Privacy Policy

The following text serves to inform you about the processing of your personal data, which is carried out by us when using our website.

Data Controller

GK Software SE

Waldstrasse 7
08261 Schöneck
Germany

Tel.: +49 (0)3 74 64 84 - 0
Fax: +49 (0)3 74 64 84 - 15
Email: This email address is being protected from spambots. You need JavaScript enabled to view it.

Chairman of the Supervisory Board: Dr. Philip Reimann
Management Board: Dipl.-Ing. Rainer Gläß (CEO), Dipl.-Kfm. André Hergert

Commercial Register Chemnitz HRB 31501
VAT ID: DE 141 093 347

ITC - Data Protection Team

If you have a data protection-related inquiry (contracts/inquiries about data protection, etc.), please send an email to This email address is being protected from spambots. You need JavaScript enabled to view it.

Our team will take care of your request as soon as possible.

Please note: If you want to specifically contact the data protection officer (DPO), please send a message to This email address is being protected from spambots. You need JavaScript enabled to view it..

We process your personal data in the following cases:

Visit to Website

When you visit our website, the browser used on your end device automatically sends information to our website server. This information is temporarily stored in a log file. The following information is collected without any action on your part and stored until it is automatically deleted:

• IP address of the accessing computer
• Date and time of access
• Name and URL of the retrieved file
• Website, as well as subpages, from which access is made (referrer URL)
• Browser used, the operating system of your computer, if applicable, and the name of your access provider

We process the aforementioned data for the following purposes:

• To ensure a reliable connection to the website
• To ensure a user-friendly experience with our website
• To evaluate the system security and stability
• For other administrative purposes

Legal basis of data processing:

• The legal basis for processing data is Article 6, Paragraph 1, Item 1f, GDPR. Our legitimate interest results from the data collection purposes listed above. Under no circumstances do we use the collected data to draw conclusions about you.

Duration of data processing:

• 14 days

Contact / Contact Form

On our website, we provide a form which can be used to contact us. Some information is required (these are marked as mandatory fields) so that we know, among other things, who the request comes from and how we can answer it. Additional information can be entered voluntarily in a free text field. The following information is collected:

• Last name, first name
• Subject, message
• Email address
• Other voluntary information

We process the aforementioned data for the following purposes:

• When using the online contact form, certain personal data is collected. You can see which data is collected by visiting https://www.gk-software.com/de/unternehmen/kontakt. In addition, contact can be made by email. This data is stored and used to respond to your request, to contact you, and for the technical administration required for this.

Legal basis of data processing:

• The legal basis for the processing of this data is our legitimate interest in responding to your request in accordance with Article 6, Paragraph 1f, GDPR. If the aim of contacting us is the conclusion of a contract, the additional legal basis for processing the data is Article 6, Paragraph 1b, GDPR.

Duration of data processing:

• Your data will be deleted after your request has been fully processed. This is the case if it is clear from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.

Newsletter

It is possible to subscribe to our newsletter on our website. When you register for our newsletter, we collect the following information:

• Email address
• Title, last name and first name

We process the aforementioned data for the following purposes:

• To send news/information

Legal basis of data processing:

• The legal basis for the processing of this data is your consent in accordance with Article 6, Paragraph 1, Item 1a, GDPR (double opt-in procedure)

Duration of data processing:

• Data is stored until consent is withdrawn

Download of the Gartner Report

The Gartner report offers essential insights and advice for every business leader. It also provides new practical insights from the leading international research and consulting firm. We collect the following information:

• Email address
• Title, last name and first name
• Company

We process the aforementioned data for the following purposes:

• Your data will be used to provide you with the downloaded documents.

Legal basis of data processing:

• The legal basis for the processing of this data is your consent in accordance with Article 6, Paragraph 1, Item 1a, GDPR

Duration of data processing:

• The data will only be stored as long as the purpose and your consent are given.

