Privacy policy

The protection of your personal data is very important to us. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

Responsible

The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states as well as other data protection regulations is the:

Grisebach GmbH
Fasanenstrasse 25
10719 Berlin
T +49 30 885 915 0
F +49 30 882 41 45
auktionen@grisebach.com

You can contact our data protection officer at any time with any questions regarding the protection of your data and for information, corrections, blocking or deletion of data and the revocation of consents granted:

Grisebach GmbH
Fasanenstraße 25
10719 Berlin
datenschutzbeauftragter@grisebach.com

General information on data processing

It is generally possible to use our website without providing personal data. We collect and use our users' personal data only to the extent necessary to provide a functional website and our content and services. The collection and use of our users' personal data only takes place regularly with the user's consent. This data is not passed on to third parties without your express consent. An exception applies in cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by law.  

Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a-f EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data. 

We only store your data for as long as is necessary to process the business relationship or your enquiry. Personal data will be deleted or blocked as soon as the purpose of storage no longer applies. Data may be stored for longer if this has been provided for by European or national legislation. The data will also be blocked or deleted if a storage period prescribed by law expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.

The transmission of information via the Internet is not completely secure, which is why we cannot guarantee the security of data transmitted to our website via the Internet. However, we take technical and organisational measures to protect our website and other systems against loss, destruction, access, modification and dissemination of your data by unauthorised persons.

This site uses SSL encryption for security reasons and to protect the transmission of confidential content, such as the enquiries you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in the address line. If SSL encryption is activated, the data you transmit to us cannot be read by third parties.

We use carefully selected service providers to operate our website.The operation takes place on servers within the EU. The integration of analysis tools, such as Google Analytics (see below), may result in the IP address and information about your use of the website being transmitted to servers in the USA.

The website may contain hyperlinks to and from third-party websites. If you follow a hyperlink to one of these websites, please note that we cannot assume any responsibility or guarantee for third-party content or data protection conditions. Please check the applicable data protection conditions before you transmit personal data to these websites.

Our website uses cookies to make the use of our website attractive, to enable certain functions and to increase overall functionality. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.

The legal basis for the processing of personal data using cookies is Art. 6 para. 1 lit. f GDPR.

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary for the browser to be recognised even after a page change.

The user data collected by technically necessary cookies is not used to create user profiles.

Our legitimate interest in the processing of your personal data using cookies lies in the functionality and attractiveness of our website. The legal basis for this processing is Art. 6 para. 1 lit. f GDPR.

Cookies are stored on the user's computer and transmitted by it to our website. As a user, you therefore have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website to their full extent.

Our website is operated by an external provider. The provider is Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen (hereinafter referred to as Hetzner).

Details can be found in Hetzner's privacy policy:

https://www.hetzner.com/de/rechtliches/datenschutz.

The use of Hetzner is based on Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in displaying our website as reliably as possible. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.

Order processing

We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract prescribed by data protection law, which guarantees that it processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are

• Browser type and browser version 

• Operating system used 

• Referrer URL 

• Jump URL 

• Host name of the accessing computer 

• Time of the server request 

• IP address 

• Differentiation between desktop computer and mobile device 

• Clicks on the website and related categorisation

This data cannot be assigned to specific persons. This data is not merged with other data sources. The temporary storage of the IP address is necessary to ensure the functionality of the website. We also use the data to optimise the website and to ensure the security of our information technology systems. These purposes also constitute our legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f GDPR. The data collected is stored for 90 days and then deleted.

This website uses Google Analytics, a web analytics service provided by Google Inc ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymisation is activated on this website, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to analyse your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. 

The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. 

This website uses Google Analytics with the extension "_anonymiseIp()". This means that IP addresses are further processed in abbreviated form, so that they cannot be linked to a specific person. If the data collected about you is personally identifiable, it is immediately excluded and the personal data is deleted immediately.

The legal basis for the processing of personal data using cookies for analysis purposes is Art. 6 para. 1 lit. a GDPR if the user has given consent to this. 

We use Google Analytics to analyse and regularly improve the use of our website. We can use the statistics obtained to improve our offer and make it more interesting for you as a user. 

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de. 

We have concluded an order processing contract with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics. 

Information provided by Google on the use of Google Analytics can be found here: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. terms of use: https://marketingplatform.google.com/about/analytics/terms/de/,

Overview of data protection: https://policies.google.com/privacy?hl=de, 

and the privacy policy: https://policies.google.com/privacy?hl=de&gl=de.

We offer you the opportunity to register on our website. The data entered in the course of this registration, which can be seen from the input mask of the registration form (name, address, e-mail address, telephone number, VAT ID, bank details) are collected and stored exclusively for the use of our offer. They are required for the fulfilment of a possible contract and for the implementation of pre-contractual measures (e.g. placing a bid). The legal basis for this processing of personal data is Art. 6 para. 1 lit. b GDPR. When you register on our site, we will also save your IP address and the date and time of your registration. This serves as a safeguard for us in the event that a third party misuses your data and registers on our site with this data without your knowledge (Art. 6 para. 1 lit. f GDPR). By registering, you agree to the validity of our auction conditions. Apart from this, your registration is not associated with any obligation. Your data will not be passed on to third parties unless there is a legal obligation to pass it on or the passing on serves the purpose of criminal prosecution. The data collected in this way will also not be compared with data that may be collected by other components of our site.

Registered persons have the option of changing the personal data provided during registration at any time. A complete deletion of the registration access from the database takes place on request. If the data is required for the fulfilment of a contract or for the implementation of pre-contractual measures, premature deletion of the data is only possible insofar as contractual or legal obligations do not prevent deletion.

