Data Protection Declaration
1. Information on the Collection of Personal and Contact Data of the Data Controller
1.1. We are pleased that you are visiting our website and thank you for your interest. In the following you will find information on how your personal data is being handled while you are visiting our website. Personal data is data which can be used to identify you personally.
1.2. Responsible for the handling of data on this website as defined in the General Data Protection Regulation (GDPR)is the PROFILAN Kunststoffwerk GmbH & Co KG, Zur Dinkel 27-31, D-48739 Legden, Germany; Phone: +49 (0) 2566 93 33-0, Fax: +49 (0) 2566 93 33-33; E-mail: info@profilan.de. The person responsible for the handling of personal data is the natural or legal entity, that decides either individually or jointly with others on the purpose and means of handling personal data.
1.3. The data controller has nominated a data protection officer who can be reached at: PROFILAN Kunststoffwerk GmbH & Co. KG, Zur Dinkel 27-31, D-48739 Legden, datenschutzbeauftragter@profilan.de
1.4. For safety reasons and in order to protect against the transfer of personal data and other confidential content (e.g. orders or inquiries to the data controller) the website uses SSL or TLS encryption. An encrypted connection can be recognized by the https:// address and a lock symbol in the browser line.
2. Data Collection while Visiting our Website
When simply visiting our website for information purposes, i.e. if you do not register yourself or transfer information in another way we only collect such data that is being transferred to our server by your browser (so-called server-logfiles). When you visit website, we are collecting the following data which is technically required in order to show you our website:
• Our visited website
• Date and time of visit
• Quantity of data sent in byte
• Source/reference from which you have reached our website
• Browser used
• Operating system used
• IP Address used (anonymized where applicable)
The processing is done in accordance with art. 6 (1) lit. f GDPR on the basis of our legitimate interest to improve the stability and functionality of our website. The data is not given to any third party or used in any other way. However, we reserve the right to check our server logfiles later, if there are indications of an unlawful use.
3. Cookies
In order to increase the attractivity of our website and to enable the use of certain functions, we are using so-called cookies in various sections. Cookies are small text files that are stored on your terminal device. Some of the cookies we are using are deleted after termination of the browser session, i.e. after closing of your browser (so-called session-cookies). Other cookies remain on your terminal device and enable us or our partner companies (third party cookies) to recognise your browser on your next visit (persistent cookies). In case cookies are set they will collect and process certain user data such as browser and location data and IP address information. Persistent cookies will automatically be deleted after a pre-set period which may vary depending on the cookie.
In case single cookies which have been implemented by us also process personal data, processing is done in accordance with Art. 6 (1)lit. b GDPR either for the execution of the contract or in accordance with Art. 6 (1) lit. f in order to safeguard our rightful interest in the best possible functionality of the website and a customer-friendly and effective form of the visit of our website.
We are possibly working with advertising partners, who assist us in making our internet offering more interesting for you. For this purpose, in this case also cookies from partner companies will be stored on your hard drive when you are visiting our website (third party cookies). In case we are working with afore-mentioned advertising partners you will be informed individually and separately on the use of such cookies and the amount of data collected in the following sections.
Please note that you can adjust your browser in a way that you are informed about the use of cookies and that you can decide on their acceptance individually or even fully reject the acceptance of cookies in certain cases or in general. Each browser is different in the way it handles cookie settings. This is described in the help menu of every browser and here it is explained how cookie settings can be changed. For the individual browsers you can find these via the following links:
Internet Explorer:
http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Firefox:
https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome:
http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Safari:
https://support.apple.com/kb/ph21411?locale=de_DE
Opera:
http://help.opera.com/Windows/10.20/de/cookies.html
Please note that non-acceptance of cookies may impair the functionality of our website.
