We would like to inform you with this notice how we, GSK STOCKMANN Rechtsanwälte Steuerberater Partnerschaftsgesellschaft mbB, registered office Munich, AG Munich PR 533, (hereinafter also “GSK STOCKMANN“, “we“, “us“) process personal data of you (and possibly of third parties) in connection with the website www.gsk.de (the “Website“).
We take the confidentiality and protection of your personal data very seriously. For this reason, we process your personal data only insofar as this is legally permissible, in particular on the basis of the requirements of the EU General Data Protection Regulation (“GDPR”) and the Federal Data Protection Act (“FDPA”).
In the following, we explain to you which personal data we collect in the course of using the website, for what purposes and in what way we use this data and what rights you are entitled to. Please note that the website may contain links to websites of other providers over which we have no control and to which this data protection declaration does not apply.
1. Processing of your data
a) Visit to the website
aa) In principle, you can visit our website without providing us with personal data. As is usual with most websites, our systems automatically record every access or retrieval of our website and store this temporarily in a log file (“log files”). The data stored in this context includes in particular the following ones:
Insofar as the processing of data in the context of visiting the website involves personal data, the corresponding processing of this data is based on Art. 6 (1) p. 1 lit. f) GDPR (legitimate interest). The legitimate interest follows from the above-mentioned purposes.
b) Contact by e-mail
aa) There are various ways of contacting us by e-mail on the website. If you contact us in this way or send us an enquiry, the personal data you provide will be processed by us in order to respond to your enquiry. This data is used by us exclusively for the purpose of processing the corresponding enquiry.
bb) The legal basis for the processing of the aforementioned personal data is Art. 6 (1) sentence 1 lit. f) GDPR (legitimate interest). The legitimate interest results from the fact that we can only carry out the action desired by the user (e.g. answering enquiries) by processing the user’s data accordingly. If the contact is aimed at the possibility of concluding a client relationship with us or another business relationship or an employment contract, Article 6 (1) sentence 1 lit. b) GDPR (contract performance and pre-contractual measures) is also or alternatively the legal basis for the processing.
c) Newsletter and other information by e-mail
aa) On our website, you have the option of registering for our free newsletter and receiving other similar information by e-mail. If you have consented, we will send you our newsletter or comparable information on a regular basis to the e-mail address that you provide to us for this purpose. The processing of the user’s e-mail address serves to deliver the corresponding e-mail. We will only store your e-mail address for this purpose until you unsubscribe from the newsletter or object to receiving comparable information by e-mail.
For effective registration, we require a valid e-mail address from you. In addition, your title, your first and last name are requested in this context. In order to verify that the registration actually originates from you, we use the so-called “double opt-in” procedure as a consent procedure. In the double opt-in procedure, the initial registration must be confirmed in a second step. For this purpose, you will receive an e-mail message (confirmation e-mail) with a request for confirmation of the contact e-mail address entered.
You can revoke your consent to receive such messages at any time with effect for the future. You will find a corresponding “Unsubscribe” link in every newsletter. You can also inform us of your revocation using the contact option provided at the end of this data protection declaration (see below under point 4).
bb) The legal basis for the processing of personal data concerning a newsletter dispatch and the other aforementioned data processing by us is Art. 6 para. 1 lit. p. 1 a) GDPR (consent of the user).
Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored or a message always appears before a new cookie is created. However, the complete deactivation of cookies may mean that you cannot (fully) use all the functions of our website.
The legal basis for the above processing of personal data is Art. 6 para. 1 sentence 1 lit. f) GDPR (legitimate interest). The legitimate interest follows from the above-mentioned purposes, to optimise website use and to improve your user experience.
aa) Google Analytics
The website uses Google Analytics (including the Google Optimize and Google Universal Analytics functions), a web analytics service provided by Google. If you do not consent to the use of this tool when (first) accessing the website, no personal data from you will be processed using this tool. This service enables us to evaluate the use of our website and collect information about the needs of users in order to improve the user-friendliness of our online offering and its quality. In order to be able to carry out these evaluations, usually aggregated and anonymous statistical data is collected. Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyse how users use the site.
The information generated by the cookie about your use of the website is usually transmitted to a Google server in the US and stored there. However, as this website uses IP anonymisation, your IP address will be truncated beforehand by Google within Member States of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the US and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
You can prevent the storage of the corresponding cookies by making the appropriate setting in your browser software or by deactivating the use of Google Analytics regarding our website with regard to your personal data in the Consent Management Tool included on our website (you can access the Consent Management Tool regarding the website at the bottom of the website under the link “Cookie Settings” and make the appropriate settings there). However, we would like to point out that in this case you may not be able to use all the functions of the website to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: Google Analytics Opt-out Browser Add-on Download Page.
