Privacy Policy | Global Tech Lubricants GmbH

1) Introduction and contact details of the controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about the handling of your personal data when you use our website. Personal data means any data that can be used to identify you personally.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Global Tech Lubricants GmbH, Rheinpromenade 4a, 40789 Monheim am Rhein, Germany, Tel.: +49 2306 9129380, Fax: +49 2306 7649917, email: info@gtl-gmbh.eu. The controller responsible for processing personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

2) Data collection when you visit our website

2.1 When you use our website for information purposes only, i.e. without registering or otherwise providing us with information, we collect only the data that your browser transmits to the website server (known as “server log files”). When you access our website, we collect the following data, which are technically necessary for us to display the website to you:

The website you visited
The date and time of access
The volume of data sent in bytes
The source/referral from which you reached the website
The browser used
The operating system used
The IP address used (where applicable, in anonymised form)

Processing is carried out in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. Processing of these access data in connection with hosting, the content delivery network and IONOS WebAnalytics is described in Sections 3 and 6.2. Beyond this, the data are not disclosed or used for any other purpose. However, we reserve the right to review the server log files subsequently if there are specific indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries sent to the controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the character string “https://” and the padlock symbol in your browser's address bar.

3) Hosting & content delivery network

3.1 Hosting with IONOS

Our website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. IONOS processes the data necessary to operate and deliver the website, in particular the technical access data described in Section 2. Processing is based on Article 6(1)(f) GDPR and our legitimate interest in providing our website securely, reliably and efficiently.

A data processing agreement with IONOS safeguards the data of visitors to our website and prohibits unauthorised disclosure to third parties. Further information is available in the IONOS privacy information.

3.2 IONOS CDN powered by Cloudflare

We also use the IONOS content delivery network (CDN), powered by Cloudflare, for our domain. IONOS provides this CDN service using the network of Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA.

The CDN stores copies of website content, such as images, stylesheets and scripts, on servers distributed around the world and delivers them through a suitable server. It also helps detect and block malicious requests. Technical connection and access data, such as your IP address, are processed in this process. Files loaded through our own domain may therefore also be delivered through the IONOS CDN.

Processing is based on Article 6(1)(f) GDPR and our legitimate interest in providing our website quickly, reliably and securely. Data processing is governed by our agreement with IONOS; Cloudflare is used as part of this IONOS service.

The globally distributed network may involve processing outside the European Union, in particular in the USA. For transfers of data to the USA, Cloudflare has joined the EU-US Data Privacy Framework, which is based on an adequacy decision by the European Commission.

Information about how the service works is available in the IONOS CDN documentation. Further information about processing by Cloudflare is available in the Cloudflare privacy policy.

4) Cookies

To make visiting our website appealing and to enable certain functions, we use cookies, which are small text files stored on your device. Some of these cookies are automatically deleted when you close your browser (“session cookies”), while others remain on your device for longer and allow website settings to be saved (“persistent cookies”). In the latter case, you can find their storage duration in the cookie settings overview of your web browser.

If individual cookies we use also process personal data, processing is carried out under Article 6(1)(b) GDPR for the performance of a contract, under Article 6(1)(a) GDPR where consent has been given, or under Article 6(1)(f) GDPR to safeguard our legitimate interests in the best possible functionality of the website and a user-friendly and effective website experience.

You can configure your browser to notify you when cookies are set and decide individually whether to accept them, or to exclude the acceptance of cookies in particular cases or generally.

Please note that if you do not accept cookies, the functionality of our website may be restricted.

5) Contacting us

5.1 WhatsApp Business

You can contact us using the WhatsApp messaging service provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. We use the “Business” version of WhatsApp for this purpose.

If you contact us via WhatsApp in connection with a specific transaction (for example, an order you have placed), we store and use the mobile telephone number you use on WhatsApp and, if provided, your first and last names in accordance with Article 6(1)(b) GDPR to process and respond to your request. On the same legal basis, we may ask you via WhatsApp to provide further information (order number, customer number, address or email address) so that we can assign your enquiry to a particular transaction.

If you use our WhatsApp contact for general enquiries (such as about our range of services, availability or our website), we store and use the mobile telephone number you use on WhatsApp and, if provided, your first and last names in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in providing the requested information efficiently and promptly.

Your data are always used only to respond to your request via WhatsApp. They are not disclosed to third parties.

Please note that WhatsApp Business has access to the address book of the mobile device we use for this purpose and automatically transmits telephone numbers stored in the address book to a server of its parent company, Meta Platforms Inc., in the USA. To operate our WhatsApp Business account, we use a mobile device whose address book contains only the WhatsApp contact details of users who have also contacted us via WhatsApp.

