(as of October 30, 2026)
We look forward to your visit to our website and your interest in our company. The following information provides a simple overview of what happens to your personal data when you visit our website, www.gefeg.com. Personal data is comprised of individual details of a specific or specifiable natural person with which this person can be identified. This includes information such as one's name, telephone number or date of birth. Detailed information regarding the topic of data protection can be found in the Privacy Policy below.
In principle, it is possible to use the website of GEFEG mbH without providing personal data. If you only our website use for informational purposes (that is, you do not log in, register, place an order or otherwise provide us with information regarding yourself), we will not process any personal data, except the data transmitted by your browser to facilitate your visit to the website.
If you use our website or pages of our web application BatteryPass Test Environment solely for informational purposes, we will, to some extent, process the data transmitted by your browser through cookies used for the statistical analysis of the use of these pages.
If you log in to our website or our BatteryPass Test Environment pages, register, place an order or otherwise transmit personal data to us or utilise special services of our company, the processing of personal data is required. If there is no legal basis for such processing, we generally obtain the consent of the data subject.
Our Privacy Policy should be easy to read and understand for the public and for our customers and business partners. In an effort to ensure this, we will explain the terms that we will use beforehand:
a) Personal data "Personal data" means any information relating to an identified or identifiable natural person (hereinafter, "data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. (Article 4 (1) GDPR)
b) Processing "Processing" means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. (Article 4 (2) GDPR)
c) Consent "Consent" of the data subject means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her. (Article 4 (11) GDPR)
d) Pages or GEFEG pages By "pages" we mean both the Internet site of GEFEG mbH (website) and BatteryPass Test Environment pages, including their subpages.
The GEFEG mbH website and the BatteryPass Test Environment pages collect a series of general data and information upon each retrieval by a data subject or an automated system. Such general data and information are stored in the log files of the server. The following are collected: the browser types and versions used, the operating system used by the accessing system, the website from which an accessing system arrives at our pages, the subpages that are controlled via an accessing system on our pages, the date and time of access to a page, an Internet Protocol (IP) address, the accessing system's Internet service provider, and other similar data and information that serve the purpose of averting risks in the event of any attack on our information technology systems.
When using such general data and information, GEFEG mbH does not draw any conclusions regarding the data subject. Rather, such information is needed to properly deliver the contents of our pages, to optimise the contents of our pages and to advertise them, to ensure the continued functioning of our information technology systems and the technology of our pages, and to provide law enforcement authorities with the information necessary for criminal prosecution in the event of a cyberattack. GEFEG mbH evaluates such data and information collected anonymously both statistically and with the objective of increasing privacy and data security of our company, in order to ensure the best possible level of protection for the personal data we process. The anonymous data of the server log files are stored separately from all personal data indicated by a data subject.
The basis for the processing of data is the protection of our legitimate interests in accordance with Article 6 (1)(f) GDPR in being able to make the pages technically available to you. Our legitimate interest is to provide you with engaging, technically-functional and easy-to-use pages, and to take measures to protect our pages from cyber risks and to prevent our pages from posing cyber risks to third parties.
In addition to a purely informative retrieval, you can also actively use our website or BatteryPass Test Environment pages to order or use any of our product or services, register for an event, sign up for our newsletter or contact us. In addition to the processing of your personal data presented above, with a use that is purely informative in nature, we will process your further personal data that we need to handle your order or to process and answer your request.
If our websites are used for purely informational purposes, we will store your personal data on our servers for the duration of your visit to our websites. After you leave our website, your personal data will be erased immediately.
As a rule, cookies that we install are deleted after our website is exited. However, this does not apply to log-in cookies. Such cookies remain stored for a period of 24 hours after you have logged out. You have the option to delete installed cookies yourself at any time.
If you send us a contact request (for example, by telephone, mail or to our e-mail address), we will process the personal data you provide in this connection in order to be able to process and answer your request. In any event, this includes your name and e-mail address in order to give you an answer, along with any other information we receive as part of your message. Registered persons are free to have the personal data indicated when establishing contact completely erased from our database.
