No result found for the given text
Privacy Policy
Processing your personal data, when using our website
The following text serves to inform you about the processing of your personal data, which is carried out by us when using our website.

 

Data Controller

GK Software SE

Waldstrasse 7
08261 Schöneck
Germany

Tel.: +49 (0)3 74 64 84 - 0
Fax: +49 (0)3 74 64 84 - 15
Email: This email address is being protected from spambots. You need JavaScript enabled to view it.

Chairman of the Supervisory Board: Mikihito Saito
Management Board: Michael Scheibner (CEO), Michael Jaszczyk

Commercial Register Chemnitz HRB 31501
VAT ID: DE 141 093 347

 

ITC - Data Protection Team

If you have a data protection-related inquiry (contracts/inquiries about data protection, etc.), please send an email to This email address is being protected from spambots. You need JavaScript enabled to view it.

Our team will take care of your request as soon as possible.

Please note: If you want to specifically contact the data protection officer (DPO), please send a message to This email address is being protected from spambots. You need JavaScript enabled to view it..

 

We process your personal data in the following cases:

Visit to Website

When you visit our website, the browser used on your end device automatically sends information to our website server. This information is temporarily stored in a log file. The following information is collected without any action on your part and stored until it is automatically deleted:

  • IP address of the accessing computer
  • Date and time of access
  • Name and URL of the retrieved file
  • Website, as well as subpages, from which access is made (referrer URL)
  • Browser used, the operating system of your computer, if applicable, and the name of your access provider

 

We process the aforementioned data for the following purposes:

  • To ensure a reliable connection to the website
  • To ensure a user-friendly experience with our website
  • To evaluate the system security and stability
  • For other administrative purposes

 

Legal basis of data processing:

  • The legal basis for processing data is Article 6, Paragraph 1, Item 1f, GDPR. Our legitimate interest results from the data collection purposes listed above. Under no circumstances do we use the collected data to draw conclusions about you.

 

Duration of data processing:

  • 14 days

 

Contact / Contact Form

On our website, we provide a form which can be used to contact us. Some information is required (these are marked as mandatory fields) so that we know, among other things, who the request comes from and how we can answer it. Additional information can be entered voluntarily in a free text field. The following information is collected:

  • Last name, first name
  • Subject, message
  • Email address
  • Other voluntary information

 

We process the aforementioned data for the following purposes:

  • When using the online contact form, certain personal data is collected. You can see which data is collected by visiting https://www.gk-software.com/de/unternehmen/kontakt. In addition, contact can be made by email. This data is stored and used to respond to your request, to contact you, and for the technical administration required for this.

 

Legal basis of data processing:

  • The legal basis for the processing of this data is our legitimate interest in responding to your request in accordance with Article 6, Paragraph 1f, GDPR. If the aim of contacting us is the conclusion of a contract, the additional legal basis for processing the data is Article 6, Paragraph 1b, GDPR.

 

Duration of data processing:

  • Your data will be deleted after your request has been fully processed. This is the case if it is clear from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.

 

Newsletter

It is possible to subscribe to our newsletter on our website. When you register for our newsletter, we collect the following information:

  • Email address
  • Title, last name and first name

 

We process the aforementioned data for the following purposes:

  • To send news/information

 

Legal basis of data processing:

  • The legal basis for the processing of this data is your consent in accordance with Article 6, Paragraph 1, Item 1a, GDPR (double opt-in procedure)

 

Duration of data processing:

  • Data is stored until consent is withdrawn

 

Downloads of reports, product information and information material

We collect the following information:

  • Email address
  • Title, last name and first name
  • Company

 

We process the aforementioned data for the following purposes:

  • Your data will be used to provide you with the downloaded documents.

 

Legal basis of data processing:

  • The legal basis for the processing of this data is your consent in accordance with Article 6, Paragraph 1, Item 1a, GDPR

 

Duration of data processing:

  • The data will only be stored as long as the purpose and your consent are given.

 

Withdrawal of consent:

  • You can withdraw your consent to the processing of your personal data at any time in the future by sending an email to This email address is being protected from spambots. You need JavaScript enabled to view it..

 

Use of Cookies

We use cookies so that you can make the best use of our website. Cookies necessary for the operation of the site are set. Cookies are small files that your browser automatically creates and that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our website.

