Data protection

1. data protection at a glance

General information

The following information provides a simple overview of what happens to your personal data,
when you visit this website. Personal data is all data with which you can be personally identified.
can be made. Detailed information on the subject of data protection can be found in this privacy policy.

Data collection on this website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find the operator's contact details at
section „Information on the controller“ in this privacy policy.

How do we collect your data?

On the one hand, your data is collected when you provide it to us. This may, for example, be data
that you enter in a contact form.

Other data is collected automatically or with your consent by our IT systems when you visit the website.
collected. This is primarily technical data (e.g. internet browser, operating system or time of the page view).
This data is collected automatically as soon as you enter this website.

What do we use your data for?

Some of the data is collected to ensure that the website is provided without errors. Other data
can be used to analyze your user behavior. If contracts are concluded via the website or
the transmitted data will also be used for contract offers, orders or other purposes.
order requests are processed.

What rights do you have with regard to your data?

You have the right at any time to request information free of charge about the origin, recipient and purpose of your stored data.
to receive your personal data. You also have the right to request the rectification or erasure of this data
to request your consent. If you have given your consent to data processing, you can revoke this consent at any time.
for the future. You also have the right, under certain circumstances, to request the restriction of the
processing of your personal data. Furthermore, you have the right to lodge a complaint with the
competent supervisory authority.

You can contact us at any time if you have further questions on the subject of data protection.

2. hosting

We host the content of our website with the following provider:

Strato

The provider is Strato AG, Otto-Ostrowski-Straße 7, 10249 Berlin (hereinafter „Strato“). When you visit our website
Strato collects various log files including your IP addresses when you visit our website.

Further information can be found in Strato's privacy policy:
https://www.strato.de/datenschutz/.

The use of Strato is based on Art. 6 para. 1 lit. f GDPR. We have a legitimate interest
to ensure that our website is displayed as reliably as possible. If a corresponding consent has been requested,
the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, insofar as
consent to the storage of cookies or access to information in the user's terminal device (e.g.
device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

3 General notes and mandatory information

Data protection

The operators of these pages take the protection of your personal data very seriously. We treat your
personal data confidentially and in accordance with the statutory data protection regulations and this
Privacy policy.

When you use this website, various personal data is collected. Personal data
is data with which you can be personally identified. This privacy policy explains,
what data we collect and what we use it for. It also explains how and for what purpose this is done.

We would like to point out that data transmission over the Internet (e.g. when communicating by e-mail)
may have security gaps. Complete protection of data against access by third parties is not possible.

Note on the responsible body

The controller responsible for data processing on this website is:

Note on the responsible body

GTS GmbH

Böllinger Street 61

74078 Heilbronn

Phone: +49 (0) 7131 285100

E-mail: info@gts-countmaster.de

The controller is the natural or legal person who, alone or jointly with others, is responsible for the processing of personal data.
purposes and means of processing personal data (e.g. names, e-mail addresses, etc.).

Storage duration

Unless a more specific storage period has been specified in this privacy policy, your personal data will remain
personal data with us until the purpose for the data processing no longer applies. If you have a legitimate interest
If you assert a request for deletion or revoke your consent to data processing, your data will be deleted,
unless we have other legally permissible reasons for storing your personal data
(e.g. retention periods under tax or commercial law); in the latter case, the deletion takes place after
These reasons no longer apply.

General information on the legal basis for data processing on this website

If you have consented to data processing, we process your personal data on the basis of
Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, insofar as special categories of data pursuant to Art. 9 para. 1
GDPR are processed. In the event of express consent to the transfer of personal data to
Third countries, data processing is also carried out on the basis of Art. 49 para. 1 lit. a GDPR. If you have consented to the
Storage of cookies or access to information in your end device (e.g. via device fingerprinting)
have given their consent, the data processing is also carried out on the basis of Section 25 (1) TDDDG. The consent
can be revoked at any time. If your data is required for the fulfillment of a contract or for the implementation of pre-contractual measures
necessary, we process your data on the basis of Art. 6 para. 1 lit. b GDPR. Furthermore, we process
Your data, insofar as these are required to fulfill a legal obligation on the basis of Art. 6 para. 1
lit. c GDPR. Data processing may also be based on our legitimate interest in accordance with Art. 6 para. 1
lit. f GDPR. The relevant legal bases in each individual case are explained in the following paragraphs.
of this privacy policy.

