cookie or privacy settings on our website.
Further information on the processing of personal data by Meta can be found in Meta’s privacy policy.
LinkedIn Insight Tag
We use the LinkedIn Insight Tag on our website to measure and optimise our advertising campaigns on LinkedIn.
The LinkedIn Insight Tag enables us to obtain information about how visitors interact with our website and whether certain actions are carried out on our website following contact with a LinkedIn advert. This allows us to measure the effectiveness of our LinkedIn advertising and optimise our campaigns.
Furthermore, the information gathered may be used to create target groups and display relevant adverts.
The use of the LinkedIn Insight Tag is based on your consent in accordance with Article 6(1)(a) of the GDPR. Insofar as information is stored on or read from your device in this context, this is based on your consent in accordance with Section 25(1) of the TDDDG.
You may withdraw your consent at any time with future effect via the cookie or privacy settings on our website.
Further information on data protection at LinkedIn can be found at:
https://www.linkedin.com/legal/privacy-policy
Pinterest Tag
We use the Pinterest Tag on our website to measure the success of our advertising activities on Pinterest and to optimise our advertising campaigns.
The Pinterest Tag is a piece of code embedded on our website that enables Pinterest to track visitors to our website and certain actions carried out on our website after viewing or interacting with a Pinterest advert. Pinterest states that the purposes of this include, amongst other things, measuring and optimising conversions, measuring campaign performance and creating audiences for targeting.
Depending on our specific configuration, this may involve tracking, for example, page views, enquiries, leads, registrations or other conversion events defined by us. Pinterest explicitly supports these event types for conversion tracking.
The use of the Pinterest tag is based on your consent in accordance with Article 6(1)(a) of the GDPR. Insofar as information is stored on or read from your device in this context, this is based on your consent in accordance with Section 25(1) of the TDDDG.
You may withdraw your consent at any time with future effect via the cookie or privacy settings on our website.
Further information on the processing of personal data by Pinterest can be found in Pinterest’s privacy policy:
https://policy.pinterest.com/de/privacy-policy
OpenAI Ads / ChatGPT Ads Measurement Pixel
We use the OpenAI Ads / ChatGPT Ads Measurement Pixel on our website to measure and optimise our advertising campaigns in ChatGPT.
The Measurement Pixel enables certain actions on our website to be recorded as conversion events and attributed to our adverts in ChatGPT. This allows us to track whether users have carried out specific actions on our website following an interaction with one of our adverts.
The conversion data provided via the conversion tools may be used by OpenAI, amongst other things, to provide reporting data, create custom audiences for us, and to provide, measure and optimise the services.
The use of the OpenAI Ads / ChatGPT Ads Measurement Pixel is based on your consent in accordance with Article 6(1)(a) of the GDPR. Insofar as information is stored on or read from your device in this context, this is based on your consent in accordance with Section 25(1) of the TDDDG.
You may withdraw your consent at any time with future effect via the cookie or privacy settings on our website.
In connection with the conversion tools, OpenAI requires advertisers to provide the necessary information and to ensure that the required rights, consents, authorisations and legal bases for the collection, use, disclosure and transfer of conversion data are in place.
With regard to data protection roles, the current OpenAI Ad Tools Data Processing Addendum generally stipulates that OpenAI and the advertiser each act as independent data controllers for the personal data processed via the Ad Tools. An exception applies to ‘Restricted Processing’, as defined separately therein.
Further information on the terms and conditions for the OpenAI advertising and conversion tools can be found in OpenAI’s current terms and conditions. For this purpose, OpenAI maintains, amongst other things, separate Advertising Terms, Ad Tools Terms, Conversion Terms and an Ad Tools Data Processing Addendum.
EXTERNAL NEWSLETTER SERVICES
We use an external newsletter service to send and manage our newsletter. This enables us to create, send and manage newsletters and, where appropriate consent has been given, to analyse the use of our newsletters.
To carry out the distribution of the newsletter, the personal data required for this purpose is transferred to the newsletter service provider we use and processed there on our behalf.
Rapidmail
We use Rapidmail to send and manage our newsletters. The provider is Positive Group Deutschland GmbH, Ingeborg-Krummer-Schroth-Straße 18a, 79106 Freiburg im Breisgau, Germany. According to Rapidmail, the data is stored on servers in Germany. [rapidmail.de], [rapidmail.de]
As part of the newsletter distribution process, the personal data required for this purpose – in particular your email address – is processed by Rapidmail on our behalf.