Specifically, these are the following cookies:

The cookies on this website are deactivated. Only the functionally necessary cookies will be set.
This decision can be reversed at any time by clicking the “Allow all cookies” button below or changing your selection in the Cookies Manager.

 

We process the aforementioned data for the following purposes:

  • Technically required cookies enable optimal use of the website
  • The user data collected through technically required cookies are not used to create user profiles

 

Legal basis of data processing:

  • The legal basis for the processing of personal data using cookies is Article 6, Paragraph 1a, GDPR, for cookies requiring consent.

 

Duration of data processing:

  • Cookies are stored on the user's computer and transmitted from it to our site. Therefore, as a user, you also have full control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transfer of cookies. Cookies that have already been saved can be deleted at any time. This can also be automated. Matomo is disabled when you visit our website. Your usage behavior will only be recorded anonymously if you actively consent.

 

Event Registrations

It is possible to register for events and fairs and to make an appointment with us via our website. Some information is required (these are marked as mandatory fields) so that we know, among other things, who the request comes from and how we can answer it. Additional information can be entered voluntarily in a free text field. The following information is collected:

  • Last name, first name
  • Company
  • Email address
  • Other voluntary information

 

We process the aforementioned data for the following purposes:

  • This data is stored and used to respond to your request, to contact you, or to arrange an appointment, and for the technical administration required for this.

 

Legal basis of data processing:

  • The legal basis for the processing of this data is Article 6, Paragraph 1b, GDPR, as part of pre-contractual measures and for the potential conclusion of a contractual relationship (presales)
  • The legal basis for the processing of this data is our legitimate interest in responding to your request in accordance with Article 6, Paragraph 1f, GDPR
  • If your data is transferred to a third country, the legal basis is Article 49, Paragraph 1, Sentence 1b, GDPR

 

Duration of data processing:

  • Your data will be deleted after your request has been fully processed. This is the case if it is clear from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.

 

Online Seminars

It is possible to register for online seminars (lead generation) or to make an appointment with us via our website. Some information is required (these are marked as mandatory fields) so that we know, among other things, who the request comes from and how we can answer it. The tool "GoTo" is used for this purpose (further information is available at https://www.goto.com/de/company/legal/privacy). The following information is collected by our subsidiary GK Artificial Intelligence for Retail AG (GKAIR):

  • Last name, first name
  • Company
  • Email address
  • Job title
  • Other voluntary information

 

We process the aforementioned data for the following purposes:

  • The data is processed for the purpose of conducting customer training (lead generation)

 

Legal basis of data processing:

  • The legal basis for the processing of this data is Article 6, Paragraph 1b, GDPR

 

Duration of data processing:

  • Your data will be stored for 3 years after completion of the tuition and invoicing in accordance with Section 195 BGB (German Civil Code).

 

Web Analysis by Matomo

We use the open source software tool Matomo on our website to analyze the surfing behavior of our users. This is an open source tool for web analysis. Matomo does not transmit any data to servers that are outside of our control. Matomo does not collect session data without your consent. We collect the following information:

  • Information such as user dwell time, device used, operating system, language setting, origin, region, location, or user actions
  • Your IP address is anonymized before being stored

 

We process the aforementioned data for the following purposes:

  • We use such procedures to statistically measure the reach of our website

 

Legal basis of data processing:

  • The legal basis for the data processing is Article 6, Paragraph 1a, GDPR

 

Duration of data processing:

  • The statistical evaluations of the anonymous user data are deleted after 6 months
  • The cookie set on your device is stored for 7 days

 

 

Use of Salesforce Account Engagement

Our website uses Marketing Cloud Account Engagement (formerly Pardot), a marketing automation software from Salesforce.com, Inc, 415 Mission Street, San Francisco, CA 94105, USA, and its representative in the EU (salesforce.com Germany GmbH, Erika-Mann-Str. 31, 80636 Munich, Germany). This tool is used to record website interactions, analyze user behavior and optimize our marketing measures.

 

What data is processed?
Salesforce Account Engagement places cookies on your device to collect the following data

  • IP address
  • Browser and device information (e.g. browser type, operating system)
  • Visited pages and interactions (e.g. click path, page views)
  • Transmitted user input in forms (e.g. name, email address, address)

This data enables us to analyze your use of the website and to provide you with personalized content or offers by e-mail and/or online advertising.

