1. Controller
GEHFI GmbH
Bergmont Capital is a brand of GEHFI GmbH
Murgstraße 33
75179 Pforzheim
Deutschland
Telephone: +49 711 96889096
Email: info@bergmont-capital.de
No data protection officer has been appointed, as the statutory conditions for doing so are not currently met.
2. General information on data processing
We take the protection of your personal data seriously. We treat your personal data confidentially and in accordance with statutory data protection provisions and this privacy notice. Personal data is always processed in accordance with the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
3. Hosting and server log files
Our website is hosted by an external service provider. When you access our website, the hosting provider automatically records information in what are known as server log files, which your browser transmits automatically. These are in particular:
- IP address of the requesting device
- Date and time of access
- Name and URL of the file retrieved
- Browser type and version and the operating system used
- The previously visited page (referrer URL)
- The requesting provider
The legal basis is Article 6 (1) (f) GDPR. Our legitimate interest lies in the technical provision, stability and security of the website.
Hosting provider
Netlify, Inc.
101 2nd Street, Suite 100
San Francisco, CA 94105, USA
Netlify processes the data as a processor on our behalf; a data processing agreement pursuant to Article 28 GDPR is in place. Netlify’s privacy policy is available at netlify.com/privacy.
As Netlify is based in the United States, personal data may be transferred to a third country. Such transfers are based on the standard contractual clauses adopted by the European Commission (Implementing Decision (EU) 2021/914), which Netlify applies to its data processing agreement. We point out that the United States does not offer a level of data protection fully equivalent to European law and that US authorities may access data under certain conditions.
4. Contacting us and forms
You can contact us via the forms on our website (enquiry, property offer) and the contact options given. Form entries are received by the "Netlify Forms" service of our hosting provider Netlify, Inc. (see section 3), stored there and delivered to us by email. Netlify automatically screens form entries for spam. A data processing agreement under Article 28 GDPR is in place with Netlify; transfers to the USA are based on the EU-US Data Privacy Framework or the standard contractual clauses. The form also transmits how you reached our website (for example a search advertisement, campaign and keyword identifier, page visited). This information is used solely to attribute your enquiry and is held in your browser session storage for the duration of your visit (Article 6 (1) (b) and (f) GDPR).
We process the data you send us (name, email address, telephone number if provided, and the content of your message) solely to deal with your enquiry and any follow-up questions. The legal basis is Article 6 (1) (b) GDPR where your enquiry relates to entering into a contract, and otherwise Article 6 (1) (f) GDPR (legitimate interest in responding to your enquiry).
Your data will be deleted once your enquiry has been dealt with conclusively and no statutory retention obligations prevent deletion.
5. Job applications
If you apply to us, we process the data you submit (contact details, CV, references and further information) solely for the purpose of the application procedure. The legal basis is Article 6 (1) (b) GDPR in conjunction with section 26 (1) BDSG.
If no employment relationship results, we delete your application documents no later than six months after the procedure has concluded, unless you have expressly consented to longer storage or statutory retention obligations apply.
6. Fonts
This website uses the typeface “Inter”. The font files are stored locally on our server and delivered exclusively from there. No connection is made to third-party servers, in particular not to Google Fonts. No personal data is transmitted to third parties in this process.
7. Cookies and consent management
When you access our website, only technically necessary information is initially stored on your device. This includes in particular the storage of your cookie decision in your browser’s local storage under the name bergmont_consent. This storage is permitted without consent under section 25 (2) no. 2 TDDDG, as it is necessary to provide the service you have requested and to respect your choice. Your decision is stored for twelve months, after which we ask again.
We only use cookies and comparable technologies beyond this after you have expressly consented via our consent dialogue. The legal basis is section 25 (1) TDDDG in conjunction with Article 6 (1) (a) GDPR. Without your consent, no statistics or marketing services are loaded.
We distinguish the following categories:
- Necessary – required to operate the website and to store your decision. Cannot be deselected.
- Statistics – aggregated analysis of website use to improve what we offer. Only with consent.
- Marketing – measurement and delivery of our advertising. Only with consent.