Recipients of personal data

As part of our business activities, we work together with various external bodies. In some cases
This also requires the transfer of personal data to these external bodies. We give
personal data to external bodies only if this is necessary in the context of fulfilling a contract.
is if we are legally obliged to do so (e.g. disclosure of data to tax authorities), if we have a
have a legitimate interest in the transfer pursuant to Art. 6 para. 1 lit. f GDPR or if there is another legal basis for the transfer.
the data transfer is permitted. When using contract processors, we disclose personal data of our customers
only on the basis of a valid contract for order processing. In the case of joint processing
a contract for joint processing is concluded.

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke an already
revoke your consent at any time. The legality of the data processing carried out until the revocation
remains unaffected by the revocation.

Right to object to the collection of data in special cases and to direct marketing (Art. 21 GDPR)

IF THE DATA PROCESSING IS BASED ON ART. 6 ABS. 1 LIT. E OR F GDPR, YOU MUST
THE RIGHT AT ANY TIME, FOR REASONS ARISING FROM THEIR PARTICULAR SITUATION, TO OBJECT TO THE
TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA; THIS ALSO APPLIES TO AN OBJECTION BASED ON A
PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH ANY
PROCESSING IS BASED ON THIS DATA PROTECTION DECLARATION. IF YOU OBJECT
WE WILL NO LONGER PROCESS YOUR PERSONAL DATA CONCERNED, UNLESS YOU WITHDRAW YOUR CONSENT.
BECAUSE WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS.
INTERESTS, RIGHTS AND FREEDOMS PREVAIL OR THE PROCESSING SERVES THE ASSERTION,
EXERCISE OR DEFENSE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21 PARA. 1 GDPR).

IF YOUR PERSONAL DATA ARE PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO
THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU.
DATA FOR THE PURPOSE OF SUCH ADVERTISING; THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO
IS ASSOCIATED WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR
PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSE OF DIRECT ADVERTISING
(OBJECTION PURSUANT TO ART. 21 PARA. 2 GDPR).

Right to lodge a complaint with the competent supervisory authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority,
in particular in the Member State of their habitual residence, place of work or place of presumed employment.
infringement. The right of appeal exists without prejudice to other administrative or judicial remedies.
Legal remedies.

Right to data portability

You have the right to access data that we have collected automatically on the basis of your consent or in fulfillment of a contract.
to have the data processed, delivered to themselves or to a third party in a commonly used, machine-readable format.
If you request the direct transfer of the data to another controller, this will only take place insofar as it
is technically feasible.

Information, correction and deletion

Within the framework of the applicable legal provisions, you have the right to information free of charge at any time about
your stored personal data, its origin and recipients and the purpose of the data processing and
if applicable, a right to rectification or erasure of this data. For this and other questions on the subject
personal data, you can contact us at any time.

Right to restriction of processing

You have the right to request the restriction of the processing of your personal data. For this purpose
You can contact us at any time. The right to restriction of processing exists in the following cases:

If you dispute the accuracy of your personal data stored by us, we generally require
time to check this. For the duration of the review, you have the right to request the restriction of the processing of your
personal data.
If the processing of your personal data was/is carried out unlawfully, you can, instead of deletion
request the restriction of data processing.
If we no longer need your personal data, but you need them for the exercise, defense or
assertion of legal claims, you have the right to demand the restriction of the processing of your personal data instead of deletion.
to request the restriction of the processing of your personal data.
If you have lodged an objection pursuant to Art. 21 (1) GDPR, a balance must be struck between your and our interests.
our interests. As long as it has not yet been determined whose interests prevail, you have the
Right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, this data - regardless of its
storage - only with your consent or for the assertion, exercise or defense of legal claims.
legal claims or to protect the rights of another natural or legal person or for reasons of
for reasons of important public interest of the European Union or of a Member State.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as
orders or inquiries that you send to us as the site operator use SSL or TLS encryption. A
You can recognize an encrypted connection by the fact that the address line of the browser changes from „http://“ to „https://“
and the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
can be read.