You have the opportunity to watch our auctions live on the Internet and place bids. The live broadcast takes place via "lot-tissimo.com", a platform for broadcasting auctions on the Internet. The provider is Auction Technology Group Germany GmbH, Stadtdeich 27, 20097 Hamburg, Germany. The data collected there is stored on the provider's servers. We have no influence on the collection of data by lot-tissimo.com. You have the option of revoking your consent to the handling of personal data from lot-tissimo.com at any time. A revocation does not affect data that must be processed for the fulfilment of the contract between you and lot-tissimo.com. Further information on the privacy policy of lot-tissimo.com can be found at https://www.lot-tissimo.com/de-de/about-us/legal/privacy-policy

We only send newsletters, emails and other electronic notifications with information (hereinafter "newsletter") with the consent of the recipient (Art. 6 para. 1 lit. a GDPR) or a legal authorisation. If the contents of the newsletter are specifically described when registering for the newsletter, they are decisive for the user's consent. Our newsletters also contain information about upcoming events organised by our company.

The registration for our newsletter takes place in a so-called double opt-in procedure. This means that after registering, you will receive an e-mail asking you to confirm your registration. This confirmation is necessary so that no-one can register with other people's e-mail addresses.

Subscriptions to the newsletter are logged in order to be able to prove the registration process in accordance with legal requirements. This includes storing the time of registration and confirmation as well as the IP address.

You can cancel the receipt of our newsletter at any time, i.e. revoke your consent. Your consent to the sending of the newsletter via MailChimp and the statistical analyses will expire at the same time. Unfortunately, it is not possible to cancel the sending of the newsletter via MailChimp or the statistical analyses separately.

You will find a link to unsubscribe from the newsletter at the end of each newsletter.

The newsletter is sent using "MailChimp", a newsletter dispatch platform of the US provider Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA.

Your email addresses and the other data collected as part of the newsletter (e.g. information about the browser and your system, your IP address, time of retrieval) are stored on MailChimp's servers in the USA. MailChimp uses this information to send and analyse the newsletter on our behalf. Furthermore, MailChimp may, according to its own information, use this data to optimise or improve its own services, e.g. to technically optimise the sending and presentation of the newsletter or for economic purposes in order to determine from which countries the recipients come. However, MailChimp does not use the data of our newsletter recipients to write to them itself or to pass it on to third parties.

We trust in the reliability and IT and data security of MailChimp. MailChimp is certified under the US-EU data protection agreement EU-U.S. Data Privacy Frameworks (previously "Privacy Shield") and thus undertakes to comply with EU data protection regulations. Furthermore, we have concluded a "Data Processing Agreement" with MailChimp. This is a contract in which MailChimp undertakes to protect the data of our users, to process it on our behalf in accordance with its data protection provisions and, in particular, not to pass it on to third parties. You can view MailChimp's privacy policy here.

We maintain online presences within social networks and platforms in order to communicate with the customers, interested parties and users active there and to inform them about our activities. 

Our social media presences are intended to ensure the broadest possible presence on the Internet. This is a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. The analysis processes initiated by the social networks may be based on different legal bases, which must be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6 para. 1 lit. a GDPR).

When accessing the respective networks and platforms, the terms and conditions of the respective operators apply; please refer to their data protection notices for the relevant rights and setting options to protect your privacy.

Facebook:

As part of our brand communication, we operate a company profile on the social network Facebook at 

https://www.facebook.com/grisebachauctions

Further information on the handling of user data can be found in Facebook's privacy policy at www.facebook.com/privacy/explanation

Instagram:

As part of our brand communication, we operate a company profile on the Instagram social network at https://www.instagram.com/grisebach_auctions/

Further information on the handling of user data can be found in Instagram's privacy policy at: help.instagram.com/155833707900388

LinkedIn:

As part of our brand communication, we operate a company profile on the social network LinkedIn at 

https://www.linkedin.com/company/grisebach

LinkedIn Ireland Unlimited Company (LinkedIn) processes personal data on this network. You can find detailed information on this in LinkedIn's privacy policy. 

If you wish to deactivate LinkedIn advertising cookies, please use the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out 

Vimeo:

This website uses plugins from the video portal Vimeo. The provider is Vimeo Inc, 555 West 18th Street, New York, New York 10011, USA.
When you visit one of our pages equipped with a Vimeo video, a connection to the Vimeo servers is established. This tells the Vimeo server which of our pages you have visited. Vimeo also obtains your IP address. This also applies if you are not logged in to Vimeo or do not have a Vimeo account. The information collected by Vimeo is transmitted to the Vimeo server in the USA.

The use of Vimeo is in the interest of an appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission and, according to Vimeo, on "legitimate business interests". Details can be found here:
https://vimeo.com/privacy.
Further information on the handling of user data can be found in Vimeo's privacy policy at
https://vimeo.com/privacy. 

You have extensive rights with regard to the processing of your personal data. Firstly, you have a comprehensive right to information and can request the correction and/or deletion and/or blocking of your personal data if necessary. You can also request a restriction of processing and have a right to object and a right to data portability. If you wish to assert one of your rights and/or receive more information about this, please contact us at the address given above.

If your consent was the legal basis for data collection/data processing, you can withdraw it at any time. This does not affect the lawfulness of the processing that was carried out on the basis of the consent until it was withdrawn.

You also have the right to lodge a complaint with a supervisory authority. If you have any questions, comments or enquiries regarding the collection, processing and use of your personal data by us, please also contact us using the contact details provided.

Grisebach GmbH, in October 2024