General Data Protection Regulation
1. General Remarks
1.1 Personal Data
Subject of general data protection regulation (hereinafter referred to as "GDPR”) is personal data. Personal data means any information relating to an identified or identifiable natural person (‘data subject’); by reference to an identifier such as name, address, occupation, email address, health condition, financial income, family status, genetic identity, telephone number, and possibly user data, such as the IP address.
1.2 Responsible Person
The person responsible for personal data processing, regarding the usage of the website www.gng-internationalmovers.com is
G&G International Movers GmbH
+49 6371 61830
2. Purpose, Legal Basis, Provision and Duration of Storage
2.1 Access and Usage of the Website
With each access to the website or its subpages, usage data will be transferred to and saved in server log files. These records contain data such as: date and time of the access, name of the accessed subpage, IP address, referrer-URL, transferred amount of data, and product information of the used browser. Lawfulness of processing results in our legitimate interests as laid down in art. 6 (1) s. 1 lit. f GDPR. The mentioned data is needed for you to enable access and usage of the website. These are inevitably needed when using telemedia. The log files are anonymously evaluated by G&G, in order to improve the website, to create a more user-friendly design, to locate errors, to remedy defects, and to control server capacity. Thus, G&G is, for instance, able to understand, at what times the website’s usage is favored; therefore, G&G could provide an increased amount of data volume. Lawfulness of processing results in our legitimate interests as laid down in art. 6 (1) s. 1 lit. f GDPR.
Evaluation of log files serves optimization processes and ensures secured processing.
IP addresses are erased or anonymized after usage. Anonymization leads to modification; thus, IP addresses cannot be, only with an increased amount of time and financial effort, assigned to an identified or identifiable natural person.
This website uses SSL/ TLS encryption for security reasons and to secure the transmission of confidential or sensitive data (for instance, orders or requests). An encrypted connection is recognizable by its character sequence “https://“ and by the padlock icon displayed in a web browser.
2.3 Contact Form
G&G provides a contact form, which allows users to communicate with the site owner. The page has fields for filling in name, email address, and type of comment. The legitimacy of processing your data is based on art. 6 (1) s. 1 lit. b GDPR (in order to take steps at the request of the data subject prior to entering into a contract). Provision of data is necessary in order to take steps, such as replying to a user’s request.
Data will be deleted, either after a request has been completed successfully, or if a contract with G&G has not been fulfilled. If a contractual relationship will be established, data retention policies comply with legal requirements of HGB (German trading law) and its tax laws.
2.4 Usage of Cookies
In order to tailor your online experience and to enable the usage of specific functions, we are using so-called cookies on some of our pages. Cookies are tiny files stored on your computer or device. Some of these used cookies are erased, once the browser session has been finished (session cookie). Other used cookies are stored on your computer or device to help us, or our partner companies (third-party cookies), remember your browser (persistent cookies). These cookies help to collect and process browser data, location data, IP address values to an individual amount. Persistent cookies have an expiration date issued to it by the webserver; depending on the type of cookie, expiration dates may differ.
If these cookies process personal data, processing takes place according to art. 6 (1) s. 1 lit. f GDPR for the purposes of the legitimate interests pursued by the optimal functionality of the website and by a customer-friendly and effective elaboration of the website’s visit.
Possibly, we work with third-party suppliers, who help tailor your online experience on our website. For this purpose, cookies of partner companies will be stored on your hard drive (third-party cookies), but only if you have given your consent through selecting the respective checkbox in our cookie banner (as laid down in art. 6 (1) s. 1 lit. a GDPR).
Hereinafter, you will be informed about the use of such cookies and about the amount of collected data.
Please note that you can manage your browser settings, individually. Each browser differs in the way it manages its cookie settings. These differences are described in the browser’s settings menu, which illustrates how to change your cookie settings; on that account, see following links:
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Please also note that our website’s functionality can be restricted if you block cookies. You can adjust your individual cookie settings here.
2.5 Usage of Plugins and Tools
2.5.1 Google Web Fonts
This website uses so-called web fonts in order to provide a consistent depiction. These web fonts are provided by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google“). When accessing the website, our browser uploads the needed web fonts into your browser cache, for a correct display of texts and fonts.
Google Web Fonts is installed locally. A connection to Google’s server hosts as well as processing of data into the USA or into a third country does not take place.
Usage of Google Web Fonts takes place for the purposes of a consistent and attractive depiction of our online offering. This represents a legitimate interest (as laid down in art. 6 (1) s. 1 lit. f GDPR). If your browser does not support Web Fonts, your computer will use a standardized font. More information about Google Web Fonts can be found on the website https://developers.google.com/fonts/faq
2.5.2 Google Maps
We use Google Maps (API) from Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”) on our website. Google Maps is a web-based service that displays interactive maps to show visual geographic information. It provides detailed information about geographical regions and sites around the world.
