Privacy Policy

We are pleased you are visiting our website www.cds-polymere.de and thank you for your interest in our company.

Protecting your personal data, e.g. date of birth, name, telephone number, address, etc. is important to us.

The purpose of a Privacy Policy is to inform you about the processing of your personal data which we collect when you visit our website. Our data processing practices conform with the statutory regulations of the EU General Data Protection Regulation (EU GDPR) and the German Federal Data Protection Act (BDSG). The following Privacy Policy fulfils the information obligations arising from the GDPR. These can be found in e.g. Art. 13 and Art. 14 ff. GDPR.

Responsible Party

The responsible party as defined by Art. 4 number 7 GDPR is the party which solely or together with others determines the purposes and means of processing the personal data.

With regard to our website, the responsible party is:

cds Polymere GmbH & Co. KG
Gau-Bickelheimer Strasse 72
55576 Sprendlingen
Germany
Email: info@cds-polymere.de
Tel.: 06701 9350-0
Fax: 06701 9350-50

Contact details of the Data Protection Officer

We have appointed a data protection officer in accordance with Art. 37 GDPR. Our data protection officer can be contacted at:

Matthias Valentiner
Abendrothsweg 69
20251 Hamburg
Germany
Email: mvalentiner@beub.de
Tel.: 040 300 315 200
Fax: 040 300 315 210
Website: http://www.beub.de/

Provision of the website and creation of log files

Every time our website is visited, our system collects automated data and information regarding the devices that access it (e.g. computer, mobile phone, tablet, etc.).

What personal data is collected and what is the scope of the processing?

(1) Information regarding the browser type and the version used;
(2) the operating system of the accessing device;
(3) host name of the accessing computer;
(4) the IP address of the accessing device;
(5) date and time of access;
(6) websites and resources (images, files, further site content) that are accessed on our website;
(7) websites from which the user’s system arrives at our website (referrer tracking);
(8) a report on whether the access succeeded;
(9) quantity of data transferred

This data is stored in the log files of our system. This data is not stored with the personal data of the specific user, so website visitors cannot be individually identified.

Legal basis for the processing of personal data

Art. 6 para. 1 (f) GDPR (legitimate interest). Our legitimate interest lies in ensuring the achievement of the following purposes set out below.

Purpose of the data processing

The temporary (automated) storage of the data is required for the duration of the website visit, to enable provision of the website. The storage and processing of personal data is also carried out to maintain the compatibility of our website for all visitors, and to combat abuse and ensure faults are rectified. To this end, it is necessary to log the technical data of the accessing computer, in order to deal as quickly as possible with display errors, attacks on our IT system and/or functionality errors on the website. The data also helps us to optimise the website and safeguard the security of our IT systems.

Duration of storage

The technical data mentioned above is deleted as soon as it is no longer required for ensuring the compatibility of the website for all users, at the latest 3 months after accessing the website.

Objection to and deletion of data

In accordance with Art. 21 GDPR, you can lodge an objection to the processing of the data, and request its deletion in accordance with Art. 17 GDPR. You can find information about your rights and how to exercise them in the lower section of this Privacy Policy.

Particular functions of the website

Our website offers various functions and when these are used, personal data is collected, processed and stored by us. In the following sections we explain what happens with this data:

Contact form(s)

• What personal data is collected and what is the scope of the processing?

  The personal data provided by you on the contact form, which you have entered on the input screen.

• Legal basis for the processing of personal data

  Art. 6 para. 1 (a) GDPR (Consent through clear, confirmatory action or behaviour)

• Purpose of the data processing

  The data which is input via our contact form(s) will only be used for the processing of the specific request entered on the contact form. Please note that in order to deal with the contact form request, we can under certain circumstances also email you at the given email address. The purpose of this is so that you can receive a confirmation from us, to confirm that your request has been forwarded to us correctly. Sending this confirmation email is however not mandatory for us and is only for your information.

• Duration of storage

  After your request has been processed, the data collected will be immediately deleted if there is no retention period stipulated by law.

• Revocation and deletion of data

  The option to lodge an objection or have data deleted are in accordance with the general provisions set out in this Privacy Policy for the right to lodge an objection and the right to deletion.

• Requirement to provide personal data

  Use of the contact form is undertaken voluntarily and is not mandatory contractually or legally. You are not obliged to contact us using the contact form, you can also contact us by using the other contact options given on the website. If you wish to use the contact form, you will need to fill out the required fields in the form. If you do not fill out the form with the required information, you will either not be able to send the form, or we will not be able to process your request.

Log-in area / registration

• Scope of processing of personal data and personal data collected

  The registration and log-in data entered by you on our site or provided to you.