This limits the contact details stored in the WhatsApp address book to people who have already contacted us via WhatsApp. Contact details of other people in our general business address book are not transferred to this WhatsApp address book.

For the purpose and scope of data collection, further processing and use of data by WhatsApp, and your related rights and settings options for protecting your privacy, please refer to WhatsApp's privacy information: https://www.whatsapp.com/legal/?eea=1#privacy-policy

The WhatsApp Business Data Processing Terms apply to the processing of customer contact data by WhatsApp on our behalf. They form part of the WhatsApp Business Terms. Further processing by WhatsApp is subject to the provider’s privacy information.

In connection with the processing described above, data may be transferred to servers of Meta Platforms Inc. in the USA.

For transfers of data to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

5.2 Personal data are collected when you contact us (e.g. using a contact form or email). The respective contact form shows which data are collected when you use it. These data are stored and used exclusively to respond to your request or to contact you and for the associated technical administration.

The legal basis for processing these data is our legitimate interest in responding to your request under Article 6(1)(f) GDPR. If you contact us with a view to entering into a contract, Article 6(1)(b) GDPR is an additional legal basis for processing. Your data will be deleted once your enquiry has been fully dealt with. This is the case if the circumstances indicate that the matter concerned has been conclusively resolved and provided that no statutory retention obligations prevent deletion.

6) Web analytics services

6.1 Google Analytics 4

With your consent, this website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). We use it to evaluate use of our website, such as page views and contact clicks, and to obtain reports to improve our services.

The Google tag is loaded only after you have consented to the “Statistics” category in the cookie settings dialog. Only then can analytics cookies be set and usage data, cookie identifiers, and browser, device and approximate location information be transmitted to Google. Without this consent, Google Analytics is not used during your visit to the website. The legal basis is your consent under Article 6(1)(a) GDPR.

Your IP address is also technically processed during transmission. According to Google, Google Analytics 4 uses it to derive approximate location information and then discards it before measurement data are logged. For visits from the EU, Switzerland and the United Kingdom, Google expressly confirms that IP addresses are not logged or stored. Further information is available in Google's explanations of regional data collection and privacy in the EU, Switzerland and the United Kingdom.

Google processes the information collected on our behalf to evaluate your use of the website and provide reports on website activity. Transfers to Google LLC in the USA are also possible.

In Google Analytics, retention of event-level data is set to two months and retention of user-level data to 14 months. New activity restarts the retention period for the respective user-level data. Once the applicable period has expired, Google automatically deletes the data during its monthly deletion process. This retention setting does not affect standard aggregated reports. Independently of this, the lifetime of our Analytics cookies is configured to 90 days and is not extended on each page view. Information about these different retention rules is available from Google Analytics.

Google Signals and advertising personalisation signals are disabled in our website integration. We do not transmit our own user account identifiers (User-IDs) to Google Analytics, and we do not offer user accounts on this website. Our website integration does not enable analysis of age, gender or interests based on Google Signals. Consent to statistics does not constitute consent to advertising features.

You may withdraw your consent at any time with effect for the future by opening “Cookie settings” in the footer and disabling “Statistics”. Our integration will then stop further collection and remove the Analytics cookies it uses from your browser.

We have concluded a data processing agreement with Google that safeguards the data of visitors to our website and prohibits unauthorised disclosure to third parties.

Further information is available in the privacy information for Google services, Google's privacy policy and the explanation of data use on partners' websites and apps.

6.2 IONOS WebAnalytics

Our hosting also includes IONOS WebAnalytics, provided by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. The service evaluates server-side access logs for statistical analysis and technical improvement of our website.

According to IONOS, WebAnalytics does not use cookies and anonymises the IP address transmitted during a page request immediately after transmission. The information evaluated includes the previous page and the requested page or file, browser and operating system information, device type, access time and a location derived from the anonymised IP address.

This evaluation of hosting access data takes place independently of Google Analytics. The legal basis is Article 6(1)(f) GDPR and our legitimate interest in the statistical and technical optimisation of our website. Data processing by IONOS is governed by our agreement with IONOS. Further information is available in IONOS's information about data processing by WebAnalytics.

7) Website functionality

Google Maps

This website embeds maps from Google Maps, a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). The maps show our locations and help you find your way to us.

The embedded maps are initially disabled. A connection to Google Maps is established only after you consent to the “Functional” category or explicitly activate a map. Merely opening a page with a disabled map does not transmit data to Google Maps through this integration. The legal basis for loading the map and the associated data transmission is your consent under Article 6(1)(a) GDPR.

