Skip to Content

Privacy Policy

Last updated: September, 2026


1. General information

Thank you for your interest in GIEBEL and our products and services.

The protection of your personal data is important to us. This Privacy Policy explains how we process personal data when you visit our website, use our online shop, contact us, create a customer account, place an order or otherwise interact with our digital services.

This Privacy Policy applies to the website:

www.giebel-desiccants.com

The website is operated by GIEBEL Group GmbH, the parent company of the GIEBEL Group.

Because the GIEBEL Group operates internationally, certain processing activities relating to enquiries, orders and customer relationships may be carried out by another GIEBEL Group company. The company that becomes the contracting entity for an online-shop order is determined during the ordering process based on the delivery address and other applicable commercial and operational requirements. The applicable contracting entity is identified before the order is placed and is stated on the order confirmation and invoice.



2. Controller

The controller responsible for processing personal data in connection with the operation of this website is:

GIEBEL Group GmbH
Carl-Zeiss-Str. 5
74626 Bretzfeld
Germany

Represented by the Managing Director:
Heinrich Laas, CEO

Phone: +49 7946 9444010
E-mail: giebel@giebel-group.com

Commercial Register: Stuttgart, HRB 737469
VAT Identification Number: DE276995875

GIEBEL Group GmbH operates this website as the parent company of the GIEBEL Group.



3. GIEBEL Group companies and contracting entities

The GIEBEL Group operates internationally through affiliated companies.

Depending on the delivery address, products ordered and applicable commercial and operational requirements, an online-shop order may be processed and fulfilled by GIEBEL Group GmbH or by one of its affiliated companies.

The applicable contracting entity is clearly identified during the ordering process and is also stated on the order confirmation and invoice.

The following companies may act as contracting entities for online-shop orders:

Germany

GIEBEL Germany GmbH
Carl-Zeiss-Str. 5
74626 Bretzfeld
Germany

Phone: +49 7946 9444 010
E-mail: germany@giebel-group.com

Commercial Register: Stuttgart, HRB 793834
VAT Identification Number: DE367363132


Italy

GIEBEL FilTec S.r.l.
Via Milazzo 34 ter
21052 Busto Arsizio (VA)
Italy

Phone: +39 335 749 7195
E-mail: italy@giebel-group.com

Company Registration: Varese, VA-404494
VAT Identification Number: IT04136390129


USA

GIEBEL FilTec Inc.
575 Wharton Dr SW
Atlanta, GA 30336
USA

Phone: +1 678 228 6986
E-mail: usa@giebel-group.com


China

GIEBEL Technology (Dongguan) Co., Ltd.
Room 302, Building 3, No. 1 Jizhou Middle Road
Daojiao Town, Dongguan City
Guangdong Province
China

Phone: +86 136 8600 2834
E-mail: china@giebel-group.com

Tax number: 91440300MAE6WLJQ39


Hong Kong

GIEBEL Asia Pacific Ltd.
RM 617A, 6/F Global Plaza
No. 1 Sha Tsui Road
Tsuen Wan NT
Hong Kong

E-mail: hongkong@giebel-group.com


India

GIEBEL FilTec India Pvt. Ltd.
D-94, Angol Industrial Estate
Near Rani Channamma Nagar, Udyambag
Belagavi 590 008, Karnataka KA
India

Phone: +91 988 610 3047
E-mail: india@giebel-group.com

Where an affiliated company acts as the contracting entity, that company may process personal data as an independent controller for the relevant contractual and legal purposes.



4. Data Protection Officer and privacy contact

For questions concerning the processing of personal data or to exercise your rights under data-protection law, you may contact:

GIEBEL Group GmbH
Carl-Zeiss-Str. 8
74626 Bretzfeld
Germany

E-mail: giebel@giebel-group.com



5. Personal data

Personal data means any information relating to an identified or identifiable natural person.

This may include, for example:

  • name;
  • company;
  • postal and delivery address;
  • e-mail address;
  • telephone number;
  • IP address;
  • customer-account information;
  • order and transaction information;
  • correspondence and enquiries;
  • technical information concerning your device or browser; and
  • information concerning your use of our website.

We process personal data only where an applicable legal basis exists.



6. Visiting our website and server log files

When you visit our website, technical information may automatically be transmitted to our web server and temporarily stored in server log files.

This information may include:

  • IP address;
  • date and time of access;
  • requested page or URL;
  • referrer URL;
  • browser type and version;
  • operating system;
  • language and other technical settings;
  • internet service provider; and
  • information required to detect and prevent attacks or misuse.

We process this information to:

  • provide and technically operate the website;
  • ensure the stability and security of our systems;
  • detect and prevent attacks, fraud and misuse;
  • troubleshoot technical problems; and
  • comply with legal obligations where applicable.

