Investment request
We review every request personally and confidentially – and reply within 14 days.
GS Group GmbH
Ochsenbrunnenstraße 18
74078 Heilbronn
Legal
As at 18 October 2026
The data controller responsible for the processing of personal data on this website is:
GS Group GmbH
, Ochsenbrunnenstraße 18
, 74078 Heilbronn
, Germany
Telephone: +49 7131 3859710
Email: info@gsgroup.eu
Represented by the managing director, Gürsel Sen.
We take the protection of your personal data seriously. Personal data refers to any information that can be used to identify you, either directly or indirectly.
We process personal data only to the extent that this is necessary for the operation of our website, the handling of enquiries, pre-contractual measures, business relationships or legal obligations, or where there is another legal basis.
The relevant legal bases are, in particular, Article 6(1)(a) (consent), (b) (contract and pre-contractual measures), (c) (legal obligation) and (f) (legitimate interests) of the GDPR. For special categories of personal data, the requirements of Article 9 of the GDPR also apply.
Our website is hosted by STRATO GmbH. In the course of providing the website, technically necessary connection data is processed, in particular IP addresses, the time of access, the pages or files accessed, and browser and device information.
The processing is carried out to ensure the secure and trouble-free operation of the website and to defend against attacks. The legal basis is Article 6(1)(f) of the GDPR.
Die Speicherdauer hängt von der jeweiligen Art der Serverprotokolle und den Einstellungen des Hosting-Pakets ab. STRATO beschreibt für bestimmte sicherheitsbezogene IP-Protokollierungen eine Speicherung von bis zu sieben Tagen; andere bereitgestellte Logdateien können länger verfügbar sein. Maßgeblich sind die tatsächlich für diese Website geltenden Hosting-Einstellungen.
If you contact us by email or via the contact form, we will process the details you provide, in particular your name, contact details, the content of your message and any additional information you choose to provide.
Die Verarbeitung dient der Bearbeitung Ihrer Anfrage. Rechtsgrundlage ist Art. 6 Abs. 1 lit. b DSGVO, soweit die Anfrage vorvertragliche Maßnahmen oder einen Vertrag betrifft; andernfalls Art. 6 Abs. 1 lit. f DSGVO.
The data will be deleted as soon as it is no longer required for processing and there are no statutory retention obligations or other legitimate grounds preventing this.
You can use the ‘Investment Enquiry’ form to send us your contact details, company information and project details, as well as any other information you wish to provide.
We use this information to assess potential investments, ask for further details and, where appropriate, prepare for pre-contractual discussions.
Access is granted to the management and selected internal staff, insofar as this is necessary for processing the data.
The legal basis is Article 6(1)(b) of the GDPR where pre-contractual measures are concerned; otherwise, it is Article 6(1)(f) of the GDPR.
If no collaboration is established, we will delete the enquiry as soon as the review has been completed and there is no further need to retain it. Statutory retention obligations and the need to assert, exercise or defend legal claims remain unaffected.
If you apply via our careers form, we will process your details, in particular your contact details, qualifications, professional background, message and any uploaded application documents (PDF). This information will be used to assess your suitability, to communicate with you and to decide whether to offer you a position.
The legal basis is Article 6(1)(b) of the GDPR in conjunction with the applicable provisions on employee data protection, in particular Section 26 of the BDSG, where applicable. In the exceptional cases where special categories of personal data are processed, a relevant exception under Article 9(2) of the GDPR is also required.
Only the management and authorised staff involved in the selection process are granted access. Application documents are submitted via the form as email attachments and processed within the company’s email system.
If no employment relationship is established, we will, as a rule, delete application documents six months after the application process has been completed, provided there are no legal grounds for retaining them for a longer period. In the event of recruitment, the data protection and retention regulations for employees apply.
Für Kontakt-, Beteiligungs- und Karriereformulare verwenden wir WordPress und Elementor Pro. Die von Ihnen eingegebenen Angaben werden zur Bearbeitung des jeweiligen Anliegens per E-Mail übermittelt. Die zusätzliche Elementor-Funktion „Collect Submissions“ („Einsendungen sammeln“) ist in allen drei Formularen deaktiviert; eine darüber erfolgende dauerhafte Speicherung der Formulareingaben in der Elementor-Einsendungsdatenbank findet daher nicht statt.
