Privacy policy

Controller

The controller for data processing on this website is: Daniel Gerst Im Zinkig 65 D-67069 Ludwigshafen am Rhein Germany Email: info@gerst-it.com Phone: +49 621 49088280

We are not legally required to appoint a data protection officer. Please direct any data protection questions to the contact details above.

Server log files

When you open this website, the web server automatically collects data transmitted by your browser: IP address, date and time, page requested, amount of data transferred, referrer and browser identification.

The legal basis is Art. 6 (1) (f) GDPR — our legitimate interest in operating the site securely and reliably. Logs are deleted after 30 days at the latest.

Legal bases

Every processing operation rests on one of the following bases, named specifically in each section below: • Art. 6 (1) (b) GDPR — performing a contract or answering a pre-contractual enquiry. • Art. 6 (1) (c) GDPR — complying with a legal obligation, such as commercial and tax retention duties. • Art. 6 (1) (f) GDPR — our legitimate interests, in particular operating this website securely and reliably.

We do not obtain consent under Art. 6 (1) (a) GDPR for this website, because no processing here requires it.

In addition to the GDPR, the German Federal Data Protection Act (BDSG) applies, as does the Telecommunications Digital Services Data Protection Act (TDDDG) for anything stored on your device.

Security of processing

This website is served exclusively over HTTPS. Everything you send us is encrypted in transit using TLS. You can tell that the connection is encrypted by the padlock symbol in your browser’s address bar.

Beyond that, we take technical and organisational measures appropriate to the risk under Art. 32 GDPR: restricted physical and electronic access to our systems, separated access rights, encrypted storage media, security updates applied regularly, and backups that are secured and tested for restorability. We take data protection into account when selecting hardware and software and in the default settings of our procedures.

No cookies, no analytics

This website sets no cookies. There is no reach measurement, no tracking and no profiling. No analytics or marketing tools, no social media widgets, no external fonts, no maps and no chat services are embedded. A consent banner is therefore not required.

Your language and appearance preferences (light or dark) are stored locally on your device by your browser. That storage exists solely to remember the choice you made yourself and is therefore strictly necessary for the service you expressly requested (§ 25 (2) no. 2 TDDDG). It is never transmitted to us, and you can delete it at any time through your browser settings.

Recipients of your data

We do not pass your data on to third parties. We use no processors to operate this website — neither for hosting nor for delivery, analytics or mail.

No data is transferred to countries outside the European Union.

Contacting us

If you write to us via the contact form or by email, we process the data you provide in order to answer your enquiry. The legal basis is Art. 6 (1) (b) GDPR where your enquiry concerns entering into a contract, otherwise Art. 6 (1) (f) GDPR.

The only mandatory fields are your name, your email address and your message — the details without which we cannot reply. Anything else is optional.

We delete the data as soon as it is no longer required for that purpose and no statutory retention periods apply. For enquiries that do not lead to a business relationship this is usually the case after six months.

Hosting

This website runs on our own hardware in Germany. No third-party processor is involved in operating this website.

Orders and business relationships

If your enquiry turns into an order, we continue to process the data needed to carry it out: contact person and address, contact details, contract and service data, billing and payment data, and the correspondence relating to the matter. The legal basis is Art. 6 (1) (b) GDPR.

Where an order gives us access to your systems or to data for which you are the controller, we act solely on your instructions. We conclude a data processing agreement under Art. 28 GDPR for this.

Commercial and tax law require us to keep some data longer than the original purpose demands: invoices and accounting records for eight years (§ 147 AO, § 257 HGB), commercial letters for six years. The legal basis for that continued storage is Art. 6 (1) (c) GDPR. During that time the data is restricted in processing and serves only the purpose that justifies keeping it. Where several periods apply to the same data, the longest one governs.

No newsletter, no profiling

We send no newsletter and run no advertising based on your behaviour on this website. There is no automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). An informal message to the contact details above is enough.

Where we process data on the basis of legitimate interests (Art. 6 (1) (f) GDPR), you may object under Art. 21 GDPR on grounds relating to your particular situation. Any consent you have given can be withdrawn at any time with effect for the future.

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate.

Changes to this policy

We update this policy whenever the processing on this website changes. The version published here is the one that applies.