Privacy Policy

Unless otherwise stated below, providing your personal data is neither legally nor contractually required, nor necessary for entering into a contract. You are not obligated to provide the data. Not providing it has no consequences. This applies only insofar as no other statement is made for the individual processing operations described below.

"Personal data" means any information relating to an identified or identifiable natural person.

Server Log Files

You can visit our website without providing any personal information.

Each time you access our website, usage data is transmitted by your internet browser to us or our web host / IT service provider and stored in log data (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred, and the requesting provider.

This processing is carried out on the basis of Art. 6 (1) (f) GDPR, arising from our legitimate interest in ensuring the smooth operation of our website and in improving our offering.

Contact

Controller / Data Protection Officer

Please contact us if you have any questions. The controller for data processing is: Gideon Martz, Mommsenstraße 6, 04329 Leipzig, Germany, +49 (0) 151 2147 1832, info@gmp-i.de

You can reach our data protection officer directly at:

Gideon Martz Mommsenstraße 6 D-04329 Leipzig

Customer-Initiated Contact by Email

If you proactively contact us by email, we collect your personal data (name, email address, message text) only to the extent you provide it. This data processing serves the purpose of handling and responding to your inquiry.

If the contact serves to carry out pre-contractual measures (e.g. advice on a potential purchase, preparing an offer) or relates to a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 (1) (b) GDPR.

If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6 (1) (f) GDPR, arising from our legitimate interest in handling and responding to your inquiry. In this case, you have the right to object at any time, for reasons arising from your particular situation, to this processing of your personal data based on Art. 6 (1) (f) GDPR.

We use your email address only to process your inquiry. Your data will subsequently be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Collection and Processing When Using the Contact Form

When you use the contact form, we collect your personal data (name, email address, message text) only to the extent you provide it. This data processing serves the purpose of making contact.

We use your email address only to process your inquiry. Your data will subsequently be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Customer Account & Orders

Customer Account

When you open a customer account, we collect your personal data to the extent indicated there. This data processing serves the purpose of improving your shopping experience and simplifying order processing. Processing is carried out on the basis of Art. 6 (1) (a) GDPR with your consent. You may withdraw your consent at any time by notifying us, without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal. Your customer account will then be deleted.

[Please confirm: does gmp-railtech offer a customer account at all?]

Collection, Processing, and Disclosure of Personal Data for Orders

When placing an order, we collect and process your personal data only to the extent necessary to fulfil and process your order and to handle your inquiries. Providing this data is necessary to conclude the contract. If it is not provided, no contract can be concluded. Processing is carried out on the basis of Art. 6 (1) (b) GDPR and is necessary for the performance of a contract with you.

Your data may be disclosed, for example, to the shipping companies and dropshipping providers you have selected, payment service providers, service providers for order processing, and IT service providers. In all cases, we strictly comply with statutory requirements. The scope of data transmission is limited to the minimum necessary.

Advertising

Use of Your Email Address for Sending Newsletters

We use your email address, independent of contract processing, exclusively for our own advertising purposes to send newsletters, provided you have expressly consented to this. Processing is carried out on the basis of Art. 6 (1) (a) GDPR with your consent. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal. You can unsubscribe from the newsletter at any time using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the distribution list.

[Please confirm: is a newsletter planned for gmp-railtech?]

Use of Your Email Address for Direct Advertising

We use your email address, which we obtained in connection with the sale of goods or services, to electronically send advertising for our own goods or services similar to those you have already purchased from us, unless you have objected to this use. Providing the email address is necessary to conclude the contract. If it is not provided, no contract can be concluded. Processing is carried out on the basis of Art. 6 (1) (f) GDPR, arising from our legitimate interest in direct advertising. You may object to this use of your email address at any time by notifying us. Contact details for exercising this right of objection can be found in the Legal Notice. You may also use the link provided for this purpose in the advertising email. No costs are incurred other than the transmission costs according to the basic rates.

Inventory Management

Use of an External Inventory Management System

We use an inventory management system (orgaMAX) for contract processing as part of a data processing agreement. For this purpose, your personal data collected in connection with your order is transmitted to

deltra Business Software GmbH & Co. KG, Gildestraße 9, 32760 Detmold, Germany

The processing of your personal data serves the purpose of fulfilling the contract concluded with you and is carried out on the basis of Art. 6 (1) (b) GDPR.

Payment Service Providers & Credit Checks

Use of PayPal

We use the payment service PayPal, provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal, L-2449 Luxembourg; "PayPal"), on our website. This data processing serves the purpose of enabling us to offer you payment via this payment service. When you select and use payment via PayPal, the data required for payment processing is transmitted to PayPal in order to fulfil the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6 (1) (b) GDPR.

All PayPal transactions are subject to the PayPal Privacy Statement. This can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Use of PayPal Plus

We use the payment service PayPal Plus, provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal, L-2449 Luxembourg; "PayPal"), on our website. This data processing serves the purpose of enabling us to offer you payment via this payment service. When you select and use payment via PayPal, credit card via PayPal, or direct debit via PayPal, the data required for payment processing is transmitted to PayPal in order to fulfil the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6 (1) (b) GDPR.

For certain payment methods such as credit card via PayPal or direct debit via PayPal, PayPal reserves the right to obtain a credit report based on mathematical-statistical procedures, using credit reporting agencies. For this purpose, PayPal transmits the personal data required for a credit check to a credit reporting agency and uses the information received on the statistical probability of non-payment for a balanced decision on establishing, performing, or terminating the contractual relationship. The credit report may include probability values (score values) calculated on the basis of scientifically recognised mathematical-statistical procedures, which take address data, among other things, into account in their calculation. Your legitimate interests are taken into account in accordance with statutory provisions. This data processing serves the purpose of a credit check for the initiation of a contract. Processing is carried out on the basis of Art. 6 (1) (f) GDPR, arising from our legitimate interest in protection against payment default when PayPal advances payment.