The legal basis is generally Article 6(1)(f) GDPR, based on our legitimate interest in operating a secure, stable and functional website.

Where necessary, personal data contained in log files may also be processed for the establishment, exercise or defence of legal claims.

Log data is deleted or anonymised when it is no longer required, subject to applicable statutory retention obligations.



7. Cookies and similar technologies

Our website uses cookies and similar technologies.

Some cookies are technically necessary for the operation of the website, the online shop, customer accounts, shopping cart and security functions. Other cookies and technologies are used for analytics, advertising, embedded content or other optional purposes.

We use Odoo's Cookie Consent functionality to manage consent for cookies and similar technologies.

Where required by applicable law, non-essential cookies and similar technologies are activated only after you have given the required consent.

Under German law, § 25 TDDDG generally requires consent before information is stored on or accessed from a user's terminal device unless a statutory exception applies.

You can select or change your preferences using our cookie-consent mechanism. You can also withdraw consent at any time with effect for the future.

Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

If you reject certain cookies or technologies, individual website functions may be unavailable or limited.



8. Odoo website, online shop and customer accounts

Our website and online shop are operated using Odoo.

Odoo provides software and infrastructure used for functions including:

  • website operation;
  • product presentation;
  • shopping cart and wishlist functions;
  • customer accounts;
  • checkout;
  • order processing;
  • customer relationship management;
  • quotations;
  • invoicing;
  • delivery and fulfilment;
  • customer service; and
  • business administration.

When you create a customer account, submit an enquiry or place an order, personal data may be processed in Odoo.

Depending on the relevant function, this may include:

  • name;
  • company;
  • billing address;
  • delivery address;
  • e-mail address;
  • telephone number;
  • login and account information;
  • order information;
  • invoice information;
  • payment-related information;
  • delivery information; and
  • communications with us.

The legal basis is generally Article 6(1)(b) GDPR where processing is necessary to take steps at your request before entering into a contract or to perform a contract.

Processing may additionally be based on Article 6(1)(c) GDPR where necessary to comply with legal obligations, or Article 6(1)(f) GDPR where necessary for our legitimate interests.

Odoo may process personal data on our behalf as a processor. Odoo states that for Odoo Cloud services, including Odoo Online and Odoo.sh, customer databases are processed by Odoo as a processor, while the customer remains the controller of the personal data stored in the database. 

Odoo processes personal data stored in our Odoo.sh database on our behalf as a processor within the meaning of Article 28 GDPR. We remain the controller of the personal data processed in our Odoo database.

Odoo.sh is operated as an Odoo Cloud service. Odoo uses cloud infrastructure providers as subprocessors for the operation and backup of Odoo.sh. According to Odoo's current information, this includes Google Cloud EMEA Ltd for Odoo.sh production and backup infrastructure and OVH S.A.S. for certain backup services. Odoo maintains a list of its subprocessors and information on hosting locations in its privacy documentation.

Our domain is registered and managed through Alfahosting GmbH. The domain's DNS records point to our Odoo.sh instance. Alfahosting therefore provides the domain and DNS services but does not host our Odoo database or the personal data stored in that database as part of the Odoo.sh service.

The hosting region selected for our Odoo.sh database is the European region. Odoo states that databases hosted in the European region are currently operated in data centres within Europe, with backups stored in several European locations. The exact hosting and backup locations may change within the applicable hosting region in accordance with Odoo's service and backup infrastructure.



9. Orders and contracting entities

When you place an order through our online shop, personal data is processed for the purpose of establishing and performing the purchase contract.

The relevant contracting entity is determined during the ordering process based on the delivery address and applicable commercial and operational requirements.

The contracting entity is identified before the order is placed and is stated on the order confirmation and invoice.

Depending on the transaction, information may therefore be processed by GIEBEL Group GmbH and/or the applicable GIEBEL Group company.

Personal data may be shared within the GIEBEL Group where this is necessary for:

  • processing an enquiry;
  • preparing a quotation;
  • processing an order;
  • fulfilling and delivering an order;
  • invoicing;
  • customer service;
  • handling complaints or returns;
  • accounting;
  • compliance with legal obligations; or
  • establishing, exercising or defending legal claims.

Where an affiliated company acts as the contracting entity, that company is responsible for processing required for its own contractual and legal purposes.



10. Contact forms and communication

If you contact us by e-mail, telephone or through a contact form, we process the information you provide to respond to your enquiry.

Depending on the nature of the enquiry, this may include:

  • name;
  • company;
  • e-mail address;
  • telephone number;
  • address;
  • subject and content of your enquiry; and
  • other information you voluntarily provide.

