Data Protection of SURTECO GmbH

We respect the privacy of every person visiting our website. The protection of your personal data is important to us. We would therefore like to inform you here about the data that will be collected when you visit our website and how that data will be used.

1 Information about the collection of personal data

(1) Below we inform you about the collection of personal data when you visit our website. Personal data is all data that can be used to identify you personally, e.g. your name, address, e-mail addresses, user behaviour.

(2) The controller pursuant to Art. 4(7) EU General Data Protection Regulation (GDPR) is SURTECO GmbH, Am Brühl 6, 86647 Buttenwiesen, T: +49 8274 51-0, F: +49 8274 51-512, info@surteco.com. More detailed information can be found in our Imprint.

Our data protection officer is:

Dr. Catrin Kollmann

SURTECO GROUP SE

Johan-Viktor-Bausch-Str. 2

86647 Buttenwiesen

T: +49 8274 9988-0

datenschutz@surteco.com

(3) When you contact us by e-mail or using a contact form on our website, we will store the data you communicate to us (e-mail address, where necessary, your name and phone number) in order to answer your questions. We delete any data collected in this way once it is no longer necessary to store it, or restrict the processing if statutory retention obligations apply.

(4) If we make use of commissioned service providers for individual functions of our offer or would like to use your data for promotional purposes, we will inform you about the respective processes in detail, as described below. We will then also specify the criteria that apply to duration of storage.

2 Your rights

(1) You have the following rights vis-à-vis us in relation to your personal data:

–           Right to be provided with information

–           Right to rectification or erasure

–           Right to restriction of processing

–           Right to objection against processing

–           Right to data portability.

(2) You also have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data.

The competent data protection supervisory authority is:

North Rhine-Westphalia Commissioner for Data Protection and Freedom of Information,
Kavalleriestr. 2-4,
40213 Dusseldorf,
tel.: 0211/38424-0, fax: 0211/38424-10 e-mail: poststelle@ldi.nrw.de

3 Collection of personal data when you visit our website

(1) When you use our website merely for information purposes, i.e. if you do not register or communicate information to us in any other way, we only collect the personal data that your browser transfers to our server. When you want to view our website, we collect the following data which we need for technical reasons to display our website to you and ensure stability and security (the legal basis for this is Art. 6(1) sentence 1 letter f GDPR):

–           IP address

–           Date and time when our website was accessed

–           Time zone difference from Greenwich Mean Time (GMT)

–           Content of the request (specific page)

–           Access status / HTTP status code

–           Data volume transferred each time

–           Website from which the request came

–           Browser

–           Operating system and its user interface

–           Language and version of the browser software.

(2) In addition to the aforementioned data, cookies are placed on your computer when you use our website. Cookies are small text files which are stored on your hard disk and are assigned to the browser you are using and which send certain information to whoever (in this case, us) placed the cookie. Cookies cannot run any programs or transfer viruses to your computer. They are used to make the Internet offer overall more user-friendly and effective.

(3) Use of cookies:

a) This website uses the following types of cookies, whose scope and functions are explained below:

–           Transient cookies (see b)

–           Persistent cookies (see c).

b) Transient cookies are automatically deleted when you close the browser. These include, in particular, session cookies. Session cookies store a session ID via which different requests from your browser can be assigned to the same session. This enables you computer to be recognised when you return to our website. The session cookies are deleted when you log out or close the browser.

c) Persistent cookies are automatically deleted after a predetermined period, which may vary from cookie to cookie. You can delete cookies in your browser’s security settings at any time.

d) You can configure your browser setting as desired and e.g. refuse to accept third-party cookies or all cookies. However, if you do so, you may not be able to use all the functions of this website.

4 Other functions and offers of our website

(1) In addition to the use of our website purely for information purposes, we offer you a variety of services that you can use if you are interested in doing so. To do so, you normally have to provide more personal data, which we use to provide the respective service and to which the aforementioned data processing principles apply.

(2) In some cases, we use external service providers to process your data. We select and commission these carefully; they have to abide by our instructions and are monitored regularly.

(3) Furthermore, we may pass your personal data onto third parties when, together with partners, we offer participation in campaigns, the conclusion of contracts or similar services. You can find more detailed information about this when you provide your personal data or at the bottom of the description of the offer.

(4) If our service providers or partners are based in a country outside the European Economic Area (EAA), we inform you about the consequences of this in the description of the offer.

5 Objection to, or withdrawal of consent to process your data

(1) If you have granted your consent to the processing of your data, you can withdraw that consent at any time. Once you have informed us of the withdrawal of your consent, this affects whether it is permissible to process your personal data.

(2) Insofar as we base the processing of your personal data on the balancing of interests, you can object to the processing. This is the case in particular when the processing is not necessary for the performance of a contract with you, which we indicate in each case in the subsequent description of the functions. When raising such an objection, we ask you state the reasons why we should not process your personal data as we are doing. If your objection is well-founded, we will examine the facts of the matter and either cease or adjust the data processing, or provide you with our compelling legitimate grounds for continuing the processing.

(3) You may, of course, object at any time to the processing of your personal data for the purposes of advertising and data analysis. To inform us about your objection to the processing of your personal data for advertising purposes, mail us at: info@surteco.com. You can, of course, also inform us about your objection using the contact details listed in Section 1 (2).

