Data privacy statement
We provide information below about the collection of personal data with the use of our website. Personal data are all data that can be related to you personally, e.g. name, address, e-mail addresses, user behaviour.
Verantwortlicher gem. Art. 4 Abs. 7 EU-Datenschutz-Grundverordnung (DS-GVO) ist die
WETROPA KUNSTSTOFFVERARBEITUNG GMBH & CO. KG
Telephone: +49 (0) 6105/97560
Fax: +49 (0) 6105/975656
(Please also see our Impressum).
Our Data Protection Officer can be contacted at firstname.lastname@example.org or at our postal address with the addition of the word “Datenschutzbeauftragter” (Data Protection Officer).
3. Information aboutmaking contact
When you contact us by e-mail or using a contact form, we store the data you provide (your e-mail address, if applicable your name and telephone number) in order to answer your questions. We delete the data accrued in this context after storage is no longer necessary or we restrict the processing if statutory retention obligations exist.
If we wish to use contracted service providers for individual functions of our offer or to use your data for promotional purposes, we will inform you of the respective procedures below in detail. We also specify the defined storage duration criteria here.
5. SSL/ TLS encryption
For security reasons and to protect the transmission of confidential content, for example such as orders or enquiries that you send to us at the site operator, this page uses SSL/TLS encryption. An encrypted connection can be identified from the fact that the address line of the browser changes from “http://” to “https://” and from the padlock symbol in your browser line.
We process personal data of our users essentially only if this is necessary for the provision of a functional website as well as our content and services. The processing of personal data of our users is performed regularly only after consent of the user. An exception applies in such cases as those in which, for practical reasons, it is not possible to obtain prior consent and processing of the data is permitted by statutory regulations.
If we obtain consent from the data subject for processing personal data, art. 6 par. 1 lit. a EU General Data Protection Regulation (GDPR) serves as the legal basis.
In the case of personal data processing that is required to allow performance of an agreement of which the contracting party is the data subject, art. 6 par. 1 lit. b GDPR serves as the legal basis. This also applies for processing that is required for the performance of pre-contractual measures.
If processing of personal data is required for the fulfilment of a legal obligation to which our company is subject, art. 6 par. 1 lit. c GDPR serves as the legal basis.
In the case where vital interests of the data subject or another individual necessitate the processing of personal data, art. 6 par. 1 lit. d GDPR serves as the legal basis.
If the processing is required in order to protect a legitimate interest of our company or of a third party and if the interests, fundamental rights and fundamental freedoms of the data subject do not outweigh the aforementioned interest, art. 6 par. 1 lit. f GDPR serves as the legal basis for the processing.
The personal data of the data subject are deleted or blocked as soon as the purpose of the storage lapses. Storage may be undertaken moreover if this is required by European or national legislation in provisions under Union legislation, laws or other regulations to which the body responsible is subject. Blocking or deletion of the data is also undertaken if a storage period specified by the said standards expires, unless there is a need for further storage of the data for formation of a contract or performance of a contract.
4. Data transmission in the case of contract formation for services and digital content
We transmit personal data to third parties only if this is necessary as part of the contract processing, such as to the bank that is commissioned to process the payment.
The data are transmitted no further or only if you have explicitly consented to the transmission. Your data are not disclosed to third parties without explicit consent, such as for the purposes of advertising.
The basis for the data processing is art. 6 par. 1 lit. b GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures.
Every time our website is opened, our system automatically collects data and information from the computer system of the computer from which the website is opened.
The following data are collected here:
- Information about the browser type and version used
- The user’s operating system
- The user’s internet service provider
- The user’s IP address
- Date and time of the access
- Website from which the user’s system accesses our website
- Website opened by the user’s system via our website
The data are likewise stored in the log files of our system. This does not affect the user’s IP addresses or other data that allow assignment of th e data to a user. Storage of these data together with other personal data of the user does not happen.
The legal basis for temporary storage of the data is art. 6 par. 1 lit. f GDPR.