Subscription to the newsletter is generally carried out using the double opt-in procedure. Further information on registration, the legal basis for sending the newsletter and on sending it to existing B2B customers can be found inthe ‘Newsletter’ section of this privacy policy. Rapidmail supports the double opt-in procedure and records the time of confirmation. [rapidmail.de]
We have entered into a data processing agreement with the provider in accordance with Article 28 of the GDPR. Rapidmail provides for a corresponding data processing agreement for the processing of customer data via the service. [help.rapidmail.de]
Newsletter analysis
Provided you have given your consent, we analyse the usage of our newsletter. This enables us, for example, to track whether a newsletter has been opened and which links contained therein have been clicked. The analysis serves to better understand the usage of our newsletters and to optimise their content.
In particular, so-called tracking pixels and tracking links may be used for this analysis. Rapidmail points out that click and usage behaviour may only be analysed if appropriate consent has been given and transparent information has been provided regarding the processing. [rapidmail.de]
The processing of personal data in the context of newsletter analysis is based on your consent in accordance with Article 6(1)(a) of the GDPR. You may withdraw your consent at any time with future effect.
Retention period
We generally store the data processed for the purpose of sending the newsletter for as long as you subscribe to the newsletter or for as long as is necessary for the respective processing purpose. Once you have unsubscribed, your data will be removed from the active newsletter distribution list, provided there is no other legal basis for further storage.
Where necessary, your email address may be stored on a block list to ensure that no further newsletters are sent to this address after you unsubscribe. The data on the block list is used exclusively for this purpose.
Further information on data protection at Rapidmail can be found at:
https://www.rapidmail.de/datenschutz
EXTERNAL TOOLS
Materialo
We offer you the option, via a corresponding link, to use the Materialo visualisation service provided by active online GmbH. With Materialo, various materials and products from our range can be virtually displayed and combined.
Materialo is not loaded automatically when you visit our website. The application is only launched once you actively select the relevant link or button. You will then be redirected to the Materialo application provided for us at godelmann.materialo.com.
Various functions are available within the Materialo application. These include, amongst other things, the selection and visualisation of rooms and materials, as well as the option to upload your own photos and save projects.
When using the application, personal data and technical information may be processed. The specific data processed depends, in particular, on the functions you use and the information you provide yourself.
Where the service provider processes personal data on our behalf, we have entered into a data processing agreement with them in accordance with Article 28 of the GDPR.
Further information on the processing of personal data can be found in the privacy notice within the Materialo application.
Wall Planner
We offer the GODELMANN Wall Planner to help you plan and visualise bespoke wall projects. Using the Wall Planner, you can virtually combine different products and materials to plan and visualise wall projects.
There are various ways to use the Wall Planner. You can use the online version directly via your browser or download the relevant application from the app stores linked on our website.
The online version of the Wall Planner can be accessed and used via our consent management platform, regardless of whether you have consented to optional cookies.
When using the online version, technically necessary information may be processed that is required for the provision and use of the application. The Wall Planner was developed using Unity technologies.
Where personal data is processed in connection with the provision of the Wall Planner, such processing is carried out in accordance with the data protection provisions applicable to the respective processing.
Alternatively, you can download the GODELMANN Wall Planner via the app stores linked on our website. If you select a relevant link, you will be redirected to the respective external app store. The data protection policies of the respective app store provider also apply to the processing of personal data that takes place there.
Further information on the processing of personal data in connection with Unity can be found at:
https://unity.com/legal/privacy-policy
Media Library
We use a digital asset management (DAM) solution provided by CELUM GmbH, Passaustraße 26–28, 4030 Linz, Austria, to host our media library and download section. [celum.com]
The media library is provided as a cloud-based application. According to CELUM, Microsoft Azure services are used for hosting. By default, hosting takes place in the EU West/Amsterdam region. [celum.com]
When accessing and using the media library, personal data and technical information may be processed. According to CELUM, this includes, in particular, the IP address, information about navigation within the application, the browser used, and the duration of use. The processing of this data serves the purposes of the technical provision, security and use of the media library, as well as the provision of the media and downloads offered there. [celum.com]
The processing of personal data required for technical provision is carried out on the basis of Article 6(1)(f) of the GDPR. Our legitimate interest lies in the secure and user-friendly provision of our digital media and download services.