The legal basis is generally Article 6(1)(b) GDPR if your enquiry concerns a contract or pre-contractual measures.

For general business enquiries, Article 6(1)(f) GDPR may apply based on our legitimate interest in responding to enquiries and maintaining business relationships.



11. Google Analytics

We use Google Analytics, a web analytics service provided by Google, to analyse how visitors use our website.

Google Analytics may process information such as:

  • pages visited;
  • interactions with the website;
  • approximate location;
  • browser and device information;
  • traffic source;
  • session and usage information; and
  • identifiers associated with cookies or similar technologies.

Google Analytics is used to understand website usage and improve our website, products and services.

Where consent is required, Google Analytics is activated only after the relevant consent has been given through our cookie-consent mechanism.

The legal basis for processing based on consent is Article 6(1)(a) GDPR.

You may withdraw your consent at any time through the cookie settings.

Google may process personal data outside the European Economic Area. Where required, appropriate safeguards are used for international data transfers.

Google provides information about its processing of data from websites using Google services in its privacy documentation.



12. Google Ads

We use Google Ads for online advertising and, where configured, for measuring advertising conversions and the effectiveness of our advertising campaigns.

Depending on our configuration, Google Ads may use cookies or similar technologies to:

  • measure whether users reached our website through an advertisement;
  • measure conversions;
  • evaluate advertising campaigns;
  • create advertising audiences; and
  • display advertising relevant to users.

Where required, Google Ads technologies are activated only after consent has been obtained.

The legal basis for consent-based processing is Article 6(1)(a) GDPR.

You may withdraw your consent at any time through our cookie settings.

Google may process data outside the European Economic Area. Where required, appropriate safeguards are used for such transfers.



13. Google Fonts

Our website uses the font “Roboto Condensed”. The font files are hosted locally on our Odoo.sh website infrastructure and are not loaded directly from Google's servers.

When you access our website, your browser therefore does not establish a connection to Google solely for the purpose of loading this font. No personal data, such as your IP address, is transmitted to Google for the provision of the font.



14. YouTube and Vimeo

Our website may contain videos provided by YouTube, a service operated by Google, and Vimeo.

YouTube

Depending on the technical implementation, loading or interacting with embedded YouTube content may result in information being transmitted to Google/YouTube, including the IP address, device and browser information and information concerning the requested video.

Where required, YouTube content is loaded only after the relevant consent has been obtained through our cookie-consent mechanism.

Where technically available, we use YouTube's privacy-enhanced embedding mode to reduce the use of information for the personalization of the YouTube experience. YouTube's privacy-enhanced mode uses the domain youtube-nocookie.com. According to Google, the use of this mode prevents views of embedded content from being used to personalize the viewer's YouTube experience. 

Further information concerning Google's processing of personal data through YouTube can be found in Google's Privacy Policy.

Vimeo

Our website may also contain videos provided by Vimeo.

When Vimeo videos are embedded on our website, the Vimeo player may establish a connection to Vimeo's servers. In this context, technical information may be transmitted to Vimeo, including the IP address, information about the browser and device, and information concerning the requested video and its use.

Where required, Vimeo content is loaded only after the relevant consent has been obtained through our cookie-consent mechanism.

Vimeo processes personal data in connection with its embedded player as an independent controller. Vimeo states that it does not enter into a data processing agreement with users of its embeddable player because Vimeo acts as a controller under the GDPR. 

Where technically available, we use Vimeo's privacy and embedding settings to restrict the use and availability of embedded videos, including domain-level embedding restrictions where appropriate. Vimeo allows video owners to restrict embedding to specified domains. 

Further information concerning the processing of personal data by Vimeo can be found in Vimeo's Privacy Policy.



15. LinkedIn

Our website may contain links to our LinkedIn presence.

If you click on a LinkedIn link, you will be redirected to LinkedIn. The LinkedIn website is operated by LinkedIn Ireland Unlimited Company for users in the European Economic Area.

No LinkedIn tracking technology, such as the LinkedIn Insight Tag, is installed on our website. Therefore, merely visiting our website does not result in data being transmitted to LinkedIn through the LinkedIn link.

Once you leave our website and visit LinkedIn, the processing of personal data is governed by LinkedIn's own privacy policy.

Further information concerning the processing of personal data by LinkedIn can be found in LinkedIn's Privacy Policy.



16. Data sharing with service providers

We may use external service providers to operate our website and business processes.

Depending on the circumstances, recipients may include:

  • Odoo and related IT service providers;
  • hosting providers;
  • analytics providers;
  • advertising providers;
  • video and content providers;
  • logistics and delivery companies;
  • payment service providers, where applicable;
  • accounting and tax service providers;
  • IT security providers;
  • legal and professional advisers; and
  • public authorities where legally required.

