Data Protection

Cookie settings

To change your cookie settings, please click here.

1. About us

We, KÖGL GmbH, are responsible for the collection, processing and storage of your data. You can find details about us in our imprint at any time.

The careful handling of your personal data is our highest priority. During processing, we comply with the statutory provisions, e.g. the General Data Protection Regulation (GDPR) and the associated national provisions.

This privacy policy applies to all our company’s websites that can be accessed under our domain ( If you switch to other operators’ websites within the scope of our offer, their own data protection regulations will apply in each case, and these websites’ respective operators are responsible for their websites’ content.

Since we would like to give you a comprehensive overview of the processing of personal data in our group of companies, you will find below an overview of all our services in the context of which we collect and process personal data.

If separate or additional conditions apply to individual services or if we request your consent, we will indicate this to you separately before you use the respective service.

We also take various security measures to protect your personal data. For example, transmission between your web browser and our servers is always transport-encrypted and we maintain a variety of technical and organizational measures to always protect your data.


2. About usWhy we process your data

In principle, you can visit our website without disclosing your identity. Should you wish to contact us, for example, we will ask you for your name and other personal information. It is up to you whether you enter this (extended) data. Data that we absolutely need from you to provide our services are marked as such.
Your personal data is collected and processed for the following purposes on the basis of the following lega bases:

  • Contract initiation in accordance with Article 6(1)(a)  and (b) GDPR;
  • Contract execution in accordance with Article 6(1)(b) GDPR;
  • Customer management in accordance with Article 6(1)(b) and (f) GDPR;
  • Communication and data exchange in accordance with Article 6(1)(a)(b)(c) and (f) GDPR;
  • External representation and advertising in accordance with Article 6(1)(a) and (f) GDPR
  • Implementation of declarations of consent in accordance with Article 6(1)(a) GDPR;
  • To ensure proper operation of a data processing system according to Article 6(1)(c) and (f) GDPR;
  • Applicant selection procedures in the context of personnel and resource management based on Article 6(1)(a) and (b) GDPR in conjunction with Section 26 of the German Federal Data Protection Act.


3. What information we collect from you and process

We collect different categories of personal data from you. Personal data is all information relating to an identified or identifiable natural person, and an identifiable natural person is someone who can be identified directly or indirectly, in particular by assignment to an identifier such as a name. Personal data includes, for example, information such as your name, your address, your telephone number and your date of birth (if stated). Statistical information that cannot be directly or indirectly associated with you - such as the popularity of individual websites of our offer or the number of a page’s users - is not personal data. Data is collected directly and indirectly. In both cases, data will only be collected to the extent necessary; the data will only be processed for the purposes stated under point 2. It is your decision whether you want to transmit data to us that optimizes the use of our services for you, but is not necessary for this purpose. Corresponding data fields are marked “voluntary”.

Directly collected data includes:

  • E-mail address, name, company and telephone number for making contact through our contact form;
  • Candidate data, for carrying out our online application procedure;
  • Data that you actively and consciously transmit to us when using our services;
  • Additional data that you voluntarily transmit to us, e.g. data fields marked “voluntary” which you complete.

Furthermore, data about you will be collected indirectly when using our services:

  • Technical connection data, e.g. the page called up on our website, your IP address, date and time of the access, terminal device used, browser configuration data.


Our website is not targeted at minors and we do not knowingly collect personal data from minors.

Persons under the age of 16 may only transmit personal data to us if their legal guardian themselves have given consent or have approved the minor’s consent. In accordance with Article 8(2) GDPR, the legal guardian’s contact details must be provided in order to convince us of the consent or the legal guardian’s approval. This data and the minor’s data will then be processed in accordance with this privacy policy.
We will immediately delete personal data sent to us by a minor under the age of 16 if we establish that it was sent without their legal guardian’s consent or approval of the minor’s consent.

4. Who has access to your data and to whom we transmit your data

a) Access

Access to your personal data that we have stored is limited to our employees and the service providers we have commissioned who are required to handle this personal data due to their tasks.

If third parties gain access to your data, we will have obtained your permission for this or there will be a legal basis permitting it.