Withdrawal of consent:

• You can withdraw your consent to the processing of your personal data at any time in the future by sending an email to This email address is being protected from spambots. You need JavaScript enabled to view it..

Use of Cookies

We use cookies so that you can make the best use of our website. Cookies necessary for the operation of the site are set. Cookies are small files that your browser automatically creates and that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our website.

Specifically, these are the following cookies:

We process the aforementioned data for the following purposes:

• Technically required cookies enable optimal use of the website
• The user data collected through technically required cookies are not used to create user profiles

Legal basis of data processing:

• The legal basis for the processing of personal data using cookies is Article 6, Paragraph 1a, GDPR, for cookies requiring consent.

Duration of data processing:

• Cookies are stored on the user's computer and transmitted from it to our site. Therefore, as a user, you also have full control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transfer of cookies. Cookies that have already been saved can be deleted at any time. This can also be automated. Matomo is disabled when you visit our website. Your usage behavior will only be recorded anonymously if you actively consent.

Event Registrations

It is possible to register for events and fairs and to make an appointment with us via our website. Some information is required (these are marked as mandatory fields) so that we know, among other things, who the request comes from and how we can answer it. Additional information can be entered voluntarily in a free text field. The following information is collected:

• Last name, first name
• Company
• Email address
• Other voluntary information

We process the aforementioned data for the following purposes:

• This data is stored and used to respond to your request, to contact you, or to arrange an appointment, and for the technical administration required for this.

Legal basis of data processing:

• The legal basis for the processing of this data is Article 6, Paragraph 1b, GDPR, as part of pre-contractual measures and for the potential conclusion of a contractual relationship (presales)
• The legal basis for the processing of this data is our legitimate interest in responding to your request in accordance with Article 6, Paragraph 1f, GDPR
• If your data is transferred to a third country, the legal basis is Article 49, Paragraph 1, Sentence 1b, GDPR

Duration of data processing:

• Your data will be deleted after your request has been fully processed. This is the case if it is clear from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.

Online Seminars

It is possible to register for online seminars (lead generation) or to make an appointment with us via our website. Some information is required (these are marked as mandatory fields) so that we know, among other things, who the request comes from and how we can answer it. The tool "GoTo" is used for this purpose (further information is available at https://www.goto.com/de/company/legal/privacy). The following information is collected by our subsidiary GK Artificial Intelligence for Retail AG (GKAIR):

• Last name, first name
• Company
• Email address
• Job title
• Other voluntary information

We process the aforementioned data for the following purposes:

• The data is processed for the purpose of conducting customer training (lead generation)

Legal basis of data processing:

• The legal basis for the processing of this data is Article 6, Paragraph 1b, GDPR

Duration of data processing:

• Your data will be stored for 3 years after completion of the tuition and invoicing in accordance with Section 195 BGB (German Civil Code).

Web Analysis by Matomo

We use the open source software tool Matomo on our website to analyze the surfing behavior of our users. This is an open source tool for web analysis. Matomo does not transmit any data to servers that are outside of our control. Matomo does not collect session data without your consent. We collect the following information:

• Information such as user dwell time, device used, operating system, language setting, origin, region, location, or user actions
• Your IP address is anonymized before being stored

We process the aforementioned data for the following purposes:

• We use such procedures to statistically measure the reach of our website

Legal basis of data processing:

• The legal basis for the data processing is Article 6, Paragraph 1a, GDPR

Duration of data processing:

• The statistical evaluations of the anonymous user data are deleted after 6 months
• The cookie set on your device is stored for 7 days

Protection Against Disruptions and Misuse and Improvement of the Website

This website uses services from "Cloudflare" (Provider: Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). Cloudflare operates a Content Delivery Network (CDN) and provides protection features (web application firewall) for the website. The data transfer between your browser and our servers flows through Cloudflare's infrastructure and is analyzed there to prevent attacks. Cloudflare uses cookies for this purpose to enable you to access our website. The use of Cloudflare is in the interest of a safe use of our website and the defense against harmful attacks from the outside. For more information, please see the Cloudflare Privacy Policy https://www.cloudflare.com/de-de/privacypolicy/

The following information is collected:

• IP address
• Date and time at which the website was called

We process the aforementioned data for the following purposes:

• Determining and tracking of malfunctions or misuse of our websites or telecommunication services and equipment and to improve the performance of our website.