4. Contacting Us
In case you are contacting us (e.g. via contact form or by e-mail) personal data is collected. The data that is collected when the contact form is used can be seen from the contact form itself. This data is exclusively used and stored for the purpose of replying to your request and the related technical administration. Legal basis for the processing of this data is our legitimate interest in replying to your request in accordance with Art. 6 (1) lit. f GDPR. If the contact is made for the purpose of concluding a contract, the legal basis for the processing of data is also Art. 6 (1) lit. b GDPR. Your data will be deleted after the handling of your request has been completed. This is the case when the situation reveals that the respective request has been cleared and no further legal obligation to retain the data exists.
5. Use of Social Media: Videos
Use of YouTube-Videos This website uses the YouTube-Embedding function to display and playback videos of the provider “YouTube” which is part of Google Ireland Limited, Gordon House, 4 Barrow St., Dublin, D04 E5W5, Ireland (“Google”). In this case the data protection modus is used which according to the provider starts the recording of user data only when the playback of a video is started. When the playback of embedded YouTube-videos is started the provider uses “YouTube” cookies in order to collect information on the user behaviour. According to “YouTube” among others these serve the purpose of establishing video statistics, improving user-friendliness and prevent improper behaviours. If you are logged into Google your data is directly assigned to your account if you click on a video. If you do not wish that this data is assigned to your profile when watching YouTube videos you should log out of Google before activating the button. Google stores your data (even for users that are not logged in) as user profiles and analyses these. Such an analysis is performed on the basis of art. 6 (1) lit. f GDPR based on Google’s legitimate interest in the display of personalized adverts, market research and/or demand-oriented design of its website. You are entitled to object against the creation of such user profiles, whereas in order to execute such rights you have to contact YouTube. While using YouTube personal data may also be transferred to the server of Google LLC in the U.S. Regardless of the playback of an embedded video, with every visit of this website a connection to the Google network is made, which – without any influence on our part – may lead to further data processing. In the event of personal data being transmitted to Google LLC in the USA, Google LLC has been certified acc. to the US-European Data Protection Convention “Privacy Shield” which warrants data protection on European levels. The valid certificate can be seen via the following link:
https://www.privacyshield.gov/list
Further information on data protection with “YouTube” can be found in the data protection declaration of the provider:
https://www.google.de/intl/de/policies/privacy
To the extent required by law we have obtained your consent acc. to art. 6 (1) lit. a GDPR with regard to the processing of your data as described above. You can rescind your consent at any time with future effect. In order to exercise your right to revoke your consent please refer to the above described way of objecting.
6. Web Analysis Service
Google (Universal) Analytics
This website uses Google (Universal ) Analytics, a web analysis service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google (Universal) Analytics uses so-called “cookies” which are text files that are stored on your computer and which facilitate the analysis of your use of the website. The information that is produced by this cookie with regard to your use of this website (incl. the shortened IP address) are normally transmitted to and stored on a Google server. In this case it may also happen that data is transmitted to the servers of Google LLC in the USA.
This website uses Google (Universal) Analytics exclusively with the extension “_anonymizelp()”, which guarantees an anonymization by abbreviating the IP address and consequently preventing that the address can be directly linked to an individual. By the extension the IP-address is being abbreviated by Google within the member states of the European Union, or within other contract member states of the convention on the European economic area. Only in exceptional cases the full IP address is transmitted to a server of Google LLC in the USA and the abbreviated. In such exceptional cases the processing is done acc. to art. 6 (1) lit. f GDPR on the basis of our legitimate interest in the statistical analysis of the user behaviour for the optimization and marketing purposes.
On our account Google will use this information to analyse your use of the website, in order to establish reports on the website activity and in order to perform further services for us related to the website and internet use. The IP-address that has been transmitted from your browser to Google (Universal) Analytics will not be connected to other data from Google.