Where a service provider processes personal data on our behalf, we enter into the legally required data-processing arrangements.



17. International transfers

The GIEBEL Group operates internationally, including through affiliated companies in the USA, China, Hong Kong and India.

Personal data may therefore be processed or accessed outside the European Economic Area where this is necessary for the relevant business process.

Where personal data is transferred to a country that does not benefit from an adequacy decision of the European Commission, we use an applicable transfer mechanism and appropriate safeguards where required by GDPR, such as Standard Contractual Clauses.

The specific transfer mechanism may depend on the relevant GIEBEL Group company or service provider.



18. Direct marketing

We may use contact information for direct marketing where this is permitted by applicable law.

Where consent is required, we will obtain consent before sending marketing communications.

You may object to direct marketing at any time. If you object, we will no longer process your personal data for direct-marketing purposes.



19. Job applications

If you apply for a position with GIEBEL, we process the personal data contained in your application for the purpose of carrying out the recruitment process.

This may include:

  • contact information;
  • CV;
  • qualifications;
  • employment history;
  • references; and
  • other information voluntarily provided in your application.

The applicable legal basis depends on the relevant employment and data-protection laws.

Application data will be deleted when it is no longer required for the recruitment process, unless longer storage is legally permitted or required, necessary for the establishment, exercise or defence of legal claims, or based on your consent.



20. Data retention

We retain personal data only for as long as necessary for the respective processing purpose.

Where statutory retention obligations apply, the relevant data will be retained for the legally prescribed period.

For example, accounting and business records may be subject to statutory retention requirements.

After the applicable retention period has expired, personal data will generally be deleted unless further processing is necessary for another legally permitted purpose, including the establishment, exercise or defence of legal claims.



21. Legal bases

Depending on the circumstances, we rely on the following legal bases:

  • Article 6(1)(a) GDPR – consent;
  • Article 6(1)(b) GDPR – performance of a contract or pre-contractual measures;
  • Article 6(1)(c) GDPR – compliance with a legal obligation;
  • Article 6(1)(d) GDPR – protection of vital interests; and
  • Article 6(1)(f) GDPR – legitimate interests pursued by us or a third party, provided that these interests are not overridden by the interests, fundamental rights or freedoms of the data subject.

Our legitimate interests may include operating and securing our website and IT systems, preventing fraud and misuse, administering customer and supplier relationships, improving our services, conducting business activities and establishing, exercising or defending legal claims.



22. Your rights

Subject to the statutory requirements, you have the following rights under the GDPR:


Right of access

You have the right to obtain confirmation as to whether personal data concerning you is being processed and, where applicable, access to that personal data and additional information in accordance with Article 15 GDPR.


Right to rectification

You have the right to request correction of inaccurate personal data and completion of incomplete personal data in accordance with Article 16 GDPR.


Right to erasure

You have the right to request deletion of your personal data under the conditions of Article 17 GDPR.


Right to restriction

You have the right to request restriction of processing under the conditions of Article 18 GDPR.


Right to data portability

Where the statutory requirements are met, you have the right to receive personal data concerning you in a structured, commonly used and machine-readable format and to request its transmission to another controller in accordance with Article 20 GDPR.


Right to object

Where processing is based on Article 6(1)(e) or Article 6(1)(f) GDPR, you may object to processing on grounds relating to your particular situation.

You may also object at any time to the processing of your personal data for direct marketing purposes.


Right to withdraw consent

Where processing is based on your consent, you may withdraw your consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before withdrawal.


Right to lodge a complaint

You have the right to lodge a complaint with a competent data-protection supervisory authority.

For GIEBEL Group GmbH, the competent supervisory authority is generally:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Heilbronner Straße 35
70191 Stuttgart

Postfach 10 29 32
70025 Stuttgart

E-mail: poststelle@lfdi.bwl.de

You may also contact another competent supervisory authority, in particular the authority in your habitual place of residence, place of work or place of the alleged infringement, where permitted by applicable law.



23. Automated decision-making and profiling

We do not generally make decisions based solely on automated processing, including profiling, which produce legal effects concerning you or similarly significantly affect you within the meaning of Article 22 GDPR.

Advertising and analytics services may nevertheless use automated processes for measuring website usage, advertising effectiveness or audience characteristics. These activities do not necessarily constitute automated decision-making within the meaning of Article 22 GDPR.



24. Security

We use appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or unauthorised access.

However, internet-based transmission of information can never be guaranteed to be completely secure.



25. Changes to this Privacy Policy

We may amend this Privacy Policy from time to time, for example to reflect changes to our website, services, technologies, corporate structure or applicable legal requirements.

The version published on this website is the current version.