 

Legal basis for data processing

For marketing purposes and tracking, voluntary consent is generally also required (Art. 6 para. 1 lit. a) GDPR). On our website, we obtain consent by means of a corresponding cookie banner before tracking cookies are set by Salesforce Account Engagement. You can revoke your consent at any time and prevent the storage of cookies in your browser settings. This may result in restrictions in the use of the website.

The processing is carried out on the basis of Art. 6 para. 1 lit. f) GDPR, as we have a legitimate interest in optimizing our website and our offer.

 

 

Protection Against Disruptions and Misuse and Improvement of the Website

This website uses services from "Cloudflare" (Provider: Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). Cloudflare operates a Content Delivery Network (CDN) and provides protection features (web application firewall) for the website. The data transfer between your browser and our servers flows through Cloudflare's infrastructure and is analyzed there to prevent attacks. Cloudflare uses cookies for this purpose to enable you to access our website. The use of Cloudflare is in the interest of a safe use of our website and the defense against harmful attacks from the outside. For more information, please see the Cloudflare Privacy Policy https://www.cloudflare.com/de-de/privacypolicy/

The following information is collected:

  • IP address
  • Date and time at which the website was called

 

We process the aforementioned data for the following purposes:

  • Determining and tracking of malfunctions or misuse of our websites or telecommunication services and equipment and to improve the performance of our website.

 

Legal basis of data processing:

  • The legal basis for the data processing is Article 6, Paragraph 1f, GDPR

 

Duration of data processing:

  • Up to 7 days

 

Integration of External Content and External Service Providers

Integration of YouTube Videos

It may be the case that we embed YouTube videos on our website. To ensure that these can be viewed in a manner that complies with data protection, we have implemented a "two-click solution" or user-friendly button. This means that the content of the video can only be viewed if either consent is given by you within our consent tool for external content or you deliberately click on the video. A cookie is set when doing so.

The operator of the corresponding plugin is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. When you watch the video, a connection to YouTube servers is established. This tells YouTube which pages you are visiting. If you are logged into your YouTube account, YouTube can assign your surfing behavior to you personally. You can prevent this by logging out of your YouTube account beforehand.

If you have deactivated the saving of cookies for the Google Ad program, you will not have to deal with such cookies when watching YouTube videos. However, YouTube also stores non-personal usage information in other cookies. If you want to prevent this, you must block the storage of cookies in the browser.

For more information on data protection at "YouTube", please refer to the provider's privacy policy at https://www.google.de/intl/de/policies/privacy/

 

Integration of OpenStreetMap

This website uses the "Open Street Maps" service of the OpenStreetMap community (openstreetmap.org).

Usage records are created by the API we use, which is provided by OpenStreetMap. To our knowledge, OpenStreetMap collects information about the browser used or the interaction with the website, including IP address, browser and device type, operating system, referring website, date and time, and pages viewed on the website.

In addition, OpenSteetMap could use software to track user interaction that creates additional user activity records, e.g. Matomo.

OpenStreetMap states that it uses the collected information as follows:

  • To support the operation of the services from a technical, security, and planning perspective.
  • As anonymized, aggregated data for research and other purposes. Such data may be publicly offered via https://planet.openstreetmap.org or other channels and used by third parties.
  • To improve the OpenStreetMap dataset. For example, by analyzing Nominatim queries for missing addresses and postal codes and making such data available to the OSM community.

Data collected on the systems is accessible to system administrators and OSMF working groups, such as the Data Working Group. No personal information or information that can be linked to an individual will be disclosed to third parties unless required by law.

The IP addresses stored by Matomo are reduced to two bytes and the detailed usage data is kept for 180 days.

Because this storage is temporary, it is generally not possible for us to provide access to the IP addresses or the associated logs.

The aforementioned data is processed on the basis of a legitimate interest (see Article 6, Paragraph 1f, GDPR).

For more information about the privacy policy of the service provider OpenStreetMap, see https://wiki.osmfoundation.org/wiki/Privacy_Policy#Data_we_receive_automatically

 

LinkedIn Ads / Campaign Manager

We use the LinkedIn Insight Tag on our website. This service is provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

What the LinkedIn Insight Tag does

The LinkedIn Insight Tag helps us better understand who visits our website. If someone is registered with LinkedIn, we can see, for example, what professional characteristics that person has—such as career level, industry, company size, country, or job title. This allows us to tailor our website more specifically to our target groups.

