The controller as defined by the General Data Protection Regulation, other data protection laws applicable in Member States of the European Union and other provisions relating to data protection is Geba-Autoteile GmbH, Wiedstrasse 8, 53560 Vettelschoss, Germany,, represented by the General Manager Frank Herrmann (hereinafter referred to as the “controller” or “we” or “us”)

A. General information about data processing

1.) Personal data

Personal data are individual items of information about personal or material circumstances of a particular or identifiable natural person. They include information such as name, address, telephone number and email address, and also the IP address assigned to a device. Information not directly associated with a person – for example favourite websites or the number of site users – is not personal data.

2.) Scope of processing of personal data

It is our policy only to collect and use the personal data of our users only when it is necessary for the provision of a functional website and for our content and services. Collection and use of our users’ personal data normally takes place only after they have given their consent. An exception is made in cases where there are objective reasons making it impossible to obtain consent in advance and where processing of the data is permitted by statutory regulations.

3.) The legal basis for processing personal data

Where we obtain the consent of data subjects for processing his or her personal data, we do so on the legal basis of the General Data Protection Regulation (GDPR) Art. 6 (1).

The legal basis is GDPR Art. 6 (1) b whenever personal data are processed which are required for the performance of a contract concluded with the contracting party as the data subject. This also applies to processing operations required to carry out pre-contractual measures.

Where processing is necessary to safeguard a legitimate interest of our company or of a third party, and if the interests, basic rights and fundamental freedoms of the data subject do not outweigh the aforementioned legitimate interest, GDPR Art. 6 (1) f is the legal basis for processing.

4.) Erasure of data and duration of storage

Personal data of the data subject are generally erased or blocked as soon as the purpose of storage no longer applies. Storage beyond this point can only take place if this is provided for by European or national legislation in the form of EU regulations, laws or other provisions to which our company is subject. Data are also blocked or erased if a storage period specified by the above-mentioned standards expires, unless further storage of the data is necessary for the conclusion or performance of a contract.

B. Provision of the website and creation of log files

Whenever our website is accessed, we record data and information via an automated system.

The following data are collected in this connection:

  1. Information about the browser type and version used
  2. The user’s operating system
  3. The user’s internet service provider
  4. The user’s IP address
  5. Time and date of access
  6. Websites from which the user’s system has accessed our website (the referrer)
  7. Websites accessed by the user’s system via our website

These data are stored in our system's log files, but they are not stored together with the user's other personal data.

Legal basis for data processing

The legal basis for temporary storage of the data and log files is GDPR Art. 6 (1) f

Purpose of data processing
Temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. For this purpose the user’s IP address must be stored for the duration of the session

and is stored in log files to ensure the operability of the website. The data also serve to optimise the website and security of our IT systems. There is no analysis of the data for marketing purposes in this connection.

These purposes also include our legitimate interest in data processing in accordance with GDPR Art. 6 (1) f.

Duration of storage
The data are erased as soon as they are no longer required to achieve the purpose for which they were obtained. Where data are recorded for the provision of the website, this is the case as soon as each session terminates.

If data are stored in log files, this is the case after seven working days at the latest. If storage needs to go beyond that point, the users’ IP addresses are erased or scrambled, so that it is no longer possible to identify the relevant client that accessed the site.

Options of objection and elimination
The delivery and operation of the website make it necessary to record the data and to store them in log files. This procedure is therefore not open to objection on the part of the user.

C. Use of cookies

Cookies are small text files that are kept on your computer and stored by your browser. During your visit to a website, specific information can thus be saved to your computer, relating to you as the user. Cookies help to determine the frequency of use and the number of users of a website, and to design the website with maximum user convenience and efficiency.

Our website https://www.geba-autoteile.de does not use cookies.

Such cookies are, however, used by our partner, tecAlliance GmbH, Steinheilstrasse 10, 85737 Ismaning, Germany (hereinafter: tecAlliance). Cookies are set when you click on the “Products” page of our website and are then taken to our product catalogue, whereupon you are shown our products on the page https://www.web.tecalliance.net/geba-autoteile/de/home.