4. data collection on this website

Cookies

Our Internet pages use so-called „cookies“. Cookies are small data packets that are stored on your
terminal device. They are either stored temporarily for the duration of a session (session cookies) or
stored permanently (permanent cookies) on your end device. Session cookies are deleted at the end of your visit.
automatically deleted. Permanent cookies remain stored on your end device until you delete them yourself or
an automatic deletion by your web browser takes place.

Cookies may originate from us (first-party cookies) or from third-party companies (so-called third-party cookies).
Third-party cookies enable the integration of certain services from third-party companies within
websites (e.g. cookies for the processing of payment services).

Cookies have various functions. Many cookies are technically necessary because certain
website functions would not work without them (e.g. the shopping cart function or the display of
videos). Other cookies can be used to evaluate user behavior or for advertising purposes.

Cookies that are required to carry out the electronic communication process, to provide certain services that you
desired functions (e.g. for the shopping cart function) or to optimize the website (e.g. cookies to measure
of the web audience) (necessary cookies) are stored on the basis of Art. 6 para. 1 lit. f GDPR.
unless another legal basis is specified. The website operator has a legitimate interest
in the storage of necessary cookies for the technically error-free and optimized provision of its services.
If consent to the storage of cookies and comparable recognition technologies is requested, the
the processing is carried out exclusively on the basis of this consent (Art. 6 para. 1 lit. a GDPR and § 25
para. 1 TDDDG); consent may be revoked at any time.

You can set your browser so that you are informed about the setting of cookies and cookies only in the
individual cases, exclude the acceptance of cookies for certain cases or in general, as well as the automatic deactivation of cookies.
Activate deletion of cookies when closing the browser. If cookies are deactivated, the
functionality of this website may be limited.

You can find out which cookies and services are used on this website in this privacy policy.

5. social media

Social media elements with Shariff

Elements of social media are used on this website (e.g. Facebook, X, Instagram, Pinterest, XING,
LinkedIn, Tumblr).

You can usually recognize the social media elements by the respective social media logos. To recognize the
data protection on this website, we only use these elements together with the so-called
„Shariff“ solution. This application prevents the social media elements integrated on this website from
personal data is transferred to the respective provider as soon as you enter the site for the first time.

Only when you activate the respective social media element by clicking on the corresponding button will a
direct connection to the provider's server is established (consent). As soon as you click on the social media element
the respective provider receives the information that you have visited this website with your IP address.
If you are logged into your respective social media account (e.g. Facebook) at the same time, the respective
provider can assign the visit to this website to your user account.

Activating the plugin constitutes consent within the meaning of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG.
You can revoke this consent at any time with effect for the future.

The service is used to obtain the legally required consents for the use of certain personal data.
technologies. The legal basis for this is Art. 6 para. 1 lit. c GDPR.

Facebook

Elements of the social network Facebook are integrated on this website. The provider of this service is Meta
Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. The data collected is, according to
However, Facebook also transfers data to the USA and other third countries.

You can find an overview of the Facebook social media elements here:

https://developers.facebook.com/docs/plugins/?locale=de_DE
.

If the social media element is active, a direct connection is established between your end device and the
Facebook server is established. Facebook receives the information that you have visited this website with your IP address.
have visited. If you click on the Facebook „Like“ button while you are logged into your Facebook account,
you can link the content of this website to your Facebook profile. This allows Facebook to recognize your visit to this
website to your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the
content of the transmitted data and its use by Facebook.

Further information on this can be found in Facebook's privacy policy at:

https://de-de.facebook.com/privacy/explanation
.

The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1
TDDDG. Consent can be revoked at any time.