The tool also helps us measure whether visitors to our pages perform certain actions, such as making a purchase or other desired action (conversion). These measurements can also work across different devices, e.g., from a laptop to a cell phone.

In addition, LinkedIn offers a retargeting feature. This allows us to show visitors to our website relevant ads on other sites at a later date. According to LinkedIn, however, users are not personally identified in this process.

LinkedIn itself also stores technical data such as URLs, referrers, IP addresses, device and browser information, and the time of the visit. IP addresses are truncated or, if they are used for cross-device recognition, hashed (i.e., pseudonymized). LinkedIn deletes direct identifiers of LinkedIn members after seven days. The remaining pseudonymized data is deleted after 180 days at the latest.

As the website operator, we cannot assign the collected data to individual persons. LinkedIn stores the personal data of website visitors on servers in the USA and also uses it for its own advertising purposes. Further information can be found here: https://www.linkedin.com/legal/privacy-policy#choices-oblig.

Legal basis

If you have given your consent, we use the service on the basis of Art. 6 (1) lit. a) GDPR and § 25 TDDDG. You can revoke this consent at any time.

Options for objection

You can object to the analysis of your usage behavior and the display of targeted advertising via this link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

As a LinkedIn member, you can also specify in your account settings how your data is used for advertising. If you want to prevent LinkedIn from linking data from your visit to your LinkedIn account, please log out of your LinkedIn account before visiting our website.

 

Meta Ads / Campaign Manager

We use the Meta Conversions API on our website. The provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Meta, the data collected in this process may also be transferred to the US and other countries.

The Conversions API helps us understand how visitors interact with our website. We send this information to Meta to improve our advertising on Facebook and Instagram.

The following data, among other things, may be collected: time of page view, page visited, IP address, user agent, and, if relevant, other data such as purchased products, shopping cart value, or currency. A complete list of possible data can be found here: https://developers.facebook.com/docs/marketing-api/conversions-api/parameters.

The legal basis is consent in accordance with Art. 6 (1) lit. a) GDPR and § 25 (1) TDDDG. You can revoke this consent at any time.

If personal data is collected by this tool and passed on to Meta, we and Meta Platforms Ireland Limited are jointly responsible for this (Art. 26 GDPR). However, this joint responsibility only applies to the collection and transfer of the data. What Meta does with the data afterwards is Meta's sole responsibility. You can view the joint processing agreement here: https://www.facebook.com/legal/controller_addendum.

This agreement stipulates that we are responsible for the privacy information and for the secure integration of the tool on our website. Meta is responsible for the security of Meta products. You can assert your rights as a data subject, such as access or deletion of data stored by Meta, directly with Meta. If you assert your rights with us, we must forward your request to Meta.

You can also deactivate the "Custom Audiences" remarketing function yourself. You can do this in your Facebook advertising settings: https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen (You must be logged in to Facebook to do this.)

 

Google Analytics

Our website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

What Google Analytics does

Google Analytics helps us understand how visitors use our website. To do this, we receive various information, e.g.:

  • which pages were viewed,
  • how long visitors stay on the site,
  • which operating system they use,
  • which country they come from or which source they use to access the site.

Google compiles this data in a so-called user ID and assigns it to the visitor's respective device.

Google Analytics can also record mouse and scroll movements as well as clicks.

In order to recognize users and analyze their behavior, Google Analytics uses various technologies such as cookies or device fingerprinting. The information collected in this way is usually transferred to a Google server in the USA and stored there.

The legal basis is consent in accordance with Art. 6 (1) lit a) GDPR and § 25 (1) TDDDG. You can revoke this consent at any time.

 

Google Ads

We use Google Ads on our website. This is an online advertising program from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

What Google Ads does

Google Ads enables us to place advertisements – either directly in Google Search or on other websites. The ads are displayed, for example, when users enter certain search terms (known as keyword targeting).

Ads can also be displayed based on the information Google has about its users, such as location data or interests (target group targeting). As website operators, we can then evaluate which search terms led to our ads and how many people clicked on the ads.

Legal basis

The use of this service is based on your consent in accordance with Art. 6 (1) lit. a) GDPR and § 25 (1) TDDDG. You can revoke this consent at any time.

 

Google Tag Manager

We use Google Tag Manager on our website. This service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

What Google Tag Manager does

Google Tag Manager is a management tool that allows us to integrate other services into our website, such as tracking or analysis tools. The tool itself does not create its own user profiles.

