Privacy Policy
Privacy Policy
The following text serves to inform you about the processing of your personal data, which is carried out by us when using our website.
Data Controller
GK Software SE
Waldstraße 7
08261 Schöneck
Germany
Tel.: +49 (0)3 74 64 84 - 0
Fax: +49 (0)3 74 64 84 - 15
E-Mail:
Chairman of the Supervisory Board: Nicholas Fraser
Management Board: Michael Scheibner (CEO), Michael Jaszczyk (CDXO)
Commercial Register Chemnitz HRB 31501
VAT ID: DE 141 093 347
ITC - Data Protection Team
If you have a data protection-related inquiry (contracts/inquiries about data protection, etc.), please send an email to
Our team will take care of your request as soon as possible.
Please note: If you want to specifically contact the data protection officer (DPO), please send a message to
When do we process personal data and which type?
We process your personal data in the following cases:
Visit to Website
- When you visit our website, the browser used on your end device automatically sends information to our website server. This information is temporarily stored in a log file. The following information is collected without any action on your part and stored until it is automatically deleted:
- IP address of the accessing computer
- Date and time of access
- Name and URL of the retrieved file
- Website, as well as subpages, from which access is made (referrer URL)
- Browser used, the operating system of your computer, if applicable, and the name of your access provider
- We process the aforementioned data for the following purposes:
- To ensure a reliable connection to the website
- To ensure a user-friendly experience with our website
- To evaluate the system security and stability
- For other administrative purposes
- Legal basis of data processing:
- The legal basis for processing data is Article 6, Paragraph 1, Item 1f, GDPR. Our legitimate interest results from the data collection purposes listed above. Under no circumstances do we use the collected data to draw conclusions about you.
- Duration of data processing:
- 14 days
Contact / Contact Form
- On our website, we provide a form which can be used to contact us. Some information is required (these are marked as mandatory fields) so that we know, among other things, who the request comes from and how we can answer it. Additional information can be entered voluntarily in a free text field. The following information is collected:
- Last name, first name
- Subject, message
- Email address
- Other voluntary information
- We process the aforementioned data for the following purposes:
- When using the online contact form, certain personal data is collected. You can see which data is collected by visiting https://www.gk-software.com/de/unternehmen/kontakt. In addition, contact can be made by email. This data is stored and used to respond to your request, to contact you, and for the technical administration required for this.
- Legal basis of data processing:
- The legal basis for the processing of this data is our legitimate interest in responding to your request in accordance with Article 6, Paragraph 1f, GDPR. If the aim of contacting us is the conclusion of a contract, the additional legal basis for processing the data is Article 6, Paragraph 1b, GDPR.
- Duration of data processing:
- Your data will be deleted after your request has been fully processed. This is the case if it is clear from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.
Use of Cookies
We use cookies so that you can make the best use of our website. Cookies necessary for the operation of the site are set. Cookies are small files that your browser automatically creates and that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our website.
Specifically, these are the following cookies:
We process the aforementioned data for the following purposes:
- Technically required cookies enable optimal use of the website
- The user data collected through technically required cookies are not used to create user profiles
Legal basis of data processing:
- The legal basis for the processing of personal data using cookies is Article 6, Paragraph 1a, GDPR, for cookies requiring consent.
Duration of data processing:
- Cookies are stored on the user's computer and transmitted from it to our site. Therefore, as a user, you also have full control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transfer of cookies. Cookies that have already been saved can be deleted at any time. This can also be automated. Matomo is disabled when you visit our website. Your usage behavior will only be recorded anonymously if you actively consent.
Web Analysis by Matomo
We use the open source software tool Matomo on our website to analyze the surfing behavior of our users. This is an open source tool for web analysis. Matomo does not transmit any data to servers that are outside of our control. Matomo does not collect session data without your consent. We collect the following information:
- Information such as user dwell time, device used, operating system, language setting, origin, region, location, or user actions
- Your IP address is anonymized before being stored
We process the aforementioned data for the following purposes:
- We use such procedures to statistically measure the reach of our website
Legal basis of data processing:
- The legal basis for the data processing is Article 6, Paragraph 1a, GDPR
Duration of data processing:
- The statistical evaluations of the anonymous user data are deleted after 6 months
- The cookie set on your device is stored for 7 days
Protection Against Disruptions and Misuse and Improvement of the Website
This website uses services from "Cloudflare" (Provider: Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). Cloudflare operates a Content Delivery Network (CDN) and provides protection features (web application firewall) for the website. The data transfer between your browser and our servers flows through Cloudflare's infrastructure and is analyzed there to prevent attacks. Cloudflare uses cookies for this purpose to enable you to access our website. The use of Cloudflare is in the interest of a safe use of our website and the defense against harmful attacks from the outside. For more information, please see the Cloudflare Privacy Policy https://www.cloudflare.com/de-de/privacypolicy/
The following information is collected:
- IP address
- Date and time at which the website was called
We process the aforementioned data for the following purposes:
- Determining and tracking of malfunctions or misuse of our websites or telecommunication services and equipment and to improve the performance of our website.