You can find more information about Google Analytics here:
The legal basis for the processing of personal data described above is Art. 6 para. 1 sentence 1 lit. a) GDPR (consent).
bb) Google Maps
On this website, we use “Google Maps” from Google. If you do not consent to the use of this tool when (first) accessing the website, no personal data of yours will be processed with the help of or in connection with this tool. With each individual call-up of “Google Maps”, a cookie is set by Google in order to process user settings and data when displaying the page on which “Google Maps” is integrated for the purpose of ensuring the functionality and improvement of the Maps functions by Google. As a rule, this cookie is not deleted by closing the browser, but expires after a certain period of time, unless you manually delete it beforehand. If you no longer agree to this processing of your data, you have the option of deactivating the “Google Maps” service and thus preventing the transfer of data to Google. To do this, you can deactivate the Java Script function in your browser, for example. You can also deactivate the use of Google Maps on our website with regard to your personal data in the consent management tool contained on our website. However, we would like to point out that you will not be able to use Google Maps, or only to a limited extent, if you deactivate Google Maps.
The legal basis for the aforementioned processing of your personal data is Art. 6 para. 1 p. 1 lit. a) GDPR (consent).
cc) Google Tag Manager
The website uses the so-called Google Tag Manager from Google. The Google Tag Manager is a solution with which marketers can manage website tags via an interface. The tool itself (which implements the tags) is a cookie-less solution and does not collect any personal data. The tool is used for the purpose of triggering other tags, which in turn may process personal data. Google Tag Manager does not access this data. If a deactivation has been made at domain or cookie level (or via our consent management tool), this remains in place for all tracking tags implemented with Google Tag Manager.
dd) Google reCAPTCHA
The service includes the sending of the IP address and, if applicable, further data required by Google for the reCAPTCHA service to Google and is carried out on the basis of our legitimate interest (Art. 6 para. 1 p. 1 lit. f) GDPR), in particular the prevention of misuse and spam messages. The use of Google reCAPTCHA may involve the processing of personal data in the USA.
Further information on data protection can be found at: https://www.google.com/intl/de/policies/privacy/
ee) Google Ads (incl. conversion tracking)
We use the Google Ads (incl. Conversion Tracking) service from Google to draw attention to our attractive offers on external websites with the help of advertising media (so-called Google Ads). We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns. In this way, we pursue the interest of showing you advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of advertising costs.
These advertisements are delivered by Google via so-called “ad servers”. For this purpose, we use ad server cookies, which can be used to measure certain parameters for measuring success, such as the display of ads or clicks by users. If you access our website via a Google ad, Google Ads will store a cookie on your PC. These cookies usually expire after 30 days and are not intended to identify you personally. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed) are usually stored as analysis values for this cookie.
These cookies enable Google to recognise your internet browser. If a user visits certain pages of an Ads customer’s website and the cookie stored on their computer has not yet expired, Google and the customer can recognise that the user has clicked on the ad and been redirected to that page. A different cookie is assigned to each Ads customer. Cookies can therefore not be tracked across Ads customers’ websites. As a matter of principle, we ourselves do not collect or process any personal data in connection with the aforementioned advertising measures. We are only provided with statistical evaluations by Google. These evaluations enable us to recognise which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising media; in particular, we cannot identify the users on the basis of this information.
Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of ads, Google receives the information that you have called up the corresponding part of our website or clicked on an ad from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider may obtain and store your IP address.
You can prevent participation in this procedure in various ways: a) by adjusting your browser software accordingly, in particular the suppression of third-party cookies will result in you not receiving ads from third-party providers; b) by deactivating the interest-based ads of the providers that are part of the self-regulation campaign “About Ads” via the link http://www.aboutads.info/choices, whereby this setting will be deleted when you delete your cookies; c) by permanently deactivating them in your browsers Firefox, Internetexplorer or Google Chrome under the link https://support.google.com/ads/answer/plugin. We would like to point out that in this case you may not be able to use all functions of this offer to their full extent.
The legal basis for the aforementioned processing of data by and (insofar as personal data is processed by us at all in this context) is Art. 6 para. 1 p. 1 lit. a) GDPR, the consent of the user.
On this website, we may integrate YouTube videos from Google’s online video platform “YouTube”, which are stored on YouTube servers and can be played directly from our website. If you do not consent to the use of this tool when (first) accessing the website, no personal data from you will be processed with the help of this tool.
The videos are integrated in the so-called extended data protection mode, which means that personal data about you as a user is only transmitted to YouTube when you play the videos. We have no influence on this data transmission. This data transfer takes place regardless of whether YouTube provides a user account via which you are logged in or whether no user account exists. If you are logged in to Google at the same time, your data will be directly assigned to your account. If you do not wish to have your data associated with your YouTube profile, you must log out before playing the video (or waive your consent to the corresponding data processing when (first) accessing the website; see below). YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website.