You can prevent the storage of cookies by the respective setting of your browser software. However, we point out that in this case you may not be able to use all functions of our website. Furthermore, you can prevent the transmission of data that is produced by this cookie and relates to the use of the website (incl. your IP-address) to Google and the processing of such data by Google by downloading and installing the browser-plugin that is available under the following link: tools.google.com/dlpage/gaoptout
Alternatively or within a browser on mobile devices please click on the following link in order to set an Opt-Out-cookie which prevents that caption by Google Analytics within this website in the future (this Opt-Out-cookie only works in this browser and only for this domain. If you delete your cookies in this browser you have to click this link again): <aonclick=”alert(‘Google Analytics was deactivated’); “href=”javascropt:gaOptout() “>Google Analytics deactivate Further details on Google (Universal) Analytics can be found under: Policies.google.com/privacy
In the event of personal data being transmitted to Google LLC in the USA, Google LLC has been certified acc. to the US-European Data Protection Convention “Privacy Shield” which warrants data protection on European levels. The valid certificate can be seen via the following link: https://www.privacyshield.gov/list
To the extent required by law we have obtained your consent acc. to art. 6 (1) lit. a GDPR with regard to the processing of your data as described above. You can rescind your consent at any time with future effect. In order to exercise your right to revoke of your consent please refer to the above described way of objecting.
7. Tools and Others
7.1 - Google Web Fonts
For a unified view of fonts this site uses so-called web fonts that are being made available by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). When visiting a site your browser loads the required web fonts in your browser cache in order to display texts and fonts correctly. For this purpose the browser used by you needs to connect to the server of Google. In this case it may also happen that personal data is transmitted to the servers of Google LLC This way Google gets knowledge that our website was visited via your IP address. The use of Google web fonts is in the interest of a uniform and attractive display of our online offers. This is a legitimate interest acc. to art. 6 (1) lit. f GDPR. If your browser does not support web fonts a standard font of our computer will be used.
In the event of personal data being transmitted to Google LLC in the USA, Google LLC has been certified acc. to the US-European Data Protection Convention “Privacy Shield” which warrants data protection on European levels. The valid certificate can be seen via the following link: https://www.privacyshield.gov/list
Further details on Google web fonts can be found under developers.google.com/fonts/faq and in Google’s data protection declaration: https://www.google.com/policies/privacy/
7.2 Application for Job Postings by E-mail
In a separate category of our website we are offering current vacancies for which interested persons can apply via e-mail addressed to the stated contact address.
In order to get included in the application procedure together with the application per e-mail the applicant has to submit all personal data that is required for a sound analysis and selection. The data required includes general information on the person (name, address, phone number and/or electronic contact data) plus evidence on his/her qualification for the job offered. If appropriate, health data may also be required. These may have to be considered in the interest of social protection of the applicant.
The individual requirements for an application to be considered and in which form certain elements of an application have to be transmitted per mail can be taken from the individual job posting.
After receipt of the application in the inbox of the quoted e-mail contact address the applicant’s data is stored by us and will be only be analysed for the purpose of processing of application. For any queries either the e-mail address or a phone number that has been made available by the applicant will be used.
Legal basis for the processing including making contact in case of queries is art. 6 (1) lit. b GDPR in connection with § 26 (1) BDSG according to which the application procedure is considered an initiation of an employment contract. In case special categories of personal data acc. to art. 9 (1) GDPR (e.g. health data including information on severe disability) are requested from the applicant, this information is processed acc. to art. 9 (2) lit. b. GDPR, to ensure that we execute the rights resulting from labour law and social security legislation as well as social protection and to enable us to attend to the duties resulting thereof.
Cumulatively or alternatively the processing of special data categories can also be based on art. 9 (1) lit. h GDPR if this is done for the purpose of health care, occupational health care, in order to evaluate the applicant’s fitness for the job, for medical diagnostic purposes, for the care or treatment in the health or social sector or for the administration of systems and services in the health or social sector.
