Data Privacy Statement
1. Overview of data privacy
In accordance with legal requirements, users of this website must be informed about the type and scope, purpose of the collection and use of personal data on this website. The following information is intended to give you a simple overview of what happens to your personal data when you visit our website. With regard to the terms used here, we refer to the definitions in Art. 4 of the General Data Protection Regulation (GDPR).
What is personal data?
Personal data refers to all information relating to an identified or identifiable natural person (data subject), i.e. all information used to identify you personally. If you would like more detailed information on the subject of data privacy, you can find it in this Data Privacy Statement.
What does the processing of data mean?
Processing means any operation carried out with or without the aid of automated procedures, in particular to collect, store, use, modify or delete data.
What types of data are collected on this website?
This website may collect inventory data (e.g. name/address), contact information (e.g. e-mail/ telephone number), usage data (e.g. pages visited/ times of access) and communication data (e.g. IP addresses/ device information).
Who collects the data on this website?
The data on this website is collected by the operator. You can find the corresponding contact data of the operator in the information below about the controller or in the legal notice of the website.
How is your data collected?
Your data is collected when you communicate it to us, for example. You can do this e.g. by sending the data by e-mail or by entering it in a form.
However, there are other data that are automatically collected by our IT systems when you visit the website, e.g. by your computer or smartphone. These are mainly technical data, for example which internet browser you are using, which operating system you are using or on which day or at which time you visited our website. This data is collected automatically as soon as you are connected to the website.
What is your data used for?
Much of the data is collected to determine what you use on our website. This enables us to ensure an error-free presentation of the website. Another part is needed to determine which parts of the website you have visited and what you were interested in. When you provide us with your contact information, this information is needed to contact you and communicate with you.
What rights do you have with regard to the data you transmit?
With regard to your stored personal data, you have the right to receive information about the origin, recipient and purpose of this data free of charge at any time. You may also request that this data be rectified, blocked, completely or partially erased. If you have any questions regarding data protection, you can contact us at any time, in particular at the controller’s office indicated below or at the address given in the legal notice. In addition, you are free to lodge a complaint with the competent supervisory authority.
What are analysis tools and other third-party tools?
Your surfing behaviour on our website can be evaluated as soon as you visit it. This is done primarily with the aid of cookies and, if necessary, using certain analysis programs. Normally, the analysis of your surfing behaviour is anonymous and cannot be traced back to you. You have the option to object to the analysis, or you can prevent the use of specific tools. For more information and instructions, please see the following notes.
2. Mandatory information and further notes
- Data protection
As operators of this website, we take the protection of your personal data very seriously. The personal data transmitted by you will be treated confidentially in accordance with the statutory provisions on data protection and this Data Privacy Statement. The use of this website triggers the collection of various personal data. Personal data are such data which will be used to identify you. This Data Privacy Statement is intended to explain which data is collected from you and for what purpose it is used. It also explains for which purpose this is being done.
Generally we would like to point out that data transmission over the Internet, for example through communication by e-mail, is not secure in all respects. A complete protection of data against access by third parties is unfortunately not completely possible.
- Legal basis
In accordance with Art. 13 GDPR, we would like to provide you with the legal basis used to carry out the data processing. Unless otherwise stated in this Data Privacy Statement, the following applies:
According to Art. 6 para. 1 lit. a) and Art. 7 GDPR, it is possible to obtain your consent for data processing. The legal basis for the processing of your data for the fulfilment of services by us and for answering your inquiries is Art. 6 para. 1 lit. b) GDPR. The provision of Art. 6 para. 1 lit. c) GDPR is the basis for the processing of data in order to fulfil our legal obligations and Art. 6 para. 1 lit. f) GDPR enables us to process your data in order to protect our legitimate interests.
The controller responsible for data processing on this website is:
MR Chemie GmbH, Nordstrasse 61-63, 59427 Unna, Germany, telephone +49 (0) 23 03 / 9 51 51 0, e-mail: firstname.lastname@example.org
The legal entity named above, which alone or together with others decides on the purposes and means of the processing of personal data, is the controller.