We also use service providers to provide services and to process your data. If special provisions apply to them, we will implement them subsequently for you for the respective service. The service providers will process the data exclusively on our instructions and are required to comply with the applicable data protection regulations. All data processors have been carefully selected and will only have access to your data to the extent and for the time required to provide the services or to the extent to which you have consented to the data processing and use.

b) Data exchange within the corporate group

Data exchanges within the corporate group to which we belong will only take place within the EU/EEA and will only be carried out for internal administrative purposes. The term “corporate group” is used to mean affiliated companies within the meaning of Article 4(19) GDPR.

c) Transfer to third countries and legal basis

The servers of some of the service providers we use are located in the USA and other countries outside the European Union. Companies in these countries are subject to a data protection law that does not generally protect personal data to the same extent as is the case in the European Union member states. If your data are processed in a country where the level of data protection is not recognised as being as high as that of the European Union, we will use contractual arrangements or other recognised instruments to ensure that your personal data are adequately protected. Subsequently, we will expressly indicate this to you again within the scope of the individual services.

Any transfer of personal data to third countries will be carried out on the basis of the EU Commission's adequacy decision on the EU-U.S. Privacy Shield under Article 45 GDPR or the 2010 EU Model Contracts pursuant to Art. 46(2)(c) GDPR in conjunction with the decision of the EU Commission Decision of 5th February 2010 (2010/87/EU) or your consent pursuant to Article 49(1)(a) GDPR.

d) Transfer to law enforcement and criminal investigation authorities

In exceptional cases we will transmit personal data to law enforcement and criminal investigation authorities. This will be done on the basis of corresponding legal obligations, e.g. arising from the German Code of Criminal Procedure, the German Fiscal Code, the German Anti-Money Laundering Act or state police laws.


5. Retention Periods

We will store personal data in accordance with statutory provisions or your consent.
We use the following criteria to determine the specific storage period:

We will store the personal data until the purposes for which they were collected cease to apply (e.g. upon termination of a contractual relationship or through the last activity, if there is no continuing obligation, or in the event of a withdrawal of your consent for the specific data processing).

Data will only be stored beyond these periods in the following cases:

  • Existence of legal storage obligations (e.g. under the German Fiscal Code and the German Commercial Code);
  • A continuing need for data in order to establish and exercise legal claims or to defend against legal claims, e.g. due to technological and forensic requirements to defend against attacks on our web servers and their prosecution;
  • Where erasure would be contrary to the data subjects’ legitimate interest; or
  • Another exception pursuant to Art. 17(3) GDPR applies.


6. Your rights

You have a number of legal rights to which we would like to draw your attention below. Naturally, our data protection officer is also available using the contact information given below to answer any questions you may have about your personal data that we have collected and processed.

a) Right to information and data portability

You have a right to information about the personal data we process concerning you at any time.
If the data processing is based on your consent or on a contract pursuant to Article 6(1)(b) GDPR, under Article 20(1) GDPR, you may also request that the personal data stored about you be made available to you in a structured, commonly used and machine-readable format. We will also forward the data directly to the recipient of your choice at your request.

b) Right to rectification, restriction and erasure

Furthermore, in accordance with Articles 16 to 18 GDPR, you may request us to correct, restrict (block) or erase your personal data if we have processed the data incorrectly, if there is a reason for restricting further data processing, if the data processing has become illegal for various reasons, or if its storage is forbidden for other legal reasons.  We would like to point out that your right to erasure may be restricted by legal retention periods.

c) Right to object

If our data processing is based exclusively on our legitimate interest under Article 6(1)(f) GDPR, you may object to this processing under Article 21(1) GDPR. In the event of an objection, we shall discontinue the processing of your data unless we can demonstrate compelling and protection-worthy reasons for the processing that outweigh your interests, rights and freedoms, or if the processing serves to establish, exercise or defend legal claims. Furthermore, under Article 21(2) GDPR, you always have the right to object to the use of your data for the purpose of direct advertising with effect for the future.

d) Right of withdrawal

If you have allowed us to process your personal data by giving your consent, under Article 7(3) GDPR, you have a right of withdrawal with effect for the future.

e) Right to lodge a complaint with the supervisory authority
You are free to lodge a complaint with a supervisory authority if you believe that our processing of your personal data violates the European Data Protection Regulation or other national and international data protection laws.

The contact details of the supervisory authority responsible for us are as follows:

Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 27
91522 Ansbach
Telephone: +49 981 53 1300

f) Contact details

You can send us an informal message using the following contact details in order to exercise your rights. Please also address the withdrawal of your consent to the following contact persons, indicating which declaration of consent you would like to withdraw:

Data Controller Data Protections Officer
KÖGL GmbH Betriebs-, Lager- und Fahrzeugeinrichtungen
Industriestraße 2
D-89347 Bubesheim-Günzburg
Telefon: +49 (0)82 21 / 36 90 - 0
it.sec GmbH & Co. KG
Einsteinstrasse 55
89077 Ulm
Telefon +49 (0)7 31 / 20 58 - 924


7. Use of our website - Profiling, cookies and web tracking

a) Basic information about cookies and opt-out options

We use so-called cookies in some areas of our website, e.g. to recognize our visitors’ preferences and to enable us to design the website accordingly. This facilitates navigation and a high degree of user-friendliness of a website. Cookies also help us to identify particularly popular areas of our website. Cookies are small files that are stored on a visitor's hard drive. They allow information to be stored for a certain period of time and to identify the visitor's computer. We use permanent cookies for better user guidance and individual service presentation.