In case the applicant is not selected in the course of the above described analysis or if an applicant withdraws the application, all data that he/she has transmitted via e-mail as well as the entire electronic correspondence incl. the initial application e-mail will be deleted after 6 months at the latest. This period is based on our legitimate interest to reply to any follow-up questions relating to the application and – if necessary – to be able to meet the necessary obligations of proof with regard to the equal treatment of candidates. In case of a successful application the data transmitted will be processed further based on art. 6 (1) lit. b GDPR in connection with § 26 (1) BDSG for the purpose of the starting the employment.
7.3 - Google Maps
On our website with use Google Maps (API) of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google maps is a web service for the presentation of interactive geographical maps, in order to visually display geographical information. Through the use of this service our location is displayed and it will be easier to get to our plant. Already, when visiting the sub-site where Google Maps is embedded, information on your use of our website (e.g. your IP address) is transmitted to Google servers and stored. At this point of time data may also be transmitted to the servers of Google LLC in the USA. This happens no matter whether Google provides a user account where you are logged in or if a user account exists. If you are logged in with Google your data will be directly assigned to your account. If you do not wish that data is assigned to your user profile you have to log off before activating the button. Google stores your data (even if you are not logged in) as usage profiles and analyses these. The collection, storing and analysis are done acc. to art. 6 (a) lit. f GDPR on the basis of Google’s legitimate interest in displaying personalised adverts, market research and/or needs-oriented design of Google websites. You have the right to object against the creation of such user profiles for which you have to contact Google. In the event of personal data being transmitted to Google LLC in the USA, Google LLC has been certified acc. to the US-European Data Protection Convention “Privacy Shield” which warrants data protection on European levels. The valid certificate can be seen via the following link: privacyshield.gov/list If you disagree to the transmission of your data to Google while using Google Maps you have the opportunity to completely deactivate the web service of Google Maps by switching off the JavaScript application in your browser. After that Google Maps and, hence, the function of displaying maps on this website can no longer be used. Google’s terms of use can be found atwww.google.de/intl/de/policies/terms/regional.html , the additional terms of use for Google Maps can be found at www.google.de/intl/de_US/help/terms_maps.html . Detailed information on data protection in connection with the use of Google Maps can be found on Google’s website (“Google Privacy Policy”): www.google.de/intl/de/policies/privacy/ . To the extent required by law we have obtained your consent acc. to art. 6 (1) lit. a GDPR with regard to the processing of your data as described above. You can rescind your consent at any time with future effect. In order to exercise your right to revoke of your consent please refer to the above described way of objecting.
8. Data Subject Rights
8.1 The applicable data protection law grants you extensive data subject rights (right to information, right to intervene) towards the data controller with regard to the processing of your personal data. These are:
- Right to information acc. to art 15 GDPR: You have the right to information on the personal data processed by us, the purpose of processing, the categories of the personal data processed, the recipients or categories of recipients to which the data has been or will be made available, the planned storage period or the criteria for fixing the storage period, the existence of the right to correction, erasure, limiting of processing, objection against processing, complaint with a regulatory body, the origin of the data, if these were not collected by us, the existence of automated decision making including profiling and possibly conclusive information on the logic involved and the significance for you and the intended impacts on such processing, as well as your right to information on the guarantees acc. to art. 46 GDPR in Data is transmitted to third countries;
- Right to correction acc. to art. 16 GDPR: You have the right to immediate correction of incorrect personal data and/or completion of your incomplete personal stored by us;
- Right to erasure acc. to art. 17 GDPR: You have the right to demand the erasure of your personal data if the preconditions acc. to art. 17 (1) GDPR are given. The right, however, does not apply, if the processing is required to exercise the right to freedom of expression and information, to comply with legal requirements, for reasons of public interest or for the enforcement, exercise or defence of legal claims.
- Right to restriction of processing acc. to art. 18 GDPR: You have the right to demand the restricted processing of your personal data as long as the disputed correctness of your data is verified, if you reject the erasure of your data due to unlawful data processing and instead request a restriction in the processing of your data, if you require your data for the enforcement, exercise or defence of legal claims, when we no longer require your data after they have served their purpose or if you have entered an objection due to your special situation until it has been established that our legitimate reasons prevail.
