Gira and sustainability
Report 2020

Responsible conduct as a foundation We want to be a positive example and make a contribution to the sustainable development of our society. To achieve this, we are not only active every single day on all company levels, but also throughout the region and sectors in which we work. We are also guided by the national sustainability strategy of the German government. We regard sustainability from both an ethical perspective and also as a contemporary element of effective and efficient business risk and value management.

GLOSSARY:



What is a "Code of Conduct"?

A Code of Conduct
is a voluntary commitment to compliance with internal and external procedural directives.

ON WHAT IS THE GIRA CODE OF CONDUCT BASED?

Maintaining our future viability For Gira, sustainable conduct means integrating ecological, social and economic aspects equally into the company's decision processes. We want to create win-win situations for both companies and society. In concrete terms, this means efficient implementation of the right things in our company, lowering costs, boosting our motivation and reputation and securing the loyalty of good employees. We want to develop reliable products that provide answers to social challenges and important trends. One thing is certain today: Sustainability and innovation are interdependent. This is in keeping with Gira and our philosophy. We are firmly convinced that sustainable business opens up many opportunities and great potential which in the medium and long term can evolve into an important strategic advantage for
Gira. Essentially, the focus is on securing our future viability.

Orientation for daily work Sustainable conduct in everyday work requires repeated, balanced decisions. With the Gira Code of Conduct we have given our employees reliable orientation for their daily work. The Code of Conduct therefore provides a framework for our business management and is the living expression of our vision of sustainability and integrity. Every possible decision must be examined with regard to its economic, ecological and social consequences to ensure that it is examined from an all-round perspective.

THE "GIRA CODE OF
CONDUCT"
DEALS WITH THE FOLLOWING TOPICS:

 

Legislation, standards

Compliance with legislation
and social
standards


People

Dealing with customers/
Dealing with employees/
Dealing with market partners
and suppliers


The environment

Resource consumption/
Emissions/
Handling hazardous substances/
Waste prevention,
recyclability/
Polluting
raw materials


Business

Products and services/
Corruption and bribery/Data protection and data security

"Serious sustainability orientation requires consideration of the entire value chain."

Jan Böttcher, responsible for Sustainability Management

Our demands towards our suppliers The responsibility of Gira should not begin or end at its own factory gates. In fact, serious sustainability orientation requires consideration of the entire value chain. Suppliers and sub-suppliers are one main focus. With this in mind, we have formulated a special Code of Conduct for Suppliers alongside our own that reflects national and international rules and regulations as well as values and social conventions which Gira regards as an essential basis for responsible collaboration. This mainly centres on compliance with the core working standard of the International Labour Organization [ILO] and the principles of the UN Global Compact. As the foundations for long-term, successful collaboration with Gira, our suppliers are obliged to accept and comply with the requirements that it contains. In addition, they should select and examine their own suppliers in line with the same criteria.

 

__________________________

Downloads:
Gira Code of Conduct
Gira Code of Conduct for Suppliers

__________________________

Links:
International Labour Organisation
Global Compact Network Germany

THE "GIRA CODE OF
CONDUCT FOR
SUPPLIERS"
FOCUSES ON THE FOLLOWING
TOPICS:


Legislation, standards

Compliance with legislation
and social
standards


People

Human rights and
working standards/
Forced and child labour/
Humane
treatment without
discrimination/
Health and safety/
Wages and working hours


The environment

Resource consumption/
Emissions/
Handling hazardous substances/
Waste prevention, recyclability/
Polluting
raw materials


Business

Corruption and bribery/
Gifts and
invitations/
Services and products
Collaboration
Joint activities and
practical interaction/
Reporting violations/
Possible consequences


Collaboration

Joint activities and
practical interaction/
Reporting violations/
Possible consequences

DE EN
Imprint
Data protection
Job vacancies
gira.de
Top

Follow

DE EN

Gira and sustainability
Report 2020

Cookie consent

By clicking “Accept all”, you consent to Gira using cookies and similar technologies and processing your website usage data to improve this website and to create your user profile in order to show personalised advertising. Please note that Gira also shares information about your use of the website with our social media, advertising and analytics partners.

You also consent to Gira and third parties processing your website usage data in third countries deemed not to be secure outside the EEA for these purposes, even if a level of data protection comparable to EU law is not guaranteed. Among other things, there is a risk that authorities there can access the processed data and that the rights of data subjects are compromised or excluded.

You can change your settings at any time by clicking the “Cookie settings” link at the bottom of any page. You can withdraw your consent there at any time with future effect.

