Privacy Policy

Status: 29.01.2026

1. Controller

The controller within the meaning of the GDPR is:

GEMP Holding GmbH Kolonnenstraße 8 10827 Berlin Germany Email: info@ge-mp.com A data protection officer has not been appointed and is not required.

2. General information on data processing

Personal data are all data that can be used to identify you personally. We process personal data only to the extent necessary to provide a functional website and our content and services, or where a legal basis (e.g., consent) exists.

Legal bases may in particular include Art. 6(1)(a) (consent), (b) (contract/pre-contract), (c) (legal obligation), and (f) (legitimate interests) GDPR.

3. Hosting

We host our website with STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany ("STRATO").

STRATO processes personal data (e.g., IP addresses in log files) to ensure the secure and stable operation of the website. A data processing agreement pursuant to Art. 28 GDPR is in place with STRATO.

4. Server log files

When visiting our website, the hosting provider typically processes the following data:

  • IP address (possibly in log files)
  • Date and time of the request
  • Accessed page/file
  • Amount of data transferred
  • Referrer URL (previously visited page)
  • Browser type and version, operating system
  • Requesting provider

Processing is based on Art. 6(1)(f) GDPR (legitimate interest in technical provision, stability, and security).

Where IP addresses are stored in log files, STRATO states they are retained for up to seven days for attack detection and defense.

5. Cookies and consent management

Our website may use cookies and similar technologies (e.g., local storage, pixels). Technically necessary cookies are used on the basis of Art. 6(1)(f) GDPR. For all non-essential cookies/technologies (e.g., web analytics, newsletter tracking, YouTube), we obtain consent where required pursuant to § 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR.

You can revoke consent at any time with effect for the future, e.g., via the cookie settings in our consent banner (if available) or by deleting cookies in your browser.

6. Contact (email / contact form)

If you contact us by email or via the contact form, we process the data you provide (e.g., name, email address, phone number, subject, message) to handle your request.

The legal basis is Art. 6(1)(b) GDPR if the request relates to concluding or performing a contract; otherwise Art. 6(1)(f) GDPR (legitimate interest in handling inquiries).

Data are deleted once the request has been fully processed, unless statutory retention obligations apply.

7. Newsletter (Mailchimp)

If you subscribe to our newsletter, we process the data you provide (at minimum your email address; possibly also name).

We generally use a double opt-in procedure. The registration is logged (e.g., registration time, confirmation, IP address) to prove the sign-up process.

Newsletter delivery is handled by Mailchimp (The Rocket Science Group LLC d/b/a Mailchimp, Intuit Mailchimp), 405 N Angier Ave. NE, Atlanta, GA 30308, USA.

Mailchimp can statistically analyze newsletter delivery (e.g., whether an email was opened and which links were clicked) if this function is enabled. This occurs only with your consent.

The legal basis is your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time via the unsubscribe link in the newsletter.

Data may be transferred to the USA. Mailchimp states it is certified under the EU-US Data Privacy Framework and uses Standard Contractual Clauses (SCC) as additional safeguards.

8. Web analytics with Google Analytics 4

If we use Google Analytics 4, we use the web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Google Analytics 4 allows us to analyze usage behavior on our website (e.g., page views, interactions). Cookies or similar technologies are used.

The legal basis is your consent (Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG).

According to Google, IP addresses are not logged or stored in Google Analytics 4; IP addresses of EU users are discarded before logging.

Data may be transferred to third countries (especially the USA). Google LLC is certified under the EU-US Data Privacy Framework; additional Standard Contractual Clauses may be agreed.

You can revoke consent at any time via cookie settings. You can also prevent data collection via browser settings or opt-out tools/add-ons.

9. Embedded YouTube videos

Our website may embed YouTube videos. The provider is YouTube (Google), in the EU typically Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; in the USA Google LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

When a page with an embedded video is accessed, a connection to YouTube/Google servers may be established. In particular, your IP address and usage data may be processed and cookies set.

Where required, embedding is based on your consent (Art. 6(1)(a) GDPR in conjunction with § 25(1) TDDDG).

Data may be transferred to the USA. Google LLC is certified under the EU-US Data Privacy Framework.

10. Recipients / processors

To provide the website and the functions described, we use service providers as processors, in particular:

  • STRATO GmbH (hosting)
  • The Rocket Science Group LLC d/b/a Mailchimp (newsletter delivery)
  • Google Ireland Limited / Google LLC (Google Analytics, YouTube)

11. Data transfers to third countries

Where we use service providers that process personal data outside the European Economic Area (EEA), we ensure appropriate safeguards pursuant to Art. 44 et seq. GDPR (e.g., adequacy decisions, Standard Contractual Clauses, certifications such as the EU-US Data Privacy Framework).

12. Storage duration

We generally process personal data only for as long as necessary for the respective purposes. Beyond that, data are stored only where legal retention obligations apply or where we have a legitimate interest in further storage.

13. Your rights

Under applicable law, you have in particular the following rights:

  • Access (Art. 15 GDPR)
  • Rectification (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection to processing (Art. 21 GDPR)
  • Withdrawal of consent (Art. 7(3) GDPR)

14. Withdrawal of consent

If processing is based on your consent, you can withdraw it at any time with effect for the future. The lawfulness of processing carried out before the withdrawal remains unaffected.

15. Right to object (Art. 21 GDPR)

Where we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you have the right to object to such processing at any time for reasons arising from your particular situation.

If your objection is directed at direct marketing, we will stop processing for this purpose immediately.

16. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a supervisory authority. The competent authority for us is in particular: Berlin Commissioner for Data Protection and Freedom of Information Alt-Moabit 59-61, 10555 Berlin Email: mailbox@datenschutz-berlin.de

17. Updates and changes to this privacy policy

We will update this privacy policy whenever changes to our data processing or other reasons require it.