Privacy policy
This is a translation for your convenience. The legally binding version of this privacy policy is the German one.
Controller
GATL GmbH i.G. (company in formation)
Maximiliansstraße 30
80539 Munich
Germany
Phone: +49-89-215-2749-250
Email: distribution@com-sit.com
Web: gatl.um-dev.de
GATL GmbH i.G. is represented by: Müzeyyen Carrasco-Demir, Christian Meier
Responsible for content pursuant to § 18 (2) of the German Interstate Media Treaty (MStV): Müzeyyen Carrasco-Demir, Christian Meier
Registered office: Munich
Data protection officer
If you have any questions regarding data protection, please contact our data protection officer:
SECJUR GmbH
Falkensteiner Ufer 40
22587 Hamburg, Germany
Phone: +49 40 80 90 81 146
Email: dsb@secjur.com
Our data protection officer is an external specialist firm that we have engaged to ensure compliance with data protection regulations.
General information
This privacy policy sets out in detail what happens to your personal data when you visit our website. Personal data is any data that can be used to identify you personally. We strictly observe the statutory provisions when processing your data, in particular the General Data Protection Regulation (“GDPR”), and we attach great importance to making your visit to our website entirely safe.
Our website is deliberately built with restraint. It does not embed any web analytics services, advertising networks, social media plugins or external font services. All fonts, images and scripts are delivered from our own server. Simply opening our pages therefore does not establish a connection to any third-party server.
Access data (server log files)
When you access our website, we automatically collect and store access data in so-called server log files, which your browser automatically transmits to us. This data comprises:
- browser type and browser version of your device
- operating system used by your device
- referrer URL (the source from which you reached our website)
- host name of the accessing computer
- date and time of the server request
- the IP address currently used by your device (in anonymised form where applicable)
As a rule, we are neither able nor do we intend to relate this data to an individual. Such data is processed pursuant to Art. 6 (1) (f) GDPR in order to safeguard our legitimate interest in improving the stability and functionality of our website and in defending against attacks.
Cookies
In order to make visiting our website attractive and to enable the use of certain functions, we use so-called cookies. These are small text files that are stored on your device. Cookies cannot execute programs or transmit viruses to your computer system.
Cookies that are required to carry out the electronic communication process or to provide certain functions you have requested are stored on the basis of Art. 6 (1) (f) GDPR in conjunction with § 25 (2) TDDDG. We have a legitimate interest in storing cookies in order to provide our services in a technically flawless and optimised manner. Where other cookies are stored, this only happens with your consent pursuant to § 25 (1) TDDDG and Art. 6 (1) (a) GDPR.
At present we use strictly necessary cookies only on our website, in particular:
- a cookie storing the language version you have selected (German or English)
- a cookie storing your decision in the consent banner
- session cookies that secure the course of a page view and the submission of forms
Most of the cookies we use are so-called session cookies. They are deleted automatically at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognise your browser on your next visit.
You can configure your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when the browser is closed. Disabling cookies may limit the functionality of this website.
Consent management
To obtain and manage your consent to non-essential cookies we use the software Borlabs Cookie provided by Borlabs GmbH, Rübenkamp 32, 22305 Hamburg, Germany. The software runs on our own server; no data is transmitted to the provider.
Borlabs Cookie stores a cookie on your device in which your decision is recorded. It records your consent or its withdrawal, the time of the decision, an anonymised identifier and the version of the consent banner. The legal basis is Art. 6 (1) (c) GDPR: we are legally obliged to be able to demonstrate the consent given. You can change your decision at any time via the “Cookie settings” link in the footer of our website.
Fonts and external content
We embed fonts exclusively from our own server. When you access our website, no connection is therefore established to Google Fonts or any other font service and no IP address is transmitted to third parties.
Likewise, we do not embed any map services, video players or social media plugins in our pages. Where we refer to external offerings – for example to a map view of our address or to our company profile on a professional network – this is an ordinary hyperlink. Data is only transmitted to the respective provider once you click the link. The respective provider is responsible for the data processing on the linked pages.
Contact form
We offer a contact form on our pages. In doing so we collect your name, your email address, your company, the details of the component or part number concerned and your message. The details are forwarded to us by email only; the form entries are not stored in the website database.
This data is processed in order to handle your enquiry and in case of follow-up questions. The legal basis is Art. 6 (1) (b) GDPR insofar as your enquiry is aimed at concluding or performing a contract, and otherwise Art. 6 (1) (f) GDPR on the basis of our legitimate interest in answering enquiries. This data is not passed on to third parties without your consent.