Legal basis of data processing:
- The legal basis for the data processing is Article 6, Paragraph 1f, GDPR
Duration of data processing:
- Up to 7 days
Categories of Recipients of Personal Data
Your personal data is not transferred to third parties other than for the purposes listed in the following.
We only disclose your personal data to third parties if:
- You have given your express consent in accordance with Article 6, Paragraph 1, Sentence 1a, GDPR
- Disclosure in accordance with Article 6, Paragraph 1, Sentence 1a, GDPR is necessary to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data
- If there is a legal obligation to disclose the data in accordance with Article 6, Paragraph 1, Sentence 1c, GDPR
- It is permitted by law and is necessary to process contractual relationships with you in accordance with Article 6, Paragraph 1, Item 1b, GDPR
Data is only transferred to third countries if you have given us your consent.
Your Rights as a "Data Subject"
Right to object
If your personal data is processed on the basis of legitimate interests in accordance with Article 6, Paragraph 1, Item 1f, GDPR, you have the right to object to the processing of your personal data in accordance with Article 21 GDPR, provided that there are grounds for doing so that arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which will be implemented by us without the need to specify a particular situation.
If you wish to exercise your right of revocation or to object, simply send an email to
The right of access, rectification, erasure and restriction of processing
The data subject has the right of access to the personal data concerned and the right to rectification, erasure or restriction of processing. Furthermore, they have the right to object to the processing. We would like to point out that we will delete your data if its storage is inadmissible (especially if the data is incorrect and a correction is not possible). Deletion will be replaced by blocking if there are legal or factual obstacles to this (for example, special retention obligations due to commercial and tax law requirements).
The right to data portability
The data subject has the right to data portability.
The right to complain to a supervisory authority
You have the right to complain to a supervisory authority.
Provision of personal data
There is no legal obligation for you to provide personal data.
Automated decision-making including profiling
We do not use any profiling measures on our website.
Privacy Policy for Social Networks
The company operates profiles on the following networks. From our website, we only link to our profiles on the respective social networks:
Facebook: https://www.facebook.com/GKSoftwareSE/Twitter: https://twitter.com/gk_software_se
Instagram: https://www.instagram.com/gksoftware/
LinkedIn: https://www.linkedin.com/company/gk-software
Xing: https://www.xing.com/company/gksoftware
The providers of the various platforms are primarily responsible for providing the data subject with information about the processing operations and enabling them to exercise their data protection rights. Irrespective of this, we would like to inform you about our appearance on social networks. We recommend that you do not send us any sensitive data via these profiles. Please use a direct communication channel for this purpose.
All of the data that you enter on our social network profiles (e.g.: comments, pictures, private messages, etc.) are published by the platform operators and are used by us exclusively for the purposes stated below.
The legal basis for this is Article 6, Paragraph 1f, GDPR. The legitimate interest is based on public relations, on providing up-to-date information and on the possibility to interact with our visitors and contact applicants (Xing, LinkedIn) via GK accounts.
Data processing by the operators of social networks
When you call up our profiles, data is processed by the operator of the platform. The form in which this happens cannot be influenced by us, nor can we see it. However, the procedure usually depends on whether you yourself are registered with the platform. It is possible that the providers process the data outside the EU. This means that we cannot guarantee an approach that is in compliance with the GDPR.
You can find more information on the data processing performed by the individual platform operators in their privacy policies:
- Facebook: Social network; service provider: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, parent company: Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA; Website: https://www.facebook.com; Privacy policy: https://www.facebook.com/about/privacy;Opt-Out: Advertising settings: https://www.facebook.com/settings?tab=ads; Additional notes on data protection: Agreement on the joint processing of personal data on Facebook pages https://www.facebook.com/legal/terms/page_controller_addendum, data protection statement for Facebook pages: https://www.facebook.com/legal/terms/information_about_page_insights_data.
- Instagram: Social network; service provider: Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA; Website: https://www.instagram.com; Privacy policy: http://instagram.com/about/legal/privacy.
- Twitter: Social network; service provider: Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA; Privacy policy: https://twitter.com/de/privacy, (Settings) https://twitter.com/personalization;
- LinkedIn: Social network; service provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland; Website: https://www.linkedin.com; Privacy policy: https://www.linkedin.com/legal/privacy-policy; Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
- Xing: Social network; service provider: XING AG, Dammtorstrasse 29-32, 20354 Hamburg, Germany; Website https://www.xing.de; Privacy policy https://privacy.xing.com/de/datenschutzerklaerung.
Validity and Changes to this Privacy Policy
This privacy policy is currently valid and was updated in August 2022.
Due to the further development of our website and offers on it or due to changed legal or regulatory requirements, it may become necessary to change this privacy policy. You can access and print out the current privacy policy from the website at any time.