By accessing the product page, you give your consent to a procedure whereby our partner tecAlliance uses the following cookies for the purposes described below. When you visit the website https://www.web.tecalliance.net/geba-autoteile/de/home, the relevant sole controller with responsibility for data processing is tecAlliance GmbH, Steinheilstrasse 10, 85737 Ismaning, Germany. Click here for the Privacy Policy of tecAlliance: https://www.tecalliance.net/en/data-privacy-cookies/

Firstly, tecAlliance uses session cookies which are only stored for the duration of your visit to the product webpage. Session cookies are erased automatically as soon as you leave this page.

Secondly, tecAlliance uses permanent cookies to obtain information about visitors who visit this product page repeatedly. The purpose of these cookies is to offer you the best possible user interface, to recognise you and, if you access the page repeatedly, to provide you with maximum variety on this page and to present new products. The content of a permanent cookie is limited to the identification number. Name, IP address etc. are not stored. No individual profile is created relating to your user habits.

Legal basis for data processing
The legal basis for processing personal data through the use of technically necessary cookies is GDPR Art. 6 (1) f.

Provided that the user has given his or her consent, the legal basis for processing personal data through the use of cookies for analytical purposes is GDPR Art. 6 (1) a.

Purpose of data processing
The purpose of technically necessary cookies is to make it easier to use a website. Some functions of our product page cannot be implemented without the use of cookies. Your browser therefore needs to be recognised even after you have visited another page.

We need to use cookies for the following purposes:

  • Use of previous language settings
  • Remembering search terms

User data obtained via technically necessary cookies are not used for drawing up user profiles.

Analytical cookies are used to improve the quality of the product page and its content. Analytical cookies tell tecAlliance how the product page is used, so that it can continually optimise its content. These purposes also include a legitimate interest in processing personal data in accordance with GDPR Art. 6 (1) f.

The sole controller with responsibility for such data collection and processing is tecAlliance.

Duration of storage
Cookies are stored on the user's computer and transferred from it to our website. As the user, you therefore have full control of the use of cookies. You can disable or restrict the sending of cookies by changing your browser settings. Cookies already stored may be erased at any time, and this can also be done automatically.

Options of objection and elimination
Our website can also be used without cookies. You can disable the storage of cookies in your browser, limit them to certain websites or set your browser in such a way that you are notified as soon as a cookie is sent.

D. Contacting us by email or via a contact form

Our website has a contact form which you can use to contact us electronically. Alternatively, you can contact us via the email address provided.

Whenever you contact us via the contact form, the system automatically sends us your name, phone number, email address and message. Use of the contact form also involves storage of your IP address and of the time and date of your message.

When you submit a message, the procedure also includes obtaining your consent to data processing, and your attention is drawn to this Privacy Policy.

When you send us an email, we receive not only your email address and message, but also your sender ID in the email header.

These data are used exclusively for processing our written interaction.

Legal basis for data processing
Where the user has given his or her consent, the legal basis for data processing is GDPR Art. 6 (1) a.

When an email is sent, the legal basis for data processing is GDPR Art. 6 (1) f. If email contact is made for the purpose of concluding a contract, the additional legal basis for data processing is GDPR Art. 6 (1) b.

Purpose of data processing
The processing of personal data via the input dialogue in the contact form only allows us to process the contact and to respond to the enquiry. Contact by email also gives rise to a necessary legitimate interest in processing the data.

The other personal data processed during the submission process serve to prevent misuse of the contact form and to safeguard the security of our IT systems.

Duration of storage
The data are erased after the expiry of the relevant retention period stipulated under trade law and fiscal law.

Additional personal data collected during the submission process are erased no later than after a period of seven days.

Options of objection and elimination
Once you have given your consent to the processing of your personal data, you can revoke your consent at any time. When you contact us by email, you may refuse to allow storage of your personal data at any time. In such a case, however, written interaction cannot be continued. You can revoke consent by sending an email or by contacting us by post.

In such a case we will erase all personal data stored during the period when we had contact.

E. Use of Google Analytics

The product page provided by tecAlliance also uses the functions of the web analysis service Google Analytics. The provider is Google Inc. 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Google Analytics also uses cookies. Cookies allow an analysis of the way you use a given website. The information about your use of the product page, as generated by the cookie, is normally sent to a Google server in the USA and stored there.

However, as IP anonymisation has been enabled, your IP address will first be truncated by Google within the Member States of the European Union or in other states that are parties to the Agreement on the European Economic Area. The full IP address will only be sent to a Google server in the USA and truncated there in exceptional cases. The IP address sent by your browser for use by Google Analytics will not be merged with other Google data.

Legal basis for data processing

The legal basis for the temporary storage and sending of data to Google is GDPR Article 6 (1) f. The legitimate interest of tecAlliance in using Google Analytics is to obtain details of users’ locations and preferences, so that we can improve the service.

Purpose of data processing
Acting at the request of tecAlliance, Google will use the collected information to analyse the use of the website, to compile reports about site activities and to provide further services associated with site use and internet use for tecAlliance.

The sole controller with responsibility for data processing is tecAlliance.

Duration of storage
As the anonymisation tool has been enabled, personal data will be erased as soon as they have been collected.

Options of objection and elimination

You can prevent the storage of cookies through a suitable setting in your browser software. Furthermore, if you wish to prevent the recording of data generated by cookies and related to your site use (incl. your IP address) for Google and if you wish to opt out of such data being processed by Google, you can download and install a browser plug-in from the following link: https://tools.google.com/dlpage/gaoptout?hl=en

Click here for the tecAlliance Privacy Policy: https://www.tecalliance.net/en/data-privacy-cookies/

F. Rights of the data subject

If your personal data are processed, you are the data subject as defined in GDPR, and you have the following rights towards us (“the controller”):

1.) Right to information

You have the right to obtain confirmation as to whether we process personal data relating to you.

If this is the case, you may require us to provide the following information:

  1. The purposes for which personal data are processed
  2. The categories of personal data processed
  3. The recipients or categories of recipients to whom personal data relating to you have been or will be disclosed
  4. The planned duration for the storage of your personal data or, if it is not possible to provide any specific information about this, criteria to determine the duration of storage
  5. The availability of a right to correction or erasure of your personal data, of a right to restriction of processing by the controller or a right to object to this processing
  6. The availability of the right to lodge a complaint with a regulatory authority
  7. All available information about the origin of the data in cases where personal data have not been obtained from the data subject
  8. The availability of automated decision-making including profiling as detailed in GDPR Art. 22 (1) and (4) and – at least in these cases – conclusive information about the logic involved as well as the implications and the intended effects of such processing for the data subject.

You are entitled to obtain information whether personal data relating to you are sent to a third country or an international organisation. In this context you may demand information about suitable guarantees concerning the sending of data in accordance with GDPR Art. 46.

2.) Right to rectification

You have the right to rectification and/or completion if personal data relating to you are inaccurate or incomplete.

3.) Right to erasure

3.1) You are entitled to require from us that personal data relating to you be erased immediately, whereupon we must delete these data immediately, provided that one of the following reasons applies:

  1. The personal data relating to you are no longer needed for the purposes for which they were obtained or otherwise processed.
  2. You revoke your consent on which the processing was based in accordance with GDPR Art. 6 (1) a or Art. 9 (2) a, and there is no other legal basis for processing.
  3. You lodge an objection in accordance with GDPR Art. 21 (1) against processing and there are no overriding legitimate grounds for processing, or you lodge an objection against processing in accordance with GDPR Art. 21 (2).
  4. The personal data relating to you have been processed illegally.
  5. Erasure of the personal data relating to you is required for the performance of a legal obligation in the European Union or Member State law to which we are subject.
  6. The personal data relating to you were obtained in relation to information society services in accordance with GDPR Art. 8 (1).

