PRIVACY POLICY

 

This declaration on data protection ( hereinafter referred to as “declaration”)  provides information  about the use of personal data when using our websites.

Under the following section 1 we inform you about contact persons and their availability as well as general information  including the definitions applied here.  An explanation of the data processing operations follows in section 2. Subsequently, you will find further information on your rights in section 3.
 

1. Contact persons, general information and terminology

Data Controller

The person responsible within the meaning of Art. 4 sentence 7 General Data Protection Regulation (GDPR) – data controller – is

KWO Dichtungstechnik GmbH
Beethovenring 17
85630 Grasbrunn

Name of representative
Christopher Steppe

phone: +49 8039 90254-0
fax: +49 8039 90254-299
e-Mail: info@kwo-ptfe.de

 

Data Protection Officer

The contact details of our data protection officer are as follows

Data protection officer
Am Eschengrund 3
83135  Schechen
info@kwo-ptfe.de

General information and terminology

Personal Data

Personal data includes any information relating to an identified or identifiable natural person (hereinafter referred to as "data subject"); an identifiable natural person is one who can be identified, directly or indirectly. An assignment to an identifier such as a name or pseudonym, to an identifier number, to location data or to an online identifier is sufficient. However, special characteristics such as the expression of physical, physiological, genetic, psychological, economic, cultural or social identity are also sufficient for identification. This includes, for example, name, address, telephone number, e-mail address, but also the IP address, even if this is only indirectly or temporarily assigned to a specific person.

Inventory data are personal data which are necessary for the establishment and content or change of a legal relationship such as name, address or telephone number. Usage data and traffic data are personal data about the use of Internet pages such as IP address and information about the browser used. Content data is data that relates to the content of a communication.
 

Browser

A browser is a computer program used to display web pages. Well-known browsers are Google Chrome, Firefox and Safari.

 

Web fonts

Web fonts are fonts for the uniform representation of the website. A web font can be loaded into the browser and then used like a system font (font of your operating system). The web font is either already present in your browser; if not, it can usually be downloaded from the website or another server. If a browser does not support web fonts, a standard font is used; this can lead to an unwanted appearance.

 

Hyperlinks and external references

Hyperlinks (colloquial link) represent a cross-reference in a document. They are comparable to references in a printed document; however, unlike in a book, you can access these cross-references by clicking on the reference. Typical references are in a web document like this. The references can link several documents and also web pages of different providers with each other. In their entirety, these references reflect the World Wide Web (WWW). Internal hyperlinks link several text passages or documents under one domain. External hyperlinks lead to servers of other providers.

You can display the target of the hyperlink in your browser. Please inform yourself about this in your browser's instructions; in many web browsers it is sufficient to move the mouse over the hyperlink without clicking to display the specific link. Please note: Other web servers may have different privacy policies.

 

Embedding external content

Sometimes it can be useful to embed content from other websites into your own website.

Technically, this works, for example, with inline frames (IFrames for short). This displays other web content as independent documents in a defined area of the browser, the browser address line displays only the address of the surrounding page. Our website is displayed as a technical frame, but the content then comes from another server. This also works in a similar way with applications that can be integrated into our website via external servers. This is useful, for example, when viewing videos hosted by other providers such as YouTube or Vimeo.

CDN also works in a similar way. A Content Delivery Network (CDN), also known as a Content Distribution Network, is a network of regionally distributed servers connected via the Internet. You can transfer files and content faster due to the multiple distribution. The file  in this case is  not stored on our server, but can be retrieved (faster) via this network. Of course, this presupposes that the third-party providers of this content perceive the user data. Otherwise you will not be able to send the content to your browser. The usage data - including your IP address - are thus required for the presentation of the contents. Technically, this transfers usage data to the third party provider.

You can find out which data they use for further purposes from the data protection declaration of the respective provider.

