GESA Automation GmbH logo
Instagram LinkedIn icon
Section Divider

Privacy Policy

This privacy policy provides information on the processing of personal data when using our website, in accordance with Articles 13 and 14 of the General Data Protection Regulation (GDPR).


I. Data controller

GESA Automation GmbH
Bahnstraße 106
06682 Teuchern
Germany

Phone: +49 (0) 34443 – 608 – 0
Email: info@gesa-automation.de

Managing Director:
Martin Schulze, Graduate Engineer,
Christin Wetzel, MSc
Legal Notice


II. Data Protection Officer

Robin Data GmbH
9 Fritz-Haber-Straße
06217 Merseburg

Email: info@robin-data.io


III. Provision of the website

When you visit our website, so-called server log files are automatically created on the web server. Among other things, the IP address, the date and time of access, and technical information relating to the access are processed. This processing is carried out on the basis of our legitimate interest pursuant to Article 6(1)(f) of the GDPR, in order to ensure the security and stability of the website, to detect and repel attempted attacks, and to analyse technical errors. The server log files are automatically deleted after 90 days.

The following data is recorded in these log files:

  • Browser type and browser version
  • the operating system used
  • the referrer URL (the website visited previously and from which a link leads to our website)
  • the IP address of the accessing computer (network)
  • the date and time of the server request
  • the status code returned
  • Search terms entered into the search form
  • the document/page accessed

Our website is hosted by Domain Factory hosted. As part of the hosting service, the hosting provider processes, in particular, connection and access data necessary for the provision and secure operation of the website. This processing is carried out on the basis of Article 6(1)(f) of the GDPR. We have entered into a data processing agreement with our hosting provider in accordance with Article 28 of the GDPR.


IV. Making contact

If you contact us by email or via the contact form provided on our website, we will process the information you provide in order to deal with your enquiry and for any follow-up questions. The legal basis is Article 6(1)(b) of the GDPR, insofar as the contact serves to initiate or fulfil a contract. In all other respects, processing is carried out on the basis of our legitimate interest in the proper handling of enquiries in accordance with Article 6(1)(f) of the GDPR.

  • Salutation
  • First name and surname
  • Address
  • Telephone or fax number
  • Email address

The data will be deleted immediately once the enquiry has been processed, unless there are other valid reasons for retaining it, such as the enforcement of claims or retention for tax purposes.


V. Applications

If you apply for a job with us, in particular via the application form provided on our website, we will process the personal data and application documents you submit for the purpose of conducting the recruitment process and deciding whether to offer you a job.

In this context, we process, in particular, your contact details, such as your title, first name and surname, telephone number and email address, details of the position you are applying for, the information you have provided in the application form, and the application documents you have submitted.

The legal basis for the processing is Section 26(1) of the Federal Data Protection Act (BDSG) in conjunction with Article 6(1)(b) of the General Data Protection Regulation (GDPR).

When you apply via the application form, the details and documents you provide will be sent to us by email. The contents of the application form are not stored on the website in any other way. Where technical log data is stored in connection with the transmission, this will be deleted after six months at the latest.

Once the recruitment process has been completed, your application data will generally be deleted after six months at the latest. If you have expressly consented to your application documents being retained for a longer period – for example, for inclusion in a candidate pool – further processing will take place on the basis of your consent.


VI. Cookies

Our website uses cookies and similar technologies. Technically necessary cookies are used, in particular, to enable basic functions and ensure the secure operation of the website. Technically necessary cookies may be set as part of the operation of the WordPress website.

We use the „Borlabs Cookie“ consent management system to manage your consents. Borlabs Cookie stores the consent choices you have made in a cookie on your device. According to the provider, no visitor data is transmitted to Borlabs in the process. The consent data is stored on the website’s server.

You can use the Borlabs Cookie tool to select which non-essential cookies and third-party services you wish to allow. You can change or withdraw your selection at any time via the website’s cookie settings, with effect from that point onwards.

Where cookies or similar technologies are technically necessary for the operation of the website, access to or storage of information on your device is carried out in accordance with Section 25(2) of the TDDDG. Where personal data is processed in this context, this is done on the basis of Article 6(1)(f) of the GDPR.

Cookies that are not technically necessary and external services will only be used once you have given your consent. The legal basis for this is Section 25(1) of the TDDDG and Article 6(1)(a) of the GDPR. Consent is voluntary and may be withdrawn at any time with future effect.

VII. Other services

Google Maps

On our website, we use Google Maps, a map service provided by Google. The service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Maps will only be loaded on our website once you have given your consent to use the service via our cookie consent management system, „Borlabs Cookie“. Without your consent, the connection to Google Maps will be blocked and the map content will not be loaded.

Once you have given your consent, a connection to Google’s servers may be established when you access Google Maps. In particular, your IP address and technical information about your browser and device may be transmitted to Google. Google may also use or read cookies or similar technologies on your device in connection with its services.