Withdrawal: You may withdraw your consent at any time with effect for the future, or change your selection. Use the Cookie settings link in the footer of every page. The lawfulness of processing carried out up to withdrawal remains unaffected.
8. Meta pixel (Facebook and Instagram)
If you have consented to the “Marketing” category, we use the Meta pixel provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. The Meta pixel allows us to follow the behaviour of visitors who have been directed to our website by clicking on a Meta advertisement, and to measure the effectiveness of our advertising.
In doing so, your IP address, information about your device and browser and information about the pages you visit may be transmitted to Meta and linked to your Meta account if you are logged in. We operate the pixel jointly with Meta as joint controllers under Article 26 GDPR; the corresponding agreement is available at facebook.com/legal/controller_addendum.
A transfer of your data to the United States cannot be ruled out. The legal basis is solely your consent under Article 6 (1) (a) GDPR in conjunction with section 25 (1) TDDDG. Further information can be found in Meta’s privacy policy at facebook.com/privacy/policy.
8a. Google Ads conversion tracking and Google tag
We use the Google tag (gtag.js) and Google Ads conversion tracking provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (account ID AW-18457770600). This allows us to measure whether visitors who reached our website via a Google ad submit an enquiry. Cookies and comparable identifiers are only set for this purpose if you have consented via our cookie notice (Article 6 (1) (a) GDPR, section 25 (1) TDDDG). Without consent, the Google tag only sends cookieless, non-personal signals under Google Consent Mode. A transfer to the United States cannot be ruled out; it takes place on the basis of the EU-US Data Privacy Framework. You can withdraw your consent at any time via the "Cookie settings" link in the footer. Further information: policies.google.com/privacy.
9. Recipients of the data
Your personal data is only passed to third parties where this is necessary to fulfil our contractual or statutory obligations, where you have consented, or where we are legally required to do so. In addition, we use carefully selected service providers as processors (in particular for hosting and email), with whom agreements under Article 28 GDPR are in place. We do not sell your data.
10. SSL/TLS encryption
For security reasons this site uses SSL or TLS encryption. You can recognise an encrypted connection by the browser address bar changing from “http://” to “https://”. When encryption is active, the data you transmit to us cannot be read by third parties.
11. Retention period
We process and store your personal data only for as long as is necessary to achieve the respective processing purpose. Beyond that, we retain data where commercial or tax retention periods apply (generally six or ten years under section 257 of the German Commercial Code and section 147 of the German Fiscal Code).
12. Your rights as a data subject
You have the following rights in relation to us:
- Access (Article 15 GDPR) – you may request information about the personal data we hold about you.
- Rectification (Article 16 GDPR) – you may request the correction of inaccurate data.
- Erasure (Article 17 GDPR) – you may request the deletion of your data, provided no statutory retention obligations prevent this.
- Restriction (Article 18 GDPR) – you may request the restriction of processing of your data.
- Data portability (Article 20 GDPR) – you may request that we provide your data in a structured, commonly used and machine-readable format.
- Objection (Article 21 GDPR) – you have the right to object at any time to the processing of your personal data where processing is based on Article 6 (1) (f) GDPR.
- Withdrawal of consent (Article 7 (3) GDPR) – you may withdraw consent you have given at any time with effect for the future.
An informal message to the following address is sufficient to exercise your rights: info@bergmont-capital.de.
13. Objection to direct marketing
Where we process your personal data for direct marketing, you have the right to object to that processing at any time. Following your objection, processing for those purposes will cease.
14. No automated decision-making
Automated decision-making, including profiling within the meaning of Article 22 GDPR, does not take place.
15. Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority if you consider that the processing of your personal data is unlawful. The authority responsible for us is:
State Commissioner for Data Protection and Freedom of Information Baden-Württemberg
Lautenschlagerstraße 20
70173 Stuttgart
www.baden-wuerttemberg.datenschutz.de
16. Changes to this privacy notice
We reserve the right to amend this privacy notice so that it always complies with current legal requirements or to reflect changes to our services. The version in force at the time will then apply to your next visit.