Further information on the processing of personal data by CELUM can be found at:
https://www.celum.com/de/datenschutzerklaerung/
CalendarApp (booking calendar)
We use the CalendarApp service provided by Tool Loft UG (limited liability), Berlin, Germany, to provide our online booking calendar. CalendarApp enables the online booking or reservation of available slots and is integrated into our website.
When you access the booking calendar, a connection is established with CalendarApp’s servers. In doing so, technically necessary data, in particular your IP address, may be processed. If you make an enquiry or booking via the booking calendar, the personal data you enter in the relevant form will also be processed.
This data is processed for the purpose of providing the booking calendar and for processing and managing your booking or appointment enquiry. To this end, CalendarApp specifically provides for the processing of booking and address details, as well as invoicing details where applicable.
Insofar as the processing is necessary for the implementation of pre-contractual measures or for the performance of a contract, it is carried out on the basis of Article 6(1)(b) of the GDPR. Where the technical provision of the booking calendar is based on our legitimate interest, the processing is carried out on the basis of Article 6(1)(f) of the GDPR. Our legitimate interest lies in providing you with a simple and user-friendly way to book appointments online.
Where CalendarApp processes personal data on our behalf, the processing is carried out on the basis of a data processing agreement in accordance with Article 28 of the GDPR. The service provider provides a corresponding data processing agreement and states therein that it processes personal data on behalf of the data controller.
According to the terms of the data processing agreement, the processing and use of the data recorded therein takes place within Germany, a Member State of the European Union or another State party to the European Economic Area. Any transfer to a third country requires the prior consent of the client.
Further information on CalendarApp can be found at: https://calendarapp.de/
SERVICE PROVIDERS FOR PROCESSING YOUR ORDER
To process your order, we transfer personal data to service providers to the extent necessary for the performance and fulfilment of the contract. This includes, in particular, the dispatch and transport companies commissioned to carry out the delivery, as well as the payment service providers you have selected.
The processing and transfer of the data required for the performance of the contract is carried out on the basis of Article 6(1)(b) of the GDPR. Without the data required for this purpose, your order may not be able to be processed in full.
Where you give us separate consent to the transfer of additional data, processing is carried out on the basis of Article 6(1)(a) of the GDPR. You may withdraw any consent you have given at any time with effect for the future.
Specifically, we use the following service providers in particular:
DHL
If your order is delivered by DHL Paket GmbH, Charles-de-Gaulle-Straße 20, 53113 Bonn, we will transfer the data required for delivery, in particular your name and delivery address, to DHL.
This data is transferred for the purpose of delivering your order on the basis of Article 6(1)(b) of the GDPR.
Further information on data protection at DHL can be found at: https://www.dhl.de/de/toolbar/footer/datenschutz.html
SOCIAL MEDIA PRESENCE
In addition to our website, we maintain a presence on various social networks and platforms. We use these to provide information about our company, our products and services, and to communicate with customers, prospective customers and users.
When you visit our page on a social media platform, personal data may be processed by the relevant platform provider. In particular, information about your use of the platform, your interactions with our page and technical information about the device you are using may be processed. If you are logged in to the relevant platform, the information processed may, where applicable, be linked to your user account.
The platform providers may also process personal data for their own purposes, for example to analyse usage behaviour, to provide and improve their services, and to personalise content and advertising. We have only limited influence over the scope and further processing of personal data by the respective platform providers. Further information on this, as well as on your data protection rights and settings options, can be found in the privacy policy of the respective provider.
Where we ourselves process personal data in connection with our social media presence, this is done in particular to communicate with users, for public relations purposes, and to provide information about our company, our products and our services. The legal basis for this is Article 6(1)(f) of the GDPR. Our legitimate interest lies in maintaining up-to-date corporate communications, as well as in providing information to and communicating with customers and prospective customers.
Where processing is carried out on the basis of your consent, the legal basis is Article 6(1)(a) of the GDPR. You may withdraw any consent you have given at any time with effect for the future.