- Changes or Updates to the Data Privacy Statement
We will update the Data Privacy Statement as soon as changes in the processing of the data carried out by us make it necessary. Therefore, you are asked to inform yourself regularly about the contents of this Data Privacy Statement.
- Right to access/ information
According to Art. 15 GDPR, you have the right to request confirmation from us whether we are processing data concerning you. In addition, according to this provision, you have a right to information about this data and a right to have a copy of this data made available.
- Right to rectification
rt. 16 GDPR gives you the right to request the completion and/or rectification of data concerning you.
- Right to erasure
In accordance with Art. 17 GDPR, you have the right to request that data concerning you be erased immediately.
- Right to restriction of processing
In accordance with Art. 18 GDPR, you may request us to restrict the processing of your data.
- Right to data portability
According to Art. 20 GDPR, you have the right to have the data provided by you transmitted to you or a third party in a commonly used and machine-readable format. If you request the direct transfer of data to another controller, this can only take place if this is technically feasible.
- Right to withdraw consent
For many data processing processes it is necessary that you give your express consent. Once you have given your consent, you can revoke it at any time in accordance with Art. 7 para. 3 GDPR. An informal notification, for example by e-mail to us, is generally sufficient. The legality of data processing basically remains unaffected by a possible revocation.
- Right to object
According to Art. 21 GDPR, you have the right to object to any future processing of data concerning you by us. The objection may also be directed against processing by us for the purpose of direct advertising.
- Right to lodge a complaint with the supervisory authority
If you believe that data protection regulations have been violated, you have a right to lodge a complaint with the responsible supervisory authority. The responsible supervisory authority with regard to data protection issues is the Data Protection Officer of the German federal state in which we have our registered office; this is North Rhine-Westphalia. You will find a list of the respective Data Protection Officers as well as the specific contact data can be taken at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html
- SSL and/or TLS encryption
For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address starts with https:// in the address line of your browser, or you can see a lock in the browser line. If such encryption is activated, the data that you transmit to us cannot be read by third parties.
Wir haben für unser Unternehmen einen Datenschutzbeauftragten bestellt:
bits + bytes it-solutions GmbH & Co. KG
Bahnhof Weidenau 6
Tel: 0700 / 20 30 10 30
4. Erasure of data
On the basis of Articles 17 and 18 GDPR, the data provided by you and processed by us will be erased or their processing restricted. If it is not expressly stated in this Data Privacy Statement when such data will be erased, we point out here that they will be deleted as soon as the purpose for processing has been achieved and there are no legal storage obligations to the contrary. In the latter case, the processing of the data is restricted. This applies in particular to such data that must be kept for commercial or tax reasons. According to § 257 (1) HGB (German Commercial Code) there is a six-year retention obligation for e.g. trading books, inventories, opening balances, annual financial statements, commercial letters, accounting documents etc., as well as according to § 147 (1) AO (German Fiscal Code) for ten years for e.g. books, records, management reports, accounting documents, commercial and business letters, relevant documents of significance for taxation etc.
5. Data collection on our website
- Server log files
Our website is stored on servers. The server provider automatically saves information about the visit to our website. These are so-called log files which are automatically transmitted by the browser you use. In particular, the following information is transmitted:
– Browser type and browser version,
– Time of the server request,
– IP address,
– Error codes,
– Operating system used,
– Referrer URL.
This data is generally not merged with other data sources.
The legal basis for the collection and processing of this data is Art. 6 para. 2 lit. f) GDPR. This legal basis forms the legitimate interest for the fulfilment of a contract or pre-contractual measures.
Our website partly uses so-called cookies. Cookies serve to make the offer on our pages user-friendly, effective and secure. Cookies are small files that are stored on your computer and can be retrieved later.
We use so-called “session cookies”. These are only stored for the duration of the current visit to our website. They are automatically deleted at the end of your visit to our website.
