Controller
G&L Geißendörfer & Leschinsky GmbH
CEO Alexander Leschinsky
Maarweg 149-161
50825 Cologne
Germany
Phone: + 49 (0) 221 99809 - 0
Fax: + 49 (0) 221 99809 - 109
Email: contact@gl-systemhaus.de
Data Protection Officer
Hans Peter Fries
datenschutz@gl-systemhaus.de
1. Purpose and Legal Basis of Data Processing
We process your personal data exclusively for the purpose of carrying out pre-contractual measures, fulfilling contracts, or responding to your inquiries (e.g., via email, contact form, or telephone). The data processing is based on Article 6(1)(b) GDPR (contract) or Article 6(1)(f) GDPR (legitimate interest in communicating with prospects and customers).
2. Categories of Personal Data
Depending on the context, we process, for example:
3. Data Recipients
Your data will only be shared with third parties if this is necessary for contract fulfillment (e.g., payment service providers, shipping providers, IT service providers), we have a legitimate interest in using subcontractors (e.g., IT service providers), or if you have expressly given your consent.
3.1. Use of Artificial Intelligence (AI) and Processing by Third-Party Providers
To support our internal processes, improve efficiency in text creation, code editing, speech recognition, as well as analysis and communication, we use selected services based on artificial intelligence. Processing is carried out exclusively in compliance with the data protection requirements of the EU General Data Protection Regulation (GDPR), the transparency requirements of the EU Artificial Intelligence Act (EU AI Act), and relevant security standards under the Cyber Resilience Act (CRA).
Service providers based in third countries may be involved; appropriate safeguards in accordance with Article 46 GDPR are ensured.
Personal data is processed only to the extent necessary and preferably in a pseudonymized form. Automated decision-making as defined by Article 22 GDPR does not take place. These services are regularly reviewed for data protection standards, security, and compliance with EU legal requirements.
Processing is based on legitimate interests (Article 6(1)(f) GDPR) or your consent (Article 6(1)(a) GDPR), where required.
4. Storage Duration
Your data is stored only for as long as necessary for the purposes mentioned above or as long as statutory retention periods apply.
5. Your Rights
You have the right at any time to:
You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The competent authority for us is:
State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia
P.O. Box 20 04 44
40102 Düsseldorf
Phone: +49 (0)211 / 38424 - 0
You have the right to object to processing (Art. 21 GDPR) for specific purposes, particularly for direct marketing. Where we process your data on the basis of legitimate interests (pursuant to Art. 6(1)(f) GDPR), you have the right to object to such processing at any time on grounds relating to your particular situation. Such grounds exist in particular if your interests carry significant weight and therefore outweigh our interests, for example, if those reasons are unknown to us and could not be considered during the balancing of interests.
You may send your objection to the following email address: datenschutz@gl-systemhaus.de.
You also have the right to withdraw your consent (Art. 7(3) GDPR) to the processing of your data. You can revoke consent at any time—either for all or only specific processing activities based on consent—without stating reasons, with effect for the future. The lawfulness of processing up to the point of revocation remains unaffected.
6. Obligation to Provide Data
The provision of your data is necessary for the initiation or execution of a contract. Without this information, a contract cannot be concluded or your inquiry cannot be processed.
7. Automated Decision-Making
No automated decision-making or profiling takes place.