1. Data Controller
The entity responsible for processing personal data on this website is:
GeTeBe Gesellschaft für technische Beratung GmbH & Co. KG
Hochstraße 22b
94538 Fürstenstein
Germany
Phone: +49 (0) 8504 955 15 20
Mobile: +49 (0) 175 151 2264
Fax: +49 (0) 8504 955 15 30
Email:
General Partner:
GeTeBe Verwaltungs GmbH
Registered office: Fürstenstein
Court of Registration: Passau Local Court
Commercial Register Number: HRB 9398
Represented by the Managing Director:
Dipl.-Ing. Siegfried Schneider
2. General Information
We process personal data only to the extent necessary to provide our website, to handle inquiries, to carry out pre-contractual or contractual measures, or to fulfill legal bligations.
Personal data refers to any information relating to an identified or identifiable natural person.
Processing is carried out in particular on the following legal bases:
- Art. 6(1)(a) GDPR where consent has been given,
- Art. 6(1)(b) GDPR for the performance of a contract or pre-contractual measures,
- Art. 6(1)(c) GDPR to comply with legal obligations,
- Art. 6(1)(f) GDPR to protect legitimate interests, provided that the interests or fundamental rights of data subjects do not override those interests.
The GDPR requires data controllers to inform data subjects, in particular, about the purposes, legal bases, recipients, retention periods, and their rights.
3. Hosting by STRATO
This website is hosted by:
STRATO AG
Otto-Ostrowski-Straße 7
10249 Berlin
Germany
When you access the website, the hosting provider processes data that is technically necessary. This may include, in particular:
- IP address of the accessing device,
- date and time of access,
- page or file accessed,
- referrer URL,
- browser type and version,
- operating system,
- HTTP status code,
- amount of data transferred.
This processing is necessary to deliver the website and to ensure its stability and security. The legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest lies in the secure and technically reliable operation of our website.
STRATO states that it stores the IP addresses of website visitors for a maximum of seven days to detect and defend against attacks.
A data processing agreement in accordance with Article 28 of the GDPR must be concluded with STRATO or verified in the STRATO customer portal.
4. Encrypted Transmission
This website uses SSL or TLS encryption. This protects data transmitted between your browser and our server from unauthorized access during transmission.
An encrypted connection can be identified, in particular, by the “https://” at the beginning of the web address.
Despite appropriate technical and organizational security measures, completely
risk-free data transmission over the Internet cannot be guaranteed.
5. Cookies and Local Storage
Our website uses technically necessary cookies or comparable storage technologies to the extent that they are necessary for the operation of the website.
These may include, in particular:
- a Joomla session cookie,
- technically necessary storage of the selected language,
- cookies or session information for logging into the internal area,
- technically necessary security and system settings.
This information is not used for advertising, profiling, or audience measurement purposes.
To the extent that the storage of information on your device or access to it is technically absolutely necessary, this is done on the basis of Section 25(2) of the TDDDG. The associated processing of personal data is based on Article 6(1)(f) of the GDPR or, to the extent that it serves the purpose of registration and contract performance, on Article 6(1)(b) of the GDPR.
For storage access that is not technically necessary, prior consent would generally be required.
Currently, in accordance with the latest technical standards, we do not use any analytics, marketing, or tracking cookies. A consent banner for such services is therefore not required at this time.
6. Contact via Email, Phone, or Fax
If you contact us via email, phone or fax, we process the information you provide in order to handle your inquiry and, if necessary, answer any follow-up questions.
In particular, the following data may be processed:
- Name,
- Company,
- Contact information,
- Content and time of the inquiry,
- Information provided voluntarily.
If your inquiry relates to a contract or pre-contractual measures, processing is based on Article 6(1)(b) of the GDPR.
For general business inquiries, processing is based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in handling incoming inquiries and ensuring proper business communication.
The data will be deleted once the inquiry has been fully processed and provided that no legal retention obligations, contractual reasons, or legitimate interests preclude deletion.
7. Contact Form
When you use our contact form, we process the information you enter to handle your inquiry.
Depending on the form’s design, the following data in particular may be collected:
- Name,
- Email address,
- Company,
- Phone number, if provided voluntarily,
- Subject or selected topic,
- Message,
- Time of submission,
- Technically necessary connection data.
Required fields are marked accordingly on the form. We collect only the information necessary to process the respective inquiry.
For contract-related or pre-contractual inquiries, the legal basis is Article 6(1)(b) of the GDPR. For other business inquiries, processing is based on Article 6(1)(f) of the GDPR.
The transmitted data will be deleted as soon as the inquiry has been fully processed and there are no statutory retention obligations or other legal grounds for further storage.
The data will not be used for advertising purposes without a legal basis and will not be disclosed to third parties unless necessary.
8. Restricted Area and User Login
A protected restricted area may be provided on our website. When logging in, the following data in particular is processed:
- Username,
- Time of login,
- technically necessary session data,
- IP address or connection data,
- failed and successful login attempts,
- the permissions assigned to the user account.
The password is used for authentication. Passwords must not be stored in plain text but must be protected by a suitable cryptographic method.
The processing is carried out to provide and secure the internal area. The legal basis is Article 6(1)(b) of the GDPR, insofar as access is related to a contractual relationship. Additionally, the processing is based on Article 6(1)(f) of the GDPR. Our legitimate interest lies in secure access control and the protection of non-public content.