  • does not create its own user profiles,
  • does not set cookies,
  • does not perform its own analyses.

It simply ensures that the integrated tools are loaded and controlled correctly.

However, Google Tag Manager does collect your IP address. This may also be transferred to Google's parent company in the USA.

Legal basis

Art. 6 (1) lit. f) GDPR, as we have a legitimate interest in the simple, fast, and efficient management of various website tools.

If consent is required for certain functions (e.g., when cookies are set or information is accessed on the device), data processing is carried out exclusively on the basis of your consent in accordance with Art. 6 (1) lit. a) GDPR and § 25 (1) TDDDG. You can revoke this consent at any time.

 

 

Categories of Recipients of Personal Data

Your personal data is not transferred to third parties other than for the purposes listed in the following.

We only disclose your personal data to third parties if:

  • You have given your express consent in accordance with Article 6, Paragraph 1, Sentence 1a, GDPR
  • Disclosure in accordance with Article 6, Paragraph 1, Sentence 1a, GDPR is necessary to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data
  • If there is a legal obligation to disclose the data in accordance with Article 6, Paragraph 1, Sentence 1c, GDPR
  • It is permitted by law and is necessary to process contractual relationships with you in accordance with Article 6, Paragraph 1, Item 1b, GDPR

Data is only transferred to third countries if you have given us your consent.

 

 

Your Rights as a "Data Subject"

Right to object

If your personal data is processed on the basis of legitimate interests in accordance with Article 6, Paragraph 1, Item 1f, GDPR, you have the right to object to the processing of your personal data in accordance with Article 21 GDPR, provided that there are grounds for doing so that arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which will be implemented by us without the need to specify a particular situation.

If you wish to exercise your right of revocation or to object, simply send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. or write to GK Software SE, Waldstrasse 7, 08261 Schöneck/Vogtland.

 

The right of access, rectification, erasure and restriction of processing

The data subject has the right of access to the personal data concerned and the right to rectification, erasure or restriction of processing. Furthermore, they have the right to object to the processing. We would like to point out that we will delete your data if its storage is inadmissible (especially if the data is incorrect and a correction is not possible). Deletion will be replaced by blocking if there are legal or factual obstacles to this (for example, special retention obligations due to commercial and tax law requirements).

 

The right to data portability

The data subject has the right to data portability.

 

The right to complain to a supervisory authority

You have the right to complain to a supervisory authority.

 

Provision of personal data

There is no legal obligation for you to provide personal data.

 

Automated decision-making including profiling

We do not use any profiling measures on our website.

 

 

Privacy Policy for Social Networks

The company operates profiles on the following networks. From our website, we only link to our profiles on the respective social networks:

Facebook: https://www.facebook.com/GKSoftwareSE/Twitter: https://twitter.com/gk_software_se
Instagram: https://www.instagram.com/gksoftware/
LinkedIn: https://www.linkedin.com/company/gk-software
Xing: https://www.xing.com/pages/gksoftware

The providers of the various platforms are primarily responsible for providing the data subject with information about the processing operations and enabling them to exercise their data protection rights. Irrespective of this, we would like to inform you about our appearance on social networks. We recommend that you do not send us any sensitive data via these profiles. Please use a direct communication channel for this purpose.

All of the data that you enter on our social network profiles (e.g.: comments, pictures, private messages, etc.) are published by the platform operators and are used by us exclusively for the purposes stated below.

The legal basis for this is Article 6, Paragraph 1f, GDPR. The legitimate interest is based on public relations, on providing up-to-date information and on the possibility to interact with our visitors and contact applicants (Xing, LinkedIn) via GK accounts.

 

Data processing by the operators of social networks

When you call up our profiles, data is processed by the operator of the platform. The form in which this happens cannot be influenced by us, nor can we see it. However, the procedure usually depends on whether you yourself are registered with the platform. It is possible that the providers process the data outside the EU. This means that we cannot guarantee an approach that is in compliance with the GDPR.

You can find more information on the data processing performed by the individual platform operators in their privacy policies:

 

 

Validity and Changes to this Privacy Policy

This privacy policy is currently valid and was updated in November 2025.

Due to the further development of our website and offers on it or due to changed legal or regulatory requirements, it may become necessary to change this privacy policy. You can access and print out the current privacy policy from the website at any time.