Privacy policy
1. Privacy at a glance
The following information gives a simple overview of what happens to your personal data when you visit our website. Personal data is any data that can be used to identify you personally.
Some of your data is collected when you give it to us, for example in the quote request form. Other data is collected automatically by our IT systems when you visit the website. This is mainly technical data (for example browser, operating system or time of the page request). Part of the data is collected to make sure the website works without errors. We only analyse how you use the website if you have given your consent.
2. Controller
The controller responsible for data processing on this website is:
GAM Baumaschinenteile GmbH
Hohenbuckstraße 3, 90425 Nuremberg, Germany
Represented by: Zoltan Gal
Phone: +49 911 989 53 804
Email: info@finaldrive.de
The controller is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (for example names or email addresses).
3. Your rights
Within the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipients and the purpose of the processing, and a right to rectification, restriction of processing or erasure of this data. For this and any other questions on data protection, you can contact us at any time using the details above.
Right to data portability: you have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a common, machine-readable format. If you ask for the data to be transferred directly to another controller, this will only be done where technically feasible.
Withdrawal of consent: many data processing operations are only possible with your express consent. You can withdraw consent you have already given at any time. An informal email to us is sufficient. The lawfulness of the processing carried out before the withdrawal remains unaffected.
Right to object: where we process data on the basis of a legitimate interest (Art. 6(1)(f) GDPR), you can object to this processing at any time on grounds relating to your particular situation.
Right to lodge a complaint: in the event of a breach of data protection law, you have the right to lodge a complaint with a supervisory authority. The authority responsible for us is the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany.
4. SSL and TLS encryption
For security reasons and to protect the transmission of confidential content, such as requests you send to us, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the address line of your browser starting with "https://" and by the padlock symbol in your browser bar. When encryption is active, the data you send to us cannot be read by third parties. Please note that data transmitted over the internet (for example by email) can have security gaps.
5. Hosting and server log files
This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. Website images and photos you upload with a request are stored by Vercel in its storage service (Vercel Blob). We have a data processing agreement with Vercel. Transfers to the USA are based on the EU-US Data Privacy Framework or on the European Commission's standard contractual clauses.
The host automatically collects and stores information in so-called server log files, which your browser transmits automatically. These are:
- browser type and version
- operating system used
- referrer URL
- host name of the accessing computer
- time of the server request
- IP address
This data is not merged with other data sources. The legal basis is Art. 6(1)(f) GDPR. We have a legitimate interest in providing the website in a technically error-free, secure and fast way.
6. Cookies and local storage
This website does not set any cookies without your consent. To remember your choice in the cookie notice, we store it in your browser's local storage. To show the WhatsApp notice only once per visit, we store a note in the session storage, which is deleted when you close the browser. Both are technically necessary (section 25(2) of the German TDDDG) and contain no information about you.
We only set Google Analytics cookies if you have agreed (see section 9). You can set your browser to inform you about cookies, to allow them only in individual cases or to block them altogether.
7. Quote request form
When you send us a request using the quote request form, we process your details (for example name, company, email address, phone number, country, excavator model, message and uploaded photos) to handle your request and send you a quote.
Your request is sent to us by email, and you receive a confirmation by email. We also pass the details to the automation service Make (make.com), which writes them into our internal request overview so that no request gets lost. Photos are stored with Vercel Blob (see section 5).
The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a contract) and Art. 6(1)(f) GDPR (our legitimate interest in handling requests reliably). We keep the data until the purpose no longer applies (for example once your request has been dealt with) or you ask us to delete it. Statutory retention periods remain unaffected.
8. Contact by email, phone or WhatsApp
If you contact us by email or phone, we process your details to deal with your enquiry (Art. 6(1)(b) or (f) GDPR). We keep the data until the purpose no longer applies; statutory retention periods remain unaffected.
The WhatsApp buttons are simple links. WhatsApp only opens when you click one. WhatsApp is a service of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, and its own privacy policy applies to processing within WhatsApp. Whether you message us on WhatsApp is up to you.
9. Google Analytics
With your consent, this website uses the web analytics service Google Analytics 4. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics evaluates how visitors use the website (for example pages viewed, time on site, source, device and approximate location) and helps us improve the website. For this, Google Analytics sets cookies (_ga, _ga_*), which are kept for up to two years.
Google Analytics 4 does not store full IP addresses. Data may be transferred to servers of Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework. We have a data processing agreement with Google.
The legal basis is your consent (Art. 6(1)(a) GDPR, section 25(1) TDDDG). Without your consent, Google Analytics is not loaded. You can withdraw your consent at any time with effect for the future:
More about how Google Analytics handles user data: https://support.google.com/analytics/answer/6004245?hl=en
10. Fonts
The fonts on this website are hosted locally. No connection to servers of Google or other font providers is made when you load the page.
11. Objection to promotional emails
We hereby object to the use of contact details published in the legal notice for sending unsolicited advertising and information material. The operators of this website expressly reserve the right to take legal action in the event of unsolicited advertising, such as spam emails.