Legal basis of data processing:

• The legal basis for the data processing is Article 6, Paragraph 1f, GDPR

Duration of data processing:

• Up to 7 days

Integration of External Content and External Service Providers

Integration of YouTube Videos

It may be the case that we embed YouTube videos on our website. To ensure that these can be viewed in a manner that complies with data protection, we have implemented a "two-click solution" or user-friendly button. This means that the content of the video can only be viewed if either consent is given by you within our consent tool for external content or you deliberately click on the video. A cookie is set when doing so.

The operator of the corresponding plugin is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. When you watch the video, a connection to YouTube servers is established. This tells YouTube which pages you are visiting. If you are logged into your YouTube account, YouTube can assign your surfing behavior to you personally. You can prevent this by logging out of your YouTube account beforehand.

If you have deactivated the saving of cookies for the Google Ad program, you will not have to deal with such cookies when watching YouTube videos. However, YouTube also stores non-personal usage information in other cookies. If you want to prevent this, you must block the storage of cookies in the browser.

For more information on data protection at "YouTube", please refer to the provider's privacy policy at https://www.google.de/intl/de/policies/privacy/

Integration of OpenStreetMap

This website uses the "Open Street Maps" service of the OpenStreetMap community (openstreetmap.org).

Usage records are created by the API we use, which is provided by OpenStreetMap. To our knowledge, OpenStreetMap collects information about the browser used or the interaction with the website, including IP address, browser and device type, operating system, referring website, date and time, and pages viewed on the website.

In addition, OpenSteetMap could use software to track user interaction that creates additional user activity records, e.g. Matomo.

OpenStreetMap states that it uses the collected information as follows:

• To support the operation of the services from a technical, security, and planning perspective.
• As anonymized, aggregated data for research and other purposes. Such data may be publicly offered via https://planet.openstreetmap.org or other channels and used by third parties.
• To improve the OpenStreetMap dataset. For example, by analyzing Nominatim queries for missing addresses and postal codes and making such data available to the OSM community.

Data collected on the systems is accessible to system administrators and OSMF working groups, such as the Data Working Group. No personal information or information that can be linked to an individual will be disclosed to third parties unless required by law.

The IP addresses stored by Matomo are reduced to two bytes and the detailed usage data is kept for 180 days.

Because this storage is temporary, it is generally not possible for us to provide access to the IP addresses or the associated logs.

The aforementioned data is processed on the basis of a legitimate interest (see Article 6, Paragraph 1f, GDPR).

For more information about the privacy policy of the service provider OpenStreetMap, see https://wiki.osmfoundation.org/wiki/Privacy_Policy#Data_we_receive_automatically

Categories of Recipients of Personal Data

Your personal data is not transferred to third parties other than for the purposes listed in the following.

We only disclose your personal data to third parties if:

• You have given your express consent in accordance with Article 6, Paragraph 1, Sentence 1a, GDPR
• Disclosure in accordance with Article 6, Paragraph 1, Sentence 1a, GDPR is necessary to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data
• If there is a legal obligation to disclose the data in accordance with Article 6, Paragraph 1, Sentence 1c, GDPR
• It is permitted by law and is necessary to process contractual relationships with you in accordance with Article 6, Paragraph 1, Item 1b, GDPR

Data is only transferred to third countries if you have given us your consent.

Your Rights as a "Data Subject"

Right to object

If your personal data is processed on the basis of legitimate interests in accordance with Article 6, Paragraph 1, Item 1f, GDPR, you have the right to object to the processing of your personal data in accordance with Article 21 GDPR, provided that there are grounds for doing so that arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which will be implemented by us without the need to specify a particular situation.

If you wish to exercise your right of revocation or to object, simply send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. or write to GK Software SE, Waldstrasse 7, 08261 Schöneck/Vogtland.

The right of access, rectification, erasure and restriction of processing

The data subject has the right of access to the personal data concerned and the right to rectification, erasure or restriction of processing. Furthermore, they have the right to object to the processing. We would like to point out that we will delete your data if its storage is inadmissible (especially if the data is incorrect and a correction is not possible). Deletion will be replaced by blocking if there are legal or factual obstacles to this (for example, special retention obligations due to commercial and tax law requirements).

The right to data portability

The data subject has the right to data portability.

The right to complain to a supervisory authority

You have the right to complain to a supervisory authority.

Provision of personal data

There is no legal obligation for you to provide personal data.

Automated decision-making including profiling

We do not use any profiling measures on our website.

Privacy Policy for Social Networks

The company operates profiles on the following networks. From our website, we only link to our profiles on the respective social networks:

Facebook: https://www.facebook.com/GKSoftwareSE/Twitter: https://twitter.com/gk_software_se
Instagram: https://www.instagram.com/gksoftware/
LinkedIn: https://www.linkedin.com/company/gk-software
Xing: https://www.xing.com/company/gksoftware

The providers of the various platforms are primarily responsible for providing the data subject with information about the processing operations and enabling them to exercise their data protection rights. Irrespective of this, we would like to inform you about our appearance on social networks. We recommend that you do not send us any sensitive data via these profiles. Please use a direct communication channel for this purpose.

All of the data that you enter on our social network profiles (e.g.: comments, pictures, private messages, etc.) are published by the platform operators and are used by us exclusively for the purposes stated below.

The legal basis for this is Article 6, Paragraph 1f, GDPR. The legitimate interest is based on public relations, on providing up-to-date information and on the possibility to interact with our visitors and contact applicants (Xing, LinkedIn) via GK accounts.

Data processing by the operators of social networks

When you call up our profiles, data is processed by the operator of the platform. The form in which this happens cannot be influenced by us, nor can we see it. However, the procedure usually depends on whether you yourself are registered with the platform. It is possible that the providers process the data outside the EU. This means that we cannot guarantee an approach that is in compliance with the GDPR.

You can find more information on the data processing performed by the individual platform operators in their privacy policies:

• Facebook: Social network; service provider: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, parent company: Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA; Website: https://www.facebook.com; Privacy policy: https://www.facebook.com/about/privacy;Opt-Out: Advertising settings: https://www.facebook.com/settings?tab=ads; Additional notes on data protection: Agreement on the joint processing of personal data on Facebook pages https://www.facebook.com/legal/terms/page_controller_addendum, data protection statement for Facebook pages: https://www.facebook.com/legal/terms/information_about_page_insights_data.
• Instagram: Social network; service provider: Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA; Website: https://www.instagram.com; Privacy policy: http://instagram.com/about/legal/privacy.
• Twitter: Social network; service provider: Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA; Privacy policy: https://twitter.com/de/privacy, (Settings) https://twitter.com/personalization;
• LinkedIn: Social network; service provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland; Website: https://www.linkedin.com; Privacy policy: https://www.linkedin.com/legal/privacy-policy; Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
• Xing: Social network; service provider: XING AG, Dammtorstrasse 29-32, 20354 Hamburg, Germany; Website https://www.xing.de; Privacy policy https://privacy.xing.com/de/datenschutzerklaerung.

Validity and Changes to this Privacy Policy

This privacy policy is currently valid and was updated in August 2022.

Due to the further development of our website and offers on it or due to changed legal or regulatory requirements, it may become necessary to change this privacy policy. You can access and print out the current privacy policy from the website at any time.