Data Protection

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

Greggersen Gasetechnik GmbH
Bodestraße 27–29
21031 Hamburg
Germany

Telephone: +49 (0)40 7397570
Email: info@greggersen.de

Website: www.greggersen.de

Represented by the Managing Directors:
Thomas Greggersen & Wolfgang Greggersen

2. General Information on Data Processing

We generally process personal data of our users only insofar as this is necessary to provide a functional website, our content, and to process orders in our B2B online shop.

Data processing is carried out on the basis of the General Data Protection Regulation (GDPR) as well as the Federal Data Protection Act (BDSG).

3. Access Data (Server Log Files)

Our hosting provider Hetzner automatically processes data concerning website access ("server log files"). These include:

• Browser type and browser version

• Operating system used

• Referrer URL

• Host name of the accessing computer

• Time of server request

• IP address (shortened or anonymised, where possible)

Log files serve technical security purposes and are automatically deleted after a few days.
Legal basis: Art. 6 (1) (f) GDPR (legitimate interest).

4. Use of Cookies

Our website uses cookies that are necessary for the operation of the shop (e.g. session cookies, basket, login functions).

Non-essential cookies are only set after your consent.

When opening the website, a banner is displayed to you in which you can consent to or object to the use of certain categories of cookies.

Legal bases:

• Art. 6 (1) (c) GDPR (legal obligation)

• Art. 6 (1) (a) GDPR (consent)

5. Contact Form

If you contact us via the contact form, we process the following data:

• Name

• Email address

• Company

• Subject / message

• Further voluntary details

Data processing takes place exclusively to process your enquiry.
Legal basis: Art. 6 (1) (b) GDPR (contract-related communication)
For general enquiries: Art. 6 (1) (f) GDPR (legitimate interest)

6. Customer Account

When registering a customer account, the following data is processed:

• Company name

• VAT ID no.

• Contact person

• Address

• Email address

• Password (encrypted)

• Order and invoice data

Legal basis: Art. 6 (1) (b) GDPR (contract performance and pre-contractual measures)

7. Order Processing & Payment Providers

a) Payment methods

We offer the following payment methods:

• PayPal

• Advance payment

• Purchase on account

PayPal

When choosing this payment method, you are redirected to PayPal.
Data processing is carried out by: PayPal (Europe) S.à r.l. et Cie, S.C.A.

Legal basis: Art. 6 (1) (b) GDPR.

b) Shipping service providers

To deliver the goods, we forward data to the following service providers:

• DHL

• UPS

• Freight forwarders (variable, depending on shipment)

Only data required for delivery is passed on (name, address, telephone number if applicable).

Legal basis: Art. 6 (1) (b) GDPR.

8. Web Analytics

Google Analytics

We use Google Analytics, a web analytics service provided by Google Ireland Ltd.
Google uses cookies that allow an analysis of the website usage.

Collected data may include:

• IP address (anonymised)

• Usage behaviour

• Page views

• Click paths

• Device and browser information

Analytics is only activated after consent via the cookie banner .

Legal basis: Art. 6 (1) (a) GDPR.

We use Google Analytics with IP anonymisation.

9. Integration of YouTube

Videos provided via the service YouTube (Google Ireland Ltd.) are embedded on our website.

We use the "enhanced data protection mode".
Personal data can only be processed when the video is played.

Legal basis: Art. 6 (1) (a) GDPR (consent).

10. Integration of Google Maps

Our website uses Google Maps to display locations.

Provider: Google Ireland Ltd.
By accessing it, personal data (IP address, device information) may be transmitted to Google.

Activation only takes place after consent (cookie consent).
Legal basis: Art. 6 (1) (a) GDPR.

11. Data Deletion

We store personal data only for as long as is necessary for the respective purpose.

Criteria for the storage duration:

• statutory retention periods

• contractual purposes

• technically necessary storage (cookies, log files)

12. Your Rights

You have the following rights at any time:

• Right of access (Art. 15 GDPR)

• Right to rectification (Art. 16 GDPR)

• Right to erasure (Art. 17 GDPR)

• Right to restriction of processing (Art. 18 GDPR)

• Right to data portability (Art. 20 GDPR)

• Right to object (Art. 21 GDPR)

• Withdrawal of granted consents (Art. 7 (3) GDPR)

Please direct complaints to the competent data protection supervisory authority in Hamburg.

13. Data Security

We use SSL/TLS encryption to protect your data during transmission.

14. Changes to this Privacy Policy

We reserve the right to adapt this privacy policy when necessary, e.g. in the event of technical changes or new statutory requirements.