Privacy Policy

Last updated: July 2026

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:
GEBHARDT Automation GmbH
Thüngenfeld 3, 58256 Ennepetal, Deutschland
Represented by the Managing Director: Ulrich Gebhardt
Phone: +49 (0) 2333 7908-0
E-mail: info@gebhardt-automation.de

2. General information and legal bases

We process personal data only within the framework of the statutory provisions. Depending on the processing, the legal bases are Art. 6 (1) (a) GDPR (consent), (b) (contract or pre-contractual measures), (c) (legal obligation) or (f) (legitimate interest). Personal data is any information relating to an identified or identifiable natural person.

3. Hosting and server log files

Our website is operated by a specialised service provider (hosting provider). When the site is accessed, the web server automatically collects information and stores it in so-called server log files: IP address, date and time of access, page/file accessed, volume of data transferred, browser and operating system used, and the previously visited page (referrer). This data is used for the technical provision, stability and security of the website. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in secure and trouble-free operation). A data processing agreement pursuant to Art. 28 GDPR is in place with the hosting provider.

4. SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the fact that the browser's address bar starts with “https://”. When encryption is active, the data you transmit to us cannot be read by third parties.

5. Cookies

Our website works without advertising or analytics cookies. Where cookies are used at all, they are technically necessary to operate the site; their storage is based on § 25 (2) TDDDG and does not require consent.

6. Contact form and e-mail

If you contact us via the contact form or by e-mail, we process the data you provide (name, e-mail address, message) in order to handle your request. The legal basis is Art. 6 (1) (b) GDPR if your request relates to a contract, otherwise Art. 6 (1) (f) GDPR (legitimate interest in answering enquiries). The contact form is protected against automated spam by a hidden field (“honeypot”); no additional personal data is collected in this process. The data is deleted once it is no longer required and no statutory retention obligations apply.

7. Embedded map (OpenStreetMap)

On our contact page we embed a map from the OpenStreetMap service, provided by the OpenStreetMap Foundation (St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom). When the map is loaded, your IP address is transmitted to the OpenStreetMap Foundation. For the United Kingdom, where the OpenStreetMap Foundation is based, the European Commission determined by decision of 19 December 2025 that an adequate level of data protection is ensured (adequacy decision under Art. 45 GDPR, valid until 27 December 2031); the transfer therefore takes place on a secure legal footing. The legal basis for embedding the map is Art. 6 (1) (f) GDPR (legitimate interest in an appealing presentation of our location). Further information can be found in the OpenStreetMap Foundation's privacy policy.

8. Storage period

We store personal data only for as long as is necessary for the respective purposes or as required by statutory retention periods (e.g. commercial and tax-law periods). Server log files are generally deleted or anonymised automatically after a short time.

9. No automated decision-making

Automated decision-making, including profiling within the meaning of Art. 22 GDPR, does not take place.

10. Your rights

Under the GDPR you have, in particular, the following rights:

  • Access to your processed data (Art. 15 GDPR)
  • Rectification of inaccurate data (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Withdrawal of a given consent with effect for the future (Art. 7 (3) GDPR)

11. Right to object (Art. 21 GDPR)

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is carried out on the basis of Art. 6 (1) (f) GDPR. We will then no longer process the data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

12. Right to lodge a complaint with a supervisory authority

Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.

13. Currentness and changes to this privacy policy

This privacy policy has the status indicated above. We reserve the right to adapt it so that it always complies with current legal requirements or to implement changes to our services. The new version then applies to your next visit.