Dated 9 February 2021
The information below explains the scope and the purpose of the processing of your personal data by GOLDBECK and your rights in accordance with the European General Data Protection Regulation (GDPR).
I. Which personal data is processed?
GOLDBECK processes personal data that we receive from you as a contractual partner. This data will be supplemented by personal data that we obtain lawfully from publicly accessible sources, such as the commercial register, the press and the media. If you give a quote to a tender issued by GOLDBECK and/or receive or grant an order for the provision of services, or visit our website, the customer portal or the supplier portal, we will collect and store the following information:
- Title, last name and first name
- A valid email address
- Postal address
- Telephone number (landline and/or mobile)
- The accessing computer's IP address
- Date and time of access
- Name and URL of the file accessed
- Liability insurance
- Tax ID
- Account details
- as well as other information necessary for the cooperation
II. Purpose of processing personal data
Your personal data is processed by us for the purpose of
- Identifying you as our contractual partner
- Informing you about new projects and giving you the opportunity to be actively involved in tender processes
- Corresponding with you
- Asserting contractual and legal claims, as well as legal defence
III. Legal basis of data processing
Your personal data is processed in compliance with the provisions of the German [BN1] Federal Data Protection Act (BDSG) and the General Data Protection Regulation (GDPR), in line with the following stipulations:
- The processing complies with contractual obligations in accordance with point b) of Art 6(1) S.1 GDPR
On your request or after being commissioned for a specific project or another supply and service, data is processed for the purposes specified under II. and is necessary to execute the project appropriately and for the fulfilment of contractual duties by both parties.
- The processing protects GOLDBECK’s legitimate interests in accordance with point f) of Art. 6(1) S. 1 GDPR
The contractual relationships entered into in the past between you and GOLDBECK give GOLDBECK a legitimate interest in the processing and transmission of your personal data within the GOLDBECK corporate group for internal administrative purposes. To be able to keep giving you further quotes for potential projects and to continue cooperation in the future, it is necessary to process your personal data.
- In line with your consent in accordance with point a) of Art. 6 (1) S. 1 GDPR
Insofar as you have explicitly or conclusively granted consent to GOLDBECK for the processing of personal data for certain purposes, the legality of this processing is based on your consent. Consent that has been granted can be revoked at any time. This also applies to the revocation of informed consent granted to GOLDBECK prior to the entry into force of the EU General Data Protection Regulation, i.e. before 25/05/2018.
IV. Your rights
As a data subject in accordance with data protection law, you have the right
- To withdrawal (in accordance with Art. 7(3) GDPR)
You can revoke any consent you have previously granted GOLDBECK at any time. After this, GOLDBECK shall no longer continue with the data processing that is based on this consent in the future.
- To information (in accordance with Art. 15 GDPR)
You have the right to demand information about your personal data processed by GOLDBECK. In addition, you can demand information about the purposes of the processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage duration, the existence of a right to correction, erasure, restriction of processing or objection, the existence of a right to object, the origin of the data, if this has not been collected by us, as well as the existence of automated decision-making, including profiling and potentially meaningful information about details thereof;
- To correction (in accordance with Art. 16 GDPR)
You can demand the immediate correction or completion of inaccurate or incomplete personal data about you stored by GOLDBECK.
- To erasure (in accordance with Art. 17 GDPR)
You can request the erasure of your personal data stored at GOLDBECK, provided that the processing is not required to exercise the right of freedom of expression and information, for the fulfilment of a legal obligation for reasons of public interest or to assert, exercise or defend against legal claims.
- To restriction of processing (in accordance with Art. 18 GDPR)
You can request the restriction of processing of your personal data insofar as you contest the accuracy of the data, the processing is unlawful but you reject its erasure and we no longer require the data for our processing purposes but you require it to assert, exercise or defend against legal claims, or you have filed a complaint against processing in accordance with Art. 21 GDPR.
- To data portability (in accordance with Art. 20 GDPR)
You have the right to receive the personal data you have provided to GOLDBECK in a structured, standard and machine-readable format or to request the transfer of this data to another controller.
- To object (in accordance with Art. 77 GDPR)
You can also file a complaint with a supervisory authority. In general, you can contact the supervisory authority at your place of residence or work or our company headquarters.
