Privacy policy

The protection of your personal data is an important concern for us. Below, we inform you in detail about how your data is handled when you visit our website and use the functions provided on it.

The legal basis for data protection can be found in the General Data Protection Regulation (GDPR) of the European Union. This policy discloses what types of data are collected, the purposes for which this is done, and what rights you are entitled to.

The data controller responsible for data processing on this website is:
Gouldmann GmbH
Bozener Str. 12
30519 Hanover
Germany
E-Mail: info@gouldmann.com
Telefon: +49 511 261 597 13

Within the framework of the legal requirements, you have comprehensive rights regarding your personal data:

• Right of Access (Art. 15 GDPR): You can request information about your data processed by us at any time.
• Right to Rectification (Art. 16 GDPR): You have the right to have incorrect or incomplete data corrected.
• Right to Erasure (Art. 17 GDPR): You can request the deletion of your data, provided that no legal retention obligations prevent this.
• Right to Restriction of Processing (Art. 18 GDPR): You can request the restriction of data processing under certain conditions.
• Right to Data Portability (Art. 20 GDPR): You have the right to receive your data in a structured, commonly used format.
• Right to Withdraw Consent (Art. 7 Abs. 3 GDPR): Consent granted for data processing can be revoked at any time with effect for the future.

When you visit our website purely for information, the provider of the pages automatically collects information that your browser transmits to us. This includes:

• Browser type and browser version
• Operating system used
• Referrer URL (the previously visited page)
• Host name of the accessing computer
• Time of the server request
• IP address of the end device

The legal basis for this processing is Art. 6 Abs. 1 lit. f GDPR. Our legitimate interest lies in ensuring error-free operation, system security, and technical optimization of the website.

If you send us inquiries via the contact form provided, your details from the form, including the contact details you provide there, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions.

The processing of this data is based on Art. 6 Abs. 1 lit. b GDPR, provided your inquiry is related to the initiation or fulfillment of a contract. In all other cases, processing is based on our legitimate interest in efficient communication (Art. 6 Abs. 1 lit. f GDPR).

We use the integrated CRM system from the provider Odoo S.A., Chaussée de Namur 40, 1367 Grand-Rosière, Belgium, for our website infrastructure and for processing form data.

All data you enter into our contact form, as well as the technical meta-data of your visit, are transmitted directly to Odoo’s cloud servers and stored centrally there. Hosting takes place in certified data centers within the European Union (by default in France or Belgium).

The legal basis for this processing is Art. 6 Abs. 1 lit. f GDPR (Legitimate interest in an efficient, secure, and centralized IT structure). A valid data processing agreement (Data Processing Addendum / DPA) has been concluded. Odoo undertakes to strictly comply with GDPR guidelines.

Further details on data security and Odoo’s privacy practices can be found in the manufacturer’s official documents provided at https://www.odoo.com/de_DE/privacy and https://www.odoo.com/de_DE/security.