Politique de confidentialité

1. Aperçu de la protection des données

Information générale

Les informations suivantes vous donneront une vue d'ensemble facile à parcourir de ce qu'il adviendra de vos données à caractère personnel lorsque vous visiterez ce site web. Le terme « données personnelles » comprend toutes les données qui peuvent être utilisées pour vous identifier personnellement. Pour des informations détaillées sur la protection des données, veuillez consulter notre déclaration de protection des données, que nous avons incluse sous cette copie.

Enregistrement des données sur ce site web

Qui est le responsable de l'enregistrement des données sur ce site web (c'est-à-dire le « responsable du traitement ») ?

Les données figurant sur ce site web sont traitées par l'exploitant du site web, dont les coordonnées sont disponibles dans la section « Informations sur la partie responsable (appelée “responsable du traitement” au Canada et en Europe en vertu du GDPR) » de la présente politique de protection de la vie privée.

Comment enregistrons-nous vos données ?

Nous recueillons vos données lorsque vous nous les communiquez. Il peut s'agir, par exemple, d'informations que vous saisissez dans notre formulaire de contact

D'autres données sont enregistrées par nos systèmes informatiques de manière automatique ou après que vous avez consenti à leur enregistrement lors de votre visite sur le site web. Ces données comprennent principalement des informations techniques (par exemple, le navigateur web, le système d'exploitation ou l'heure à laquelle le site a été consulté). Ces informations sont enregistrées automatiquement lorsque vous accédez à ce site web.

À quelles fins utilisons-nous vos données ?

Une partie des informations est générée pour garantir la fourniture sans erreur du site web. D'autres données peuvent être utilisées pour analyser vos habitudes d'utilisation.

Quels sont vos droits en ce qui concerne vos informations ?

Vous avez le droit de recevoir à tout moment des informations sur l'origine, les destinataires et les finalités de vos données à caractère personnel archivées, sans avoir à payer de frais pour ces divulgations. Vous avez également le droit d'exiger que vos données soient rectifiées ou éradiquées. Si vous avez consenti au traitement des données, vous avez la possibilité de révoquer ce consentement à tout moment, ce qui affectera tout traitement futur des données. En outre, vous avez le droit d'exiger que le traitement de vos données soit limité dans certaines circonstances. En outre, vous avez le droit d'introduire une réclamation auprès de l'agence de contrôle compétente.

N'hésitez pas à nous contacter à tout moment si vous avez des questions à ce sujet ou sur toute autre question relative à la protection des données.

Outils d'analyse et outils fournis par des tiers

Il est possible que vos habitudes de navigation fassent l'objet d'une analyse statistique lorsque vous visitez ce site web. Ces analyses sont effectuées principalement à l'aide de ce que nous appelons des programmes d'analyse.

Pour des informations détaillées sur ces programmes d'analyse, veuillez consulter notre déclaration de protection des données ci-dessous.

2. L'hébergement

Nous hébergeons le contenu de notre site web chez le fournisseur suivant :

Amazon Web Services (AWS)

Le fournisseur est the Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, 1855 Luxembourg (hereinafter referred to as “AWS”).

Lorsque vous visitez notre site web, vos données personnelles sont traitées sur les serveurs d'AWS. Cela peut également entraîner le transfert de données à caractère personnel à la société mère d'AWS aux États-Unis. Le transfert de données vers les États-Unis est fondé sur les clauses contractuelles types du Canada et de l'UE. Pour plus de détails, veuillez consulter : https://aws.amazon.com/de/blogs/security/aws-gdpr-data-processing-addendum/.

 

Pour plus d'informations, veuillez consulter la politique de confidentialité des données d'AWS : https://aws.amazon.com/de/privacy/?nc1=f_pr.

AWS est utilisé sur la base de l'art. 6(1)(f) GDPR. Nous avons un intérêt légitime à ce que la représentation de notre site web soit aussi fiable que possible. Si un consentement approprié a été obtenu, le traitement est effectué exclusivement sur la base de l'article 6, paragraphe 1, point a), du RGPD et de l'article 6, paragraphe 1, point b), du RGPD. 6(1)(a) GDPR et § 25 (1) TTDSG, dans la mesure où le consentement inclut le stockage de cookies ou l'accès à des informations dans l'appareil final de l'utilisateur (par exemple, empreinte digitale de l'appareil) au sens du TTDSG. Ce consentement peut être révoqué à tout moment.