Data transmitted via the contact form remains with us until you ask us to delete it, withdraw your consent to its storage, or the purpose for storing the data no longer applies. Mandatory statutory provisions – in particular retention periods – remain unaffected.
Contacting us by email and telephone
If you contact us by email or by telephone, we process the data you provide in order to deal with your request. The legal basis is Art. 6 (1) (b) GDPR for contract-related enquiries, otherwise Art. 6 (1) (f) GDPR. We delete this data as soon as it is no longer required to achieve the purpose and no statutory retention obligations apply.
Newsletter
If you have expressly consented, we will regularly send our newsletter with news from our analysis laboratory to your email address. To receive our newsletter you only need to give us your email address. No additional data is collected. The data is used exclusively to send the newsletter.
The details provided when subscribing to the newsletter are processed solely on the basis of your consent pursuant to Art. 6 (1) (a) GDPR. You may withdraw the consent you have given at any time. An informal message by email is sufficient for the withdrawal, or you can unsubscribe via the “unsubscribe” link in the newsletter. The lawfulness of the data processing operations already carried out remains unaffected by the withdrawal.
Data entered to set up the subscription will be deleted if you unsubscribe. Should this data have been transmitted to us for other purposes and at another point, it will remain with us.
Data in connection with analysis and test orders
If you place an analysis or testing order with us, we process the master data and contact details of your contact persons required for this purpose as well as the order-related information. The legal basis is Art. 6 (1) (b) GDPR. We retain test reports and the associated order documents within the framework of the retention periods under commercial and tax law and in order to ensure that our test results remain traceable; the legal basis for this is Art. 6 (1) (c) GDPR.
Use and disclosure of data
We will neither sell nor otherwise market the personal data you provide to us, for example by email (such as your name and address or your email address). Your personal data is processed only for correspondence with you and only for the purpose for which you provided the data to us. In order to process payments, we pass your payment data on to the credit institution charged with the payment.
Data collected automatically when you visit our website is used only for the purposes stated above. The data is not used in any other way.
We assure you that we will not otherwise pass your personal data on to third parties unless we are legally obliged to do so or you have given us your prior consent. Where we engage service providers who process personal data on our behalf – for instance for the operation and technical maintenance of this website – this is done on the basis of a data processing agreement pursuant to Art. 28 GDPR.
SSL / TLS encryption
For security reasons and to protect the transmission of confidential content, such as enquiries you send to us as the website operator, our website uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the padlock symbol in your browser line.
When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
§1 Retention period
Personal data provided to us via our website is stored only until the purpose for which it was entrusted to us has been fulfilled. Where retention periods under commercial and tax law must be observed, the retention period for certain data may be up to 10 years.
§2 Rights of data subjects
With regard to the personal data concerning you, as a data subject you have the following rights vis-à-vis the controller in accordance with the statutory provisions:
2.1 Right to withdraw consent
Many data processing operations are only possible with your express consent. Insofar as the processing of your data is based on your consent, you have the right to withdraw consent once given to the processing of data at any time with effect for the future pursuant to Art. 7 (3) GDPR. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the point of withdrawal. The storage of data for billing and accounting purposes remains unaffected by a withdrawal.
2.2 Right of access
You have the right pursuant to Art. 15 GDPR to request confirmation from us as to whether we process personal data concerning you. Where such processing takes place, you have the right to information about the personal data we process concerning you, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the envisaged storage period or the criteria for determining that period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data where it was not collected by us from you, the existence of automated decision-making including profiling and, where applicable, meaningful information about the logic involved and the significance and envisaged consequences of such processing for you, as well as your right to be informed of the safeguards that exist pursuant to Art. 46 GDPR where your data is transferred to third countries.
2.3 Right to rectification
You have the right pursuant to Art. 16 GDPR to request the immediate rectification of inaccurate personal data concerning you and/or the completion of your incomplete data at any time.
2.4 Right to erasure
You have the right pursuant to Art. 17 GDPR to request the erasure of your personal data where one of the following grounds applies:
a) your personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
b) you withdraw the consent on which the processing was based pursuant to Art. 6 (1) (a) or Art. 9 (2) (a) GDPR and there is no other legal basis for the processing;
c) you object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) GDPR;
d) the personal data has been processed unlawfully;
e) the erasure of the personal data is necessary for compliance with a legal obligation under Union law or the law of the member state to which we are subject;
f) the personal data has been collected in relation to the offer of information society services pursuant to Art. 8 (1) GDPR.