 

Cookies (data files)

A cookie is a small data file containing a string of characters that is generated and stored on your terminal device (e.g. desktop PC, smartphone or tablet) when you visit our website. A cookie can only contain the information that we send to your client; it cannot read further data on your device. These cookies can be used to recognise your terminal device - but not necessarily its user.

There are different types of cookies:

Transient cookies are automatically deleted when the browser is closed. Session cookies are an example of a traced cookie. Session cookies contain a randomly generated, unique identification number. This enables our server to recognize whether the user has already visited pages on the website during the respective "session". They are usually deleted automatically after the session has ended. Alternatively, the session ID can be stored on the server or transmitted in the Uniform Resource Identifier (URI).

Persistent cookies or temporary cookies are stored on the client for a specific period of time. A previous visit to the website is recognized by the temporary cookie and the previous settings are retained.

The use of cookies can be limited in the security settings of your browser and usually prevented completely. You can configure your browser in such a way that you reject cookies, accept them or decide whether to accept them in individual cases. The cookie settings vary depending on the browser used. Cookies can be deleted at any time. Please refer to the user manual of your browser or contact the manufacturer of the browser.

 

2. Data processing operations

Provision of the website

Already with the first call of our web pages your web browser transfers usage data to our web server. This is the only way our web server can display the website to your web browser. This usage data is available in the HTTP/S header,  it will automatically be sent by you and will be used during the duration of the page call. They include, inter alia, :

• Date, time and duration of the retrieval
• The name of the Web page or file that you have accessed.
• Message about the successful retrieval (HTTP status code)
• Referrer URL (previously visited page)
• Browser type including version, language and operating system
• Monitor resolution
• IP address and the requesting provider
• Time zone difference to Greenwich Mean Time (GMT)
• Transferred data volume

Further information about the HTTP header can be found in Wikipedia as well as in the specification RFC 2616, see chapter 14.

The legal basis is Art. 6 para. 1 sentence 1 lit. b and f GDPR.

Without usage data it is not possible to display the website on your browser. The aforementioned data therefore serve the following purpose:

• Technical connection setup of the website
• Evaluation of system safety and stability
• Administrative purposes

Our websites are stored by a hosting service provider. It will provide infrastructure and platform services, computing capacity, storage space and database services, additional security services including technical maintenance. This is how we ensure the accessibility of our website.

Our server log files are stored pseudonymised and deleted immediately after seven days.

 

Storage of Cookies

It may happen that we store cookies.

The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR. Some cookies are only stored with your explicit consent; in these cases the legal basis is Art. 6 para. 1 Sentence 1 lit. a) GDPR.

Cookies serve the purpose of individually designing the use of the website. This means that settings that have already been made do not have to be re-entered during a new visit. The data processed by cookies are necessary for the individual design of the website and for its optimisation. Overriding interests or fundamental rights and freedoms of third parties are not apparent. Cookies can also be used, however, to statistically record the use of the website and to evaluate it for the purpose of optimisation. The number of visitors to the website and the frequency with which the individual pages are called up then provide information as to whether there might be interest in further content of a similar nature. We will inform you separately of any processing for this purpose.

 

Contact us

You may contact us by telephone, fax, e-mail or other means of communication - if we offer a website/contact form, also via this one. Your information is voluntary. Which data we collect with the contact form, you can  find out fromthe respective contact form. With your voluntary information, we additionally process the time of the request as well as, for technical reasons, your usage data sent in connection with the respective means of communication, such as telephone number or e-mail address. Please note that we cannot respond to your inquiry without providing contact details.

The legal basis is Art. 6 para. 1 S. 1 lit. b GDPR if you contact us within the framework of a contractual relationship or to initiate a contract. In all other cases we process your data on the basis of our legitimate interest in accordance with Art. 6 para. 1 S. 1 lit. f GDPR.