3.2) You do not have any right to erasure if processing is necessary

  1. to exercise the right to freedom of expression and information
  2. to perform a legal obligation that requires processing under EU law or the law of the Member States to which we are subject or to carry out a task that is in the public interest or that is carried out in the exercise of official authority bestowed on us
  3. for reasons of public interest relating to public health in accordance with GDPR Art. 9 (2) h and i as well as Art. 9 (3)
  4. for archiving purposes in the public interest, scientific or historic research purposes or for statistical purposes in accordance with GDPR Art. 89 (1) where this right, specified in (1), is expected to render realisation of these processing objectives impossible or to seriously impede them, or
  5. for the establishment, exercise or defence of legal claims

4.) Right to restriction of processing

You can demand restriction of processing of personal data relating to you under the following conditions:

  1. to dispute the accuracy of the personal data relating to you for a period of time that allows us to check whether the personal data are accurate;
  2. if processing is unlawful, and you disagree to erasure of the personal data and instead demand restriction of use of the relevant personal data;
  3. if we no longer need the personal data for the purposes of processing, but you nevertheless require them for the establishment, exercise or defence of legal claims; or
  4. if you have lodged an objection against processing in accordance with GDPR Art. 21 (1), and it has not yet been established whether our legitimate interests outweigh your reasons.

If processing of the personal data relating to you has been restricted, these data may – apart from storage – be processed only with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural person or legal entity or for reasons of important public interest of the European Union or of a Member State.

If processing has been restricted under the above conditions, we will inform you accordingly before the restrictions are lifted.

5.) Right to be informed

If you have asserted a right to rectification, erasure or restriction of processing, we are required to notify all recipients to whom the personal data relating to you have been disclosed, notifying them of this rectification or deletion of data or restriction of processing, unless such notification proves to be impossible or entails inordinate expenditure or an inordinate amount of time.

You also have the right to be informed about these recipients.

6.) Right to data portability

You have the right to receive the personal data relating to you, which you have provided to us, in a structured, common, machine-readable format. You also have the right to transfer such data to another controller if

  1. processing is based on consent in accordance with GDPR Art. 6 (1) a or GDPR Art. 9 (2) a or on a contract in accordance with GDPR Art. 6 (1) b and
  2. processing is carried out automatically.

When exercising this right you also have the right to arrange to send the personal data relating to you directly from another controller provided that this is technically feasible. Rights and freedoms of other persons must not be adversely affected by this.

The right to data portability does not apply to processing of personal data required to carry out a task in the public interest or which is carried out in the exercise of the controller's official authority.

7.) Right of objection

You have the right, for reasons arising from your particular situation, to lodge an objection at any time to processing of personal data relating to you on the basis of GDPR Art. 6 (1) e or f; this also applies to profiling based on these provisions.

Once we have received your objection, we will no longer process the personal data relating to you unless we can prove compelling reasons for processing that warrant protection and which outweigh your interests, rights and freedoms, or unless processing serves the purpose of establishing, exercising or defending legal claims.

If the personal data relating to you is processed for the purpose of direct advertising, you have the right at any time to lodge an objection to it; this also applies to profiling in cases where it is closely connected with such direct advertising.

If you object to processing for direct advertising purposes, the personal data relating to you will no longer be used for such purposes.

8.) Right to revoke the declaration of consent under data protection law

You have the right to revoke your declaration of consent under data protection law at any time. Revocation of consent does not affect the legality of processing carried out on the basis of consent up to the time of revocation.

9.) Right to lodge a complaint with a regulatory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a regulatory authority, more specifically in the Member State of your habitual residence, place of work or the place of the alleged infringement, if you consider that the processing of personal data relating to you infringes GDPR.

Scroll to Top