The basis for the processing of data is the protection of our legitimate interests in accordance with Article 6 (1) f) GDPR; our legitimate interest is the proper answering of contact requests.
If you order any of our products or services or enter into contractual negotiations with us, we will process your personal data in order to fulfil our contractual obligations (for example, to accept the order, to handle it and to provide you with the products or services that have been ordered.
What personal data is thereby transmitted arises, when making contact through our pages, from the respective input mask used for the registration.
For other types of contact, we need at least the name and e-mail address of the data subject to be able to respond. The personal data provided by the data subject is collected and stored solely for internal use and for our own purposes.
In individual cases, we will process your personal data in order to operate direct advertising. If you do not want to receive advertising, you have the right to object to this at any time. We will consider such objection for the future.
Your data will no longer be processed for purposes of direct advertising if you object to processing for such purposes.
The basis for the processing of data is the fulfilment of a contract or the implementation of pre-contractual measures pursuant to Article 6 (1)(b) GDPR.
To the extent necessary within the framework of the fulfilment of the contract, we will process your personal data for the provision of services, in order, for example, to contact you, coordinate appointments, clarify questions and furnish services.
The basis for the processing of data is the fulfilment of a contract or the implementation of pre-contractual measures pursuant to Article 6 (1)(b) GDPR.
For the handling of payments, we use payment service providers and banks.
The basis for the processing of data is the fulfilment of a contract or the implementation of pre-contractual measures pursuant to Article 6 (1)(b) GDPR.
We also process your personal data in order to fulfil other statutory duties that we have in connection with carrying out the contract. Such duties include, in particular, retention periods under commercial, trade or tax law.
The basis for the processing of data is the fulfilment of a legal obligation that we are subject to in accordance with Article 6 (1)(c) GDPR in connection with, in particular, provisions of commercial, trade or tax law.
In addition, we will process your personal data in order to assert our rights and enforce our legal claims. We will also process your personal data in order to defend ourselves against legal claims. Finally, we will process your personal data to the extent necessary to defend against or prosecute criminal acts.
The basis for the processing of data is the protection of our legitimate interests in accordance with Article 6 (1)(f) GDPR, to the extent that we assert legal claims or defend ourselves in legal disputes, or we prevent or clarify criminal offences.
GEFEG mbH offers free services on some GEFEG-Portal pages (validation portals). The same rules in the handling of personal data that apply for the paid services furnished by GEFEG mbH apply for the services of GEFEG mbH that are offered for free.
In the case of the active use of our pages and upon any contact request, conclusion of a contract or registration for an event outside of these pages, we will initially store your personal data for the duration of your request. If this results in a business relationship and/or a contract, we will store your personal data for the duration of our business relationship or for the duration of the contractual relationship. This also includes the initiation of a contract (pre-contractual legal relationship) and the handling of a contract.
In addition, we will store your personal data until the onset of the period of limitations of any legal claims arising from the relationship with you, in order to, where necessary, use it as evidence.
Upon the onset of the period of limitations, we will erase your personal data, unless there is a statutory retention duty, for example that arising from the German Commercial Code (Handelsgesetzbuch, § 238, § 257, para. 4) or from the German Tax Code (Abgabenordnung (§ 147, para. 3, 4). Such retention obligations may amount to two to ten years.
If you subscribe to our newsletter, we will process the data required for this or data communicated separately from you in order to send you our regular e-mail newsletter.
If we receive your e-mail address in connection with the conclusion of a contract and the provision of our products or services, and you have not objected to this, we reserve the right to send you offers of similar products or services from our offer by e-mail. You may object to the use of your e-mail address at any time by sending a message to the contact option specified above or a link in the promotional e-mail provided for this purpose.
In the specified cases, the basis for the processing of data is the protection of our legitimate interests in accordance with Article 6 (1) (f) GDPR in conjunction with § 7 (3) German Act against Unfair Competition (Gesetz gegen den unlauteren Wettbewerb); our legitimate interest is the direct advertising of our products and services.
If you register on one of our BatteryPass Test Environment pages to use the service therein, we will process the personal information you provide in order to handle and respond to your request. In any event, this includes your name and e-mail address in order to provide you with an answer, along with the other information that you provide to us during the course of your registration. Registered persons are free to have the personal data indicated when registering completely erased from our database, as soon as they no longer wish to use our service and no statutory retention duties conflict with this.
The basis for the processing of data is Article 6 (1)(b) GDPR, which allows for the processing of data for the fulfilment of a contract or pre-contractual measures.
We transmit personal data to third parties only to the extent that this is necessary within the framework of a contract, such as banks entrusted with the processing of payments. There is no further transmission of data, or this does take place only if you have expressly consented to the transmission. There will be no forwarding of your data to third parties, such as for advertising purposes, without your explicit consent.
We state for you in the following the categories of recipients of your personal data:
The basis for the processing of data is Article 6 (1)(b) GDPR, which allows for the processing of data for the fulfilment of a contract or pre-contractual measures.
All data is stored on GEFEG’s own systems. No external data processor is involved. The front end does not load any third-party resources and does not set any analytics cookies. There is no limit on the duration of data storage. Users can delete their personal data themselves or request that GEFEG delete the data.
As a service provider, GEFEG mbH makes websites or BatteryPass Test Environment pages available for third parties.
On these pages, upon each retrieval by a data subject or an automated system, general data and information is collected through the page. Such general data will be processed and used along with the data on our own GEFEG pages.
The basis for the processing of data is - the preservation of our legitimate interests in accordance with Article 6 (1)(f) GDPR in being able to make the website technically available to you. In doing so legitimate interest is to provide you with an engaging, technically-functional and easy-to-use website, and to take measures to protect our website from cyber risks and to prevent our website from posing cyber risks to third parties. - Article 6 (1) (b) GDPR, which allows for the processing of data for the fulfilment of a contract or pre-contractual measures.
Under the statutory provisions, you are entitled to the following rights as the data subject, which you can assert against us:
At any time, you are entitled, within the framework of Article 15 GDPR, to request confirmation from us as to whether we are processing personal data relating to you; if this is the case, you are also entitled to, within the framework of Article 15 GDPR, obtain information regarding such personal data and certain other information (including processing purposes, categories of personal data, categories of recipients, planned storage period, your rights, the source of the data, the use an automated decision-making process and, in the case of a third country transfer, the suitable guarantees) and a copy of your data.
You are entitled, according to Article 16 GDPR, to demand from us that we rectify the personal data stored about you, if such data is inaccurate or incorrect.
You are entitled, under the conditions of Article 17 GDPR, to demand that we erase your personal data without delay. The right to erasure does not exist, among other things, if the processing of the personal data is required for (i) the exercise of the right to freedom of expression and information, (ii) the fulfilment of a legal obligation to which we are subject (for example, statutory retention duties) or (iii) the assertion, exercise or defence of legal claims.
You are entitled, under the conditions of Article 18 GDPR, to demand that we restrict the processing of your personal data.
You are entitled, under the conditions of Article 20 GDPR, to require us to deliver to you the personal data relating to you that you have provided to us in a structured, commonly used and machine-readable format.
You have the right to revoke your granted consent to the processing of personal data at any time, with effect for the future.
You are entitled, under the conditions of Article 21 GDPR, to object to the processing of your personal data, such that we have to stop the processing of your personal data. The right to objection exists only in the limits provided for in Article 21 GDPR. In addition, our interests may preclude the ending of the processing, such that we may, despite your objection, process your personal data.
The objection need not have a form, and is to be directed where possible to:
You are entitled to, under the conditions of Article 77 GDPR, lodge a complaint with a supervisory authority, in particular in the Member State of your residence, your place of work or the place of alleged infringement, if you believe that the processing of personal data relating to you violates the GDPR. The right to lodge a complaint exists without prejudice to any other administrative or judicial remedy.
The supervisory authority responsible for us is:
In principle, you are not obligated to provide us with your personal data. However, if you fail to do this, we will not be able to provide you with our pages, or will not be able to do so to the full extent, we will not be able to answer your requests and we will not be able to enter into a contract. Personal data that we absolutely need for the processing purposes set forth above are marked by an asterisk.