By using this service, users can see our current location and travels to it are made easier. Providing that you have given your consent, according to art. 6 (1) s. 1 lit. a GDPR, information about the usage of our website will be transferred to Google’s server in the USA as soon as you have accessed the subpages, to which the map of Google Maps is attached. This information will be saved and stored there. Notwithstanding the above, this occurs whether Google has provided a user account in which you may or may not be logged into. If you are logged into Google, your data will be linked to your account. If you decide against this, you need to log out before activating your account. Google stores your data (even if you are not logged in) as user profiles and evaluates those. Data transmission into the USA takes place based on standard data protection clauses according to art. 46 (2) lit. d GDPR.
3. Social Media
G&G is represented with a business profile on the social media platforms Facebook and Instagram. With this, additional possibilities to receive information about the company are offered.
By visiting a profile on a social media platform, processing of personal data may occur. Information linked to a social media profile is categorized as personal data, too. This also applies to messages/ comments made while using the profile and it applies to automatically processed information while visiting a social media profile.
3.1 Accessing a Social Media Website
When visiting G&G’s Facebook or Instagram page, processing of your data takes place. Solely responsible for processing personal data is Facebook Ireland Ltd (Ireland/EU – “Facebook”). Further information about the processing of personal data by Facebook can be found under the following link: https://www.facebook.com/privacy/explanation.
Facebook provides the option to opt out from processing certain data; hereof, references can be found under the link: https://www.facebook.com/settings?tab=ads.
Facebook provides anonymized statistics for G&G’s Facebook and Instagram page; these web insights help G&G to identify their website’s visitors and to track what they are looking at. These web insights are created based on certain information about people, who have visited the website. Processing of personal data is done on behalf of Facebook and G&G as cooperative controller.
Processing results in the legitimate interest to evaluate made actions (on the website) and to improve the website based on these insights. Legal basis regarding the processing is art. 6 (1) s. 1 lit. f GDPR.
G&G cannot assign obtained information (through web insights) to individual Facebook profiles. There is an agreement with Facebook regarding the processing, in which G&G and Facebook act as cooperative controller. In this agreement, duties, regarding data protection law between G&G and Facebook are assigned.
Further information about the processing of personal data regarding the creation of web insights and about G&G and Facebook’s agreement, are available at:
Regarding the processing of data, you have the option to assert data subject rights toward Facebook (see “Your Rights”). Further information can be found in Facebook’s GDPR:
Please be aware that user data may be processed (in accordance with Facebook’s GDPR) in the USA or other third countries. Transfers are only possible based on an adequacy decision of the European Commission (according to art. 45 GDPR) or on the basis of standard data protection clauses (according to art. 46 (2) lit. d GDPR).
3.2 Processing of Data, which You Provide on Social Media Websites
G&G processes information, which you have provided on social media platforms. This information could be your used username, contact information, or messages. The personal data can only be used by G&G for the purpose of which you had provided such information. The processing is done on behalf of G&G as solely controller, in line with the legitimate interests to get in contact with inquiring people (in accordance with art. 6 (1) s. 1 lit. f GDPR), or in order to take steps at the request of the data subject prior to entering into a contract (see art. 6 (1) s. 1 lit. b GDPR).
Furthermore, such provided data might be used for analysis or marketing purposes. Legal basis regarding the processing is art. 6 (1) s. 1 lit. f GDPR. Processing is used to improve G&G’s products and to give targeted information on our current products.
4. Job Applications Regarding Job Applications via Email
Vacant job postings are available on our social media websites. To these, anyone interested can apply via email to the contact address provided. As a pre-requisite for our application procedure, applicants have to provide all necessary personal data for a profound assessment. Required information is general information regarding the applicant (name, address, phone number or email address) as well as educational transcripts and certifications. Where required, health related data needs to be provided; when, in terms of social protection, labor law-related and social law-related topics need to be considered.
The exact constituents of an application for admissibility in each individual case are provided in the respective job posting.
Data provided by the applicant, such as email address (used for sending in the application) will only be saved and stored for the purpose of processing your application data.
Over the course of processing applications, we either use the applicant’s provided email address or the provided telephone number for arising questions. Legal basis for processing, including contacting the applicant for upcoming questions or requests is art. 6 (1) s. 1 lit. b GDPR in line with § 26 (1) BDSG (German Federal Data Protection Act), in which undergoing an application procedure aims at concluding an employment contract. If, during an application procedure, processing of special categories of personal data (such as health data) is needed (art. 9 (1) GDPR), processing takes place in accordance with art. 9 (2) lit. b GDPR. Processing is necessary for the purposes of carrying out our or the applicant’s obligations and exercising specific rights in the field of employment and social security and social protection law (art. 9 (2) lit. b GDPR).