The purpose of data processing is the individual communication with you, for the initiation or execution of contracts or the other processing of your request. Our legitimate interest lies in processing your request, depending on the content and purpose of the message you send us. The personal data collected by us in connection with your establishment of contact will be deleted after your request for deletion, after revocation of consent or after completion of your request, unless there are any legal obligations or rights to retain data. In the latter case, we restrict the processing. The storage period shall end at the latest after the expiry of statutory limitation periods; this shall be calculated in accordance with § 199 BGB (German Civil Code).

 

Note on communication by e-mail

Despite comprehensive technical and organisational measures to protect your data, communication by e-mail does have security gaps. If you wish to transmit confidential information, we advise you to use encrypted transmission.

We use an external provider for our e-mail services. It will provide infrastructure and platform services, computing capacity, storage space and database services, additional security services including technical maintenance. This is how we ensure our e-mail communication.

 

Data transfer to third parties

We only transfer your personal data to third parties under the following conditions:

• You have given your consent to this, Art. 6 para. 1 sentence 1 lit. a GDPR,
• the transmission is necessary for the execution of a contract or the initiation of a contract, Art. 6 para. 1 sentence 1 lit. b GDPR,
• there is a legal obligation to which we are subject, Art. 6 para. 1 sentence 1 lit. c GDPR,
• on the protection of the vital interests of a natural person, Art. 6 para. 1 sentence 1 lit. d GDPR,
• the processing is necessary for the performance of a task which is in the public interest or which is carried out in the exercise of official authority, insofar as such authority has been transferred to us, Art. 6 para. 1 sentence 1 lit. e GDPR,
• processing is necessary to safeguard our legitimate interests or those of a third party, unless the interests or fundamental rights and freedoms of the person concerned, which require the protection of personal data, outweigh Art. 6 para. 1 sentence 1 lit. f GDPR. This includes, for example, the assertion, exercise or defence of legal claims.

 

Google Maps

As far as we use a map service, this takes place as an extended web offer for the representation of maps and routes as well as for route planning. We merely embed this application in our own system. For technical reasons, usage data, including your IP address, is transmitted to a server of the provider for the use of the map service.

The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR.

The use of Google Maps pursues the purpose and our legitimate interest of providing you with a simple map display to visualize map-dependent information or describe routes. Beyond the provision of the website, we do not store any usage data for this application. The provider of the map service described here is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, www.google.com. Third countries - i.e. countries outside the European Union - may not have data protection rights comparable to EU data protection rules. However, Google is subject to the EU-U.S. Privacy Shield as well as the Swiss-U.S. Privacy Shield, which is intended to guarantee comparable protection. For more information about how Google treats user data, please see Google's privacy policy: https://www.google.de/intl/de/policies/privacy

 

Google Fonts

As far as our web pages use web fonts, your browser checks whether these are available on your computer. We cannot and may not offer the fonts ourselves in every case. If we have provided a hyperlink for retrieval, your browser may connect to a server of the provider if the font for retrieval is missing. Checking and downloading are already done with the first call of the website. For technical reasons, usage data, including your IP address, is transmitted to the server of the web font provider for retrieval.

The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR.

The web fonts serve the better and uniform representation of our web page and thus also our entitled interest in a clean representation of our web appearance. Beyond the provision of the website, we do not store any usage data for this retrieval option. The fonts are offered by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, www.google.com. Third countries - i.e. countries outside the European Union - may not have data protection rights comparable to EU data protection rules. However, Google is subject to the EU-U.S. Privacy Shield as well as the Swiss-U.S. Privacy Shield, which is intended to guarantee comparable protection. Further information can be found in Google's privacy policy: https://www.google.com/policies/privacy/.

 

jQuery

We use external program code of the JavaScript framework "jQuery" - a free JavaScript library that provides extended functionality on our website. For this purpose the scripts used (program routines) are partially downloaded from servers of third parties. This happens already at the first call of the web page, if the scripts are not already in the memory of your browser. The retrieval takes place from servers of the jQuery Foundation.

The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR.