In the career form, you can upload a CV as a PDF file (maximum 5 MB). The upload is processed technically via the web server and sent to the relevant mailbox using the ‘Email with attachment’ setting. According to the Elementor documentation, this method of sending does not provide for the file to be made permanently available on the web server via a download link. Temporary technical processing, for example during the upload and email dispatch, may nevertheless take place.
The transmitted content and attachments are stored in the email system in accordance with the relevant processing purpose and the deletion rules set out in this statement.
We use Microsoft 365 or Exchange for our business email communications via info@gsgroup.eu. In particular, this involves the processing of sender and recipient data, message content, application documents as attachments, and technical transmission data.
The legal basis is Article 6(1)(b) of the GDPR, insofar as the communication serves the purpose of taking steps prior to entering into a contract or performing a contract; otherwise, Article 6(1)(f) of the GDPR (efficient and secure business communication).
When using Microsoft services, data may be accessed or transferred to third countries as part of the contractual and technical provision of services. Information on the applicable requirements can be found under ‘Transfers to third countries’. Which data locations and contractual provisions apply in each individual case depends on the Microsoft 365 configuration actually used.
Our website may use technically necessary cookies or similar technologies that are required to provide certain functions.
Section 25(2) of the TDDDG applies to storage or access that is strictly necessary. Any associated processing of personal data is governed by the GDPR.
Should any technologies requiring consent be used in future, we will obtain the necessary consent before activating them.
Our website may contain links to external sites, in particular to our company profile on LinkedIn.
A standard external link does not transmit data to LinkedIn simply by virtue of its existence when our website is merely viewed. You are only redirected to the external site once you click on the link. The privacy policy of the respective provider applies there.
LinkedIn’s privacy policy: linkedin.com/legal/privacy-policy
Within our organisation, only those individuals who require personal data to carry out their duties are granted access to it.
In addition, technical service providers, in particular hosting and email service providers, may process data to the extent necessary. Where data is processed on our behalf, we comply with the requirements of Article 28 of the GDPR.
Further transfers will only take place where there is a legal basis for doing so or where there is a statutory obligation to do so.
When using service providers, in particular Microsoft 365, personal data may, under certain circumstances, be processed outside the European Union or the European Economic Area, or be accessible from there.
Where this occurs, we comply with the requirements set out in Articles 44 et seq. of the GDPR. Depending on the recipient and the nature of the transfer, adequacy decisions or appropriate safeguards – such as EU Standard Contractual Clauses – may be used in particular. The specific transfers depend on the contractual arrangements and the technical configuration of the services used.
As a general rule, we only store personal data for as long as is necessary for the relevant purpose.
Statutory retention obligations remain unaffected. The rules described above also apply to job applications and enquiries regarding shareholdings. Once the purpose for which the data is stored no longer applies and the relevant time limits have expired, the data will be deleted, provided there is no other legal basis for its continued storage.
In accordance with the statutory requirements, you have the following rights in particular:
Right to object: Where we process data on the basis of Article 6(1)(f) of the GDPR, you may object at any time on grounds relating to your particular situation.
To exercise your rights, please contact info@gsgroup.eu.
You may lodge a complaint with a data protection supervisory authority if you believe that your personal data is being processed unlawfully.
The State Commissioner for Data Protection and Freedom of Information in Baden-Württemberg is responsible for our head office.
Website: baden-wuerttemberg.datenschutz.de
The right to lodge a complaint with another competent data protection supervisory authority remains unaffected.
We take appropriate technical and organisational measures to protect personal data. These include, in particular, restricting access rights and measures to secure the systems in use.
The website is hosted via HTTPS. However, when data is transmitted over the internet – particularly when sending and receiving emails – it is not possible to guarantee absolute protection against unauthorised access.
We will update this privacy policy if our website, the services we use or the legal requirements change.
The latest version is published on this website.