All cookies that we require in order to display the site to you.

Data processing purposes:

  • Private customer site: Use of all the site's session-based features
  • Business customer site: Authentication, preferences and caching of user inputs

Categories of personal data:

  • Private customer site: IP address, duration of session, user browser, end device
  • Business customer site: Settings and preferences. Including name, address and e-mail if a contact form is filled out. (For reuse on another form within the same session), IP address (anonymised)

Legal basis and legitimate interests pursued, if applicable:

  • Article 6(1)(f) GDPR
  • Legitimate interests pursued: See data processing purposes

Recipients:Internal departments, in so far as access is necessary for task fulfilment

Third country transfer:None

Validity period of the cookie:

  • Storage of data for the duration of the session, until the browser is closed
  • Time of storage: When loading the page

Data processing purposes:Serves to maintain the status of the Home Assistant configuration when using the Gira Home Assistant

Categories of personal data:IP address, configuration ID – a personal reference is only available when configuration is completed (tradesperson selected and data entered)

Legal basis and legitimate interests pursued, if applicable:

  • Article 6(1)(f) GDPR
  • Legitimate interests pursued: See data processing purposes

Recipients:Internal departments, in so far as access is necessary for task fulfilment

Third country transfer:None

Validity period of the cookie:Duration of the session

Data processing purposes:Authentication in the Gira device portal (SDA portal)

Categories of personal data:IP address (anonymised)

Legal basis and legitimate interests pursued, if applicable:Article 6(1)(b) GDPR

Recipients:

  • Internal departments, in so far as access is necessary for task fulfilment
  • ISE Individuelle Software und Elektronik GmbH

Third country transfer:None

Validity period of the cookie:Duration of the session

Data processing purposes:Optimisation of the site for different browser types

Categories of personal data:IP address, duration of session, user browser, end device

Legal basis and legitimate interests pursued, if applicable:Article 6(1)(f) GDPR

Recipients:Internal departments, in so far as access is necessary for task fulfilment

Third country transfer:None

Validity period of the cookie:Duration of the session

Data processing purposes:Protection against cross-site scripts

Categories of personal data:IP address, duration of session, user browser, end device

Legal basis and legitimate interests pursued, if applicable:Article 6(1)(f) GDPR

Recipients:Internal departments, in so far as access is necessary for task fulfilment

Third country transfer:None

Validity period of the cookie:2 hours

Data processing purposes:Transmission of registration role for displaying relevant information and services

Categories of personal data:IP address (anonymised), target group classification (building owner/end user, specialised tradesperson, planner, wholesaler, architect)

Legal basis and legitimate interests pursued, if applicable:

  • Use of the service: Section 25(1)(1) TTDSG
  • Article 6(1)(f) GDPR
  • Legitimate interests pursued: See data processing purposes

Recipients:Internal departments, in so far as access is necessary for task fulfilment

Third country transfer:None

Validity period of the cookie:6 months

Use of cookies and similar technologies to improve our website and offers.

Data processing purposes:Statistical analysis of website usage

Categories of personal data:IP address (anonymised/abbreviated), approximate region of the visitor, browser and plug-ins used, browser language setting, time of page view, load time, operating system, screen size, referrer, time of previous visits, number of visits

Legal basis and legitimate interests pursued, if applicable:

  • Use of the service: Section 25(1)(1) TTDSG
  • Subsequent processing of personal data: Article 6(1)(a) GDPR

Recipients:Internal departments, in so far as access is necessary for task fulfilment

Third country transfer:None

Validity period of the cookie:

  • 12 months
  • Time of storage: Following consent

Data processing purposes:Verification of whether data entry on websites is done by a human or by an automated program

Categories of personal data:

  • Private customer site: IP address (anonymised), time spent by the visitor on the website, mouse movements made by the user
  • Business customer site: IP address (anonymised), time spent by the visitor on the website, mouse movements made by the user, date and time of the visit to the website in question, internet address or URL of the website accessed

Legal basis and legitimate interests pursued, if applicable:

  • Use of the service: Section 25(1)(1) TTDSG
  • Subsequent processing of personal data: Article 6(1)(a) GDPR

Recipients:

  • Internal departments, in so far as access is necessary for task fulfilment
  • Google Ireland Ltd, Google LLC (USA)

Third country transfer:

  • Third country: USA
  • Adequacy decision/safeguards/exemption: Standard contractual clauses, copy to be requested via the contact details under Point 1, consent pursuant to Article 49(1)(a) GDPR

Validity period of the cookie:12 months

Data processing purposes:Analysis of website usage. Google Analytics examines, among other things, the location of visitors and the length of time spent on individual pages, thus enabling better page and feature optimisation.