If you do not want cookies to be stored on your computer, it is necessary to deactivate an appropriate option in the system settings of your browser. Cookies that have already been saved can also be deleted in the system settings. However, if you do not wish cookies to be stored, the functionality of this website may be restricted.
If cookies are used, which are necessary for the execution of the electronic communication process or for the provision of specific functions desired by you, these are stored and processed on the basis of Art. 6 para. 1 lit. f) GDPR. As operators of the website we have a legitimate interest in the storage of cookies to ensure technically error-free operation of the website.
- Contact form / e-mail
If you choose to send us enquiries via the contact form on the website, the information from the form, including the contact details you provide there, will be stored for processing the enquiry and in the event of further questions. This data will not be disclosed without your express consent.
A disclosure of this data takes place only for the fulfillment of legal requirements. In individual cases, your data can be passed on to our trading partners for establishing contact. In this case you will be informed.
The processing of the data entered by you in the contact form is therefore based in particular on your consent pursuant to Art. 6 para. 1 lit. a) GDPR. You can revoke your consent at any time. An informal message by e-mail, for example, is sufficient for this purpose. The legality of the data processing processes carried out up to the time of revocation generally remains unaffected. If contact is made without your express consent, e.g. by e-mail, the data will be processed on the basis of Art. 6 para. 1 lit. b) GDPR for processing the contact request and its handling.
All data provided by you will remain with us until you request its erasure, revoke your consent for storage, or until the purpose for data storage ceases to apply. If the latter is the case, or if the data are no longer necessary for the fulfillment of legal requirements, these data are erased regularly. In the case of statutory archiving obligations, your data will be deleted after the respective expiry date. Mandatory statutory provisions, in particular statutory retention periods (6 years for retention obligation under commercial law and 10 years under tax law) remain of course unaffected.
If you would like to receive the newsletter offered on the website, we need an e-mail address from you as well as information that allows us to verify that you are the owner of the provided e-mail address and that you agree to receive the newsletter.We use the so-called double opt-in procedure to ensure that the newsletter is sent out in an agreed manner. In the course of this, the potential recipient can be included in a distribution list. The user then receives a confirmation email to confirm the registration in a legally secure manner. The address is only actively included in the distribution list if the confirmation is given.
We only use this data to send the requested information and offers. Newsletter2Go is used as newsletter software. Your data will be transmitted to Newsletter2Go GmbH. Newsletter2Go is prohibited from selling your data and using it for purposes other than sending newsletters. Newsletter2Go is a German, certified provider, which was selected according to the requirements of the General Data Protection Regulation and the Federal Data Protection Act.
More information can be found here: https://www.newsletter2go.de/informationen-newsletter-empfaenger/
You can revoke your consent to the storage of the data, the email address and its use for sending the newsletter at any time, for example via the “unsubscribe” link in the newsletter.
The data protection measures are always subject to technical updates. For this reason, we ask you to inform yourself about our data protection measures at regular intervals by inspecting our data protection declaration.
- Job applications / application procedure
The controller (responsible for the processing of personal data) collects and processes data from applicants for the purpose of handling the respective application procedure. Processing may also be carried out electronically. This is particularly the case if an applicant sends corresponding application documents electronically, e.g. by e-mail or via a web form on the website, to the person responsible for processing the application. If an employment contract is then concluded between the applicant and the controller, the data will be processed and stored for the purpose of processing the employment relationship in compliance with the statutory provisions. The legal basis for the collection and processing of this data is Art. 6 para. 2 lit. b) GDPR. This legal basis forms the legitimate interest to fulfil a contract or pre-contractual measures. If no contract of employment is concluded with the applicant, the application documents will be automatically erased two months after notification of the decision of rejection, provided that no other legitimate interests of the controller stand in the way of deletion. A legitimate interest in this sense may, for example, be a burden of proof in proceedings under the General Equal Treatment Act (AGG).
