Privacy Policy

This is a courtesy translation for information purposes. Only the German version is legally binding.

General

As the operator of this website and as a company, we come into contact with your personal data. This means all data that says something about you and can be used to identify you. In this privacy policy, we would like to explain how, for what purpose and on what legal basis we process your data.

The party responsible for data processing on this website and in our company is:

KTK Polycast GmbH
Am Biotop 1
39171 Sülzetal
Germany

Phone: +49 (0)39205-456085
Email: info@ktk-polycast.de

General information

SSL/TLS encryption

Whenever you enter data on websites, place online orders or send emails over the internet, you must always expect that unauthorised third parties may access your data. There is no such thing as complete protection against such access. However, we do everything in our power to protect your data as well as possible and to close security gaps as far as we can.

An important protective mechanism is the SSL/TLS encryption of our website, which ensures that data you transmit to us cannot be read by third parties. You can recognise the encryption by the padlock icon in front of the web address in your browser and by the fact that our web address begins with https:// and not http://.

How long do we store your data?

In some places in this privacy policy, we inform you how long we, or the companies that process your data on our behalf, store your data. If no such information is given, we store your data until the purpose of the data processing no longer applies, you object to the data processing or you withdraw your consent to the data processing.

In the event of an objection or withdrawal, however, we may continue to process your data if at least one of the following conditions applies:

• We have compelling legitimate grounds for continuing the data processing that override your interests, rights and freedoms (only in the case of an objection to data processing; if the objection is directed against direct marketing, we cannot assert legitimate grounds).
• The data processing is necessary to establish, exercise or defend legal claims (does not apply if your objection is directed against direct marketing).
• We are legally obliged to retain your data.

In this case, we will delete your data as soon as the condition(s) no longer apply.

Data transfer to the USA

On our website, we also use tools from companies that transfer your data to the USA, where they store and possibly further process it. This is important for you mainly because your data in the USA does not enjoy the same protection as within the EU, where the General Data Protection Regulation (GDPR) applies. For example, US companies are obliged to hand over personal data to security authorities without you, as the data subject, being able to take legal action against this. It is therefore possible that US authorities (e.g. intelligence services) process, evaluate and permanently store your data on US servers for surveillance purposes. We have no influence on these processing activities.

Your rights

Objection to data processing

IF YOU READ IN THIS PRIVACY POLICY THAT WE HAVE LEGITIMATE INTERESTS IN PROCESSING YOUR DATA AND THEREFORE BASE THIS PROCESSING ON ART. 6(1)(F) GDPR, YOU HAVE THE RIGHT TO OBJECT TO IT UNDER ART. 21 GDPR. THIS ALSO APPLIES TO PROFILING BASED ON THIS PROVISION. THE PREREQUISITE IS THAT YOU STATE REASONS FOR THE OBJECTION THAT ARISE FROM YOUR PARTICULAR SITUATION. NO JUSTIFICATION IS REQUIRED IF THE OBJECTION IS DIRECTED AGAINST THE USE OF YOUR DATA FOR DIRECT MARKETING.

THE CONSEQUENCE OF THE OBJECTION IS THAT WE MAY NO LONGER PROCESS YOUR DATA. THIS DOES NOT APPLY ONLY IF ONE OF THE FOLLOWING CONDITIONS IS MET:

• WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS.
• THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

THESE EXCEPTIONS DO NOT APPLY IF YOUR OBJECTION IS DIRECTED AGAINST DIRECT MARKETING OR AGAINST PROFILING ASSOCIATED WITH IT.

Further rights

Withdrawal of your consent to data processing

Many data processing operations are based on your consent. You give this consent, for example, by ticking a corresponding box on online forms before submitting the form, or by allowing certain cookies when you visit our website. You can withdraw your consent at any time without giving reasons (Art. 7(3) GDPR). From the time of withdrawal, we may no longer process your data. The only exception: we are legally obliged to retain the data for a certain period of time. Such retention periods exist in particular under tax and commercial law.

Right to lodge a complaint with the competent supervisory authority

If you believe that we are in breach of the General Data Protection Regulation (GDPR), you have the right under Art. 77 GDPR to lodge a complaint with a supervisory authority. You can contact a supervisory authority in the member state of your habitual residence, your place of work or the place of the alleged infringement. The right to lodge a complaint exists in addition to administrative or judicial remedies.

Right to data portability

Upon request, we must hand over to you or to a third party, in a common machine-readable format, any data that we process automatically on the basis of your consent or in fulfilment of a contract. We can only transfer the data to another controller insofar as this is technically feasible.

Right to access, erasure and rectification of data

Under Art. 15 GDPR, you have the right to obtain information free of charge about which personal data we have stored about you, where the data comes from, to whom we transfer the data and for what purpose it is stored. If the data is incorrect, you have the right to rectification (Art. 16 GDPR); under the conditions of Art. 17 GDPR, you may request that we delete the data.