Login credentials and log information are stored only for as long as necessary for the administration of the user account, system security, or compliance with legal obligations.
User accounts are deactivated or deleted when access authorization expires and there are no legal grounds for further storage.
9. Job Applications via Email
You may apply for a position with us via email. In this case, we process the application data you submit to conduct the application process.
This may include, in particular:
- Name and contact information,
- cover letter,
- resume,
- certificates and proof of qualifications,
- details regarding professional experience,
- and any other information provided voluntarily.
The legal basis is generally Section 26(1) of the German Federal Data Protection Act (BDSG) in conjunction with Article 6(1)(b) of the General Data Protection Regulation (GDPR). The processing serves the purpose of deciding whether to establish an employment relationship.
To the extent that application documents contain special categories of personal data, such data will be processed only to the extent permitted by law.
If no employment relationship is established, the application data will be deleted upon completion of the application process as soon as it is no longer required to defend against potential legal claims. A specific retention period should be established internally for this purpose. It is customary to retain the data for a limited period after the process is completed; GeTeBe must establish the specific period in a binding manner.
Longer retention in an applicant pool is permitted only on the basis of separate consent.
10. Links to Social Networks
Our website may contain links to our profiles on social networks, such as LinkedIn or other platforms.
As things stand, these are standard links. Simply visiting our website does not establish a connection to the respective network via these links.
You will not leave our website until you click on such a link. The respective platform operator may then process personal data. The respective platform operator is generally responsible for this processing.
The privacy policy of the respective provider will then apply.
Should social media plugins, embedded posts, or external scripts be used in the future, this privacy policy must be updated before they are activated.
11. Multilingual Website
Our website is available in German and English.
To provide the selected language version, Joomla may process session or language settings that are technically necessary. This processing serves solely to provide the appropriate language version.
The legal basis is Section 25(2) of the TDDDG and Article 6(1)(f) of the GDPR.
12. External Services
To the best of our knowledge, we currently do not use the following in particular:
- Google Analytics,
- Google Maps,
- YouTube embeds,
- Facebook or LinkedIn plugins,
- Google reCAPTCHA,
- external advertising or tracking services,
- fonts loaded externally from Google servers.
These services are therefore not subject to current data processing.
If, for example, Google Maps, a statistics service, a CAPTCHA, or embedded videos are used in the future, the following must be verified before activation:
- what data is transmitted,
- what legal basis applies,
- whether consent is required,
- whether data is transferred to a third country,
- what additions to the privacy policy are necessary.
13. Recipients and Processors
Personal data is transferred to recipients only to the extent necessary for the respective purpose or required by law.
Recipients may include, in particular:
- STRATO AG as a hosting provider,
- internal employees involved in processing a request,
- technical service providers, to the extent that they act in accordance with our instructions,
- government agencies or other authorities when required by law,
- legal, tax, or other advisors, to the extent necessary.
Service providers who process personal data on our behalf are bound by the applicable legal requirements.
14. Transfers to Third Countries
Based on the website’s current structure, we do not routinely transfer website visitor data to recipients outside the European Union or the European Economic Area.
Clicking on external social media links may result in processing by the respective platform operator. The nature and location of this processing are governed by the privacy policies of the respective provider.
15. Retention Period
We store personal data only for as long as is necessary for the respective purpose.
Data may be stored for a longer period if:
- statutory retention obligations apply,
- the data is required to fulfill a contract,
- legal claims must be asserted, exercised, or defended,
- valid consent has been given,
- security interests justify temporary retention.
Once the purpose no longer applies and relevant retention periods have expired, the data will be deleted or, to the extent possible and necessary, anonymized.
16. Your Rights
Subject to the statutory requirements, you have the following rights in particular:
- Right of access under Article 15 of the GDPR,
- Right to rectification under Article 16 of the GDPR,
- Right to erasure under Article 17 of the GDPR,
- Right to restriction of processing under Article 18 of the GDPR,
- Right to data portability under Article 20 of the GDPR,
- Right to object under Article 21 of the GDPR,
- Right to withdraw consent with future effect,
- Right to lodge a complaint with a data protection supervisory authority.
The withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.
Requests to exercise your rights may be directed to
17. Right to Object
To the extent that we process personal data on the basis of Article 6(1)(f) of the GDPR, you have the right to object to the processing for reasons arising from your particular situation.
We will then no longer process the data in question unless we can demonstrate compelling legitimate grounds for the processing or the processing is necessary for the establishment, exercise, or defense of legal claims.
18. Right to File a Complaint
You have the right to file a complaint with a data protection supervisory authority.
For non-public companies headquartered in Bavaria, the competent authority is generally:
Bayerisches Landesamt für Datenschutzaufsicht
Promenade 18
91522 Ansbach
Germany
Phone: +49 (0) 981 180093-0
Fax: +49 (0) 981 180093-800
The Bavarian State Office for Data Protection Supervision also provides an online form for filing complaints.
19. Automated Decision-Making
No purely automated decision-making, including profiling as defined in Article 22 of the GDPR, takes place in connection with this website.
20. Changes to This Privacy Policy
We update this privacy policy when the website, the services used, or legal requirements change.
The most current version is available on this website.
As of: July 2026