We attach great importance to the protection of your data when you visit our website. In the following, we inform you which data is collected during your visit and how it is used. Furthermore, you will receive information about your rights with regard to the use of your data.

For security reasons, our website uses SSL/TLS encryption. You can recognise this by the small lock icon at the top left of your browser’s address bar. This encryption prevents third parties from intercepting data that you transmit to us. Our security measures are also continuously improved in line with technological developments.

1. Controller in the sense of data protection law

The controller pursuant to Art. 4 (7) of the EU General Data Protection Regulation (GDPR) is:

GORILLA PROTECT GmbH
An der Plüschweberei 50
47929 Grefrath

E-Mail: info@gorilla-protect.de

Managing Director: Jörg Hippel

2. What is personal data?

Personal data is any information that can be assigned specifically to your person. This includes details such as your name, address, email address and telephone number.

3. Data collection when visiting our website

(1) During a purely informative use of the website, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data which is technically necessary for us to display our website to you and to ensure its stability and security (legal basis is Art.6(1)(f) GDPR):

• IP address
• Date and time of the page visit
• Time zone difference from Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Access status/HTTP status code
• Data volume transferred
• Referring website
• Browser
• Operating system and its interface
• Language and version of the browser software
The aforementioned data is stored for security reasons (e.g. to clarify acts of abuse or fraud) for a maximum of 7 days and then deleted.

For the purpose of secure and efficient provision of our website, we use the services of a web hosting provider from whose server the website can be accessed. To this end, certain data, in particular the aforementioned data, is received from our hosting provider. The legal basis for this is Art. 6(1)(f) GDPR. (1) (f) GDPR.
(2) In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive and linked to the browser you are using and which provide the party setting the cookie (in this case, us) with certain information. Cookies cannot run programs or transmit viruses to your computer. They serve to make the internet services as a whole more user-friendly and effective.
(3) Use of cookies:
a) This website uses the following types of cookies, the scope and functionality of which are explained below:
Transient cookies (see b)
Permanent cookies (see c).
b) Transient cookies are automatically deleted when you close the browser. The are primarily made up of session cookies. These store the session ID, with which various requests from your browser can be assigned to a particular session. This allows your computer to be recognised when you return to our website. The session cookies are deleted when you log out or close the browser.
c) Persistent cookies are automatically deleted after a predefined period of time, which may differ depending on the cookie. You can delete the cookies via the security settings of your browser at any time.
d) Cookies that are not absolutely technically necessary for the operation of our website (such as those in connection with external media or statistics) are only used with your consent (which can be revoked at any time). The legal basis in this respect is Art. 6 (1) a DSGVO. The only cookies that are used without your consent are those that are technically essential for the operation of our website (essential cookies). The legal basis in this case is Art. 6 (1) (f) GDPR.
e) You can revoke your consent by making the appropriate browser settings, e.g. by refusing to accept third-party cookies or all cookies. Please note that if you do this you may not be able to use all the functions of this website. In other respects, we refer you to section 8 of this data protection declaration regarding the revocation of your consent.

4. Using our online shop

(1) If you would like to place an order in our online shop, you will need to provide your personal data, which we need to form the contract and process your order. The obligatory information we need to perform the contracts is separately marked, and additional information is voluntary. We will process the data you provide to process your order. The legal basis for this is Art. 6(1)(f) GDPR. (1) b DSGVO.

(2) Due to the requirements of commercial and tax law, we are obligated to store your address, payment data, and order data for ten years. However, we restrict the processing after two years, meaning your data will be used only to comply with the statutory obligations.

5. Data collection when using the contact form or when contacting us by email

(1) When you contact us via the contact form provided on our website or by email, the data you provide (usually at least your name and email address) will be stored by us in order to answer your questions. If you wish to work towards the formation of a contract via your message, the legal basis is Art. 6 (1) (b) GDPR. Otherwise, the legal basis for the processing of the data provided by you is Art. 6 (1) (f) GDPR.
(2) We delete the data collected in this context after the storage is no longer necessary or restrict the processing if there are legal obligations to retain the data.

6. Use of Google Analytics

(1) This website uses Google Analytics, a web analysis service of Google Inc. (‘Google’). Google Analytics uses ‘cookies’: text files that are stored on your computer and enable analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. In the event that IP anonymisation is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases is the complete IP address transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to analyse your use of the website, compile reports on website activity and provide other services relating to website activity and internet usage to the website operator.
(2) The IP address transmitted by your browser within the context of Google Analytics will not be merged with other data from Google.
(3) You may refuse the storage of cookies by selecting the appropriate settings on your browser; we advise, however, that if you do this you may not be able to use the full functionality of this website. You can also prevent the data generated by the cookie about your use of the website (incl. your IP address) being sent to Google as well as the processing of this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de
(4 This website uses Google Analytics with the extension ‘_anonymizeIp()’. This allows IP addresses to be processed in truncated form, ruling out any possibility of allocating any personal references. If a personal reference is allocated to the data collected about you, this will be ruled out immediately and the personal data erased without delay.
(5) We use Google Analytics so we can analyse and periodically improve the use of our website. We use the statistics gained to improve our services and design them to be more interesting for you as a user. For the exceptional cases in which personal data is transmitted to the USA, Google is certified under the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6 (1) (f) GDPR.

(6) Information on the third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of use: http://www.google.com/analytics/terms/de.html, overview of data privacy: http://www.google.com/intl/de/analytics/learn/privacy.html, and the privacy policy: http://www.google.de/intl/de/policies/privacy.

7. Your rights

You have the following rights in relation to your personal data:
• in accordance with Art.15 GDPR, to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
• in accordance with Art.16 GDPR, to demand the prompt correction of incorrect data or completion of your personal data stored by us;
• in accordance with Art.17 GDPR, to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
• in accordance with Art.18 GDPR, to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer require the data, but you need it for the assertion, exercise or defence of legal claims or you have objected to the processing in accordance with Art.21 GDPR;
• in accordance with Art.20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller;
• to revoke your consent at any time in accordance with Art.7 (3) GDPR. This will mean that we may no longer continue the data processing that was based on this consent in the future, and
• in accordance with Art.77 GDPR, to complain to a data protection supervisory authority about the processing of your personal data by us.

8. Objection or revocation against the processing of your data

(1) If you have given your consent to the processing of your data, you can revoke this consent at any time. Revocation will affect the lawfulness of the processing of your personal data after you have given notice of revocation to us.
(2) To the extent that we base the processing of your personal data on the balance of interests, you may object to the processing. This is the case if the processing is not necessary, in particular, for the performance of a contract with you, which is shown by us in the following description of the functions. When exercising such an objection, we will ask you to explain the reasons why we should not process your personal data as we have done. In the event that your objection is justified, we will review the situation and either discontinue or adapt the data processing or show you our compelling legitimate grounds on the basis of which we will continue the processing.
(3) You can inform us of your objection or revocation by using the contact details listed under point 1.

9. Changes to the data protection declaration

Due to the further development of our website or due to changed legal or official requirements, it may become necessary to change this data protection declaration. You can access the current data protection declaration at any time on our website.