• Legal basis for the processing of personal data

  Art. 6 para. 1 (b) GDPR (carrying out of (pre-)contractual measures)

• Purpose of the data processing

  On our website you have the option of using a separate login area. In order for us to check your right to use the secure area or the secure documents, you must enter your login information (email/username and password) in the corresponding form. If necessary, we can also on request email you your login data or a link to reset your password.

• Duration of storage

  The data collected is only stored for as long as you have a user account with us.

• Objection to and deletion of data

  In accordance with Art. 21 GDPR, you can lodge an objection to the processing of the data, and request its deletion in accordance with Art. 17 GDPR. You can find information about your rights and how to exercise them in the lower section of this Privacy Policy.

• Requirement to provide personal data

  Use of the login area on our website is contractually required in order to use the secure area. Use of secure content via the login area is only possible by entering your personal data. If you wish to use the login area, you will need to fill out the required fields in the form (username and password). Entering the data implies possession of a user account. Logging on is not possible if the data entered is incorrect. If you do not enter the data or it is incorrect, you will not be able to use the secure area. However, the rest of the website can be accessed without a login.

Statistical analysis of visits to the website - web tracker

When our website or individual files are accessed, we collect, process and store the following data: IP address accessing the file, filename, date and time of access, quantity of data transferred and a report on whether the access was successful (‘weblog’). This access data is used solely in a non-personalised form for ongoing improvements to our website and for statistical purposes. We also use the following web trackers to analyse visits to the site:

• Adobe Typekit

  We use Adobe Typekit from Adobe Systems Software Ireland Limited, 4-6 Riverwalk Citywest Business Campus, 24 Dublin, Ireland, Email: recepmun@adobe.com, Website: http://www.adobe.com/ on our website. The processing also takes place in a third country for which there is no suitability agreement with the EC. Therefore the usual level of security for the GDPR in the transmission of data cannot be guaranteed, because it cannot be ensured that, for example, authorities in the third country will not be able to access the data.

  The legal basis for the transmission of personal data is your consent in accordance with Art. 6 para. 1 (a) or Art. 9 para. 2 (a) GDPR respectively which you have effected on our website.

  The Adobe Typekit service enables fonts to be downloaded on to the website to present a better optical version.

  You can revoke your consent at any time. Further information regarding your consent can be found either at the time of giving consent or at the end of this Privacy Policy.

  Further information regarding the handling of transmitted data can be found in the provider’s privacy policy at http://www.adobe.com/de/privacy.html.

  In addition, the provider offers an opt-out option at https://www.adobe.com/de/privacy/opt-out.html.

• Google Tag Manager

  • What personal data is collected and what is the scope of the processing?

    The services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter ‘Google Tag Manager’) are used on our website. Google Tag Manager offers a technical platform to implement other web services and web-tracking programs by means of ‘tags’ and bundling them for operation. In connection with this, Google Tag Manager stores cookies on your computer and analyses your browsing behaviour, if web-tracking tools are implemented by Google Tag Manager (‘tracking’). This data, sent by individual tags bundled in Google Tag Manager, is stored and processed by Google Tag Manager in a single user interface. All bundled ‘tags’ will be listed separately in this Privacy Policy. Further information regarding data privacy in Google Tag Manager tools can be found in the relevant section of this Privacy Policy. In the context of using our website with active integration of tags from Google Tag Manager, data, in particular your IP address and your user activity, will be transmitted to the servers of Google Ireland Ltd. With reference to web services linked to Google Tag Manager, the provisions in the respective section of this Privacy Policy apply. The tracking tools used by Google Tag Manager ensure, by IP anonymisation of the source code, that the IP addresses are anonymised by Google Tag Manager before transmission. In this, Google Tag Manager is only able to gather anonymised IP addresses (‘IP masking’).

  • Legal basis for the processing of personal data

    The legal basis for data processing is your consent in accordance with Art. 6 para. 1 (a) GDPR in our information banner which refers to the use of cookies and web tracking (consent through clear, confirmatory action or behaviour).

  • Purpose of the data processing

    Google uses the information gained through Google Tag Manager on our behalf to analyse your visit to our websites, compile reports on website activity and to perform other services for us linked to website and internet use.

  • Duration of storage

    Google stores relevant data for the Google Tag Manager for as long as it is required to perform the contracted web service. The data collection and storage carried out is anonymised. If, however, reference to an individual should arise, the data will be deleted immediately, as long as it does not fall under a statutory right of retention. Data is deleted in any case after the end of the mandatory retention period.

  • Objection to and deletion of data

    You can prevent the collection and onward transmission of your personal data by Google (in particular your IP address), as well as the processing of this data by Google, by deactivating the script code in your browser, installing a script blocker in your browser, or by activating the ‘Do Not Track’ setting in your browser. Furthermore, you can prevent collection of the data (including your IP address) generated by the cookie and relating to your use of the website, as well as the processing of this data by Google, by downloading and installing the browser plug-in available using this link: http://tools.google.com/dlpage/gaoptout?hl=de. The Google data protection and privacy policies can be found at https://policies.google.com/privacy.

