Privacy
statement.

How GlobalCom PR Network GmbH collects, uses and protects personal data on this website — written to comply with the EU General Data Protection Regulation (GDPR).

01 — Controller

Name and address of the controller.

The controller within the meaning of the General Data Protection Regulation, other data protection laws applicable in the Member States of the European Union and other provisions with a data protection character is:

Company
GlobalCom PR Network GmbH
Address
Münchener Str. 14
85748 Garching, Munich
Germany
Telephone
Website
Represented by
Ralf Hartmann, Managing Director
02 — Our approach

How we handle personal data.

We are pleased that you are interested in our company. Data protection has high priority for the management of GlobalCom PR Network GmbH. In principle, the use of our website is possible without providing any personal data. However, if a data subject wishes to use specific services we offer through this website, processing of personal data may become necessary. If such processing has no statutory basis, we will generally request the data subject’s consent.

The processing of personal data — for example, name, address, email address or telephone number — is always carried out in line with the General Data Protection Regulation (GDPR) and in accordance with the country-specific data protection rules that apply to GlobalCom PR Network GmbH. With this privacy statement, we wish to inform the public about the nature, scope and purpose of the personal data we collect, use and process, and to inform data subjects of the rights to which they are entitled.

As the controller, GlobalCom PR Network GmbH has implemented numerous technical and organisational measures to ensure the most complete protection possible of personal data processed via this website. Internet-based data transmissions can, however, have security gaps in principle, so absolute protection cannot be guaranteed. For this reason, every data subject is free to transmit personal data to us by alternative means, for example by telephone.

03 — Definitions

Definitions.

This privacy statement uses the terminology of the European legislator in the GDPR. To make our notice easy to read and understand, we explain the key terms in advance.

Personal data
Any information relating to an identified or identifiable natural person (the “data subject”). A natural person is regarded as identifiable if they can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or one or more specific factors.
Data subject
Any identified or identifiable natural person whose personal data is processed by the controller.
Processing
Any operation or set of operations performed on personal data, whether or not by automated means — collection, recording, organisation, structuring, storage, adaptation, retrieval, consultation, use, disclosure, alignment, restriction, erasure or destruction.
Restriction of processing
The marking of stored personal data with the aim of limiting its processing in the future.
Profiling
Any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person — in particular to analyse or predict aspects concerning performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.
Pseudonymisation
The processing of personal data in such a manner that the data can no longer be attributed to a specific data subject without additional information, provided that such additional information is kept separately and is subject to technical and organisational measures.
Controller
The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
Processor
A natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
Recipient
A natural or legal person, public authority, agency or another body, to which personal data is disclosed, whether a third party or not.
Third party
A natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.
Consent
Any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which they signify, by a statement or by a clear affirmative action, agreement to the processing of personal data relating to them.
04 — Server logs

General data and information collected.

Each time the website is accessed by a data subject or by an automated system, our website collects a series of general data and information. This data is stored in the server’s log files. Collected may be:

  • the browser types and versions used,
  • the operating system used by the accessing system,
  • the website from which an accessing system reaches our website (so-called referrer),
  • the sub-pages accessed via an accessing system on our website,
  • the date and time of access to the website,
  • an Internet Protocol (IP) address,
  • the Internet service provider of the accessing system, and
  • other similar data and information used to defend against attacks on our information technology systems.

When using these general data and information, GlobalCom PR Network GmbH does not draw any conclusions about the data subject. Rather, this information is needed to (1) deliver the content of our website correctly, (2) optimise the content of our website and the advertising for it, (3) ensure the long-term viability of our information technology systems and website technology, and (4) provide law enforcement authorities with the information necessary for prosecution in case of a cyber-attack.

This anonymously collected data and information is therefore evaluated statistically with the aim of increasing data protection and data security in our company, and ultimately ensuring an optimum level of protection for the personal data we process. The anonymous data of the server log files is stored separately from any personal data provided by a data subject.

05 — Retention

Routine deletion and blocking.

The controller processes and stores the personal data of the data subject only for the period required to achieve the purpose of storage, or as far as this is granted by the European legislator or other legislators in laws or regulations to which the controller is subject.

If the storage purpose ceases to apply, or if a storage period prescribed by the European legislator or another competent legislator expires, the personal data is routinely blocked or erased in accordance with statutory provisions.

06 — Your rights

Your rights as a data subject.

To exercise any of the rights below, please contact us at info@gcpr.net. We will respond without undue delay.

a)

Right to confirmation

You have the right to obtain confirmation from the controller as to whether or not personal data concerning you is being processed.

b)

Right of access

You have the right to obtain free information about your personal data stored at any time and a copy of this information — including the purposes of processing, the categories of personal data concerned, the recipients to whom it has been or will be disclosed, the envisaged storage period, the existence of the rights to rectification, erasure, restriction or objection, the right to lodge a complaint with a supervisory authority, the source of the data where it was not collected from you, and the existence of any automated decision-making (including profiling).

c)

Right to rectification

You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you also have the right to have incomplete personal data completed.

d)

Right to erasure (right to be forgotten)

You have the right to obtain the erasure of personal data concerning you without undue delay where one of the grounds set out in Art. 17 GDPR applies — for example, where the data is no longer necessary for the purposes for which it was collected, where you withdraw consent, where you object and there are no overriding legitimate grounds, or where the data has been unlawfully processed.

e)