You have the right, for reasons arising from your particular situation, to object at any time to this processing of your personal data, based on Art. 6 (1) (f) GDPR, by notifying PayPal. Providing this data is necessary to conclude the contract using your chosen payment method. If it is not provided, the contract cannot be concluded using your chosen payment method.

Use of PayPal Express

We use the payment service PayPal Express, provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal, L-2449 Luxembourg; "PayPal"), on our website. This data processing serves the purpose of enabling us to offer you payment via PayPal Express. To integrate this payment service, PayPal must collect, store, and analyse data (e.g. IP address, device type, operating system, browser type, location of your device) when the website is accessed. Cookies may also be used for this purpose. These cookies allow your browser to be recognised.

The processing of your personal data is carried out on the basis of Art. 6 (1) (f) GDPR, arising from our legitimate interest in offering a customer-oriented range of payment methods. You have the right, for reasons arising from your particular situation, to object at any time to this processing of your personal data.

When you select and use PayPal Express, the data required for payment processing is transmitted to PayPal in order to fulfil the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6 (1) (b) GDPR. Further information on data processing when using PayPal Express can be found in the corresponding privacy statement at www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS.

Data Collection and Processing for Credit Checks

If we advance payment, e.g. for payment by invoice or direct debit, we reserve the right to obtain a credit report based on mathematical-statistical procedures, using Creditreform Leipzig KG, Hahnekamm 1, 04003 Leipzig. For this purpose, we transmit the personal data required for a credit check to them and use the information received on the statistical probability of non-payment for a balanced decision on establishing, performing, or terminating the contractual relationship. The credit report may include probability values (score values) calculated on the basis of scientifically recognised mathematical-statistical procedures, which take address data, among other things, into account in their calculation. Your legitimate interests are taken into account in accordance with statutory provisions. This data processing serves the purpose of a credit check for the initiation of a contract. Processing is carried out on the basis of Art. 6 (1) (f) GDPR, arising from our legitimate interest in protection against payment default when we advance payment. You have the right, for reasons arising from your particular situation, to object at any time to this processing of your personal data, based on Art. 6 (1) (f) GDPR, by notifying us. Providing this data is necessary to conclude the contract using your chosen payment method. If it is not provided, the contract cannot be concluded using your chosen payment method.

Cookies

Our website uses cookies. Cookies are small text files that are stored in or by your internet browser on your computer system. When you visit a website, a cookie may be stored on your device's operating system. This cookie contains a characteristic string of characters that allows the browser to be uniquely identified when the website is accessed again.

Cookies are stored on your device. You therefore have full control over the use of cookies. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are set and decide individually whether to accept them, as well as prevent the storage of cookies and the transmission of the data they contain. Cookies already stored can be deleted at any time. However, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent.

You can find information on how to manage (including disable) cookies in the most common browsers at the following links:

Chrome: https://support.google.com/accounts/answer/61416 Microsoft Edge: https://support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09 Mozilla Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences Safari: https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Technically Necessary Cookies

Unless otherwise stated elsewhere in this privacy policy, we only use these technically necessary cookies for the purpose of making our offering more user-friendly, effective, and secure. Cookies also enable our systems to recognise your browser after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary for the browser to be recognised even after a page change.

The use of cookies or comparable technologies is carried out on the basis of § 25 (2) TDDDG (German Telecommunications Digital Services Data Protection Act). The processing of your personal data is carried out on the basis of Art. 6 (1) (f) GDPR, arising from our legitimate interest in ensuring the optimal functionality of the website as well as a user-friendly and effective design of our offering.

You have the right, for reasons arising from your particular situation, to object at any time to this processing of your personal data.

Data Subject Rights and Retention Period

Duration of Storage

After the contract has been fully processed, data is initially stored for the duration of the warranty period, and thereafter in compliance with statutory retention periods, in particular under tax and commercial law, before being deleted once these periods expire, unless you have consented to further processing and use.

Rights of the Data Subject

Provided the statutory requirements are met, you have the following rights under Art. 15 to 20 GDPR: the right to information, rectification, erasure, restriction of processing, and data portability.

Furthermore, under Art. 21 (1) GDPR, you have the right to object to processing based on Art. 6 (1) (f) GDPR, as well as to processing for the purposes of direct advertising.

Right to Lodge a Complaint with the Supervisory Authority

Under Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not lawful.

You may lodge a complaint with, among others, the supervisory authority responsible for us, which can be reached at:

Saxon Data Protection and Transparency Commissioner (Sächsische Datenschutz- und Transparenzbeauftragte) Devrientstraße 5 01067 Dresden, Germany Phone: +49 351 85471101 Fax: +49 351 85471109 Email: saechsdsb@slt.sachsen.de

Right to Object

Where the personal data processing operations listed here are based on our legitimate interest under Art. 6 (1) (f) GDPR, you have the right to object at any time, for reasons arising from your particular situation, to such processing with effect for the future.

Following an objection, processing of the affected data will cease unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or unless the processing serves the establishment, exercise, or defence of legal claims.

If personal data is processed for direct advertising purposes, you may object to this processing at any time by notifying us. Following an objection, we will stop processing the affected data for direct advertising purposes.

Last updated: 21.09.2026