After activation, Google receives information about use of the map and technical connection data, in particular your IP address. This may also involve a transfer to servers of Google LLC in the USA. Processing takes place regardless of whether you have a Google account. If you are signed into Google, Google may associate the data with your account. If you do not wish this association to take place, sign out of your Google account before activating the map. Google processes the data in accordance with its own privacy information.

You may withdraw your consent at any time with effect for the future by opening “Cookie settings” in the footer and disabling “Functional”. This disables the embedded maps again. You can also read our addresses without activating the maps.

Further information is available in Google's privacy policy and the privacy information for Google services.

8) Managing your cookie consent

We use our own cookie consent tool on this website. It allows you to accept or reject the optional Google Analytics and Google Maps services separately. The respective services remain disabled until you give consent.

Your selection is saved under the name gtl-cookie-consent in a cookie and in your browser's local storage. We store your selected categories, the time of your decision and the version of the consent settings. Your selection applies to both the German and English website and remains valid for 90 days from your decision. We then ask you to make a new selection. No external provider is loaded for this consent tool, and your selection is not transmitted to any such provider.

We store your selection to respect your decision about the use of optional services. Where personal data are processed for this purpose, processing is based on Article 6(1)(c) GDPR to meet our data protection obligations and Article 6(1)(f) GDPR on the basis of our legitimate interest in lawful, user-specific and user-friendly consent management.

You may change your selection or withdraw your consent at any time with effect for the future using “Cookie settings” in the footer. If you delete the stored settings in your browser, the selection dialog will be displayed again.

9) Rights of the Data Subject

9.1 Applicable data protection law grants you the following rights as a data subject (rights of access and intervention) against the controller with regard to the processing of your personal data. The conditions for exercising each right are set out in the legal provisions cited:

Right of access pursuant to Article 15 GDPR;
Right to rectification pursuant to Article 16 GDPR;
Right to erasure pursuant to Article 17 GDPR;
Right to restriction of processing pursuant to Article 18 GDPR;
Right to be informed pursuant to Article 19 GDPR;
Right to data portability pursuant to Article 20 GDPR;
Right to withdraw consent given pursuant to Article 7(3) GDPR;
Right to lodge a complaint pursuant to Article 77 GDPR.

9.2 RIGHT TO OBJECT

IF, AS PART OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FUNDAMENTAL FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING. YOU MAY EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

10) Duration of Storage of Personal Data

The duration for which personal data is stored is determined by the relevant legal basis, the purpose of processing and, where applicable, additionally by the relevant statutory retention period (for example, retention periods under commercial and tax law).

Where personal data is processed on the basis of express consent pursuant to Article 6(1)(a) GDPR, the data concerned will be stored until you withdraw your consent.

Where statutory retention periods apply to data processed in connection with contractual or similar obligations on the basis of Article 6(1)(b) GDPR, this data will be routinely erased after the retention periods expire, provided that it is no longer required for the performance or initiation of a contract and/or we no longer have a legitimate interest in its continued storage.

Where personal data is processed on the basis of Article 6(1)(f) GDPR, this data will be stored until you exercise your right to object pursuant to Article 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Where personal data is processed for direct marketing purposes on the basis of Article 6(1)(f) GDPR, this data will be stored until you exercise your right to object pursuant to Article 21(2) GDPR.

Unless the other information in this policy concerning specific processing situations provides otherwise, stored personal data will otherwise be erased when it is no longer necessary for the purposes for which it was collected or otherwise processed.

Based on the German privacy policy of IT-Recht Kanzlei (© IT-Recht Kanzlei; dated 16 September 2026). Technical information has been adapted to this website. The English translation and additional information were prepared for Global Tech Lubricants GmbH.

Additional information from Global Tech Lubricants GmbH

Technical implementation on this website

The following information explains how the services described above are implemented on our website:

Fonts and design: Website fonts, icons, country flags and the associated design files are loaded through our website domain.
WhatsApp: The WhatsApp link is an external link. You open the WhatsApp service only when you click this link. There is no embedded WhatsApp chat widget on our website.

Invoicing and bookkeeping with sevdesk

We use sevdesk, provided by sevDesk GmbH, Im Unteren Angel 1, 77652 Offenburg, Germany, for our customers' invoicing and bookkeeping. The customer and invoice data required for these purposes are processed, including names, contact details, addresses, and invoice and payment information. Enquiries made through our website alone are not transferred to sevdesk.

Where processing is necessary for the performance of a contract with you, it is based on Article 6(1)(b) GDPR. Where processing is necessary to comply with statutory bookkeeping and retention obligations, the legal basis is Article 6(1)(c) GDPR. Retention is governed by the applicable statutory retention requirements. Further information about the provider is available in the sevdesk privacy policy.