- Right to information acc. to art. 19 GDPR: If you have asserted the right to correction, erasure or limitation of processing against the data controller, the data controller is obliged to inform all parties to which the respective personal data has been made available about the correction, erasure or limitation of processing, unless this is either impossible or the efforts to do so are disproportionate.
- Right of data portability acc. to art 20 GDPR: You are entitled to receiving the personal data that you have made available to us in a structured, common and machine-readable form or to request the transmission to another data controller provided this is technically feasible.
- Right to withdraw a given consent acc. to art. 7 (3) GDPR: You are entitled to withdraw your consent to the processing of data at any time with effect for the future. In case of withdrawal of your consent the respective data will be erased immediately, unless further processing can be based on the legal basis of processing without consent. The withdrawal of consent does not apply to the legality of data processed prior to the withdrawal of consent. - Right of complaint acc. to art 77 GDPR: If you are of the opinion that the processing of your personal data does not comply with the GDPR you have - irrespective of other administrative or judicial remedy - the right of complaint to a regulatory body, in particular in the member state of our residence, your workplace or the place of the suspected violation.
8.2 RIGHT OF OJBJECTION
IF IN THE SCOPE OF A BALANCING OF INTERESTS WE PROCESS YOUR PERSONAL DATA DUE TO OUR MAINLY LEGITIMATE INTEREST YOU CAN AT ANY TIME FOR REASONS RESULTING FROM YOUR SPECIAL SITUATION OBJECT AGAINST THE PROCESSING WITH EFFECT FOR THE FUTURE. IF YOU MAKE USE OF YOUR RIGHT OF OBJECTION WE TERMINATE THE PROCESSING OF THE RESPECTIVE DATA. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESS THE DATA IF WE CAN PRESENT OVERRIDING REASONS FOR THE PROCESSING, WHICH DOMINATE YOUR INTERESTS, CONSTITUTIONAL RIGHTS AND FUNDAMENTAL FREEDOM, OR IF THE PROCESSING SERVES THE PURPOSE OF THE ASSERTION, EXERCISE OR DEFENSE OF LEGAL CLAIMS. IF YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSE OF DIRECT ADVERTISING YOU HAVE THE RIGHT TO OJBECT AT ANY TIME AGAINST THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH ADVERTISING PURPOSES. YOU CAN EXERCISE THE RIGHT TO OBJECTION AS DESCRIBED ABOVE. IF YOU MAKE USE OF YOUR RIGHT OF OBJECTION WE TERMINATE THE PROCESSING OF THE RESPECTIVE DATA FOR DIRECT ADVERTISING PURPOSES.
9. Duration of Storage of Personal Data
The duration for which personal data is retained is measured by the respective legal basis, by the purpose for which the data is processed, and if applicable by the respective legal retention period (e.g. commercial and fiscal retention periods). If personal data is processed based on an explicit approval acc. to art. 6 (1) lit. a GDPR this data will be stored until the person withdraws his/her consent.
In case legal retention periods apply for data which is processed in regards to transactional or similar obligations acc. to art. 6 (1) lit. b GDPR this data is routinely erased unless it is required to fulfil or initiate a contract or we still have a legitimate interest in keeping the data.
If data is processed based on art. 6 (1) lit. f GDPR this data is stored until the data subject uses his/her right of objection acc. to art 21 (a) GDPR unless we can proof that we have overriding reasons and reasons worth protecting for the processing which dominate the interests, rights and freedom of the data subject, or the processing serves the purpose of the assertion, exercise or defence of legal claims.
If personal data is processed for the purpose of direct advertising on the basis of art. 6 (1) lit. f GDPR this data will be stored until the data subject exercises his/her right of objection acc. to art 21 (2) DSGVO.
Unless otherwise described by the various information on specific processing of data within this declaration, the stored personal data will be erased when it is no longer required for the purpose for which it has been collected or processed.