Temporary storage of the IP address by the system is required in order to allow delivery of the website to the user’s computer. To this end, the user’s IP address must remain stored for the duration of the session.
Our legitimate interest in data processing in accordance with art. 6 par. 1 lit. f GDPR also lies in these purposes.
The data are deleted as soon as they are no longer required in order to achieve the purpose of their collection. In the case of data capture for provision of the website, this is the case when the respective session has ended.
Collection of data for provision of the website and storage of the data in log files are essential for operation of the website. There is consequently no option of objection on the part of the user.
1. Description and scope of data processing
The following data are stored and transmitted in the cookies:
Thus the following data can be transmitted:
- Search terms entered
- Frequency of page views
- Use of website functions
The user’s data collected in this way are pseudonymised by means of technical precautions. Allocation of the data to the user opening the website is therefore no longer possible. The data are not stored together with other personal data of the user.
2. Legal basis for data processing
The legal basis for the processing of personal data using cookies is art. 6 par. 1 lit. f GDPR.
3. Purpose of data processing
The user data collected by technically essential cookies are not used for the creation of user profiles.
The analysis cookies are used for the purpose of improving the quality of our website and its content. From the analysis cookies, we find out how the website is used and can therefore continuously optimise our services.
Our legitimate interest in the processing of personal data in accordance with art. 6 par. 1 lit. f GDPR also lies in these purposes.
For further details of the analysis services used, see figure IX.
4. Duration of storage, option of objection and removal
This website uses the following types of cookies – their scope and the way they work is explained below:
(1) Transient cookies (see a)
(2) Persistent cookies (see b)
a) Transient cookies are deleted automatically when you close the browser. These specifically include a so-called session ID, with which various requests from your browser can be allocated to the joint session. This allows your computer to be recognised if you return to our website. Session cookies are deleted when you log out or close the browser.
b) Persistent cookies are deleted automatically after a specified duration, which may vary depending on the cookie. You can delete the cookies at any time in the security settings of your browser.
On our website, the option is available to subscribe to a free newsletter. In this case, the data from the input screen are sent to us on registration for the newsletter.
In addition, the following data are collected on registration:
(1) IP address of the computer from which the website is opened
(2) Date and time of registration
As part of the registration process, your consent is obtained for processing of the data and you are referred to this data privacy statement.
If you purchase goods or services from us and save your e-mail address in this case, it may subsequently be used by us for sending a newsletter. In such a case, only direct advertising for our own similar products or services will be sent through the newsletter.
We use the “SuperMailer” tool for sending the newsletter. Further information about this can be found under figure V. 6. The data are used exclusively for sending the newsletter.
Above and beyond this, the data are not transmitted to third parties.
The legal basis for processing the data after registration for the newsletter by the user in the case where consent from the user is available is art. 6 par. 1 lit. a GDPR.
The legal basis for sending the newsletter following the sale of goods or services is § 7 par. 3 UWG (German unfair competition act).
Collection of the user’s e-mail address serves to enable delivery of the newsletter.
The collection of other personal data in the context of the registration process serves to prevent misuse of the services or of the e-mail address used.
The data are deleted as soon as they are no longer required to achieve the purpose of their collection. The user’s e-mail address is accordingly stored for as long as the subscription to the newsletter is active.
The other personal data collected in the context of the registration process are generally deleted after a period of seven days.
The subscription to the newsletter may be cancelled at any time by the user concerned. A corresponding link can be found in every newsletter for this purpose.
This likewise allows revocation of the consent to storage of the personal data collected during the registration process.
6. Newsletter distribution using SuperMailer
The newsletter is distributed by means of “SuperMailer”, a newsletter distribution platform of Mirko Böer Softwareentwicklungen, Malachitstraße 16, D-04319 Leipzig.