• Google Analytics

  • Scope of processing of personal data

    The web-tracking service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter Google Analytics) is used on our website. Google Analytics uses cookies as part of web tracking, which are stored on your computer and enable analysis of your use of our website and your browsing behaviour (‘tracking’). We carry out this analysis based on the Google Analytics service in order to continually optimise the website and improve availability. In the scope of use of our website, your data, in particular your IP address and user activity, is transmitted to the servers of Google Ireland Ltd. We carry out this analysis based on the tracking service provided by Google in order to continually optimise our website and improve availability. Web tracking is also necessary on the grounds of safety. Through web tracking we can keep track of any attacks on our website by third parties. With the information provided by the web tracker, we can take effective counter-measures and protect the personal data processed by us from any cyber attacks. By activation of the IP anonymisation within Google Analytics tracking codes of this website, your IP address is anonymised by Google Analytics prior to transmission. This website uses a Google Analytics tracking code, supplemented by the operator gat._anonymizeIp(); to enable anonymised collection of IP addresses (‘IP masking’).

  • Legal basis for the processing of personal data

    The legal basis for data processing is your consent in accordance with Art. 6 para. 1 (a) GDPR in our information banner which refers to the use of cookies and web tracking (consent through clear, confirmatory action or behaviour).

  • Purpose of the data processing

    Google uses this information on our behalf to analyse your visit to our website, compile reports on website activity and to perform other services for us regarding the use of the website and the internet. Web tracking is also necessary on the grounds of safety. Through web tracking we can keep track of any attacks on our website by third parties. With the information provided by the web tracker, we can take effective counter-measures and protect the personal data processed by us from any cyber attacks.

  • Duration of storage

    Google stores relevant data for provisioning of web-tracking for as long as it is required to perform the contracted web service. The data collection and storage carried out is anonymised. If, however, reference to an individual should arise, the data will be deleted immediately, as long as it does not fall under a statutory right of retention. Data is deleted in any case after the end of the mandatory retention period.

  • Objection to and deletion of data

    You can prevent the collection and onward transmission of your personal data by Google (in particular, your IP address), as well as the processing of this data by Google, by deactivating the implementation of script code in your browser, or by activating the ‘Do Not Track’ setting in your browser. Furthermore, you can prevent the collection of the data (including your IP address) generated by the Google cookie and relating to your use of the website, as well as the processing of this data by Google, by downloading and installing the browser plug-in available using this link: (http://tools.google.com/dlpage/gaoptout?hl=de). The Google data protection and privacy policies can be found athttps://policies.google.com/privacy.

• COOKIEFIRST

  We use the COOKIEFIRST service from Digital Data Solutions B.V., Plantage Middenlaan 42a, 1018DH Amsterdam, Netherlands, Website: https://cookiefirst.com/ on our website. The transmission and processing of personal data is carried out exclusively on servers in the EU.

  The legal basis for the transmission and processing is outlined in Art. 6 para. 1 (c) GDPR. Using the service helps us fulfil our legal obligations.

  With the integration of COOKIEFIRST, we fulfil our legal obligations in respect of the necessary consent management for cookies.

  Your rights with regard to processing can be found at the end of this Privacy Policy.

  Further information regarding the handling of transmitted data can be found in the provider’s privacy policy at https://cookiefirst.com/legal/privacy-policy/.

Integration of external web services and processing of data outside the EU

We use active content from external providers (‘web services’) on our website. By accessing our website, these external providers receive, where applicable, personal data relating to your visit to our website. In this, processing of data may be carried out outside the EU, where applicable. You can prevent this by installing the corresponding browser plug-in or deactivating the implementation of scripts in your browser. This may restrict the functions available to you on the websites you visit.

We use the following external web services:

• Website Check stamp

  On our website we use the Website Check seal of approval of Website-Check GmbH, Beethovenstrasse 24, 66111 Saarbrücken, Germany, Email: support@website-check.de, Website: http://www.website-check.de/. The transmission and processing of personal data is carried out exclusively on servers in the EU.

  The legal basis for transmission of personal data is our legitimate interest in the processing according to Art. 6 para.1 (f) GDPR. Our legitimate interest lies in the ensuring the achievement of the following purpose set out below.

  The Website-Check GmbH script concerns the technical integration of the Website Check seal of approval. With this seal, we want to show that we take data privacy seriously. Due to the integration of the Website Check seal of approval, transmission of non-personal data to Website-Check GmbH, as the issuer of the seal of approval, is carried out to ensure technical delivery.