When using individual platforms, personal data may also be processed outside the European Union or the European Economic Area. Information on international data transfers and the transfer mechanisms used for this purpose can be found in the privacy notices of the respective providers.
To exercise your rights as a data subject, you may contact either us or the relevant platform provider. Where only the platform provider has access to the personal data in question, your rights can usually be dealt with directly by them.
We maintain a presence on the following platforms:
Facebook and Instagram
We maintain corporate pages on Facebook and Instagram. Meta’s joint privacy policy applies to both services; this policy describes, amongst other things, the processing of information for Facebook and Instagram.
In connection with our corporate pages, statistical information regarding the use of our pages may be made available to us. Meta offers corresponding insights and analytics functions for Facebook pages.
Where personal data is transferred to the USA, Meta Platforms, Inc. participates in the EU-US Data Privacy Framework.
Further information on the processing of personal data by Meta can be found at: https://www.facebook.com/privacy/policy/
There are supplementary provisions regarding responsibility for the processing of data in connection with Page Insights: https://www.facebook.com/legal/terms/page_controller_addendum
We maintain a corporate presence on LinkedIn. When using LinkedIn, personal data may be processed by the platform provider. This may include, in particular, data that you yourself provide on LinkedIn, as well as information about your use of and interaction with the platform.
Further information on the processing of personal data can be found in LinkedIn’s privacy policy at:
https://www.linkedin.com/legal/privacy-policy
Where personal data is transferred to the USA, LinkedIn Corporation participates in the EU-US Data Privacy Framework. LinkedIn also refers to standard contractual clauses as the mechanism for certain international data transfers.
We maintain a corporate presence on Pinterest. According to Pinterest, for users in the European Economic Area, Pinterest Europe Ltd., Waterloo Exchange, 3rd Floor, Waterloo Road, Dublin 4, Ireland, and Pinterest, Inc., 651 Brannan St., San Francisco, CA 94107, USA, are jointly responsible for the processing of personal data.
When using Pinterest, information may be processed, including information that you provide yourself or that is generated in connection with your use of and interaction with the platform. According to Pinterest, it uses personal data, amongst other things, to provide personalised content and advertising.
Further information on the processing of personal data by Pinterest can be found at: https://policy.pinterest.com/de/privacy-policy
We maintain a corporate presence on XING. New Work SE is responsible for the processing of personal data in connection with the XING service.
When using XING, the provider processes, amongst other things, profile and communication data provided by users, as well as data collected automatically during use. According to XING, the automatic collection of data serves, amongst other things, to ensure security, provide the service, measure the effectiveness and optimise advertising, and determine statistical indicators.
Further information on the processing of personal data can be found at: https://privacy.xing.com/de/datenschutzerklaerung
YouTube
We maintain a corporate presence on YouTube. YouTube is one of the services provided by the Google Group. Google’s Privacy Policy applies, amongst other things, to the YouTube service.
When you use YouTube, Google processes personal data depending on how you use the service and the privacy settings you have selected. Even when using the service without logging in, information containing unique identifiers linked to the browser, application or device you are using may be processed.
Further information on the processing of personal data by Google and YouTube can be found at: https://policies.google.com/privacy
Where personal data is transferred to the US, Google LLC participates in the EU-US Data Privacy Framework. Google also refers, amongst other things, to standard contractual clauses as a mechanism for certain international data transfers.
Houzz.de
We maintain a business presence on Houzz, an online platform dedicated to building, renovating, living and interior design.
When you use our presence on Houzz, personal data may be processed by the platform provider. This may include, in particular, account and profile information you have provided, content you have published and communication data, as well as information collected automatically whilst using the platform.
The processing of personal data by Houzz is governed by the platform provider’s privacy policy. We have only limited influence over the nature and scope of the data processing carried out by Houzz.
Personal data may also be processed outside the European Economic Area in the course of using the platform. Houzz states that for such international data transfers, it relies either on an adequacy decision by the European Commission or on appropriate safeguards in accordance with Article 46 of the GDPR, such as EU Standard Contractual Clauses.
Further information on the processing of personal data by Houzz can be found at: https://www.houzz.de/privacyPolicy
Changes to this Privacy Policy
We reserve the right to amend this privacy policy should this become necessary due to legal, technical or organisational changes. The current version published on this website shall apply.
Date of this Privacy Policy: 22 September 2026