6 Use of our web shop / ordering samples

(1) If you want to order product samples in our web shop, you need to provide us with your personal data which we need to process your order so that we can conclude the contract. Information that is mandatory for the processing of order is specially marked; other information is provided voluntarily. We process the data provided by you to process your order. To that end, we may pass your payment details onto our bankers. The legal basis for this is Art. 6(1) sentence 1 letter b GDPR.

Optional: You can voluntarily create a customer account that we can use to process your data for future purchases. When you create an account under “My account”, we store the data you provide irrevocably. You can always delete all other data, including your user account, in the customer area.

We can also process the data provided by you to inform you about other interesting products from our portfolio or send you e-mails containing technical information.

(2) We are obliged under commercial and tax legislation to store your address, payment and order data for a period of ten years. However, after two years we restrict the processing, i.e. your data is used only to comply with statutory obligations.

(3) To prevent unauthorised access by third parties to your personal data, in particular financial data, the order process is encrypted using the TLS protocol.

7 Use of our online portal (log-in possibility)

(1) If you want to use our online portal, you have to register. This requires you to provide your e-mail address and a password that you are free to change. For registration, we use the double-opt-in procedure, i.e. your registration is only complete once you have confirmed it by clicking a link in a confirmation e-mail sent to you for that purpose.

(2) When you use our portal, we store your data required to perform the contract until your permanently delete your access. We continue to store the data you have provided voluntarily during the time you use the portal unless you delete that data beforehand. You can manage and modify all the information in the protected customer area. The legal basis for this is Art. 6(1) sentence 1 letter f GDPR.

(3) To prevent unauthorised access by third parties to your personal data, in particular financial data, the order process is encrypted using the TLS protocol.

8 Newsletter

(1) With your consent, you can subscribe to our newsletter in which we inform you about our current attractive offers. The goods and services promoted are named in the declaration of consent.

(2) We use the double-opt-in procedure for registration for our newsletter. This means that, once you have registered, we will send an e-mail to the e-mail address provided by you requesting confirmation that you wish to receive the newsletter. Furthermore, we store the IP addresses used and times at which the registration and confirmation occurred. The purpose of this process is to prove your registration and, if necessary, to be able to investigate any possible misuse of your personal data.

(3) Your e-mail address is the only mandatory information need for dispatch of the newsletter. Provision of other, specially marked data is voluntary and that data is used to address you personally. After you have confirmed your registration, we store your e-mail address for the purposes of sending the newsletter. The legal basis for this is Art. 6(1) sentence 1 letter a GDPR.

(4) You can withdraw your consent to being sent the newsletter at any time and unsubscribe to it. To withdraw your consent, you can click on the link provided in each newsletter e-mail, use this form on the website https://www.doellken-kv.com//en/newsletter/newsletter-unsubscribe/, send an e-mail to Newsletter@doellken.com or state your withdrawal of consent in a message sent to the contact details specified in the imprint.

(5) Please note that we analyse your user behaviour when you receive the newsletter. For the purposes of this analysis, the e-mails we send include web beacons and tracking pixels, which are one-pixel image files that are stored on our website. For the analyses, we link the data specified under § 3 and the web beacons to your e-mail address and an individual ID.

You can object to this tracking at any time by clicking the separate link provided in each e-mail or informing our by other means. The information is stored for as long as you subscribe to the newsletter. Once you unsubscribe, we stored the data only in statistical and anonymised form.

9 Use of Google Analytics

(1) This website uses Google Analytics, a web analysis service of Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files, which are saved on your computer and enable an analysis of your use of the website. The information generated by a cookie on your usage of the website is sent to and stored on a Google server in the United States. However, when IP anonymisation is activated on this website, your IP address is first of all truncated by Google when the website is accessed from within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases is the complete IP address transferred to a Google server in the United States and truncated there. On behalf of the operator of this website, Google uses this information to analyse your usage of the website, compile reports on website activity and provide other services connected to the use of the website and the Internet for the website operator.

(2) The IP address your browser supplies to Google Analytics is never combined with any other data held by Google.

(3) You can prevent the storage of cookies using the relevant setting in your browser software. However, we would like to point out that you may then not be able to fully use all the functions of this website. Furthermore, you can prevent Google from collecting and processing the data generated by the cookie and relating to your use of the website (including your IP address) by downloading and installing the browser plugin available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

(4) This website uses Google Analytics with the extension “_anonymizeIp()”. Consequently, IP addresses are further processed in truncated form. It is therefore impossible for you to be identified personally. If data identifying you personally is collected, that data is immediately excluded and the personal data is thus erased immediately.

(5) We use Google Analytics to analyse usage of our website and constantly improve the user experience. Using the statistics obtained, we can improve our offer and make it more attractive for all users. For those exceptional cases in which personal data is transmitted to the USA, Google complies with the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. The legal basis for the use of Google Analytics is Art. 6(1) sentence 1 letter f GDPR.

(6) Information about the third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, fax: +353 (1) 436 1001. Terms of use: http://www.google.com/analytics/terms/de.html, information on data protection: http://www.google.com/intl/de/analytics/learn/privacy.html, and privacy policy: http://www.google.de/intl/de/policies/privacy.

Find all important documents here for downloading.