Right to restriction of processing

You have the right to obtain restriction of processing where one of the conditions in Art. 18 GDPR applies — for example, while the accuracy of the data is being verified, where processing is unlawful but you oppose erasure, or where you have objected to processing pending verification of legitimate grounds.

f)

Right to data portability

You have the right to receive the personal data concerning you, which you have provided to a controller, in a structured, commonly used and machine-readable format. You also have the right to transmit that data to another controller without hindrance, where the processing is based on consent or on a contract and is carried out by automated means.

g)

Right to object

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6 (1) (e) or (f) GDPR. This includes profiling based on those provisions. Where personal data is processed for direct marketing purposes, you have the right to object at any time; where you object, the personal data will no longer be processed for those purposes.

h)

Automated individual decision-making

You have the right not to be subject to a decision based solely on automated processing — including profiling — which produces legal effects concerning you or similarly significantly affects you, save for the exceptions provided for in Art. 22 GDPR.

i)

Right to withdraw consent

Where processing is based on consent, you have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

07 — Third parties

Third-party components and services.

Where this website integrates components or services from third parties, the operators listed below may collect and process data when those components are loaded. You can prevent most of these transmissions by logging out of the relevant service before visiting our website, or by configuring your browser accordingly.

FacebookMeta Platforms Ireland Ltd.

If pages of this website embed Facebook components (e.g. plug-ins, the “Like” button), your browser is prompted by the Facebook component to download a representation of that component from Facebook. As part of this, Facebook learns which specific sub-page of our website you have visited.

If you are simultaneously logged in to Facebook, Facebook recognises with each visit and for the entire duration of your stay on our website which specific sub-page you visit. This information is collected through the Facebook component and assigned to your Facebook account. If you activate any Facebook button on our website, this information is assigned to your Facebook user account and stored. To prevent this transfer, log out of Facebook before visiting our website.

The data policy published by Facebook is available at facebook.com/policy.php.

InstagramInstagram LLC

Where pages of this website embed Instagram components, your browser is prompted to download a representation of the Instagram component, and Instagram is informed which sub-page you have visited. If you are simultaneously logged in to Instagram, Instagram assigns this information to your Instagram account. To prevent this, log out of Instagram before visiting our website.

Further information and Instagram’s privacy policy: help.instagram.com.

LinkedInLinkedIn Ireland Unlimited Co.

Where pages of this website embed LinkedIn components, your browser downloads a representation of the LinkedIn component. As part of this, LinkedIn learns which sub-page of our website you have visited. If you are simultaneously logged in to LinkedIn, LinkedIn assigns this information to your LinkedIn account.

LinkedIn’s privacy policy is available at linkedin.com/legal/privacy-policy; cookie policy at linkedin.com/legal/cookie-policy.

X (formerly Twitter)X Corp.

Where pages of this website embed components from X (formerly Twitter), your browser downloads a representation of those components. As part of this technical process, X is informed of the specific sub-page you have visited and may assign this information to your X account if you are simultaneously logged in.

X’s privacy policy is available at x.com/privacy.

YouTubeGoogle Ireland Ltd.

Where pages of this website embed YouTube videos, your browser downloads a representation of the YouTube component. YouTube and Google are informed which specific sub-page of our website you have visited. If you are simultaneously logged in to YouTube, YouTube can assign the visit to your YouTube account.

YouTube’s privacy policy is available at policies.google.com/privacy.

Google AnalyticsGoogle Ireland Ltd. — with IP anonymisation

This website may use Google Analytics, a web analysis service, with the IP-anonymisation extension activated. With this extension, Google shortens and anonymises your IP address within Member States of the European Union or in other states party to the Agreement on the European Economic Area before transmission to the United States.

Google Analytics evaluates the use of our website, compiles online reports for us showing the activities on our website, and provides other services related to the use of our website. To do this, Google Analytics may set a cookie on your device. You can prevent the storage of cookies through your browser settings, and you can prevent the collection of data generated by Google Analytics by installing the browser add-on at tools.google.com/dlpage/gaoptout.

Further information and Google’s privacy policy: policies.google.com/privacy.

Getty ImagesGetty Images International

This website may use components from Getty Images to display embedded stock imagery. The technical implementation of the embed code transmits the IP address of your Internet connection to Getty Images, along with information such as the website you are on, the type and language of your browser, and the time and length of access. Getty Images may also collect navigation information about the sub-pages you visit and the links you click.

Getty Images’ privacy policy is available at gettyimages.com/company/privacy-policy.

09 — Duration

Duration of storage.

The criterion for the duration of the storage of personal data is the respective statutory retention period. After expiry of that period, the data is routinely erased, provided it is no longer required for the performance or initiation of a contract.

10 — Provision

Provision of personal data.

We clarify that the provision of personal data is in part required by law (for example, by tax regulations) or may also result from contractual arrangements (for example, information about the contract partner). Sometimes it may be necessary, for the conclusion of a contract, that a data subject provides us with personal data, which we must subsequently process.

Failure to provide personal data may have the consequence that a contract with the data subject cannot be concluded. Before personal data is provided, the data subject can contact any of our employees, who will clarify on a case-by-case basis whether the provision of the data is required by law or by contract or is necessary for the conclusion of a contract, whether there is an obligation to provide the data and what the consequences would be of not providing it.

11 — Automation

Automated decision-making.

As a responsible company, we do not use automated decision-making or profiling.