This right does not exist, however, insofar as the processing is necessary:
a) for exercising the right of freedom of expression and information;
b) for compliance with a legal obligation which requires processing by Union or member state law to which we are subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us;
c) for reasons of public interest in the area of public health pursuant to Art. 9 (2) (h) and (i) and Art. 9 (3) GDPR;
d) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Art. 89 (1) GDPR, insofar as the right of the data subject is likely to render impossible or seriously impair the achievement of the objectives of that processing, or for the establishment, exercise or defence of legal claims.
Where we have made your personal data public and are obliged to erase it in accordance with the above, we shall take reasonable steps, including technical measures, taking account of available technology and the cost of implementation, to inform controllers which are processing the personal data that you as the data subject have requested the erasure of any links to, or copies or replications of, that personal data.
2.5 Right to restriction of processing
You have the right pursuant to Art. 18 GDPR to request the restriction of processing (blocking) of your personal data. You may contact us at any time at the address given in the legal notice for this purpose. The right to restriction of processing exists in the following cases:
a) If you contest the accuracy of your personal data stored by us, we generally need time to verify this. For the duration of the verification you have the right to request the restriction of the processing of your personal data.
b) If the processing of your personal data was or is unlawful, you may request the restriction of data processing instead of erasure.
c) If we no longer need your personal data but you require it for the establishment, exercise or defence of legal claims, you have the right to request the restriction of the processing of your personal data instead of erasure.
d) If you have lodged an objection pursuant to Art. 21 (1) GDPR, a balance must be struck between your interests and ours. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.
If you have restricted the processing of your personal data, this data may – apart from being stored – only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or a member state.
2.6 Right to notification
If you have asserted the right to rectification, erasure or restriction of processing against us, we are obliged to communicate this rectification or erasure of the data or restriction of processing to all recipients to whom your personal data has been disclosed, unless this proves impossible or involves disproportionate effort. Pursuant to Art. 19 GDPR you have the right to be informed about these recipients on request.
2.7 Right not to be subject to a decision based solely on automated processing
You have the right pursuant to Art. 22 GDPR not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you.
This does not apply where the decision
a) is necessary for entering into, or performance of, a contract between you and us,
b) is authorised by Union or member state law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests, or
c) is based on your explicit consent.
However, in the cases referred to in (a) to (c) the decisions may not be based on special categories of personal data pursuant to Art. 9 (1) GDPR unless Art. 9 (2) (a) or (g) applies and suitable measures to safeguard your rights and freedoms and legitimate interests have been taken.
In the cases referred to in (a) and (c) we shall implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express your point of view and to contest the decision.
2.8 Right to data portability
Insofar as the processing is based on your consent pursuant to Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR or on a contract pursuant to Art. 6 (1) (b) GDPR and is carried out by automated means, you have the right pursuant to Art. 20 GDPR to receive the personal data concerning you which you have provided to us in a structured, commonly used and machine-readable format and to transmit it to another controller, or to request its transmission to another controller, where technically feasible.
2.9 Right to object
Insofar as we base the processing of your personal data on the balancing of interests pursuant to Art. 6 (1) (f) GDPR, you have the right at any time to object to the processing of your personal data on grounds relating to your particular situation; this also applies to profiling based on this provision. The respective legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process the personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims (objection pursuant to Art. 21 (1) GDPR).
If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is related to such direct marketing. If you object, your personal data will no longer be used for direct marketing purposes (objection pursuant to Art. 21 (2) GDPR).
In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.
2.10 Right to lodge a complaint with the competent supervisory authority pursuant to Art. 77 GDPR
In the event of infringements of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, place of work or the place of the alleged infringement. The right to lodge a complaint is without prejudice to any other administrative or judicial remedy.
The supervisory authority responsible for us is:
Bayerisches Landesamt für Datenschutzaufsicht
Promenade 18
91522 Ansbach, Germany
Postal address: Postfach 1349, 91504 Ansbach
Phone: +49 981 180093-0
Email: poststelle@lda.bayern.de
Web: https://www.lda.bayern.de
Validity and amendment of this privacy policy
This privacy policy applies from 1 October 2026. We reserve the right to amend this privacy policy at any time in compliance with the applicable data protection regulations. This may be necessary, for example, in order to comply with new statutory provisions or to take account of changes to our website or new services on our website. The version available at the time of your visit applies.
Should this privacy policy be amended, we intend to announce changes to our privacy policy on this page so that you are fully informed about which personal data we collect, how we process it and under what circumstances it may be passed on.