Insofar as personal data is collected on our website with the help of the tool described here and transmitted to Facebook
are us and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour,
Dublin 2, Ireland are jointly responsible for this data processing (Art. 26 GDPR). The joint
Responsibility is limited exclusively to the collection of data and its transfer to Facebook.
The processing carried out by Facebook after forwarding is not part of the joint responsibility. The
The obligations incumbent on us jointly were set out in an agreement on joint processing.
The wording of the agreement can be found at:

https://www.facebook.com/legal/controller_addendum
.
According to this agreement, we are responsible for providing the data protection information when using the Facebook tool and
is responsible for the secure implementation of the tool on our website in accordance with data protection law. For the
Facebook is responsible for the data security of Facebook products. Rights of data subjects (e.g. requests for information)
with regard to the data processed by Facebook can be asserted directly with Facebook. If you have the
If you assert your data subject rights with us, we are obliged to forward them to Facebook.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found
here:

https://www.facebook.com/legal/EU_data_transfer_addendum
,

https://de-de.facebook.com/help/566994660333381

and

https://www.facebook.com/policy.php
.

The company is certified in accordance with the „EU-US Data Privacy Framework“ (DPF). The DPF is a
Agreement between the European Union and the USA, which guarantees compliance with European data protection standards.
for data processing in the USA. Every company certified in accordance with the DPF is obliged
We undertake to comply with these data protection standards. You can obtain further information on this from the provider at the following address
Link:

https://www.dataprivacyframework.gov/participant/4452
.

6. plugins and tools

YouTube with enhanced data protection

This website integrates videos from the YouTube website. The operator of the website is Google Ireland Limited („Google”),
Gordon House, Barrow Street, Dublin 4, Ireland.

When you visit one of these websites on which YouTube is integrated, a connection is established to the servers of
YouTube is established. This tells the YouTube server which of our pages you have visited. If you are in
you are logged in to your YouTube account, you enable YouTube to associate your surfing behavior directly with your personal profile.
assign to you. You can prevent this by logging out of your YouTube account.

We use YouTube in extended data protection mode. Videos that are played in extended data protection mode,
are not used to personalize browsing on YouTube, according to YouTube. Ads that appear in the
are also not personalized. In extended data protection mode
no cookies are set. Instead, so-called local storage elements are stored in the user's browser.
which, like cookies, contain personal data and are used for recognition purposes
can. Details on the extended data protection mode can be found here:

https://support.google.com/youtube/answer/171780
.

If necessary, further data processing operations may be triggered after the activation of a YouTube video.
over which we have no influence.

The use of YouTube is in the interest of an appealing presentation of our online offers. This represents
constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. Insofar as a corresponding consent
was queried, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1
TDDDG, insofar as the consent permits the storage of cookies or access to information in the end device of the data subject.
user (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

You can find more information about data protection at YouTube in their privacy policy at:

https://policies.google.com/privacy?hl=de
.

Google Fonts (local hosting)

This site uses so-called Google Fonts, provided by Google, for the uniform display of fonts.
can be used. The Google fonts are installed locally. There is no connection to Google servers.

You can find more information about Google Fonts at

https://developers.google.com/fonts/faq

and in Google's privacy policy:

https://policies.google.com/privacy?hl=de
.

Google Maps

This site uses the map service Google Maps. The provider is Google Ireland Limited („Google”), Gordon House,
Barrow Street, Dublin 4, Ireland. With the help of this service we can integrate map material on our website.

To use the functions of Google Maps, it is necessary to save your IP address. This information is
is usually transmitted to a Google server in the USA and stored there. The provider of this site has
has no influence on this data transmission. If Google Maps is activated, Google may, for the purpose of standardized
Use Google Fonts to display the fonts. When you call up Google Maps, your browser loads the required web fonts.
fonts in your browser cache to display texts and fonts correctly.

The use of Google Maps is in the interest of an appealing presentation of our online offers and in the interest of
to make it easy to find the places we have indicated on the website. This constitutes a legitimate interest in
within the meaning of Art. 6 para. 1 lit. f GDPR. If a corresponding consent has been requested, the
Processing exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, insofar as the
consent to the storage of cookies or access to information in the user's terminal device (e.g.
device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found
here:

https://privacy.google.com/businesses/gdprcontrollerterms/

and

https://privacy.google.com/businesses/gdprcontrollerterms/sccs/
.

You can find more information on the handling of user data in Google's privacy policy:

https://policies.google.com/privacy?hl=de
.