Privacy Policy

The following text serves to inform you about the processing of your personal data, which is carried out by us when using our website.

Data Controller

GK Software SE

Waldstrasse 7
08261 Schöneck
Germany

Tel.: +49 (0)3 74 64 84 - 0
Fax: +49 (0)3 74 64 84 - 15
Email: This email address is being protected from spambots. You need JavaScript enabled to view it.

Chairman of the Supervisory Board: Nicholas Fraser
Management Board: Michael Scheibner (CEO), Michael Jaszczyk (CDXO)

Commercial Register Chemnitz HRB 31501
VAT ID: DE 141 093 347

ITC - Data Protection Team

If you have a data protection-related inquiry (contracts/inquiries about data protection, etc.), please send an email to This email address is being protected from spambots. You need JavaScript enabled to view it.

Our team will take care of your request as soon as possible.

Please note: If you want to specifically contact the data protection officer (DPO), please send a message to This email address is being protected from spambots. You need JavaScript enabled to view it..

We process your personal data in the following cases:

Visit to Website

When you visit our website, the browser used on your end device automatically sends information to our website server. This information is temporarily stored in a log file. The following information is collected without any action on your part and stored until it is automatically deleted:

• IP address of the accessing computer
• Date and time of access
• Name and URL of the retrieved file
• Website, as well as subpages, from which access is made (referrer URL)
• Browser used, the operating system of your computer, if applicable, and the name of your access provider

We process the aforementioned data for the following purposes:

• To ensure a reliable connection to the website
• To ensure a user-friendly experience with our website
• To evaluate the system security and stability
• For other administrative purposes

Legal basis of data processing: 

• The legal basis for processing data is Article 6, Paragraph 1, Item 1f, GDPR. Our legitimate interest results from the data collection purposes listed above. Under no circumstances do we use the collected data to draw conclusions about you.

Duration of data processing:

• 14 days

Contact

It is possible to contact us on our website. By doing so, the following personal data will be processed on a voluntary basis:

• Email address
• Other voluntary information

We process the aforementioned data for the following purposes:

• This data is stored and used to respond to your request, to contact you, and for the technical administration required for this.

Legal basis of data processing: 

• The legal basis for the processing of this data is our legitimate interest in responding to your request in accordance with Article 6, Paragraph 1f, GDPR.

Duration of data processing:

• Your data will be deleted after your request has been fully processed. This is the case if it is clear from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.

Provision of the GK Academy Service and Management/Announcement of Training Courses

To provide the GK Academy service and system, we process the following data:

• first name, last name
• email address
• course details/profile
• certificates
• first access to site (date, time)
• last access to site (date, time)
• last IP address
• pictures of trainer
• preferred language
• events/trainings
• registration date and time
• event dates
• status (registered, attended or not attended)
• role (trainer or attendee)
• activities (login, registrations, cancelations, data policy accepted, event terms and conditions)
• reports:

• today's logs
• all logs (with a description of what was done; event name and component)
• grades overview

• course completion (which courses, responses, start time, end time, time taken, grade, state) 

We process the aforementioned data for the following purposes:

• training platform with personalized user account
• training overview with all training sessions and results
• reports for HR (internal) for further education/training of employees
• saving external participants of the training:

• based on contract/training application
• data storage for accounting purposes

Legal basis of data processing: 

• The legal basis for the processing of this data is a contract in accordance with Article 6, Paragraph 1b, GDPR.

Duration of data processing:

The personal data collected by us for the engagement will be stored until the end of the statutory retention period and thereafter deleted unless we are obliged under Article 6, Paragraph 1c, GDPR, to store it for a longer period of time due to tax and business requirements for storage and documentation (from the German Commercial Code or AO) or you have agreed to further storage according to Article 6, Paragraph 1a, GDPR.

Use of Cookies

We use cookies so that you can make the best use of our website. Cookies necessary for the operation of the site are set. Cookies are small files that your browser automatically creates and that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit our website. 

Specifically, these are the following cookies:

We process the aforementioned data for the following purposes:

• Technically required cookies enable optimal use of the website
• The user data collected through technically required cookies are not used to create user profiles

Legal basis of data processing:

• The legal basis for the processing of personal data using cookies is Article 6, Paragraph 1a, GDPR, for cookies requiring consent.

Duration of data processing:

• Cookies are stored on the user's computer and transmitted from it to our site. Therefore, as a user, you also have full control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transfer of cookies. Cookies that have already been saved can be deleted at any time. This can also be automated. Matomo is disabled when you visit our website. Your usage behavior will only be recorded anonymously if you actively consent.

Web Analysis by Matomo

We use the open source software tool Matomo on our website to analyze the surfing behavior of our users. This is an open source tool for web analysis. Matomo does not transmit any data to servers that are outside of our control. Matomo does not collect session data without your consent. We collect the following information:

• Information such as user dwell time, device used, operating system, language setting, origin, region, location, or user actions
• Your IP address is anonymized before being stored

We process the aforementioned data for the following purposes:

• We use such procedures to statistically measure the reach of our website

Legal basis of data processing:

• The legal basis for the data processing is Article 6, Paragraph 1a, GDPR

Duration of data processing:

• The statistical evaluations of the anonymous user data are deleted after 6 months
• The cookie set on your device is stored for 7 days

Protection Against Disruptions and Misuse and Improvement of the Website

This website uses services from "Cloudflare" (Provider: Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). Cloudflare operates a Content Delivery Network (CDN) and provides protection features (web application firewall) for the website. The data transfer between your browser and our servers flows through Cloudflare's infrastructure and is analyzed there to prevent attacks. Cloudflare uses cookies for this purpose to enable you to access our website. The use of Cloudflare is in the interest of a safe use of our website and the defense against harmful attacks from the outside. For more information, please see the Cloudflare Privacy Policy https://www.cloudflare.com/de-de/privacypolicy/

The following information is collected:

• IP address
• Date and time at which the website was called

We process the aforementioned data for the following purposes:

• Determining and tracking of malfunctions or misuse of our websites or telecommunication services and equipment and to improve the performance of our website.