Right to restriction of processing

In certain situations, you can ask us under Art. 18 GDPR to restrict the processing of your data. Apart from being stored, the data may then only be processed as follows:

• with your consent
• for the establishment, exercise or defence of legal claims
• for the protection of the rights of another natural or legal person
• for reasons of important public interest of the European Union or of a member state

The right to restriction of processing applies in the following situations:

• You have contested the accuracy of the personal data we have stored about you, and we need time to verify this. In this case, the right applies for the duration of the verification.
• The processing of your personal data is or was unlawful. In this case, the right applies as an alternative to erasure of the data.
• We no longer need your personal data, but you need it to exercise, defend or establish legal claims. In this case, the right applies as an alternative to erasure of the data.
• You have lodged an objection under Art. 21(1) GDPR and your interests and ours now have to be weighed against each other. In this case, the right applies as long as the result of this assessment has not yet been determined.

Hosting and content delivery networks (CDN)

External hosting

Our website is hosted on a server of the following internet service provider (hoster):

IONOS SE
Elgendorfer Str. 57
56410 Montabaur, Germany

How do we process your data?

The hoster stores all data of our website. This also includes all personal data that is collected automatically or through your input. This may include in particular: your IP address, pages visited, names, contact details and enquiries, as well as meta and communication data. When processing data, our hoster follows our instructions and always processes the data only to the extent necessary to fulfil its service obligations towards us.

On what legal basis do we process your data?

Since we address potential customers and maintain contacts with existing customers via our website, data processing by our hoster serves the initiation and performance of contracts and is therefore based on Art. 6(1)(b) GDPR. In addition, it is our legitimate interest as a company to provide a professional online presence that meets the necessary requirements for security, speed and efficiency. To this extent, we also process your data on the basis of Art. 6(1)(f) GDPR.

Data collection on this website

Server log files

Server log files record all requests and accesses to our website and log error messages. They also contain personal data, in particular your IP address. However, the provider anonymises this after a short time, so that we cannot attribute the data to you personally. The data is transmitted automatically from your browser to our provider.

How do we process your data?

Our provider stores the server log files in order to be able to trace activities on our website and to detect errors. The files contain the following data:

• Browser type and version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server request
• IP address (anonymised where applicable)

We do not combine this data with other data, but use it only for statistical analysis and to improve our website.

On what legal basis do we process your data?

We have a legitimate interest in ensuring that our website runs without errors. It is also our legitimate interest to obtain an anonymised overview of the accesses to our website. The data processing is therefore lawful pursuant to Art. 6(1)(f) GDPR.

Enquiries by email, telephone or fax

You can send us a message by email or fax, or call us.

How do we process your data?

We store your message and the contact details you provide, or the telephone number transmitted, in order to process your enquiry, including any follow-up questions. We do not pass on the data to other persons without your consent.

How long do we store your data?

We delete your data as soon as one of the following occurs:

• Your enquiry has been fully dealt with.
• You ask us to delete the data.
• You withdraw your consent to storage.

This does not apply only if we are legally obliged to retain the data.

On what legal basis do we process your data?

If your enquiry is related to our contractual relationship or serves the implementation of pre-contractual measures, we process your data on the basis of Art. 6(1)(b) GDPR. In all other cases, it is our legitimate interest to deal effectively with enquiries addressed to us. The legal basis for data processing is therefore Art. 6(1)(f) GDPR. If you have consented to the storage of your data, Art. 6(1)(a) GDPR is the legal basis. In this case, you can withdraw your consent at any time with effect for the future.

Plugins and tools

Google Web Fonts (local hosting)

On our website we use fonts from the US company Google. We have installed the fonts locally, so that no connection to Google servers is established when you visit our website.

Further information on Google Web Fonts can be found athttps://developers.google.com/fonts/faqand in Google’s privacy policy:https://policies.google.com/privacy?hl=en

Font Awesome (local hosting)

On our website we use icons from the Font Awesome icon library. The library is provided by Fonticons Inc. We have installed the icons locally, so that no connection to the company’s servers is established when you visit our website.

Further information on Font Awesome can be found athttps://fontawesome.com/and in particular in its privacy policy:https://fontawesome.com/privacy.

Google Maps

What is Google Maps?

Map service of Google Ireland Ltd.

Who processes your data?

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland

Where can you find more information about data protection at Google?

On what basis do we transfer your data to the USA?

Google complies with the Standard Contractual Clauses of the European Commission (https://privacy.google.com/businesses/compliance)

How do we process your data?

We use Google Maps on our website. To enable you to use all functions of the map service, Google stores your IP address on one of its servers in the USA.

On what legal basis do we process your data?

The Google Maps maps make it easier for visitors to find the locations indicated on our website. As a company, we have a legitimate interest in this. The data processing is therefore lawful pursuant to Art. 6(1)(f) GDPR.

If you have consented to the data processing, we process your data exclusively on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time. From the time of withdrawal, we may no longer process your data.