LEGAL
Privacy Policy
Thank you for your interest in our company. Protecting your personal data matters to us. Below we explain which data we process when you visit this website and what rights you have.
1. Controller
The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Gervarta GmbH i. G.
Ingolstädter Weg 54
33102 Paderborn
Germany
Phone: +49 151 23064166
Email: dalhoff@gervarta.com
We have not appointed a data protection officer, as the legal requirements for doing so do not apply to us.
2. General information on data processing
Personal data is any information relating to an identified or identifiable natural person. We process personal data only to the extent necessary to provide a functioning website and our content, or where you provide data to us yourself, for example when contacting us.
Processing is based on Article 6 GDPR, in particular:
- Art. 6(1)(b) GDPR – to take steps prior to entering into a contract and to perform a contract,
- Art. 6(1)(f) GDPR – to protect our legitimate interests, such as the secure and technically sound operation of this website,
- Art. 6(1)(c) GDPR – to comply with legal obligations, such as retention duties under commercial and tax law.
3. Hosting and server log files
This website is hosted by an external service provider:
STRATO AG
Otto-Ostrowski-Straße 7
10249 Berlin
Germany
According to the provider, the servers are located in Germany.
We have concluded a data processing agreement with the host pursuant to Art. 28 GDPR. When you access this website, the host automatically collects information transmitted by your browser and stores it in server log files. This generally includes:
- the IP address of the requesting device,
- the date and time of access,
- the name and URL of the file retrieved,
- the website from which access occurred (referrer URL),
- the browser used, its version and the operating system,
- the volume of data transferred and the access status.
This data is technically necessary for us to deliver the website, ensure its stability and security, and investigate misuse. The legal basis is Art. 6(1)(f) GDPR. We do not merge this data with other sources and do not evaluate it for marketing purposes. Log files are generally deleted after seven days.
4. No cookies, no analytics, no tracking
This website does not set cookies. We use neither web analytics services nor tracking or advertising technologies, no social media plugins are embedded, and no profiling or automated decision-making takes place. A cookie banner is therefore not required.
5. Fonts
The “DM Sans” typeface used on this website is served exclusively from our own server. No files are retrieved from third-party servers, in particular not from Google Fonts. No data and no IP addresses are transmitted to third parties in this process. The typeface is licensed under the SIL Open Font License 1.1.
6. Contact by email and telephone
This website lists our email address and telephone number. If you contact us, we process the data you provide – such as your name, contact details and the content of your enquiry – solely to handle your request and for any follow-up questions.
The legal basis is Art. 6(1)(b) GDPR where your enquiry is aimed at concluding a contract, and otherwise Art. 6(1)(f) GDPR based on our legitimate interest in responding to enquiries. We delete this data once it is no longer required for that purpose and no statutory retention obligations prevent deletion.
Please note that unencrypted email communication may have security gaps. For confidential information, we are happy to agree another channel with you.
7. Recipients of the data
Your data is disclosed only where this is necessary to provide our services, where you have consented, or where we are legally obliged to do so. Recipients are in particular our hosting provider. Where service providers process data on our behalf, this is done on the basis of an agreement pursuant to Art. 28 GDPR.
8. Retention period
We store personal data only for as long as necessary for the respective purposes or as required by statutory retention periods. Retention periods under commercial and tax law are generally six to ten years.
9. Your rights
You have the following rights regarding your personal data:
- Access to the data processed (Art. 15 GDPR),
- Rectification of inaccurate or incomplete data (Art. 16 GDPR),
- Erasure of your data (Art. 17 GDPR),
- Restriction of processing (Art. 18 GDPR),
- Data portability (Art. 20 GDPR),
- Withdrawal of consent with effect for the future (Art. 7(3) GDPR),
- Objection to certain processing activities (Art. 21 GDPR).
An informal message to the contact details above is sufficient to exercise your rights.
10. Right to object
Where we process data on the basis of legitimate interests under Art. 6(1)(f) GDPR, you have the right to object to such processing at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.
11. Right to lodge a complaint
Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement. The authority responsible for us is:
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Kavalleriestraße 2–4, 40213 Düsseldorf, Germany
www.ldi.nrw.de
12. Data security
This website uses SSL or TLS encryption, which you can recognise by “https://” in your browser's address bar. This protects the data transmitted between your browser and our server. In addition, we take appropriate technical and organisational measures to protect your data against loss, destruction and unauthorised access.
13. Changes to this privacy policy
We update this privacy policy whenever changes to our website or the legal framework make this necessary. The version published here applies.