The newsletters contain a so-called “web beacon”, i.e. a pixel-sized file that is requested when the newsletter is opened from the SuperMailer server. In the context of this request, technical information is collected, such as information about the browser and your system as well as your IP address and the time of the request. This information is used for technical improvement of the services using the technical data or the target groups and their reading behaviour on the basis of their request locations (which can be identified using the IP address) or the access times. The statistical surveys also include determining whether the newsletters are opened, when they are opened and which links are clicked. This information is collected in anonymised form; no allocation of click behaviour to a specific newsletter recipient takes place, rather the evaluations allow us to identify the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.
Further information about the handling of user data can be found in the SuperMailer data privacy statement at https://www.superscripte.de/register/html/datenschutz.htm.
A contact form is available on our website, which can be used to contact us electronically. If a user exercises this option, the data entered on the input screen are sent to us and stored. These data are:
Name, e-mail, telephone, subject, message
The following data are also stored at the time when the message is sent:
Date and time of registration
Your consent to the processing of the data is obtained in the context of the sending process and you are referred to this data privacy statement.
Alternatively, contact can be made using the e-mail address provided. In this case, the user’s personal data sent with the e-mail are stored.
No transmission of the data to third parties takes place in connection with this. The data are used exclusively for processing of the conversation.
The legal basis for processing the data if consent is in place from the user is art. 6 par. 1 lit. a GDPR.
The legal basis for processing the data transmitted in the course of sending an e-mail is art. 6 par. 1 lit. f GDPR. If the aim of the e-mail is the formation of a contract, art. 6 par. 1 lit. b GDPR is an additional legal basis for the processing.
The processing of personal data from the input screen serves solely to allow us to make contact. In the case of contact by e-mail, this is also where the required legitimate interest in processing of the data lies.
The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.
The data are deleted as soon as they are no longer required to achieve the purpose of their collection. For the personal data from the input screen and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation has ended when it can be inferred from the circumstances that the matter concerned has been conclusively resolved.
The personal data collected additionally during the sending process are deleted no later than after a period of seven days.
The user has the option to revoke the consent to processing of the personal data at any time. If the user contacts us, the user may object at any time to storage of the persona data.
An informal communication by e-mail or by post/fax to the contact details specified at the beginning (figure I.) is sufficient for this. The legality of the data processing performed prior to revocation remains unaffected by the revocation.
In the case of objection to storage, the conversation cannot be continued.
All personal data stored in the course of the contact are deleted in this case.
VII. Application process
We collect, process and use your personal data to process your online application. Your application data transmitted by email are sent directly to the personnel department and naturally treated as confidential. Through appropriate technical and organisational measures it is ensured that your personal data are handled in accordance with the statutory provisions – confidentiality and security are paramount here. Please note that the data are transmitted by e-mail unencrypted and it may be possible for the data to be noted or even adulterated by unauthorised parties. Please feel free to send your documents to us by post instead.
After the application process is completed and no later than after 6 months, your personal data will be deleted automatically unless you explicitly consent to storage over a longer period.
In this respect the data are processed solely on the basis of our legitimate interest in accordance with art. 6 par. 1 lit. f GDPR.
If your personal data are processed, you are the subject in accordance with GDPR and you have the following rights against the body responsible:
You can request confirmation from the body responsible of whether personal data concerning you are processed by us.
If such processing exists, you can request information from the body responsible about the following information:
(1) The purposes for which the personal data are processed;
(2) The categories of personal data being processed;
(3) The recipients and categories of recipients to which the personal data concerning you have been disclosed or will be disclosed;
(4) The planned duration of storage of the personal data concerning you or, if specific details of this are not possible, criteria to define the storage duration;
(5) The existence of a right to correction or deletion of the personal data concerning you, a right to limitation of the processing by the body responsible or a right to object to this processing;
(6) The existence of a right to appeal to a regulatory authority;
(7) All available information about the origin of the data if the personal data are not collected from the data subject;
(8) The existence of automated decision-making including profiling in accordance with art. 22 par. 1 and 4 GDPR and – at least in these cases – meaningful information about the logic involved as well as the implications and intended effects of such processing for the data subject.