Cumulatively or alternatively, processing of special categories of personal data can be based on art. 9 (2) lit. h GDPR ensued for the purposes of preventive or occupational medicine, for the assessment of the working capacity of the employee, medical diagnosis, the provision of health or social care or treatment or the management of health or social care systems and services on the basis of Union or Member State law or pursuant to contract with a health professional and subject to the conditions and safeguards.
In case the applicant will not be recruited or withdraws the application, provided data including electric correspondence and the provided application email will be erased within three months.
The dated period is in line with our legitimate interest to be able to answer any follow-up-questions and to be able to show proof of equality of treatment within our applicants.
In case the applicant will be recruited, provided data will be processed for the purpose of implementing the employment relationship (art. 6 (1) s. 1 lit. b GDPR in line with § 26 (1) BDSG (Federal Data Protection Act)).
5. Data Subject Rights
The current GDPR grants data subject rights over the controller, regarding the processing of your personal data (access right and right of intervention), which we will inform you about hereinafter.
- Rights of access by the data subject (art. 15 GDPR): You have the right to obtain information from us as to whether or not personal data concerning yourself is being processed, and, if this is the case, access to personal data and the following information, such as the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipient to whom the personal data have been or will be disclosed, where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period, the existence of the right to request from us rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing, the right to lodge a complaint with a supervisory authority, where the personal data are not collected from the data subject, any available information as to their source, the existence of automated decision-making, including profiling, and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject. Where personal data is transferred to a third country or to an international organization, the data subject shall have the right to be informed of the appropriate safeguards pursuant to article 44ff. GDPR relating to the transfer.
- Right to rectification (art. 16 GDPR): You have the right to obtain rectification of inaccurate personal data from us. You have the right to have incomplete personal data completed.
- Right to erasure (art. 17 GDPR): You have the right to obtain the erasure of personal data from us, if the requirements of art. 17 (1) GDPR apply. This does not apply to the extent that processing is necessary for exercising the right of freedom of expression and information; for compliance with a legal obligation; for reasons of public interest; for the establishment, exercise, or defense of legal claims.
- Right to restriction of processing (art. 18 GDPR): You have the right to obtain restriction of processing from us, as long as the accuracy of the personal data is contested; the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead; we no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defense of legal claims; or you have objected to processing pursuant to art. 21 (1) pending the verification whether the legitimate grounds of us override those of yourself.
- Notification Obligation (art. 19 GDPR): We must communicate any rectification or erasure of personal data or restriction of processing carried out in accordance with art. 16, art. 17 (1), and art. 18 to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. We are obliged to inform you about those recipients if you request this.
- Right to data portability (art. 20 GDPR): You have the right to receive the personal data concerning yourself, which you have provided to us, in a structured, commonly used and machine-readable format and you have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided.
- Right to withdraw a consent (art. 7 (3) GDPR): You have the right to withdraw your consent at any time. If you wish to withdraw your consent, we will erasure your data immediately, provided that further processing is not based on a legal basis regarding processing without consent.
- Right to lodge a complaint (art. 77 GDPR): If you consider that the processing of personal data relating to yourself infringes this regulation, you have the right – without prejudice to any other administrative of judicial remedy – to lodge a complaint with a supervisory authority, in particular the member state of your habitual residence, place of work or place of alleged infringement. G&G’s supervisory authority is: Der Landesbeauftragte für Datenschutz und die Informationsfreiheit Rheinland Pfalz, Postfach 30 40, 55116 Mainz, Germany, https://www.datenschutz.rlp.de/ .
- Right to object (art. 21 GDPR): You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning yourself which is based on point e or f of Article 6 (1), including profiling based on those provisions. The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights, and freedoms of you or for the establishment, exercise, or defense of legal claims. Where personal data are processed for direct marketing purposes, you shall have the right to object at any time to processing of personal data concerning yourself for such marketing, which includes profiling to the extent that it is related to such direct marketing. Where you object to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes.
Exercising the mentioned data subject rights is possible by sending an informal declaration to G&G. You may use the following contact options. Furthermore, art. 12 GDPR applies.
G & G International Movers GmbH
Data that has been collected when accessing and using the website, as well as provided data when contacting the controller, will be transmitted to G&G. Furthermore, your data might be shared with the following recipients: internal staff (administration, management, marketing) and constituent.
7. Third-party Links
When visiting the website, there might be content that is linked to third-party websites. G&G does not have access to cookies or other functions, which are used by third parties, nor can G&G control them.
8. Currentness and Adjustment of this GDPR
We reserve the right to change the content of this GDPR at any time; if, for instance, our services have developed or need to be adjusted. Our current GDPR can be viewed on our website. The current GDPR dates from 08-18-2021.