You can deactivate the use of Google Maps concerning our website with regard to your personal data in the consent management tool included on our website.
In connection with the processing of data described above, processing may also take place in the US (see below under gg).
gg) Further Information on Google
The responsible service provider of the aforementioned Google services is Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland).
As already described above, data may also be processed by Google (or Google companies) in the US. Currently, there is no comprehensive decision of the EU Commission on the adequacy of the level of data protection in the US. In order to ensure an adequate level of data protection, so-called standard data protection clauses within the meaning of Article 46 (2) (c) of the GDPR are used (by Google) (Google can provide you with the relevant documentation on the standard data protection clauses).
f. LinkedIn – Insights Tag / Conversion Measurement;
We use the LinkedIn Insights Tag tool on the website. If you do not consent to the use of this tool when (first) accessing the website, no personal data from you will be processed with the help of this tool. Through this tool, it is possible for LinkedIn to collect statistical, pseudonymous data about the visit and use of the website and to provide us with corresponding aggregated statistics on this basis. In addition, this information is used to be able to show users interestspecific and relevant offers and recommendations after users have informed themselves about certain services, information and offers on the website. This information is stored in a cookie. Users can object to this form of data processing, for example, by adjusting their browser settings on their computer or other device with which they access our website or by deactivating the use of this tool on our website with regard to their personal data in the consent management tool contained on our website.
The legal basis for the aforementioned processing of your personal data is Art. 6 para. 1 p. 1 lit. a) & f) GDPR.
Service provider of the tool: LinkedIn Ireland Unlimited Company (Wilton Place, Dublin 2, Ireland).
LinkedIn data may also be processed in the US and Singapore. Currently, there is no decision of the EU Commission on the adequacy of the level of data protection in the US or Singapore. In order to ensure an adequate level of data protection, so-called standard data protection clauses within the meaning of Art. 46 para. 2 lit. c) GDPR (of LinkedIn) are used (LinkedIn can provide you with corresponding documentation on the standard data protection clauses).
For more information on this tool, click here:
g) Applicant site career.gsk.de
If you contact us via our careers site (career.gsk.de), e.g. to apply for a position with us, we will use the data and documents you provide for the purpose of communicating with you or for the application process (interviews, etc.). Any further use of your personal data that you provide to us in this context will not take place unless you expressly agree to it and subject to the other statements in this data protection declaration. The legal basis for the aforementioned processing of personal data is Art. 6 para. 1 p. 1 lit. b) GDPR (contract and pre-contractual measures) or § 26 FDPA. Further information on data protection in connection with application procedures can be found in the information on data protection for applicants available on our careers page (career.gsk.de).
2. Data transfer to third parties
Exceptions to this are transfers of personal data in the case of a legal obligation to disclose (for example to state institutions and authorities), insofar as we are legally obliged to do so. The legal basis for this processing of your personal data is Art. 6 para. 1 p. 1 lit. c) GDPR (fulfilment of a legal obligation).
For the operation of the website and the services offered on the website (for example, hosting of the website or newsletter dispatch), we may use external service providers who process your personal data on our behalf. These service providers process the data exclusively in accordance with our instructions. The legal basis for such data processing is Art. 28 GDPR (commissioned processing).
3. Duration of the retention of your personal data
Insofar as no other storage period results from the other regulations of this data protection declaration, we will only store your personal data obtained by us in connection with the use of the website for as long as this is necessary to fulfil the corresponding processing purpose (e.g. to process your requests or enquiries to us), thereafter only to the extent and insofar as we are obliged to do so due to legal storage obligations. If we no longer need your data for the purposes described above, it will only be stored during the respective statutory retention period and not processed for other purposes.
4. Your Rights
You have the right to request information from us at any time about the personal data we hold about you. Insofar as the legal requirements are met, you also have the right to correct, delete or restrict the processing of the relevant data, the right to object to the processing of your data by us and the right to receive the personal data relating to you from us in a structured, common and machine-readable format. If you have given your consent to the use of personal data, you can revoke this consent at any time.
If you believe that the processing of personal data concerning you by us is in breach of applicable data protection law, you may lodge a complaint with the competent data protection supervisory authority.
If you have any questions on the subject of data protection (including the assertion of your rights in accordance with section 4), you can contact us at GSK STOCKMANN, Mohrenstr. 42, 10117 Berlin and via berlin(at)gsk.de, telephone: +49 30 203907-0, fax: +49 30 203907-44.
You can also contact our data protection officer directly at any time. You can reach him at the above-mentioned GSK STOCKMANN data and at firstname.lastname@example.org.
6. Data Security
GSK maintains up-to-date technical measures to ensure data security, in particular to protect your personal data from risks during data transmission and from third parties gaining knowledge. These are adapted to the current state of the art.
Status: August 2021