Categories of personal data:Location, time or frequency of visits to our website, IP address (anonymised)

Legal basis and legitimate interests pursued, if applicable:

  • Use of the service: Section 25(1)(1) TTDSG
  • Subsequent processing of personal data: Article 6(1)(a) GDPR

Recipients:

  • Internal departments, in so far as access is necessary for task fulfilment
  • Google Ireland Ltd, Google LLC (USA)

Third country transfer:

  • Third country: USA
  • Adequacy decision/safeguards/exemption: Standard contractual clauses, copy to be requested via the contact details under Point 1, consent pursuant to Article 49(1)(a) GDPR

Validity period of the cookie:14 months

Data processing purposes:Management of website tags via an interface

Categories of personal data:IP address (anonymised)

Legal basis and legitimate interests pursued, if applicable:

  • Use of the service: Section 25(1)(1) TTDSG
  • Subsequent processing of personal data: Article 6(1)(a) GDPR

Recipients:

  • Internal departments, in so far as access is necessary for task fulfilment
  • Google Ireland Ltd, Google LLC (USA)

Third country transfer:

  • Third country: USA
  • Adequacy decision/safeguards/exemption: Standard contractual clauses, copy to be requested via the contact details under Point 1, consent pursuant to Article 49(1)(a) GDPR

Validity period of the cookie:14 months

Data processing purposes:Showing of videos

Categories of personal data:

  • Private customer site: IP address (anonymised), time spent by the visitor on the website, mouse movements made by the user
  • Business customer site: IP address (anonymised), time spent by the visitor on the website, mouse movements made by the user, date and time of the visit to the website in question, internet address or URL of the website accessed

Legal basis and legitimate interests pursued, if applicable:

  • Use of the service: Section 25(1)(1) TTDSG
  • Subsequent processing of personal data: Article 6(1)(a) GDPR

Recipients:Vimeo, LLC (USA)

Third country transfer:

  • Third country: USA
  • Adequacy decision/safeguards/exemption: Standard contractual clauses, copy to be requested via the contact details under Point 1, consent pursuant to Article 49(1)(a) GDPR

Validity period of the cookie:longer than 12 months

Data processing purposes:Hotjar allows us to create a kind of heat map of selected pages. This allows us to see how users navigate around the site. We can see where they click, how far they scroll and how they move around the page.

Categories of personal data:- IP address, heat maps of usage

Legal basis and legitimate interests pursued, if applicable:

  • Use of the service: Section 25(1)(1) TTDSG
  • Subsequent processing of personal data: Article 6(1)(a) GDPR

Recipients:

  • Internal departments, in so far as access is necessary for task fulfilment
  • Hotjar Ltd.

Third country transfer:None

Validity period of the cookie:12 months

Data processing purposes:Showing of videos

Categories of personal data:IP address, date and time and the website visited

Legal basis and legitimate interests pursued, if applicable:

  • Use of the service: Section 25(1)(1) TTDSG
  • Subsequent processing of personal data: Article 6(1)(a) GDPR

Recipients:Google Ireland Ltd, Google LLC (USA)

Third country transfer:

  • Third country: USA
  • Adequacy decision/safeguards/exemption: Standard contractual clauses, copy to be requested via the contact details under Point 1, consent pursuant to Article 49(1)(a) GDPR

Validity period of the cookie:longer than 12 months

Data processing purposes:Display of interactive maps

Categories of personal data:IP address (anonymised), date and time of the visit to the relevant website, internet address or URL of the website accessed

Legal basis and legitimate interests pursued, if applicable:

  • Use of the service: Section 25(1)(1) TTDSG
  • Subsequent processing of personal data: Article 6(1)(a) GDPR

Recipients:Google Ireland Ltd, Google LLC (USA)

Third country transfer:

  • Third country: USA
  • Adequacy decision/safeguards/exemption: Standard contractual clauses, copy to be requested via the contact details under Point 1, consent pursuant to Article 49(1)(a) GDPR

Validity period of the cookie:12 months

To be able to recognise your interests and show products customised to you.

Data processing purposes:Doubleclick can be used to place and manage adverts on a website. When, where and how often they should appear is controlled by the operator via campaigns.