You have the right to request information about whether the personal data concerning you are sent to a third country or to an international organisation. In this context you can demand to be informed of the appropriate guarantees in connection with the transmission in accordance with art. 46 GDPR.
You have a right to correction and/or completion by the body responsible if the personal data being processed which concern you are incorrect or incomplete. The body responsible must make the correction immediately.
Under the following conditions, you can request limitation of processing of the personal data concerning you:
(1) If you dispute the correctness of the personal data concerning you for a duration that allows the body responsible to verify the correctness of the personal data;
(2) If the processing is unlawful and you refuse deletion of the personal data and instead request limitation of the use of the personal data;
(3) If the body responsible no longer requires the personal data for the purposes of the processing but you require them for the assertion, exercise or defence of legal claims, or
(4) If you have filed an objection to the processing in accordance with art. 21 par. 1 GDPR and it has not yet been determined whether the legitimate reasons of the body responsible outweigh your reasons.
If the processing of the personal data concerning you has been limited, these data may be processed – other than their storage – only with your consent or for the assertion, exercise or defence of legal claims or to protect the rights of another individual or legal entity or for reasons of important public interest of the Union or of a member state.
If the limitation of processing has been limited in accordance with the aforementioned conditions, you will be advised by the body responsible before the limitation is removed.
a) Deletion obligation
You can request that the body responsible immediately delete the personal data concerning you and the body responsible is obliged to delete these data immediately if one of the following reasons applies:
(1) The personal data concerning you are no longer required for the purposes for which they were collected or otherwise processed.
(2) You revoke your consent upon which the processing was based in accordance with art. 6 par. 1 lit. a or art. 9 par. 2 lit. a GDPR and there is no other legal basis for the processing.
(3) You file an objection to the processing in accordance with art. 21 par. 1 GDPR and there are no overriding legitimate reasons for the processing or you file an objection to the processing in accordance with art. 21 par. 2 GDPR.
(4) The personal data concerning you have been processed unlawfully.
(5) The deletion of the personal data concerning you is required for fulfilment of a legal obligation in accordance with Union legislation or the law of the member states to which the body responsible is subject.
(6) The personal data concerning you were collected in respect of information society services offered in accordance with art. 8 par. 1 GDPR.
b) Information to third parties
If the body responsible has disclosed the personal data concerning you to the public and if the body responsible is obliged to delete them in accordance with art. 17 par. 1 GDPR, the body responsible shall take appropriate measures, including of a technical nature, in consideration of the available technology and the implementation costs, to inform bodies responsible for the data processing which are processing the personal data that you as the data subject have requested deletion of all links to these personal data or of copies or replications of these personal data.
The right to deletion does not apply if the processing is required
(1) To exercise the right to freedom of expression and information;
(2) To fulfil a legal obligation which the processing requires in accordance with the law of the Union or the member states to which the body responsible is subject or to perform a task that lies in the public interest or that is effected in the exercise of official authority that has been conferred on the body responsible;
(3) For reasons of public interest in the area of public health in accordance with art. 9 par. 2 lit. h and i as well as art. 9 par. 3 GDPR;
(4) For archiving purposes in the public interest, economic or historic research purposes or for statistical purposes in accordance with art. 89 par. 1 GDPR if the right specified under section a) is expected to render impossible or seriously to impair realisation of the objectives of this processing, or
(5) To assert, exercise or defend legal claims.
If you have asserted the right to correction, deletion or limitation of processing against the body responsible, the body responsible is obliged to inform all recipients to whom it has disclosed the personal data concerning you of this correction or deletion of the data or limitation of processing unless this proves to be impossible or is associated with disproportionate effort.
You have the right to be informed of these recipients by the body responsible.