V. Right to object in accordance with Art. 21 GDPR
Insofar as your personal data is processed on the basis of legitimate interests in accordance with point f of Art. 6(1) S.1 GDPR, you have the right, in accordance with Art. 21 GDPR to submit an objection against the processing of your data. This applies for reasons that result from your particular situation or the objection against direct advertising. In the latter case, you have a general right to object, which is implemented by us without information about the specific situation.
If you would like to assert your right to object, it is sufficient to send an email to
VI. Storage and erasure
Your personal data collected by GOLDBECK will be stored by us after the end of the business relationship until 10 calendar years have passed and then deleted, provided that GOLDBECK is not obligated to longer storage in accordance with point c) Art. 6(1) S.1 GDPR due to tax or commercial storage and documentation duties.
In addition, longer storage may be necessary to retain evidence in the context of statutes of limitations. In accordance with Sections 195 et seq. of the German Civil Code (as of February 2021), this statute of limitations may be up to 30 years.
VII. Forwarding of personal data by GOLDBECK
Forwarding of your personal data to third parties by GOLDBECK does not take place for any purposes other than those listed below. GOLDBECK only forwards your personal data to third parties if:
- You have explicitly consented to forwarding to third parties in accordance with point a) of Art. 6(1) S. 1 GDPR;
- Insofar as this is legally permitted and required in accordance with point b) of Article 6(1) S.1 GDPR for the execution of contractual relationships with you;
- In the event that there is a legal obligation to forward information in accordance with point c) of Art. 6(1) S. 1 GDPR.
Insofar as we use data processors, we shall secure by means of separate agreements (data processing agreements) that your data is protected as carefully by the processor as it is by us.
VIII. Transmission to other countries
In principle, data is not transmitted to states outside of the EU. Transmission may occur in the following situations, among others:
- To certified recipients, especially on the basis of Binding Corporate Rules (BCRS), EU standard data protection clauses (SCCs) (Art. 45 and 47 GDPR);
- In line with your consent obtained previously for this purpose (point a) of Art. 49(1) S. 1 GDPR);
- Provided that the transmission serves the purpose of initiating or fulfilling the contract (point b) of Art. 49(1) S. 1 GDPR and point c) of Art. 49(1) S. 1 GDPR);
- If this is necessary to assert, exercise or defend legal claims (point e) of Art. 49(1) S.1 GDPR).
Communication with GOLDBECK via email is in general encrypted, provided that your server supports the encryption.
X. Online presence on social media
XI. Social media plugins
On the basis of point f) of Art. 6(1) S.1 GDPR, we use social plugins on our website from the social networks Facebook, Instagram, Twitter, Xing, LinkedIn, YouTube and Kununu to make our company more well known and in order to analyse, optimise and operate our website. The legal purpose underlying this is viewed as a legitimate interest under GDPR.
Responsibility for operating in accordance with data protection law is borne by the respective providers. We incorporate these plugins using the ‘two click method’ to protect visitors to our website as well as possible.
a) Facebook social plugins
Our website uses social media plugins from the social network Facebook.com, which is operated by Facebook Ireland Ltd., 4 Grand Central Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). The plugins may be interaction elements or content (such as videos, graphics or text) and can be recognised by the Facebook logo (white ‘f’ on a blue background, the term “Like” or a “thumbs up” symbol) or are identified by “Facebook social plugin”. You can see the list of Facebook social plugins and what they look like here:
Facebook uses standard contractual clauses approved by the European Commission and relies upon the adequacy decisions for certain countries issued by the European Commission during data transfers from the EEA to the USA and other countries.
If you access a function of this website that includes such a plugin, your device will establish a direct connection to the Facebook servers. Facebook delivers the content of the plugin directly to your browser and embeds the content in the website. User usage profiles can therefore be created from the processed data. We therefore have no control over the volume of data collected by Facebook through this plugin and therefore provide you with information based on our state of knowledge.
Embedding the plugins enables Facebook to receive the information that you have accessed a particular page of the website. When you are logged in to Facebook, Facebook can connect your visit to our website directly with your Facebook account. If you interact with plugins, e.g. by clicking on the “Like” button or by writing a comment, the corresponding information will be transmitted directly to Facebook via your device and saved there. If you are not a registered Facebook user, there is still the possibility that Facebook will learn your IP address and store it. According to Facebook, in Germany only an anonymised IP address is stored.