Processing is carried out on the basis of Article 6(1)(a) of the GDPR and, insofar as information is stored on or retrieved from your device, in accordance with Section 25(1) of the TDDDG.You may withdraw or amend your consent at any time with future effect via the settings of our cookie consent management system, „Borlabs Cookie“.

When using Google Maps, data may be transmitted to Google. It cannot be ruled out that data may be processed outside the European Union or the European Economic Area.

Further information on the processing of personal data by Google, as well as on the use of cookies and similar technologies, can be found in Google’s privacy policy: https://policies.google.com/privacy.

Google Analytics

Provided you give your consent, we use Google Analytics on our website, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables us to analyse the use of our website in order to evaluate and improve our online offering. To this end, we may process, in particular, information about the pages visited, duration of use, source of access, technical information about the browser and device, and other usage data. Cookies or similar technologies may also be used for this purpose.

Google Analytics is only activated on our website once you have given your consent to the use of the service via our cookie consent management system, „Borlabs Cookie“. Without your consent, the analytics cookies intended for this purpose will not be set and Google Analytics will not be activated for analytics purposes.

Data processing is carried out on the basis of your consent in accordance with Article 6(1)(a) of the GDPR and, insofar as information is stored on or retrieved from your device, in accordance with Section 25(1) of the TDDDG.

When using Google Analytics, data may be transmitted to Google. In this context, it cannot be ruled out that data may be processed outside the European Union or the European Economic Area.

You can withdraw or amend your consent at any time, with effect for the future, via the settings in our cookie consent management system, „Borlabs Cookie“.

Further information on Google’s processing of personal data can be found in Google’s privacy policy: https://policies.google.com/privacy.

YouTube

In future, videos from YouTube may be embedded on our website. The provider for users in the European Economic Area is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Embedded YouTube content is only loaded once you have given your consent. Only then can a connection be established with Google, and technical usage and connection data can be processed.

The legal basis is Section 25(1) of the TDDDG and Article 6(1)(a) of the GDPR. You may withdraw or amend your consent at any time via the cookie settings.

For further details on the purpose and scope of data collection and use by YouTube or Google, as well as your rights and the settings available to protect your privacy as a YouTube user, please refer to the privacy policies of YouTube or Google (http://www.youtube.com/t/privacy).

Vimeo

In future, videos from the Vimeo service may be embedded on our website. The provider is Vimeo.com, Inc., USA. Embedded Vimeo content is only loaded once you have given your consent. Only then can a connection be established with Vimeo, and technical usage and connection data can be processed.

The legal basis is Section 25(1) of the TDDDG and Article 6(1)(a) of the GDPR. You may withdraw or amend your consent at any time via the cookie settings.

Further information on the processing of personal data by Google can be found in Vimeo’s privacy policy:

https://vimeo.com/legal/terms/de/datenschutz/policy.


VIII. Rights of data subjects

You have the right to:

  • in accordance with Article 7(3) of the GDPR, to withdraw your consent at any time by notifying us. As a result, we may no longer continue to process data on the basis of that consent in future;
  • in accordance with Article 15 of the GDPR, to request information about your personal data processed by us. In particular, you may request information regarding the purposes of processing, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the intended storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data where it was not collected by us, and the existence of automated decision-making, including profiling, and, where applicable, meaningful information regarding its details;
  • in accordance with Article 16 of the GDPR, to request, without delay, the rectification of inaccurate personal data or the completion of your personal data held by us;
  • to request, in accordance with Article 17 of the GDPR, the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defence of legal claims;
  • to request, in accordance with Article 18 of the GDPR, the restriction of the processing of your personal data, insofar as you contest the accuracy of the data, the processing is unlawful but you object to its erasure and we no longer require the data, but you require it for the purpose of asserting, exercise or defend legal claims, or where you have objected to the processing in accordance with Article 21 of the GDPR;
  • in accordance with Article 20 of the GDPR, to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or to request that it be transferred to another controller;
  • to object to the processing of your personal data in accordance with Article 21 of the GDPR, insofar as the processing is carried out on the basis of our legitimate interest and there are grounds for the objection arising from your particular situation, and
  • to lodge a complaint with a supervisory authority in accordance with Article 77 of the GDPR. As a rule, you may contact the supervisory authority for your usual place of residence, your place of work or our registered office. The supervisory authority responsible for us is:

State Data Protection Commissioner for Saxony-Anhalt

34a Otto-von-Guericke Street
39104 Magdeburg
PO Box 1947
39009 Magdeburg

Telephone: +49 391 81803-0
Email: poststelle@lfd.sachsen-anhalt.de


IX. Changes to our privacy policy

We reserve the right to amend this privacy policy from time to time to ensure it always complies with the latest legal requirements or to reflect changes to our services in the privacy policy, for example, when new services are introduced. The new privacy policy will then apply to your next visit.

As at August 2026