Legal basis of data processing:

• The legal basis for the data processing is Article 6, Paragraph 1f, GDPR

Duration of data processing:

• Up to 7 days

Categories of Recipients of Personal Data

Your personal data is not transferred to third parties other than for the purposes listed in the following.

We only disclose your personal data to third parties if:

• You have given your express consent in accordance with Article 6, Paragraph 1, Sentence 1a, GDPR
• Disclosure in accordance with Article 6, Paragraph 1, Sentence 1a, GDPR is necessary to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data
• If there is a legal obligation to disclose the data in accordance with Article 6, Paragraph 1, Sentence 1c, GDPR
• It is permitted by law and is necessary to process contractual relationships with you in accordance with Article 6, Paragraph 1, Item 1b, GDPR

Data is only transferred to third countries if you have given us your consent.

Your Rights as a "Data Subject"

Right to object

If your personal data is processed on the basis of legitimate interests in accordance with Article 6, Paragraph 1, Item 1f, GDPR, you have the right to object to the processing of your personal data in accordance with Article 21 GDPR, provided that there are grounds for doing so that arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which will be implemented by us without the need to specify a particular situation.

If you wish to exercise your right of revocation or to object, simply send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. or write to GK Software SE, Waldstrasse 7, 08261 Schöneck/Vogtland.

The right of access, rectification, erasure and restriction of processing

The data subject has the right of access to the personal data concerned and the right to rectification, erasure or restriction of processing. Furthermore, they have the right to object to the processing. We would like to point out that we will delete your data if its storage is inadmissible (especially if the data is incorrect and a correction is not possible). Deletion will be replaced by blocking if there are legal or factual obstacles to this (for example, special retention obligations due to commercial and tax law requirements).

The right to data portability

The data subject has the right to data portability.

The right to complain to a supervisory authority

You have the right to complain to a supervisory authority. 

Provision of personal data

There is no legal obligation for you to provide personal data.

Automated decision-making including profiling

We do not use any profiling measures on our website.

Privacy Policy for Social Networks

The company operates profiles on the following networks. From our website, we only link to our profiles on the respective social networks:

Facebook: https://www.facebook.com/GKSoftwareSE/
Twitter: https://twitter.com/gk_software_se
Instagram: https://www.instagram.com/gksoftware/
LinkedIn: https://www.linkedin.com/company/gk-software
Xing: https://www.xing.com/pages/gksoftware

The providers of the various platforms are primarily responsible for providing the data subject with information about the processing operations and enabling them to exercise their data protection rights. Irrespective of this, we would like to inform you about our appearance on social networks. We recommend that you do not send us any sensitive data via these profiles. Please use a direct communication channel for this purpose. 

All of the data that you enter on our social network profiles (e.g.: comments, pictures, private messages, etc.) are published by the platform operators and are used by us exclusively for the purposes stated below.

The legal basis for this is Article 6, Paragraph 1f, GDPR. The legitimate interest is based on public relations, on providing up-to-date information and on the possibility to interact with our visitors and contact applicants (Xing, LinkedIn) via GK accounts.

Data processing by the operators of social networks

When you call up our profiles, data is processed by the operator of the platform. The form in which this happens cannot be influenced by us, nor can we see it. However, the procedure usually depends on whether you yourself are registered with the platform. It is possible that the providers process the data outside the EU. This means that we cannot guarantee an approach that is in compliance with the GDPR.

You can find more information on the data processing performed by the individual platform operators in their privacy policies:

• Facebook: Social network; service provider: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, parent company: Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA; Website: https://www.facebook.com; Privacy policy: https://www.facebook.com/about/privacy;Opt-Out: Advertising settings: https://www.facebook.com/settings?tab=ads; Additional notes on data protection: Agreement on the joint processing of personal data on Facebook pages https://www.facebook.com/legal/terms/page_controller_addendum, data protection statement for Facebook pages: https://www.facebook.com/legal/terms/information_about_page_insights_data.
• Instagram: Social network; service provider: Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA; Website: https://www.instagram.com; Privacy policy: http://instagram.com/about/legal/privacy.
• Twitter: Social network; service provider: Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA; Privacy policy: https://twitter.com/de/privacy, (Settings) https://twitter.com/personalization;
• LinkedIn: Social network; service provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland; Website: https://www.linkedin.com; Privacy policy: https://www.linkedin.com/legal/privacy-policy; Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
• Xing: Social network; service provider: XING AG, Dammtorstrasse 29-32, 20354 Hamburg, Germany; Website https://www.xing.de; Privacy policy https://privacy.xing.com/de/datenschutzerklaerung.

Validity and Changes to this Privacy Policy

This privacy policy is currently valid and was updated in June 2023.

Due to the further development of our website and offers on it or due to changed legal or regulatory requirements, it may become necessary to change this privacy policy. You can access and print out the current privacy policy from the website at any time.