Privacy Policy - GK GO Solution

GK Software SE (hereinafter referred to as "GK") offers cashierless shopping at its headquarters (Waldstraße 7, 08261 Schöneck/Vogtland). This privacy policy applies to the processing of personal data that is processed as part of cashierless shopping within the GK GO store and the GK GO app.

1. Responsible for Data Processing

GK Software SE is responsible for the processing of personal data. The contact details are:

GK Software SE
Waldstraße 7
08261 Schöneck/Vogtland
Email: This email address is being protected from spambots. You need JavaScript enabled to view it.

2. Contact Details of the Data Protection Officer

GK Software SE
Data Protection Officer
Waldstraße 7
08621 Schöneck

Email: This email address is being protected from spambots. You need JavaScript enabled to view it.

3. Contact Details of the Privacy Compliance Team

If you have any inquiries related to data protection (contracts/inquiries regarding data subjects, etc.), please send an email to: This email address is being protected from spambots. You need JavaScript enabled to view it.

Our team will take care of your request as soon as possible.

4. What Data is Processed by GK?

1. GK processes the following data when you enter the GK GO store and use the GK GO app:
   • Data entered as part of a complaint (transaction ID)
   • Data collected when entering the GK GO store ("Device ID" in the QR code)
   • Data collected when shopping within the GK GO store (shopping cart, receipts)
   • Data collected as part of a contact request by the customer
   • Data entered by the user during the registration process or when changing their user data
     • Email address, first name, last name, username
     • Phone number (if entered)
     • (Payment methods and credit card data are not saved by GK Software SE. We would like to point out that GK does not collect any credit card data.)
2. For registered customers:
   GK additionally processes the following data when you register in the GK GO app:
   • Data necessary for registration
     • Master data (last name, first name, email address)

5. Purposes and Legal Basis of Data Processing

The data is collected for the cashless payment of goods and the processing of any complaints. The legal basis for this is Article 6, Paragraph 1b, GDPR, due to a contract (purchase of goods).

Within the GK GO solution, it is possible to contact GK Software SE (e.g. by email/telephone). The processing of this data serves to respond to inquiries. The legal basis for this is Article 6, Paragraph 1a, 1f, GDPR (consent to data processing as well as the interest of the operator to answer corresponding inquiries).

6. Recipient of the Data

The following data recipients may have access to your data:

• Employees of GK Software SE in the case of complaints
• Employees of GK Software SE in the case of maintenance and support
• Cloud service provider to store the data
• Payment service provider

7. How Long is the Data Stored For

1. When storing data of registered customers:
   • Customer data is stored (anonymized and removed from the systems at the latest after 3 years of no use) or deleted at the request of the customer.
2. When storing purchase-specific metadata:
   • The corresponding data is stored indefinitely or deleted upon request.
3. Data storage under legal retention periods:
   • Invoice data is retained for 10 years (after purchase)
   • Data on the respective purchase is retained for 6 years
4. When storing (personal) data as part of a contact request:
   • Max. 6 months
   • Analysis data is stored or deleted as needed

8. Rights of Data Subjects

Right of access, rectification, erasure and restriction of processing

You have the right of access to the personal data concerned and the right to rectification, erasure or restriction of processing.

Right to data portability

You have the right to data portability.

Right to complain to a supervisory authority

You have the right to complain to a supervisory authority.

Provision of personal data

There is no legal obligation for you to provide personal data.

Automated decision-making including profiling

Automated decision-making including profiling does not take place.

Right to object

If your personal data is processed on the basis of legitimate interests in accordance with Article 6, Paragraph 1, Item 1f, GDPR, you have the right to object to the processing of your personal data in accordance with Article 21, GDPR, provided that there are grounds for doing so that arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which will be implemented by us without the need to specify a particular situation.

If you wish to exercise your right to object, simply send an email to This email address is being protected from spambots. You need JavaScript enabled to view it.

9. Further Information

Payment for goods within the GK GO store and the GK GO app is made by credit card. For this purpose, the payment service provider Adyen N.V. German Branch, Friedrichstraße 63, 10117 Berlin (hereafter referred to as "Adyen") is used via a plug-in accessed through the "Pay" button. Ayden collects your credit card data for payment. We point out that GK does not collect any credit card data.

For more information, please visit:

• Adyen Terms and Conditions: https://www.adyen.com/legal/terms-and-conditions
• Adyen Privacy Policy: https://www.adyen.com/policies-and-disclaimer/privacy-policy