  With reference to the processing, you have the right to lodge an objection, as outlined in Art. 21. Further information can be found at the end of this Privacy Policy.

  Further information regarding the handling of transmitted data can be found in the provider’s privacy policy at https://www.website-check.de/datenschutzerklaerung/.

Data security and data protection, email communication

Your personal data will be protected by technical and organisational measures during collection, storage and processing, so that it cannot be accessed by any third party. With unencrypted email communications, complete data security on the transmission route to our IT system cannot be guaranteed, so in cases where there is a increased need for confidentiality, we recommend using encrypted communication or a letter.

Right to information and request to amend information – deletion and restriction of data – revocation of consent – right to object

Right to information

You have the right to request confirmation of whether we hold personal data about you. If this is the case, you have a right to information about the data specified in Art. 15 para. 1 GDPR, as long as this does not affect the rights and liberty of other persons (cf. Art. 15 para. 4 GDPR). We will be happy to provide you with a copy of the data.

Request for amendment

You have the right, in accordance with Art. 16 GDPR, to have personal data which may be incorrect (e.g. address, name, etc.) amended by us at any time. You can also request at any time that data stored by us be made complete. The corresponding adjustment will be made at once.

Right to deletion

You have the right, in accordance with Art. 17, para. 1 GDPR, to have the personal data collected about you deleted, if

• the data is either no longer required;
• the legal basis of the process is cancelled due to the revocation of your consent;
• you have raised an objection to the processing of your data and there are no justifiable reasons for the processing;
• your data is being processed unlawfully;
• there is a legal obligation to do this or there has been an inquiry in accordance with Art. 8, para. 1 GDPR.

Such a right does not exist in accordance with Art. 17, para 3 GDPR, if

• the processing is necessary for the exercising of the right to free speech and information;
• your data has been collected on the basis of a statutory obligation;
• the processing is necessary for reasons of public interest;
• the personal data is necessary for the assertion, exercise or defence of legal claims.

Right to restriction of processing

In specific cases, you have the right, in accordance with Art. 18, para. 1, to request restriction of the processing of your personal data.

This is the case if

• the accuracy of the personal data is contested by you;
• the processing is unlawful and you do not agree to its deletion;
• the data is no longer required for the processing purpose, but the data collected is required for the assertion, exercise or defence of legal claims;
• an objection has been made to the processing in accordance with Art. 21 para. 1 GDPR and it remains unclear as to which interests prevail.

Right to revocation

If you have given explicit consent to the processing of your personal data (Art. 6 para. 1 (a) GDPR or Art. 9 para. 2 (a) GDPR), you can revoke this at any time. Please note that the legitimacy of the processing carried out on the basis of the consent until the revocation is not affected by this.

Right to object

You have the right, in accordance with Art. 21 GDPR, to raise an objection to the processing of personal data concerning you which is collected on the basis of Art. 6 para. 1 (f) (in the context of legitimate interest). You have this right only when there are certain circumstances arguing against the storage and processing.

How can you exercise your rights?

You can exercise your rights at any time by contacting us using the following contact data :

cds Polymere GmbH & Co. KG
Gau-Bickelheimer Strasse 72
55576 Sprendlingen
Germany
Email: info@cds-polymere.de
Tel.: 06701 9350-0
Fax: 06701 9350-50

Right to data portability

You have a claim in accordance with Art. 20 GDPR for the personal data concerning you to be transmitted to you. The data will be provided by us in a structured, standard, machine-readable format. The data can be sent to you or to a named responsible person, according to your preference.

On request, we will provide you with the following data in accordance with Art. 20 para 1 GDPR:

• data collected in accordance with Art. 6, para. 1 (a) or Art. 9 para. 2 (a) GDPR based on explicit consent;
• data obtained by us in accordance with Art. 6 para. 1 (b) GDPR in the context of existing contracts;
• data processed in the context of an automated process.

We will transmit the personal data directly to a responsible person nominated by you if this is technically possible. Please note that we are not permitted to transmit data which infringes the liberty and rights of other persons in accordance with Art. 20 para 4 GDPR.

Right to lodge a complaint with a supervisory authority according to Art. 77 para. 1 GDPR

If you suspect that your data has been processed unlawfully on our part, you can of course seek a judicial clarification of the matter. In addition, all other legal recourses are available to you. Independently of this, you have the option in accordance with Art. 77 para. 1 GDPR to appeal to a supervisory authority. You have the right to lodge a complaint in accordance with Art. 77 GDPR in your EU country of residence, work and/or the location of the supposed violation, i.e. you can select the supervisory authority you wish to appeal to from the above-mentioned locations. The supervisory authority with whom the complaint has been lodged will then inform you on the progress and the outcome of your petition, including the possibility of judicial remedy in accordance with Art. 78 GDPR.