You have the right to receive the personal data concerning you, which you have provided to the body responsible, in a structured, current and machine-readable format. Furthermore, you have the right to transmit these data to another body responsible without hindrance by the body responsible to which the personal data have been provided, if
(1) The processing is based upon consent in accordance with art. 6 par. 1 lit. a GDPR or art. 9 par. 2 lit. a GDPR or upon a contract in accordance with art. 6 par. 1 lit. b GDPR and
(2) The processing is performed by means of automated processes.
In the exercise of this right, you additionally have the right to have the personal data concerning you transmitted directly from one body responsible to another body responsible as long as this is technically feasible. Freedoms and rights of other people must not be impaired through this.
The right to data portability does not apply for the processing of personal data that is required for the performance of a task, that is in the public interest, or that is undertaken in the exercise of official authority that has been conferred on the body responsible.
You have the right to file an objection at any time to the processing of the personal data concerning you on the basis of art. 6 par. 1 lit. e or f, for reasons arising from your specific situation; this also applies for profiling based upon these provisions.
The body responsible will no longer process the personal data concerning you unless it is able to prove compelling legitimate reasons for the processing, which outweigh your interests, rights and freedoms or the processing serves to assert, exercise or defend legal claims.
If the personal data concerning you are processed in order to conduct direct advertising, you have the right to file an objection at any time to processing of the personal data concerning you for the purposes of such advertising; this also applies for profiling if it is connected with such direct advertising.
If you object to processing for the purposes of direct advertising, the personal data concerning you will no longer be processed for these purposes.
In conjunction with the use of information society services, you have the option – regardless of directive 2002/58/EC – to exercise your right to object by means of automated processes in which technical specifications are used.
You have the right to revoke your declaration of consent under data protection law at any time. The legality of processing performed on the basis of the consent before revocation is not affected by revocation of the consent.
You have the right not to be subject to a decision based solely on automated processing – including profiling – that has a legal effect on you or similarly substantially compromises you. This does not apply if the decision
(1) Is required for the formation or performance of a contract between you and the body responsible,
(2) Is permitted on the basis of legal regulations of the Union or the member states to which the body responsible is subject and these legal regulations contain appropriate measures to safeguard your rights and freedoms as well as your legitimate interests, or
(3) Is made with your explicit consent.
However, these decisions must not be based on specific categories of personal data in accordance with art. 9 par. 1 GDPR unless art. 9 par. 2 lit. a or g GDPR applies and appropriate action has been taken to protect rights and freedoms as well as your legitimate interests.
With regard to the cases mentioned in (1) and (3), the body responsible will take appropriate action to safeguard the rights and freedoms as well as your legitimate interests, including at least the right to have a person intervene on the side of the body responsible, to explain your own position and to challenge the decision.
Right to appeal to a regulatory authority
You moreover have the right to appeal to a data protection regulatory authority concerning the processing of your personal data by us. The regulatory authority responsible for us is: the Hessian state representative, Prof Dr Michael Ronellenfitsch, Gustav-Stresemann-Ring 1, telephone +49 (0)611 1408-0, fax +49 (0)611 408-900 or -901, e-mail email@example.com.
IX. Analysis tools and advertising
1. Google Analytics
On our websites we use Google Analytics, a web analysis services of Google Inc. (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereafter referred to as “Google”). In this context, pseudonymised usage profiles are created and cookies (see under fig. 4) are used. The information generated by the cookie about your use of this website, such as
- Browser type/version,
- Operating system used,
- Referrer URL (the site visited previously),
- Host name of the accessing computer (IP address),
- Time of the server request,
Is transmitted to a server of Google in the USA and stored there. The information is used to evaluate the use of the website, to compile reports about the website activities and to provide other services associated with the website use and internet use for the purposes of market research and demand-based design of these websites. This information may also be transmitted to third parties if this is required by law or if third parties process these data on instruction. In no case will your IP address be combined with other data by Google. IP addresses are anonymised, such that allocation is no longer possible (IP masking).
You can prevent the installation of cookies with a corresponding setting in the browser software; we would point out however, that it may not be possible to use all the functions of the website in this case.