Categories of personal data:IP address (anonymised)

Legal basis and legitimate interests pursued, if applicable:

  • Use of the service: Section 25(1)(1) TTDSG
  • Subsequent processing of personal data: Article 6(1)(a) GDPR

Recipients:

  • Internal departments, in so far as access is necessary for task fulfilment
  • Google Ireland Ltd, Google LLC (USA)

Third country transfer:

  • Third country: USA
  • Adequacy decision/safeguards/exemption: Standard contractual clauses, copy to be requested via the contact details under Point 1, consent pursuant to Article 49(1)(a) GDPR

Validity period of the cookie:14 months

Data processing purposes:Gira marketing and sales processes can be digitised and automated by tracking how Gira offers are used. By separating subscribers from website visitors, targeted and more personalised information can be provided. Increased attention enables more follow-up activities and increased customer satisfaction can also be achieved.

Categories of personal data:Date and time, type (object, e.g. eMailing, LeadPage), browser referrer, user agent, link ID (optional), object IDs, optional object-dependent information, individual transfer parameters, geocoordinates or alternatively IP-based geocoordinates (for forms with address entry) via Locr GmbH (recording postal addresses without first and last names) with server location in Germany

Legal basis and legitimate interests pursued, if applicable:

  • Use of the service: Section 25(1)(1) TTDSG
  • Subsequent processing of personal data: Article 6(1)(a) GDPR

Recipients:

  • Internal departments, in so far as access is necessary for task fulfilment
  • SC Networks GmbH

Third country transfer:None

Validity period of the cookie:12 months

Data processing purposes:Evaluation of website usage, campaign performance measurement

Categories of personal data:IP address, browser information, website visited, date and time of visit, device information, usage data, click path, geographical location

Legal basis and legitimate interests pursued, if applicable:

  • Use of the service: Section 25(1)(1) TTDSG
  • Subsequent processing of personal data: Article 6(1)(a) GDPR

Recipients:

  • Internal departments, in so far as access is necessary for task fulfilment
  • Meta Platforms Ireland Ltd, Meta Platforms, Inc. (USA)

Third country transfer:

  • Third country: USA
  • Adequacy decision/safeguards/exemption: Standard contractual clauses, copy to be requested via the contact details under Point 1, consent pursuant to Article 49(1)(a) GDPR

Validity period of the cookie:90 days

Data processing purposes:Evaluation of website usage, campaign performance measurement

Categories of personal data:IP address, browser information, website visited, date and time of visit, device information, usage data, click path, geographical location

Legal basis and legitimate interests pursued, if applicable:

  • Use of the service: Section 25(1)(1) TTDSG
  • Subsequent processing of personal data: Article 6(1)(a) GDPR

Recipients:

  • Internal departments, in so far as access is necessary for task fulfilment
  • Pinterest, Inc. (USA)

Third country transfer:

  • Third country: USA
  • Adequacy decision/safeguards/exemption: Standard contractual clauses, copy to be requested via the contact details under Point 1, consent pursuant to Article 49(1)(a) GDPR

Validity period of the cookie:12 months

Data processing purposes:Analysis of website usage, use of this information to serve tailored ads on LinkedIn (retargeting)

Categories of personal data:Device and browser properties, IP address, referrer URL and timestamps

Legal basis and legitimate interests pursued, if applicable:

  • Use of the service: Section 25(1)(1) TTDSG
  • Subsequent processing of personal data: Article 6(1)(a) GDPR

Recipients:

  • Internal departments, in so far as access is necessary for task fulfilment
  • LinkedIn Ireland Unlimited Company

Third country transfer:We do not transfer your personal data to third countries. With regard to the transfer of your personal data to third countries by LinkedIn, we refer to their privacy policy: https://www.linkedin.com/legal/privacy-policy

Validity period of the cookie:12 months

Data processing purposes:Evaluation of website usage, campaign performance measurement. Google Ads uses data to place adverts placed by Gira on websites, social media platforms, in search results and other digital platforms and to measure the success of advertising campaigns.

Categories of personal data:IP address, browser information, website visited, date and time of visit, device information, usage data, click path, geographical location

Legal basis and legitimate interests pursued, if applicable:

  • Use of the service: Section 25(1)(1) TTDSG
  • Subsequent processing of personal data: Article 6(1)(a) GDPR

Recipients:

  • Internal departments, in so far as access is necessary for task fulfilment
  • Google Ireland Ltd, Google LLC (USA)

Third country transfer:

  • Third country: USA
  • Adequacy decision/safeguards/exemption: Standard contractual clauses, copy to be requested via the contact details under Point 1, consent pursuant to Article 49(1)(a) GDPR

Validity period of the cookie:90 days