- Processing of customer and contract data
We collect, process and use personal data to the extent necessary for the establishment, content design or amendment of a legal relationship. The legal basis for this is Art. 6 para. 1 lit. b) GDPR, as the processing of data is permitted for the fulfilment of a contract or pre-contractual measures. Personal data is only collected, processed or used to the extent necessary to enable the respective user to use specific services.
Once collected, customer data will be erased when the purpose for data storage ceases to apply resp. the data are no longer necessary for the fulfillment of legal requirements or upon termination of the business relationship. This does not affect statutory retention periods.
- Transmission of data after conclusion of contracts
If necessary in the context of contract processing, we transmit personal data to third parties who are entrusted with the delivery or with the processing of payments. Further transmission of data will not take place, or only if the user has given his/her express consent. The data will not be disclosed to third parties for purposes of advertising without express consent. This data processing is necessary for the fulfilment of a contract or pre-contractual measures and the legal basis is defined in Art. 6 para. 1 lit. b) GDPR.
6. Plug-ins and tools
Our website uses plug-ins from the YouTube website operated by Google. The website site is operated by YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA.
When you visit a website that is equipped with a YouTube plug-in, a connection to YouTube’s servers is established. The YouTube server is informed which of our pages you have visited. If you are logged in with a YouTube account, you allow YouTube to associate your surfing behaviour directly with your personal profile. You can always prevent this by logging out of your YouTube account. We use YouTube to ensure the appropriate and appealing presentation of our online offer. This is a legitimate interest as defined by Art. 6 para. 1 lit. f) GDPR.
Further information on the handling of user data can be found in YouTube’s data privacy statement at: https://www.google.de/intl/de/policies/privacy
- Google Maps
Our website uses the data service Google Maps via a programming interface (API). The site is operated by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
To use the functions of Google Maps, it is necessary to save your IP address. This information is normally transmitted to a Google server in the USA and stored there. The provider of this site, i.e. we, have no influence on this data transmission.
The use of Google Maps results in a corresponding and appealing presentation of our online offer and serves to make it easy to find the locations we have indicated on the website. This represents a legitimate interest of Art. 6 para. 1 lit. f) GDPR.
Further information on the handling of user data can be found in Google’s data privacy statement at: https://www.google.de/intl/de/policies/privacy
- Google Analytics
This website uses functions of the web analysis service Google Analytics. The provider of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.Google Analytics uses so-called cookies. Cookies are text files, which are stored on your computer and that enable an analysis of the use of the website by users. The information generated by cookies on your use of this website is usually transferred to a Google server in the United States, where it is stored.
The storage of Google Analytics cookies and the utilization of this analysis tool are based on Art. 6 Sect. 1 lit. f GDPR. The operator of this website has a legitimate interest in the analysis of user patterns to optimize both, the services offered online and the operator’s advertising activities. If a corresponding agreement has been requested (e.g. an agreement to the storage of cookies), the processing takes place exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the agreement can be revoked at any time.
On this website, we have activated the IP anonymization function. As a result, your IP address will be abbreviated by Google within the member states of the European Union or in other states that have ratified the Convention on the European Economic Area prior to its transmission to the United States. The full IP address will be transmitted to one of Google’s servers in the United States and abbreviated there only in exceptional cases. On behalf of the operator of this website, Google shall use this information to analyse your use of this website to generate reports on website activities and to render other services to the operator of this website that are related to the use of the website and the Internet. The IP address transmitted in conjunction with Google Analytics from your browser shall not be merged with other data in Google’s possession.
You do have the option to prevent the archiving of cookies by making pertinent changes to the settings of your browser software. However, we have to point out that in this case you may not be able to use all of the functions of this website to their fullest extent. Moreover, you have the option prevent the recording of the data generated by the cookie and affiliated with your use of the website (including your IP address) by Google as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link: tools.google.com/dlpage/gaoptout.
Objection to the recording of data
You have the option to prevent the recording of your data by Google Analytics by clicking on the following link. This will result in the placement of an opt out cookie, which prevents the recording of your data during future visits to this website: Google Analytics deactivation.
