Privacy Notice for this Website
When you visit this website, we process personal data. This notice explains what happens and what rights you have.
Controller and Data Protection Officer
The controller for the processing of personal data on this website is:
Elkay Interior Systems GC GmbH, Gabriel-Dreßler-Straße 7, 63741 Aschaffenburg, Germany. Phone +49 6021 5859882, e-mail info.gc@elkayinteriorsystems.com.
You can reach our Data Protection Officer through fox-on Datenschutz GmbH, Pollerhofstraße 33a, 51789 Lindlar, Germany, e-mail dsb@fox-on.com.
Technical provision of the website
To display the pages to you, our web server automatically records information that your browser transmits with every request. This mainly covers:
• IP address
• files and pages requested
• date and time of access
• address of the page you visited before
• browser type and version
• operating system and screen resolution
We need your IP address at least temporarily so that the content can be delivered to your browser. We store this data separately from any other data you may send us and do not combine it with data from other sources.
The legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest lies in providing this website reliably and securely.
This website runs on the platform of Duda, Inc., 1025 Cannon Street, Louisville, CO 80027, USA, and is delivered through its content delivery network and through Amazon Web Services servers. Duda processes the data on our behalf. Data may be transferred to the USA. The transfer is safeguarded by the European Commission’s standard contractual clauses and the EU-U.S. Data Privacy Framework.
Cookies and browser storage
We use cookies and similar storage techniques. These are small records placed on your device that can be read again later. Some are deleted automatically when you close your browser, others remain stored for longer.
Strictly necessary are those cookies and storage entries without which the pages do not work. They cover the distribution of requests across our servers and the storage of your decision in the consent management tool. The legal basis is Section 25 (2) no. 2 TDDDG and, where personal data is processed afterwards, Art. 6 (1) (f) GDPR.
All other cookies and storage entries are only used once you have given your consent. The legal basis is then Section 25 (1) TDDDG and Art. 6 (1) (a) GDPR. You can see the individual services, their purpose and their storage periods in the consent management tool under "More information".
You can also set your browser to notify you about cookies, to allow them only case by case, to refuse them in general or to delete them automatically when you close the browser. If cookies are disabled, the website may not be fully usable.
Consent management
We ask for your consent before we use services that are not strictly necessary to display the content. We manage your approvals and refusals with a solution provided by Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany. This stores your selection, the time of the decision, a randomly generated identifier and technical information about your browser. We need this to respect your decision on further page views and to be able to demonstrate it.
The legal basis is our legal obligation under Art. 6 (1) (c) GDPR in conjunction with Art. 7 (1) GDPR and Section 25 (2) no. 2 TDDDG.
You can change your decision at any time in the privacy settings.
Platform statistics and reach measurement
The platform this website runs on collects visit statistics. For this purpose entries are stored on your device that recognise your browser for a limited period, and information about the pages you view, the time of your visit and how often you visit is processed. Delivery runs through the Amazon CloudFront content delivery network operated by Amazon Web Services. Data is transferred to and processed in the USA.
The legal basis is your consent under Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG. You can withdraw your consent at any time in the privacy settings.
Google Tag Manager
We use Google Tag Manager, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It lets us integrate the services described below centrally and control when they run. The Tag Manager does not create analysis profiles of its own, but it causes the other services to start and transmits technical data including your IP address to Google.
The legal basis is your consent under Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG. You can withdraw your consent at any time in the privacy settings.
According to Google, data is also transferred to the USA. The transfer is safeguarded by the EU-U.S. Data Privacy Framework and the European Commission’s standard contractual clauses. More on data protection at Google: https://policies.google.com/privacy
Google Analytics
This website uses Google Analytics, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
The service collects information about how you use the website, including the content you view, the page you visited before, an approximate geographic location, browser type and version, operating system, IP address and the date and time of the request. Pseudonymous information such as interests or demographic characteristics may also be processed. This information is combined into a profile and assigned to your browser. Cookies are used for this. Your IP address is processed in shortened form only.
This tells us which parts of our website are used often and where we should improve.
According to Google, the data is processed within the EU. A transfer to the USA cannot be ruled out. Google has committed to the EU-U.S. Data Privacy Framework and has signed the European Commission’s standard contractual clauses.
The legal basis is your consent under Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG. You can withdraw your consent at any time in the privacy settings.
Your data is deleted after 14 months at the latest. More on data protection at Google: https://policies.google.com/privacy
Google Ads with conversion tracking
We advertise with Google Ads, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This lets us promote our services on external websites and measure how successful individual ads are.
If you reach this website through one of our ads, a Google Ads cookie is stored. It shows that you clicked the ad and were then forwarded to us. We only receive a statistical evaluation from Google and cannot identify you from it. We have no influence on the extent to which Google uses the data or what it does with it. If you are signed in to a Google service, Google may link the visit to your account. If you are not, Google still processes at least your IP address.
Data is also transferred to the USA. The transfer is safeguarded by the EU-U.S. Data Privacy Framework and the European Commission’s standard contractual clauses.
The legal basis is your consent under Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG. You can withdraw your consent at any time in the privacy settings.
LinkedIn Insight Tag
We use the Insight Tag of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. It allows suitable ads to be shown to visitors of this website on LinkedIn, and gives us reports on how our ads perform and how this website is used.
