Privacy policy

The protection of your personal data is an important concern for us. Below, we inform you in detail about how your data is handled when you visit our website and use the functions provided on it.

1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you about the handling of your personal data when using our website and our services (such as 3D renderings, measurement, custom manufacturing, and installation). Personal data is any data with which you could be personally identified.
1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Gouldmann GmbH, Bozener Str. 12, 30519 Hanover, Germany
Tel.: +49 511 261 597 13
Email: info@gouldmann.com
Website: www.gouldmann.com

2.1 In the case of merely informational use of our website, we only collect data that your browser transmits to our server (so-called “server log files”). When you visit our website, we collect the following data: visited website, date and time, amount of data sent, source/reference, browser, operating system, IP address. The processing is carried out in accordance with Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in the stability of our website.
2.2 For hosting our website and displaying the page content, we use STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. All data collected is processed on servers within the EU. We have concluded a data processing agreement (DPA) in accordance with Art. 28 GDPR.
2.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content.

To make visiting our website attractive, we use cookies. If personal data is processed by cookies, this is done in accordance with Art. 6 Para. 1 lit. b GDPR (contract fulfillment), Art. 6 Para. 1 lit. a GDPR (consent) or Art. 6 Para. 1 lit. f GDPR (legitimate interest).
This website uses a “cookie consent tool” to obtain valid user consent for cookies that require consent. The tool sets technically necessary cookies to store your cookie preferences (legal basis Art. 6 Para. 1 lit. f and lit. c GDPR).

If you contact us via email or form or request an initial offer including 3D rendering, we process your data (name, contact details, room and project information) to process the inquiry.
We use the Odoo system from Odoo DE GmbH, Mühlenstraße 15, 10243 Berlin, Germany, for customer and order management as well as business process control (CRM, quoting, visualization orders, invoicing). Your data is hosted on servers in the EU (DPA according to Art. 28 GDPR is in place). In exceptional cases where support is provided by Odoo outside the EU, EU Standard Contractual Clauses (SCCs) have been concluded.
Legal basis: Art. 6 Para. 1 lit. b GDPR (contract initiation/fulfillment) and Art. 6 Para. 1 lit. f GDPR.

To process and fulfill your contract (custom manufacturing, measurement, and installation), we process and transmit project-relevant data to external partner companies (for on-site measurement) and independent installation teams.
Data transfer to production partners in China: To manufacture our custom-made products, we transmit technical production data (measurements, floor plans, technical drawings, material specifications) to our production partner in China. This data generally does not contain direct customer data (no names, addresses, emails). The allocation is made via internal project numbers (pseudonymization). If, under data protection law, a transfer to a third country still occurs, we ensure an adequate level of data protection through EU Standard Contractual Clauses (SCCs) in accordance with Art. 46 Para. 2 lit. c GDPR.
The legal basis for these transfers is Art. 6 Para. 1 lit. b GDPR (contract fulfillment).

We process payments via credit card, SEPA transfer, or integrated payment service providers such as Stripe (Stripe Payments Europe, Ltd., Ireland). When paying via Stripe, your payment data is transmitted directly to Stripe. For any data transfers to the USA, Stripe is certified under the EU-U.S. Data Privacy Framework (DPF). Legal basis: Art. 6 Para. 1 lit. b GDPR.

This website uses Google Analytics 4 and Google Tag Manager (Google Ireland Limited, Ireland). This enables an analysis of your website use (incl. shortened IP address, demographic characteristics, Google Signals). Information is transferred to Google servers (transfers to Google LLC, USA are possible; Google is certified under the EU-US Data Privacy Framework).
This processing only takes place if you have given us your express consent in accordance with Art. 6 Para. 1 lit. a GDPR via the cookie consent tool. You can revoke your consent there at any time.

We only store personal data for as long as necessary to fulfill our contractual obligations or as required by statutory retention periods (e.g., 10 years according to HGB/AO for invoicing and accounting documents). Afterwards, the data is routinely deleted. In the case of consent, we delete the data upon your revocation.

9.1 Applicable data protection law grants you comprehensive rights regarding our processing of your personal data: right to information (Art. 15 GDPR), right to rectification (Art. 16 GDPR), right to erasure (Art. 17 GDPR), right to restriction of processing (Art. 18 GDPR), right to data portability (Art. 20 GDPR), right to withdraw consent (Art. 7 Para. 3 GDPR), and the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).
9.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA WITHIN THE FRAMEWORK OF A BALANCING OF INTERESTS BASED ON OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN PROVE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS

Last updated: 01.09.2026