If you are a Facebook member and do not want Facebook to collect data about you through this website or to connect them to your membership data stored at Facebook, you must log out from Facebook before using our website. You can change additional settings and object to the use of data for advertising purposes in Facebook profile settings:
https://www.facebook.com/settings?tab=ads or via the American site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/.
Settings are platform-independent, i.e. they will apply for all devices, including desktop computers and mobile devices.
We may use functions and content from Instagram, provided by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, on our website. These include, for example, content such as pictures, videos or texts and buttons you can use to express that you like certain content and can subscribe to content creators or our posts. You can also use the button to access GOLDBECK’s profile on Instagram.
Our website may use Twitter functions and content, offered by Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA. These include, for example, content such as pictures, videos or texts and buttons you can use to express that you like certain content and can subscribe to content creators or our posts. You can also use the button to access GOLDBECK’s presence on Twitter.
If you are a member of Twitter, Twitter can allocate your access of the above content and functions to your profile there.
Twitter uses standard contractual clauses approved by the European Commission and relies upon the adequacy decisions for certain countries issued by the European Commission during data transfers from the EEA to the USA and other countries.
Our website also uses XING plugins, offered by New Work SE Dammtorstraße 30, 20354 Hamburg. These include, for example, content such as pictures, videos or texts and buttons you can use to express that you like certain content by sharing content and commenting via XING. You can also use the button to access GOLDBECK’s profile on XING.
Our website also uses plugins from YouTube, offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. These include, for example, content such as pictures, videos or texts and buttons you can use to express that you like certain content by sharing content and commenting via YouTube. You can also use the button to access GOLDBECK’s presence on YouTube.
If you are a member of YouTube, YouTube can allocate your access of the above content and functions to your profile there. You can find
Our website also uses plugins from Kununu, offered by kununu GmbH, Neutrogasse 4-8, Top 3.02, 1010 Vienna, Austria. The data controller is New Work SE, Dammtorstraße 30, 20354 Hamburg. These include, for example, content such as pictures, videos or texts and buttons you can use to express that you like certain content by sharing content and commenting via Kununu. You can also use the button to access GOLDBECK’s presence on Kununu.
Our website also uses plugins from LinkedIn, offered by LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland. These include, for example, content such as pictures, videos or texts and buttons you can use to express that you like certain content by sharing content and commenting via LinkedIn. You can also use the button to access GOLDBECK’s profile on LinkedIn.
XII. Google Analytics
This website uses Google Analytics, a web analysis service provided by Google Inc. (‘Google’). By using Google Analytics, we record statistics about the use of our website and optimise our website.
You can consent to or reject the use of Google Analytics at the start of your session via the data protection settings pop-up window (“cookie opt-in”). Please note that, in this case, you may potentially be unable to fully use all the features of our website, such as displaying Google Maps functions, such as the interactive map or directions to Goldbeck’s site.
Google Analytics uses ‘cookies’ – text files which the web browser saves to your computer and which allow your usage of the website to be analysed. The information generated by the cookies about your use of this website (including the anonymised IP address), such as user language settings, the time spent on the website and subpages visited, is transmitted to a Google server in the United States and stored there. The analysis of your surfing behaviour is generally anonymous; surfing behaviour cannot be traced back to you. Google uses the data to assess your use of the website, in order to compile reports about website activities for the website operators and in order to provide further services related to the website and the internet. Google may also forward this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf (“Google affiliates”).
By using our site, you agree to the processing of data about you by Google in the manner described above and for the aforementioned purpose.
Please note that Google Analytics has been expanded by the code “gat._anonymizeIp();” on this website in order to ensure the anonymous collection of IP addresses.
You can find further information about data use by Google Inc. at:
XIII. ePrivacy directive
XV. Making contact/Data controller
This data protection information applies to data processing by GOLDBECK.
The data controller:
GOLDBECK GmbH, Ummelner Straße 4-6, 33649 Bielefeld, Germany.
You can reach our group data protection officer at:
Data Protection Officer
Ummelner Straße 4–6
33649 Bielefeld, Germany
or at firstname.lastname@example.org