Google Analytics is used in the interest of optimising the demand-based design of our website. This represents a legitimate interest in accordance with art. 6 par. 1 lit. f GDPR.
You can furthermore prevent collection of the data generated by the cookie and related to your use of the website (incl. your IP address) as well as processing of these data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de).
As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent collection by Google Analytics by clicking on the following link:
An opt-out cookie is set, which prevents future collection of your data when visiting this website. The opt-out cookie applies only in this browser and only for our website and it is saved on your device. If you delete the cookies in this browser, you will have to set the opt-out cookie again.
Further information about data protection in connection with Google Analytics can be founds including in Google Analytics help (https://support.google.com/analytics/answer/6004245?hl=de).
Demographics in Google Analytics
This website uses the “demographics” function of Google Analytics. With this, reports can be compiled, which contain statements about age, gender and interests of site visitors. These data come from interest-related advertising of Google and from visitor data from third-party providers. These data cannot be assigned to a specific person. You can deactivate this function at any time via the display settings in your Google account or prohibit the collection of your data in general by Google Analytics, as shown in the point on “objection to data collection”.
2. Google AdWords und Google conversion tracking
This website uses Google AdWords. AdWords is an online advertising programme of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google”).
As part of Google AdWords, we use so-called conversion tracking. If you click on an advertisement placed by Google, a cookie is set for conversion tracking. Cookies are small text files that the internet browser saves on the user’s computer. The validity of these cookies expires after 30 days and they do not allow personal identification of users. If the user visits certain pages on this website and the cookie has not yet expired, Google and we are able to recognise that the user has clicked on the advertisement and been forwarded to this page.
Every Google AdWords customer receives a different cookie. The cookies cannot be traced through the websites of AdWords customers. The information obtained using the conversion cookie serves to produce conversion statistics for AdWords customers who have chosen conversion tracking. The customers find out the total number of users who have clicked on their advertisement and been forwarded to a page that has a conversion tracking tag. However, they receive no information from which users can be personally identified. If you do not wish to participate in tracking, you can object to this use by easily deactivating the Google conversion tracking cookie under user settings in your internet browser. You will then not be included in the conversion tracking statistics.
“Conversion cookies” are stored on the basis of art. 6 par. 1 lit. f GDPR. The website operator has a legitimate interest in analysis of the user behaviour, in order to optimise web content and advertising.
You can set your browser so that you are informed about the setting of cookies and allow cookies only in the individual case, prevent the acceptance of cookies for specific cases or in general, and activate automatic deletion of cookies when the browser is closed. If cookies are deactivated, the functionality of this website may be impaired.
X. Plugins and tools
Unsere Website nutzt Plugins der von Google betriebenen Seite YouTube. Betreiber der Seiten ist die YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
Wenn Sie eine unserer mit einem YouTube-Plugin ausgestatteten Seiten besuchen, wird eine Verbindung zu den Servern von YouTube hergestellt. Dabei wird dem YouTube-Server mitgeteilt, welche unserer Seiten Sie besucht haben.
Wenn Sie in Ihrem YouTube-Account eingeloggt sind, ermöglichen Sie YouTube, Ihr Surfverhalten direkt Ihrem persönlichen Profil zuzuordnen. Dies können Sie verhindern, indem Sie sich aus Ihrem YouTube-Account ausloggen.
Our website uses plugins from the Google-operated site YouTube. The operator of the pages is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
If you visit one of our pages equipped with a YouTube plugin, a connection is made to the servers of YouTube. The YouTube server is informed here which of our sites you have visited.
If you are logged in to your YouTube account, you allow YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.
YouTube is used in the interest of attractive presentation of our online services. This represents a legitimate interest in accordance with art. 6 par. 1 lit. f GDPR.
Further information about the handling of user data can be found in the data privacy statement of YouTube at https://www.google.de/intl/de/policies/privacy.
Status of the data privacy statement: 08.06.2018