When you open a page, a connection to LinkedIn is established and cookies as well as entries in your browser storage are set. If you are signed in to LinkedIn at the same time, LinkedIn can link the visit to your account. We have a data processing agreement with LinkedIn, and transfers to third countries are based on the European Commission’s standard contractual clauses.
The legal basis is your consent under Art. 6 (1) (a) GDPR and Section 25 (1) TDDDG. You can withdraw your consent at any time in the privacy settings.
More information: https://www.linkedin.com/legal/privacy-policy. If you are signed in to LinkedIn, you can also object to the data collection here: https://www.linkedin.com/psettings/enhanced-advertising
Contact form
If you write to us through the contact form, we process the information you provide in order to handle your enquiry and for any follow-up questions. Mandatory fields are marked; without that information we cannot answer your enquiry. All other entries are voluntary.
The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to a contract or pre-contractual measures. In all other cases we base the processing on our legitimate interest in handling enquiries addressed to us, Art. 6 (1) (f) GDPR.
The form data is processed in our customer management system Salesforce. The provider is Salesforce, Inc., 415 Mission Street, 3rd Floor, San Francisco, CA 94105, USA. Salesforce processes the data on our behalf. Data is transferred to the USA. The transfer is safeguarded by the European Commission’s standard contractual clauses.
We keep your information until the purpose of storage no longer applies, for example once your enquiry has been dealt with, or until you ask us to delete it. Statutory retention periods remain unaffected.
Enquiries by e-mail or telephone
If you contact us by e-mail or telephone, we process your enquiry together with the personal data it contains in order to deal with your request. We do not pass this data on without your consent or another permitted legal basis.
The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to a contract or pre-contractual measures, otherwise our legitimate interest under Art. 6 (1) (f) GDPR. We keep the data until the purpose no longer applies or you ask us to delete it. Statutory retention periods remain unaffected.
Online applications
On our careers page we embed the applicant portal of Personio SE & Co. KG, Seidlstraße 3, 80335 Munich, Germany. When the page opens, a connection to Personio’s servers is established and your IP address, among other data, is transmitted. Personio processes the data on our behalf within the EU.
The legal basis for embedding the portal is our legitimate interest in showing you our vacancies on the careers page, Art. 6 (1) (f) GDPR. Where information is stored on your device in the process, this is strictly necessary to display the portal, Section 25 (2) no. 2 TDDDG.
If you submit an application, we process your applicant data solely for the application procedure. The legal basis is Section 26 (1) BDSG and Art. 6 (1) (b) GDPR. Mandatory information is marked in the form. If your application is unsuccessful, we delete your applicant data after six months so that we can answer follow-up questions and meet our obligations to provide evidence. If you would like to remain in our talent pool, we need your separate consent for that.
Our profiles on social networks
We have profiles on LinkedIn, Instagram, Xing and YouTube. From our website you reach them through plain links only, so no content from these networks is loaded on our website. Only when you click one of these links do you leave our website, and the privacy terms of the respective provider then apply.
When you visit our profiles, the operators process data about you, usually for market research and advertising as well. Usage profiles can be created from your behaviour and used for advertising inside and outside the networks. Data may be processed outside the European Union, which can make it harder for you to enforce your rights.
In this context we process contact data, the content of messages you send us, and usage and metadata, in order to communicate with you and to provide information about us. The legal basis is our legitimate interest in communication and public presence, Art. 6 (1) (f) GDPR.
The providers are: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (Instagram). New Work SE, Am Strandkai 1, 20457 Hamburg, Germany (Xing). Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (YouTube).
For a detailed description and for objection options please refer to the privacy information of the respective provider. Requests for access and other data subject rights are most effective when addressed there; we will support you on request.
Transfers to third countries
Some of the services named above process data outside the European Union, in particular in the USA. A level of data protection comparable to the EU is not guaranteed there. Authorities may under certain circumstances access personal data without you being able to challenge this effectively. We base these transfers on the European Commission’s standard contractual clauses and, where the provider participates, on the EU-U.S. Data Privacy Framework. For services that require your consent, such a transfer only takes place once you have consented.
Retention
Unless a specific period is stated above, we store your personal data until the purpose of the processing no longer applies. If you withdraw your consent or make a justified request for deletion, we delete the data unless we are required to keep it for other legally permitted reasons, such as tax or commercial retention periods. In that case we delete it once those reasons no longer apply.
Your rights
As a data subject you have the following rights, provided the statutory conditions are met:
• access to the personal data we process about you, Art. 15 GDPR
• rectification of inaccurate data or completion of incomplete data, Art. 16 GDPR
• erasure of your data, Art. 17 GDPR
• restriction of processing, Art. 18 GDPR
• data portability, Art. 20 GDPR
• objection to the processing, Art. 21 GDPR
You can withdraw consent you have given at any time with effect for the future, Art. 7 (3) GDPR. This does not affect the lawfulness of processing carried out until then.
Where we process your data on the basis of our legitimate interests, you can object to the processing on grounds relating to your particular situation. You can object to direct marketing at any time without giving reasons.
Please use the contact details above for any of these requests.
Right to lodge a complaint
You can lodge a complaint with a data protection supervisory authority at any time, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement. The authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht, Promenade 27, 91522 Ansbach, Germany.
Security of transmission
This website uses encryption in line with the current state of the art so that your entries cannot be read by third parties on their way to us. You can recognise an encrypted connection by the padlock symbol in your browser’s address bar.
Last updated: September 2026