We also use so-called session cookies, which are automatically deleted when you close your browser. You can set your browser to inform you about the placement of cookies. This will make the use of cookies transparent for you. This is done to verify the authorization of actions and the authentication of the requesting user of our services. The legal basis is Article (1)(c) in conjunction with Article 32 and Article 6(1)(f) GDPR. Our legitimate interest is to secure our web server, to defend ourselves against attacks, for example, and to ensure the functionality of our services.

If you completely exclude the use of cookies, you cannot use some of our website’s functions - including the possibility of cookie-based opt-out from tracking. Please allow the opt-out cookies of those services for which you wish to prevent tracking.
Please also note that deleting all cookies will also delete opt-out cookies. You may therefore have to reset them. Cookies are also browser-linked, i.e. they must be set separately for each browser you use on each device you use. You will find the necessary links in the description of the respective service below.

We will use the following cookies for a more detailed purpose:

Name of cookie Purpose of use Storage duration Technically necessary
_gid This cookie is used by Google Analytics to distinguish between users. 1 day No
_ga This cookie is used by Google Analytics to distinguish between users. 26 month No

This cookie is used by the KÖGL website to allow our partners and dealers access to certain page contents.

1 day


b) Google Analytics

This website uses Google Analytics, a web analytics service of Google LLC (“Google”). Google Analytics uses so-called "cookies", which are text files stored on your computer and which enable an analysis of your use of the site. The information generated by the cookie about your use of this website will usually be transferred to a Google server in the USA and stored there. However, if IP anonymization has been activated on this website Google shall truncate your IP address beforehand within Member States of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google will use this information on our behalf to evaluate your use of the website, to compile reports on website activities and to provide the website operator with other services relating to website and Internet use. The IP address transmitted by your browser in the context of Google Analytics will not be merged with other Google data. One way to object to web analysis by Google Analytics is to set an opt-out cookie that instructs Google not to store or use your data for web analysis purposes. Please note that with this solution the web analysis will only not take place as long as the opt-out cookie is stored by the browser. If you want to set the opt-out cookie now, please click

You may also prevent the use of cookies through a  corresponding setting of your browser software. However, please note that if you do this, you may not be able to use this website’s full functionality. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available at the following link: The current link is:

Data Recipient Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Privacy Shield:

As an alternative to the browser add-on or within browsers on mobile devices, please click this link to prevent Google Analytics from collecting data on this website in the future (the opt-out only works in the browser and only for this domain). An opt-out cookie is stored on your device. If you delete your cookies in this browser, you must click this link again.

c) Google Maps

Our website uses the “Google Maps” service from Google, e.g. to enable you to search for a dealer or to enable you to plan your route.

When you access Google Maps on this website, data will be forwarded to Google, e.g. your current location. This service is governed by Google's privacy policy (, supplemented by the separate privacy policy for Google Maps (

You can prevent the execution of Google Maps by selectively preventing the execution of the Java script code used by using a Java script blocker; alternatively, you can also completely deactivate the execution of Java script in your browser settings.

Data Recipient Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, Privacy-Shield:

d) Social media buttons

Our website uses social media buttons (Facebook, Google+, and Twitter) to enable you to interact with third parties.

These social media buttons are not integrated as plug-ins, but are inserted as links. By clicking the social media buttons you will be redirected to the respective provider’s page. The respective provider will then be responsible within the meaning of  Article 4(17) GDPR for compliance with data protection regulations and for the accuracy, currency and completeness of the information provided for data processing.

e) Web fonts

This page uses so-called web fonts provided by Monotype Imaging Holding Inc. (“Monotype”) to display fonts uniformly. When you call up a page, your browser loads the required Web fonts into your browser cache to display texts and fonts correctly.
Your browser must connect to Monotype's servers to do this. This will notify Monotype that your IP address has been used to access our website. The use of Monotype Web Fonts is in the interest of a uniform and appealing presentation of our website. This constitutes a legitimate interest within the meaning of Article 6(1)(f) GDPR.

Your computer will use a default font if your browser does not support web fonts.

For more information about Monotype Web Fonts, please see Monotype's privacy policy at and

Seite teilen: