GLOCK Pistol in pistol case

DATA PRIVACY

DATA PRIVACY

Data Protection Declaration

Last updated: May 2022


1. GENERAL NOTICES AND AREA OF VALIDITY OF THIS DATA PROTECTION DECLARATION

This Web Site (the "eu.glock.com" web site is meant with "Web Site") is operated by GLOCK Gesellschaft m.b.H., Company Registration Number 64142 b, Gaston Glock Park 1, 9170 Ferlach, Austria (hereafter referred to as "GLOCK", "we" and "us"). 

This data protection declaration relates to personal information that is collected when this Web Site is visited. Please therefore read through this declaration carefully before using the Web Site, because here in particular it explains what personal data is collected, the methods used for this and the purposes for which it is collected, and how GLOCK handles this data. Personal data is all data that has a personal reference, for example, name, address, email addresses, user behaviour. With regard to the terms used, such as "personal data" or the "processing" thereof, we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR). 

This Web Site can contain links to web sites, online applications or mobile platforms of other providers, which are not covered by this data protection declaration. Insofar as the collection, processing or use of personal data is linked to the use of web sites of other providers, please note the respective data protection notices from the respective provider, for which GLOCK does not assume any responsibility or liability. 

With the use of this Web Site, you consent to the following data protection provisions of GLOCK. The protection of personal data and the maintaining of the basic right to data protection is of particular importance to GLOCK. You can revoke your agreement to this data protection declaration or individual points at any time by contacting us (See Item 2 for contact details). 

This data protection declaration can be changed or updated from time to time. If changes are made, you can see this using the last date under "Last Updated" at the start of the data protection declaration. If you also want to interact with us after the changes have been made, this is considered consent to the changes. You should therefore check this data protection declaration regularly for the latest version. 

GLOCK collects, processes and uses your personal data in compliance with the respective provisions regarding data protection. This means that users’ data is only processed if legal consent has been obtained, that is if the data processing is necessary in order to perform a contract or to carry out pre-contractual measures (Art. 6 Para. 1 (b) GDPR), if your consent for this has been given (Art. 6 Para. 1 (a) GDPR), to protect our justified interests (Art. 6 Para. 1 (e) GDPR) or to meet our legal obligations (Art. 6 Para. 1 (c) GDPR). 


2. PERSON IN CHARGE AND CONTACT DETAILS

The person in charge (initiator) of the collection, processing and use of your data is GLOCK Gesellschaft m.b.H., Company Registration Number 64142 b, Gaston Glock Park 1, 9170 Ferlach, Austria. You can contact GLOCK using the following contact details:

Phone: 0043 (0)2247 90300-0
Email: data-protection@glock.com


3. DATA COLLECTION AND DATA USAGE, PURPOSE OF DATA PROCESSING, DURATION OF DATA STORAGE

GLOCK records, saves and processes the following data:

Direct personal data in the form of personal contact data and demographic information and other data that you notify us of: 
Such data is only collected by GLOCK with your consent if you actively and voluntarily provide it to us during your visit to our Web Site by filling out one of our contact forms (general or technical request). This includes the following data: first and last name, country, email address, telephone number and age group, in case of a specific pistol request: serial number of your pistol. We collect, process and save this data for the execution and response to your query or message. To do this, we need your email address, so that we know where we can send our answer to, your name, so that we can address you personally, and your country of origin, so that we can assign your query to the respective employee in charge for this country. The age group is collected in order to be able to assign you to a customer group for the purposes of target group oriented market analysis. The serial number of your pistol is collected in case of a specific pistol request to identify the gun model and to be able to process your request faster.

You can of course also visit the GLOCK Web Site without filling out a contact form and thus without disclosing the direct personal data collected from it. The data collected is not forwarded to third parties by GLOCK, unless we are obliged to do this due to legal regulations. This data is only saved for as long as necessary for a comprehensive response to your query; however, at the most for a time period of three years. 


Technical data and data about usage: 
With mere use of the Web Site for information, i.e. if you only visit our Web Site without otherwise sending us information, we only collect the data that your browser sends to our server. If you want to view our Web Site, we collect the following data in particular, which is required for technical reasons in order to display our Web Site and to guarantee its stability and security (the legal basis of this is Art. 6 Para. 1 P. 1 (f) GDPR):

  • IP address, making the IP address anonymous: In the Internet, each device needs a unique address to transfer data, known as the IP address. The IP addresses are shortened by us before any processing takes place and only processed further in anonymous form. In doing so, they are made anonymous by means of a unidirectional conversion algorithm – a hash algorithm. In doing so, the IP address is converted into a hash that cannot be converted back to the original IP address. We do not save or process the unshortened IP addresses. The IP address helps us to, among other things, determine the country from which you are visiting us, in order to be able to offer regionally-differing content on our Web Site, for example, or for a statistical analysis of the visitors according to country, or to document user activity, such as the same user returning to our Web Site. Based on the anonymous IP address, there is also the assignment of the Web Site being called up at the location of being called up to the geographical level of the region (geolocalisation). However, in no case can an indication of the actual residence of the user be obtained from the geographic Information.
  • Browser name or browser type, browser version, browser language, operating system: The user agent string is an identification that is used to identify and read the browser. It states the browser name or browser type, the browser version, the operating system and the browser language. This data is to improve and optimise the display and user-friendliness of our Web Site. We thus need the browser language, for example, to find out whether our Web Site should be provided in a further language.

We receive further (technical) data and information using automatic technologies such as cookies and using external tracking services such as Google Analytics. For further individual details about these technologies, as well as about the possibility of opting out of the use of the above-mentioned technologies, please see our Cookie Guidelines. This information is not collected or used by us to identify the users personally. We evaluate this data anonymously, primarily for statistical purposes and also in order to administer our Web Site technically and to optimise our Internet presence. This data is not combined with other data sources. The data is saved for as long as is necessary to analyse the data; however, for three years as a maximum. It is automatically deleted after three years. It is the following data:

  • Date, time and duration of visit: We record the start and end time of the Web Site visit, primarily to define a user session and to analyse user behaviour. We also record the time that the URL is called up (time stamp); this serves to limit statistical evaluations to certain time periods.
  • Screen resolution: We record the screen resolution. This is to further develop our Web Site, in particular with regard to the most-preferred screen resolution.
  • Number of pages visited: We record the number of pages visited on our Web Site. This information shows us whether and how well our content is received by users and whether there is a need for change or amendment.
  • History of pages visited: We record all uniform resource locators (URLs) that a user visits during a session on our Web Site. This information shows us, for example, how well the user accepts the structure, or the arrangement and linking of our Web Site, in order to be able to make changes and amendments to our Web Site in this regard.

 

4. DATA THAT IS ASCERTAINED AND PROCESSED BY THIRD PARTIES

This is data for which the responsibility for compliance with data protection law is incumbent upon third parties, because this is not ascertained or processed by GLOCK. 

GLOCK allows third parties (Google Analytics, Google Maps), as a result of the inclusion of their services on our Web Site, to also ascertain and process data by saving third-party cookies or similar technology. You can find more detailed information about this in our Cookie Guidelines and in the respective data protection declarations, to which we refer you. 


5. TRANSFERRING/SENDING PERSONAL DATA TO THIRD PARTIES

The personal data provided by you is solely collected, processed and used by GLOCK for legally-permitted purposes. Forwarding of data to third parties is not undertaken, unless this is absolutely necessary to comply with applicable law, such as if we are requested to through an official order, or legal proceedings require this (court or administrative proceedings, including criminal proceedings). 

Your personal data is processed by our employees depending on the specific purposes for which your data has been recorded. Appropriate (security) precautions to prevent unauthorised use of your data have been implemented in our company. Our employees are obliged to adhere to the relevant legal stipulations and data protection law and to treat the data confidentially. 


6. STORAGE/SAVING OF YOUR PERSONAL DATA

GLOCK uses a range of different security technologies and procedures to protect your personal data from unauthorised access, misuse or prohibited disclosure. The data is protected from unauthorised access by means of encrypted transfer, encrypted saving, a role authorisation system, a data security system and physical protection measures for the server. The security measures are revised on an ongoing basis in accordance with technological development. 

GLOCK uses your data in line with the relevant legal provisions. GLOCK only saves your personal data for as long as is necessary to meet the purposes for which the data has been recorded or in order to suffice for respective legal provisions. 


7. RIGHT TO INFORMATION, CORRECTION, DELETION AND OBJECTION; RIGHT OF REVOCATION AND RIGHT TO COMPLAIN

You have, at any time, the right to information about the personal data saved about you, to be provided at no charge. In this regard, you have the right to demand a confirmation from us of whether personal data in relation to you is processed. You also have the right to have corrections made, the deletion of, or restrictions on the processing of this data. Furthermore, you have a right to object to the processing, as well as the right of data to be transferred. In addition, you can revoke your consent to our data processing activities at any time (right of revocation). Furthermore, you have the possibility to lodge a complaint with the data protection authority. 

With regard to this, and if you have general questions on data protection and/or this data protection declaration, please contact us at any time using the address here: 

GLOCK Gesellschaft m.b.H., Company Registration Number 64142 b, Gaston Glock Park 1, 9170 Ferlach, Austria. 
Email: data-protection@glock.com


8. DATA PROTECTION IN RELATION TO MINORS

GLOCK’s Web Site is not aimed at people under the age of 18. We do not request any personal data from children or minors, nor collect it, nor forward it to third parties. Users under 18 years of age are therefore blocked from recording their age information in the context of contact forms. 


9. COLLECTION OF DATA FROM UNITED STATES RESIDENTS

The Website is not intended for use by residents of the United States of America and GLOCK does not intentionally collect information from residents of the United States of America. Some anonymized user data may be passively gathered for third-party analytics.


10. RIGHTS OF CALIFORNIA RESIDENTS

California residents have special privacy rights under the California Consumer Protection Act (CCPA). For more information about these rights and how to exercise them, please click here.


11. COOKIE GUIDELINES (COOKIES AND OTHER TECHNOLOGIES)

What are cookies?

GLOCK uses cookies. Cookies are small text files that are saved on your hard drive at an assigned location by the browser you use and through which the body that places the cookie allows certain information to be accrued. Cookies cannot execute programs or transfer viruses to your computer. They serve to make the content offered on the Internet more user friendly and effective.

 

Cookies allow us and external service providers to save your activities and the number of your visits to our Web Site. The data that is saved by cookies helps to evaluate your preferences for our content and thus to amend our Web Site as well as possible to your requirements and interests, with the result that you can be offered an even better surfing experience. For example, as a user, you do not need to enter the language setting again each time you visit the Web Site.

 

Which cookies are used by GLOCK?

GLOCK uses four different types of cookies on its Web Site, which can be placed on your end device: first-party, third-party, transient and persistent cookies.

 

First-party cookies are cookies that are placed on your computer or another device by GLOCK directly; the information saved in them is sent to GLOCK. 

Third-party cookies are cookies from third-party providers; the information saved in them is sent to the third-party provider’s web site.

 

Transient cookies are automatically deleted when you close the browser. This includes the session cookies in particular. These save what is called a session ID, with which different queries from your browser can be assigned to the joint session. As a result, your computer can be recognised again if you come back to our Web Site. The session cookies are deleted if you log out or close the browser.

 

Persistent cookies are automatically deleted after a prescribed duration, which can differ depending on the cookie. You can delete the cookies in your browser’s security settings at any time.

 

In the following table, you can find a list of the cookies used by GLOCK. With third-party cookies, third-party providers place cookies whilst you visit the GLOCK Web Site and receive, for example, information that you have called up the relevant content on a GLOCK Web Site. To get further information about the use of cookies or data protection, please visit the web sites of the respective third-party providers, such as Google, for example.

 

Description

Function and duration

Type
 OptanonConsent This cookie is set by the cookie compliance solution from OneTrust. It stores information about the categories of cookies the site uses and whether visitors have given or withdrawn consent for the use of each category. This enables site owners to prevent cookies in each category from being set in the users browser, when consent is not given. The cookie has a normal lifespan of one year, so that returning visitors to the site will have their preferences remembered. It contains no information that can identify the site visitor.  Third Party
 OptanonAlertBoxClosed This cookie is set by websites using certain versions of the cookie law compliance solution from OneTrust.  It is set after visitors have seen a cookie information notice and in some cases only when they actively close the notice down.  It enables the website not to show the message more than once to a user.  The cookie has a one year lifespan and contains no personal information.  Third Party
 ASP.NET_SessionId

This cookie is saved on the user's computer. It saves the session ID. It expires once the session has ended, i.e. if the browser is closed or there is a session timeout (after 20 minutes of inactivity by default). If a user connects with an ASP.NET application, a specific session ID is linked to the user’s IP address. 

  First Party
 SC_ANALYTICS_GLOBAL_COOKIE This cookie name is associated with the Sitecore Content Management System as is used for web analytics to identify repeat visits by unique users.
  Third Party
 glockeu#lang This cookie is saved on the user's computer. It is used to save the language selected by the user on the web site, such as "en". It expires after the session has ended, i.e. if the browser is closed or after a session timeout (after 20 minutes of inactivity by default).  First Party
 AWSALB This cookie is saved on the user's computer. It is managed by AWS (Amazon Web Services) and is used for load balancing. It is valid for 7 days.  Third Party
AWSALBCORS This cookie is managed by AWS and is used for load balancing.  Third Party
_gat_UA-84962902-2

This cookie is saved on the user's computer. This is a pattern type cookie managed by Google Analytics, where the pattern element on the name (denoted as 84962902-2 above) contains the unique identity number of the account or website it relates to. It is used to throttle request rate on high volume websites. It is valid for 1 Minute.

  Third Party
 _ga  This Google Analytics cookie is saved on the user’s computer. It is used to distinguish Google users clearly in the analysis tool. It is valid for two years. It is used for analysis by Google Analytics.

In Google Analytics, users’ interactions are primarily recorded with the help of first-party cookies. These cookies are used to save non-personal information. In browsers, first-party cookies are not made accessible throughout domains.

With users who use Google Analytics advertising functions, Google cookies are used for advertisement display purposes such as remarketing in the Google display network for products such as AdWords. You can find further information on the use of such cookies by Google in the frequently-asked questions regarding the Google data protection declaration. In the settings for advertising, you can change the settings for cookies or deactivate this function.

 Third Party

https://developers.google.com/analytics/
devguides/collection/analyticsjs/cookie-usage
 _gid This Google Analytics cookie is saved on the user’s computer and used to distinguish users. It is valid for 24 hours.

Third Party

https://developers.google.com/analytics/
devguides/collection/analyticsjs/cookie-usage

Cookies on the GLOCK Web Site that do not require consent
Strictly-necessary cookies enable functions without which you could not use this Web Site as intended. These cookies are only used by GLOCK and are therefore first-party cookies. They are only saved on your computer during the current browser session. Strictly-necessary cookies are used, for example, to save your decision with regard to the use of cookies on the GLOCK Web Site. GLOCK uses the following cookies that do not require consent and are necessary for functionality: glock#lang; ASP.NET_SessionId. 

Change your cookie consent

Cookie Settings


Deactivating cookies
Most browsers accept cookies automatically. If you do not want this, you can make changes to the browser settings at any time, for example to block all cookies, to delete cookies that have already been placed, to reject all cookies, or to only accept certain types of cookies. You can, for example, change settings so that you are asked each time the GLOCK Web Site wants to save a cookie. The process for the administration and deletion of cookies is different, depending on which browser you use. You can find out how this works in individual cases from your browser’s or end device manufacturer’s instructions. Please note that deactivating cookies limits the functionality of our Web Site. You can find further information on the deactivation of cookies in common browsers here, for example: 

Mozilla Firefox:
https://support.mozilla.org/en-US/kb/delete-cookies-remove-info-websites-stored

Microsoft Internet Explorer: 
https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies

Google Chrome: 
https://support.google.com/chrome/answer/95647?hl=en-GB

Apple Safari: 
https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac


Please also note that you have the possibility to object to the collection of the above-mentioned anonymous technical information. This setting is also saved on your hard drive in the form of a cookie on a lasting basis. In the event that you have switched off the saving of cookies, your objection cannot be saved on a lasting basis. In this case, you have the possibility to use the “Do Not Track” function in the settings of your browser, which is of course noted as part of this web presence. 


Google Analytics

This Web Site uses Google Analytics, a web analysis service from Google Inc. (“Google”). Google Analytics uses “cookies”, text files that are saved on your computer and that allow your use of the Web Site to be analysed. The information created by the cookie about your use of this Web Site including your IP address is generally sent to a Google server in the USA and saved there.


In the event of IP anonymisation being activated on this Web Site, your IP address is shortened by Google within member states of the European Union or in other treaty states to the Agreement on the European Economic Area first. Only in exceptional cases is the full IP address sent to a Google server in the USA and shortened there. On behalf of the operator of this Web Site, Google will use this information to evaluate your use of the Web Site, to compile reports about the Web Site activities for the Web Site operator and to carry out further services in relation to Web Site use and Internet use for the Web Site operator. The IP address transferred by your browser as part of Google Analytics is not combined with other Google data. You can prevent the saving of the cookies by means of a corresponding setting in your browser software; however, we would like to point out that in this case it is possible that you may not be able to use all functions of this Web Site to their full extent. Furthermore, you can prevent the recording of the data generated by the cookie and related to your use of the Web Site (including your IP address) by Google and the processing of the data by Google, by downloading and installing the browser plug-in available under the following link https://tools.google.com/dlpage/gaoptout?hl=en.

 

This Web Site uses Google Analytics with the suffix “_anonymizeIp()”. As a result, IP addresses are further processed in short form; it is thus not possible to relate it to any person. If the data about you that is collected is assigned a personal reference, this is precluded immediately and the personal data is thus deleted immediately.

 

We use Google Analytics in order to analyse the use of our Web Site and to improve it regularly. Using the statistics obtained, we can improve the content we offer and design it in a way that is more interesting for you, the user. For the exceptional cases in which personal data is sent to the USA, Google is subject to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6 Para. 1 P. 1 (f) of the GDPR.

 

Information on the third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. User conditions: https://www.google.com/analytics/terms/gb.html, overview of data protection: https://support.google.com/analytics/answer/6004245?hl=en, as well as the data protection declaration: https://policies.google.com/privacy?hl=en.

 

The Web Site also uses Google Analytics for a cross-device analysis of visitor numbers, which is carried out by means of a user ID. You can deactivate the cross-device analysis of your usage in the customer account under “My Data”, “Personal Data”.


Web beacons
GLOCK itself does not use any web beacons. However, we would like to point out that web beacons and pixel tags can, under certain circumstances, be used by Google Analytics as a third-party provider, in order to analyse the activities of a user on our Web Site. You can opt out of the data recording and use of data by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en.


Google Maps
Our Web Site offers the possibility to use Google Maps from Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA, to display maps in relation to the display and location of GLOCK dealers in the GLOCK Dealer Locator. Please note that, when calling up the page eu.glock.com/supportandcontact/dealer-locator (and all language versions thereof), you must consent to the use of Google Maps before being able to use this map service. Only once you have consented to the use of Google Maps is the map service from Google loaded and incorporated.

Please note that Google subsequently receives the information that you have called up the corresponding subpage of our Web Site. In doing so, a connection to the Google servers is already established when the page is rendered. In addition, technical data and data about the usage behaviour, in particular the IP address, is sent to Google. This is carried out regardless of whether Google provides a user account through which you are logged in or whether there is no user account. If you are logged into Google, your data is assigned to your account directly. If you do not want your profile to be assigned at Google, you must log out before activating the button. Google saves your data as a usage profile and uses it for the purposes of advertising, market research and/or the tailored design of its Web Site. Such an evaluation is carried out (even for users who are not logged in) in particular to provide tailored advertising and to inform other users of the social network about your activities on our Web Site. You have the right to object to the creation of this user profile, whereby you must contact Google in order to exercise this.

You can find further information on the purpose and scope of data collection and its processing by the plug-in provider in the provider’s data protection declaration. There you can also receive further information about your rights in relation to this and the possibilities to change settings to protect your privacy: https://policies.google.com/privacy?hl=en.
Google also processes your personal data in the USA and is subject to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. You can find further information on the terms and conditions of use for Google Maps at https://www.google.com/intl/en_US/help/terms_maps.html.

 

 

YouTube

On our online media, we use YouTube to embed videos. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("YouTube").
In case you use one of our online services which are equipped with the YouTube-Plugin the connection to the YouTube Servers is established and data is transferred to the US.
We have activated the extended data protection mode on YouTube. According to YouTube, this mode means that YouTube does not store any information unless visitors watch a video. As soon as a YouTube video is started, a connection to YouTube's servers is established telling YouTube which pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your account.
Further information on the applicable privacy policy of YouTube can be found at: https://policies.google.com/privacy.

 

 

12. NEWSLETTER REGISTRATION

With your registration to the newsletter you agree that all given personal data may be processed in order to send newsletters for advertising purposes to you. You may revoke this consent at any time and without giving any reason by clicking the unsubscribe link that is provided in each newsletter. If you want to change your personal data, you can use the corresponding data-change link in the newsletter. For sending and analyzing our newsletters we use the email marketing software mailworx. mailworx records the opening and clicking behavior. Specifically, the following information is tracked: time of delivery, time of opening, duration of opening, IP address of opening, used email program (mail client), which link was clicked as well as the time of the click. All personal data are processed exclusively within the European Union and are not passed on to third parties.