The use of jQuery pursues the purpose and our legitimate interest to design the website and load necessary program routines faster from the network. Beyond the provision of the website, we do not store any usage data for this application. The provider of the service described here is the jQuery Foundation. Third countries - i.e. countries outside the European Union - may not have data protection rights comparable to EU data protection rules.

 

Analysis of website visitors (tracking)

In order to analyse website visitors, we collect data which is processed in tables and graphics for better presentation.

The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR.

Data processing for the analysis of website visitors (tracking) is carried out in the interest of statistical recording of website visits and a needs-based design as well as continuous optimisation of the website. You can object to this measure at any time (opt out). In individual cases we obtain a separate consent for data processing. In this case, your consent will be requested beforehand (opt in). The legal basis is then Art. 6 (1) sentence 1 lit. a GDPR.

 

Tracking with Google Analytics

The analysis service Google Analytics works by means of pseudonymised user profiles and cookies. The latter contain information about the use of this website including

• Browser type/version
• Operating system
• Referrer URL (address of previously visited website)
• Hostname of the accessing computer (IP address)
• Time of the server request

The IP address is not merged with other data. Rather, it is anonymized so that an assignment is no longer possible (IP masking). This removes the last octet of the user's IP address before it is used and stored. This leads to lower precision in the creation of geographical reports and to anonymisation of website users. The linked data are automatically deleted after 14 months at the latest. Data whose retention period has been reached is automatically deleted once a month.

 

You can prevent the evaluation as follows

The storage of cookies can be prevented by the settings of your browser. The collection of the data generated by the cookie and related to the use of the website as well as the processing of this data can be prevented by a plugin that can be accessed under the following link (https://tools.google.com/dlpage/gaoptout?hl=en). The recording can also be prevented by clicking on the following link. An opt-out cookie is set to prevent the future collection of data when you visit the site on that device as long as the cookie is present on the device; if you want to delete the cookie and continue to prevent tracking, you must set it again: Deactivate Google Analytics.

We observe the recommendations of the data protection authorities regarding the use of this web analysis service. To this end, we have also concluded an order processing agreement with the supplier. Google Analytics is a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway Mountain View CA 94043, USA ("Google"). The data is transferred to a Google server in the USA. Third countries - i.e. countries outside the European Union - may not have data protection rights comparable to EU data protection rules. However, Google is subject to the EU-U.S. Privacy Shield and the Swiss-U.S. Privacy Shield. This is intended to ensure comparable protection. For more information about Google's terms of use and privacy policy, please visit: https://www.google.com/analytics/terms/de.html or visit: https://www.google.com/analytics/learn/privacy.html.

 

3. Rights as data subject

As a data subject, you have the following rights vis-à-vis us with regard to the personal data concerning you:

• Right to individual information on the personal data processed by us pursuant to Art. 15 GDPR
• Right to rectification or completion in accordance with Art. 16 GDPR
• Right to cancellation according to Art. 17 GDPR
• Right to limitation of processing pursuant to Art. 18 GDPR
• Right to object to the processing
• Right to data transferability pursuant to Art. 20 GDPR
• Right to revoke consent pursuant to Art. 7 para. 3 GDPR

In the event that you have given your consent to data processing, you can revoke this at any time.

If the data is processed on the basis of legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR, you may object to the processing of personal data. Please inform us of the reasons arising from your particular situation or the objection is directed against advertising and data analysis, Art. 21 GDPR. In the latter case, the parties concerned have a general right of objection, which must be implemented without specifying a particular situation.

You can also complain to a data protection supervisory authority about the processing of your personal data. The competent authority is the supervisory authority of your usual place of residence or workplace or of our company headquarters. You can find them here: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

 

4. Miscellaneous provisions

The purpose of this declaration is to fulfil the legal information obligations of Articles 12 et seq. of the European Data Protection Basic Regulation (GDPR), which came into force on May 25^th, 2018.

For questions of interpretation, the German language version shall prevail.