For more information about the handling of user data by Google Analytics, please consult Google’s Data Privacy Declaration at: support.google.com/analytics/answer/6004245.
Contract data processing
We have executed a contract data processing agreement with Google and are implementing the stringent provisions of the German data protection agencies to the fullest when using Google Analytics.
Demographic parameters provided by Google Analytics
This website uses the function “demographic parameters” provided by Google Analytics. It makes it possible to generate reports providing information on the age, gender and interests of website visitors. The sources of this information are interest-related advertising by Google as well as visitor data obtained from third party providers. This data cannot be allocated to a specific individual. You have the option to deactivate this function at any time by making pertinent settings changes for advertising in your Google account or you can generally prohibit the recording of your data by Google Analytics as explained in section “Objection to the recording of data”.
Data on the user or incident level stored by Google linked to cookies, user IDs or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) will be anonymized or deleted after 14 month. For details please click the following link: support.google.com/analytics/answer/7667196
Our social media appearances
Data processing through social networks
We maintain publicly available profiles in social networks. The individual social networks we use can be found below.
Social networks such as Facebook, Twitter etc. can generally analyze your user behavior comprehensively if you visit their website or a website with integrated social media content (e.g. like buttons or banner ads). When you visit our social media pages, numerous data protection-relevant processing operations are triggered. In detail:
If you are logged in to your social media account and visit our social media page, the operator of the social media portal can assign this visit to your user account. Under certain circumstances, your personal data may also be recorded if you are not logged in or do not have an account with the respective social media portal. In this case, this data is collected, for example, via cookies stored on your device or by recording your IP address.
Using the data collected in this way, the operators of the social media portals can create user profiles in which their preferences and interests are stored. This way you can see interest-based advertising inside and outside of your social media presence. If you have an account with the social network, interest-based advertising can be displayed on any device you are logged in to or have logged in to.
Our social media appearances should ensure the widest possible presence on the Internet. This is a legitimate interest within the meaning of Art. 6 (1) lit. f GDPR. The analysis processes initiated by the social networks may be based on divergent legal bases to be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6 (1) (a) GDPR).
Responsibility and assertion of rights
If you visit one of our social media sites (e.g., Facebook), we, together with the operator of the social media platform, are responsible for the data processing operations triggered during this visit. You can in principle protect your rights (information, correction, deletion, limitation of processing, data portability and complaint) vis-à-vis us as well as vis-à-vis the operator of the respective social media portal (e.g. Facebook).
Please note that despite the shared responsibility with the social media portal operators, we do not have full influence on the data processing operations of the social media portals. Our options are determined by the company policy of the respective provider.
The data collected directly from us via the social media presence will be deleted from our systems as soon as you ask us to delete it, you revoke your consent to the storage or the purpose for the data storage lapses. Stored cookies remain on your device until you delete them. Mandatory statutory provisions – in particular, retention periods – remain unaffected.
Individual social networks
We have a profile on Facebook. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. According to Facebook’s statement the collected data will also be transferred to the USA and to other third-party countries.
We have signed an agreement with Facebook on shared responsibility for the processing of data (Controller Addendum). This agreement determines which data processing operations we or Facebook are responsible for when you visit our Facebook Fanpage. This agreement can be viewed at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.
You can customize your advertising settings independently in your user account. Click on the following link and log in: https://www.facebook.com/settings?tab=ads.
Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.
We use the short message service Twitter. The provider is Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland.
You can customize your Twitter privacy settings in your user account. Click on the following link and log in: https://twitter.com/personalization.
Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://gdpr.twitter.com/en/controller-to-controller-transfers.html.
We have a profile on Instagram. The provider is Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA.
Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://help.instagram.com/519522125107875 and https://de-de.facebook.com/help/566994660333381.
We have a LinkedIn profile. The provider is the LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies.
If you want to disable LinkedIn advertising cookies, please use the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.linkedin.com/legal/l/dpa und https://www.linkedin.com/legal/l/eu-sccs.
Unna, March 2020