Privacy notice

Gladio Group
Benediktusgarten 1
Bingenbrück, 55411 Bingen am Rhein
Germany
Email: info@gladio-group.com

Further details about the provider are in the legal notice.

This website is hosted by Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA. Netlify delivers the pages to your browser and processes the data involved on our behalf. We have a data processing agreement with Netlify under Art. 28 GDPR, which forms part of Netlify’s terms.

Each time a page is opened, Netlify records the following details in access logs:

• your IP address
• the date and time of the request
• the page or file requested
• the page you came from (referrer), if your browser sends it
• details of your browser and operating system (user agent)

Netlify needs these details to deliver the pages and to keep the service secure, for example to detect attacks and errors. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is a secure and reliable website.

Netlify deletes the access logs once they are no longer needed for delivery and security; according to Netlify, this is after about 30 days. We do not analyse them and do not combine them with other data.

If you write to us at info@gladio-group.com, we process your email address, your name if you give it, and the content of your message in order to answer your enquiry.

The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a contract or is meant to prepare one, and Art. 6(1)(f) GDPR otherwise. Our legitimate interest is answering enquiries.

We delete your message once we no longer need it for our reply, unless commercial or tax law requires us to keep it for longer, as with business correspondence. The legal basis for keeping it is Art. 6(1)(c) GDPR in conjunction with Section 257 HGB and Section 147 AO: business correspondence is kept for six years, and emails that serve as accounting records for eight years. We do not use your email address for advertising, and there is no newsletter.

Our mailbox is Microsoft 365, provided through GoDaddy. GoDaddy and Microsoft process the emails on our behalf (Art. 28 GDPR).

If you use the contact form, we process the details you enter: your email address and your message, and your name, your company and your industry if you give them. We use them to answer your enquiry. Before that, Netlify checks the submission for spam, as described below.

The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a contract or is meant to prepare one, and Art. 6(1)(f) GDPR otherwise. Our legitimate interest is answering enquiries.

The form is processed by Netlify on our behalf (Art. 28 GDPR). Netlify stores the submission in our Netlify account, together with the IP address it came from and details about your browser, and forwards it by email to info@gladio-group.com. The form sets no cookie.

Netlify checks every submission for spam automatically. For this it uses the Akismet service of Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA, as a sub-processor. Akismet receives the content of the submission, your IP address and details about your browser and, according to Akismet, keeps this information for between two weeks and 90 days in most cases. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is a form free of spam. The form also contains a hidden field that only automated programs fill in. Netlify discards such submissions.

We delete the submission once we no longer need it for our reply. We regularly review submissions flagged as spam and delete them. For the email we keep, the periods described under “Contact by email” apply.

Netlify, GoDaddy and Microsoft also process data in the USA. All three are certified under the EU-U.S. Data Privacy Framework, for which the European Commission has adopted an adequacy decision (Art. 45 GDPR). Should the Data Privacy Framework cease to apply, Netlify’s agreement provides for the European Commission’s standard contractual clauses. Akismet also processes the data for the spam check in the USA. The data reaches it through Netlify. Under the Data Privacy Framework, Netlify may only pass it on under a contract that ensures the same protection, and it remains responsible for Akismet. Netlify must also impose on Automattic by contract the same data protection obligations as our agreement with Netlify (Art. 28(4) GDPR). The same applies to Netlify’s other sub-processors.

Your data is only received by the service providers named above, that is Netlify for hosting and the contact form, Automattic (Akismet) as Netlify’s sub-processor for the spam check of the form, and GoDaddy and Microsoft for email, each acting on our behalf. Netlify also uses further sub-processors for this, mainly data centres and an email delivery service, almost all in the USA. Netlify publishes the list at netlify.com/legal/subprocessors. We only pass your data to anyone else if the law requires us to.

This website sets no cookies. It uses no analytics or measurement services, no tracking and no advertising, and we do not use the analytics features offered by Netlify either. That is why there is no consent banner.

Fonts, images, videos and all other files are delivered by Netlify together with this website. Opening a page requests nothing from Google, any other font provider or any other third-party service. There are no videos or maps from other services and no social media buttons.

Some pages link to websites of other providers, such as the sources of our figures. Your browser only opens such a website when you click the link. The privacy policy of that provider then applies to any data processed there.

This website stores no identifier in your browser. It keeps only two settings of its own there, and only when you choose them yourself:

• If you pause the motion on the page or switch it back on, your browser keeps this choice in local storage (entry “bewegung”) until you delete the site data. The motion then stays the way you set it on the following pages.
• If you pick a view on the ferry and cruise page, your browser keeps it in session storage (entry “gladio-ansicht”) until you close the tab or window.

Both entries stay in your browser. They are not sent to us and not analysed. They are strictly necessary for a function you have expressly chosen to work the way you set it, so no consent is required (Section 25(2) No. 2 TDDDG). You can delete them at any time in your browser settings.

The pages also check whether your browser is set to reduce motion or to save data, or loads only slowly, and then show still images instead of moving ones. Nothing of this is stored or sent to us.

As with any website, your browser also keeps files from these pages in its cache and remembers that this website may only be opened in encrypted form (HTTPS). This, and checking your settings for motion and data saving, is strictly necessary to show the pages securely and the way you have set them (Section 25(2) No. 2 TDDDG).

You have the right

• to obtain information about the data we process about you (Art. 15 GDPR),
• to have incorrect data corrected (Art. 16 GDPR),
• to have your data erased (Art. 17 GDPR),
• to have processing restricted (Art. 18 GDPR),
• to receive your data in a common, machine-readable format or to have it sent to another controller (Art. 20 GDPR), and
• to object to processing (Art. 21 GDPR, see below).

If we correct, erase or restrict data, we inform the recipients (Art. 19 GDPR). An email to info@gladio-group.com is enough for any of this.

You can also lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement (Art. 77 GDPR).

There is no automated decision-making, including profiling (Art. 22 GDPR). You are not obliged by law or contract to provide us with any data. Without the details in the access logs, however, Netlify cannot deliver the pages, and without your email address we cannot reply to you.