10th March 2025

Privacy Policy

Thank you for visiting our website and for your interest in gbc engineers. Protecting your personal data matters to us. Below we explain what we collect, why, and what rights you have. This policy follows the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications and Digital Services Data Protection Act (TDDDG).

1. Controller

The controller for this website is gbc engineers GmbH, Am Spreebord 9d, 10589 Berlin, Germany.

Phone +49 30 339 38 74-0 · Email info@gbc-engineers.de

Commercial register: Amtsgericht Charlottenburg, HRB 166468 B

Managing Directors: Adrian Grabara, Daniel Bacon, Halil Kiziltan

Other companies in the gbc group are separate legal entities and are not controllers for this website, with the exception of job applications as described in section 4.

2. Visiting the website

When you visit our website, our server automatically collects technical data, including your IP address, the date and time of access, the page requested, your browser type and operating system, and the page you came from. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the secure and stable operation of the website. This data is deleted once it is no longer needed for that purpose. Data is transmitted using SSL/TLS encryption.

This website is hosted by Contabo, Welfenstrasse 22, 81541 Munich, Germany. A data processing agreement under Art. 28 GDPR is in place with that provider.

Our contact page embeds a Google Maps map for each office. Loading a map connects to Google's servers and may transmit your IP address to Google, including outside the EU. We load the map only after you have given your consent.

The fonts used on this website are served from our own server. No connection to Google's servers is made for them.

3. Contacting us

Our contact form asks for your name, phone number, email address, subject and message. We process this information to handle your enquiry (Art. 6(1)(b) or (f) GDPR) and delete it once the matter is closed and no statutory retention period applies. Providing this information is voluntary, but without it we cannot answer you.

4. Job applications

If you apply for a position through careers.gbc-engineers.de, we process the details and documents you submit in order to carry out the application process. The legal basis is Section 26(1) BDSG in conjunction with Art. 88 GDPR and Art. 6(1)(b) GDPR.

Applications for roles in Germany are processed by gbc engineers GmbH. Applications for roles in Vietnam and the wider region are processed by gbc engineers LLC, Ho Chi Minh City. We delete application data at the latest six months after the process has concluded, unless you have expressly agreed to longer storage.

5. Cookies and measurement

Strictly necessary cookies are used on the basis of Section 25(2) No. 2 TDDDG. All other cookies and similar technologies are used only with your prior consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). You manage your consent through CookieYes; the link is in the footer of this website. You can withdraw it at any time with effect for the future.

After you have given consent we use Google Tag Manager, Google Analytics 4 and Google Ads (provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) and the Meta pixel (provider: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland). We use these services to measure how the site is used and how our advertising performs.

These providers may transfer personal data to the United States. Where that happens, we rely on the EU-U.S. Data Privacy Framework or on EU Standard Contractual Clauses under Art. 46 GDPR.

For the collection of this data and its transmission to Meta, we and Meta are joint controllers within the meaning of Art. 26 GDPR. The joint controllership covers only the collection and the transmission; Meta's own subsequent processing is not part of it. The essential content of this arrangement is set out in Meta's controller addendum, which forms part of Meta's terms of business. You can exercise your rights over data already processed by Meta directly with Meta; if you address such a request to us, we will forward it.

6. Sharing data and transfers outside the EU

We share data only where it is necessary to perform a contract, where a legal obligation applies, where you have consented, or to protect a legitimate interest, for example with hosting and IT service providers under a data processing agreement pursuant to Art. 28 GDPR. Where a transfer reaches a country outside the EU or the EEA, we rely on an adequacy decision of the European Commission, on EU Standard Contractual Clauses, or on another appropriate safeguard under Art. 44 to 49 GDPR.

7. Your rights

You have the right to access, rectify, erase, restrict the processing of and port your data, and to object to processing (Art. 15 to 21 GDPR), as well as the right to withdraw consent at any time. We do not carry out automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

The competent supervisory authority is the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59-61, 10555 Berlin, mailbox@datenschutz-berlin.de. You may also contact the supervisory authority where you live; for Poland this is the Personal Data Protection Office (Urząd Ochrony Danych Osobowych, UODO), ul. Stanisława Moniuszki 1A, 00-014 Warszawa.

We update this policy when our processing activities or the law change. The version published here always applies.
The German version of this text is binding. The English and Polish versions are provided for information.

Last updated: September 2026