L'entreprise est certifiée conformément au « cadre de protection des données UE-États-Unis » (DPF). Le DPF est un accord entre l'Union européenne et les États-Unis qui vise à garantir le respect des normes européennes de protection des données pour le traitement des données aux États-Unis. Toute entreprise certifiée dans le cadre du DPF est tenue de respecter ces normes de protection des données. Pour plus d'informations, veuillez contacter le fournisseur en cliquant sur le lien suivant : https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000TOWQAA4&status=Active

L'entreprise respecte l'ensemble du cadre prévu par la politique du Canada en matière de protection des données et de la vie privée (PPD). Le PPD vise à garantir le respect des normes canadiennes de protection des données pour le traitement des données au Canada et dans d'autres pays ne disposant pas de ces protections. Pour plus d'informations, veuillez contacter le fournisseur en cliquant sur le lien suivant : https://ised-isde.canada.ca/site/strategic-policy-sector/en/marketplace-framework-policy/data-protection-policy

Traitement des données

Nous avons conclu un accord de traitement des données (DPA) pour l'utilisation du service susmentionné. Il s'agit d'un contrat régi par les lois sur la protection de la vie privée qui garantit que le traitement des données personnelles des visiteurs de notre site web se fait uniquement sur la base de nos instructions et dans le respect du règlement GDPR.

3. Informations générales et mentions obligatoires

Protection des données

Les exploitants de ce site web et de ses pages prennent très au sérieux la protection de vos données personnelles. C'est pourquoi nous traitons vos données personnelles comme des informations confidentielles et dans le respect des dispositions légales en matière de protection des données et de la présente déclaration de protection des données.

Chaque fois que vous utilisez ce site web, diverses informations personnelles sont collectées. Les données personnelles comprennent les données qui peuvent être utilisées pour vous identifier personnellement. La présente déclaration de protection des données explique quelles données nous collectons et à quelles fins nous utilisons ces données. Elle explique également comment et dans quel but les informations sont collectées.

Nous vous informons que la transmission de données par Internet (c'est-à-dire par courrier électronique) peut présenter des lacunes en matière de sécurité. Il n'est pas possible de protéger complètement les données contre l'accès de tiers.

Informations sur la partie responsable (appelée « responsable du traitement » dans le GDPR)

The data processing controller on this website is:

CSL Silicones Inc.
144 Woodlawn Rd W
Guelph
ON N1H 1B5
Canada

Téléphone : +1-800-265-2753
Courriel : info@cslsilicones.com

Le responsable du traitement est la personne physique ou morale qui, seule ou conjointement avec d'autres, décide des finalités et des moyens du traitement des données à caractère personnel (par exemple, noms, adresses électroniques, etc.).

Durée de stockage

À moins qu'une période de conservation plus spécifique n'ait été spécifiée dans la présente politique de confidentialité, vos données personnelles resteront chez nous jusqu'à ce que l'objectif pour lequel elles ont été collectées ne soit plus d'actualité. Si vous faites valoir une demande justifiée de suppression ou si vous révoquez votre consentement au traitement des données, vos données seront supprimées, à moins que nous n'ayons d'autres raisons légalement admissibles de conserver vos données à caractère personnel (par exemple, des périodes de conservation en vertu du droit fiscal ou commercial) ; dans ce dernier cas, la suppression aura lieu après que ces raisons auront cessé de s'appliquer.

Informations générales sur la base juridique du traitement des données sur ce site web

Si vous avez consenti au traitement des données, nous traitons vos données à caractère personnel sur la base de l'art. 6(1)(a) GDPR ou Art. 9 (2)(a) GDPR, si des catégories spéciales de données sont traitées conformément à l'Art. 9 (1) DSGVO. En cas de consentement explicite au transfert de données à caractère personnel vers des pays tiers, le traitement des données est également fondé sur l'article 49, paragraphe 1, point a), du RGPD. 49 (1)(a) GDPR. Si vous avez consenti au stockage de cookies ou à l'accès aux informations contenues dans votre appareil final (par exemple, par le biais de l'empreinte digitale de l'appareil), le traitement des données est également fondé sur l'article 25, paragraphe 1, de la loi sur la protection des données. Le consentement peut être révoqué à tout moment. Si vos données sont nécessaires à l'exécution d'un contrat ou à la mise en œuvre de mesures précontractuelles, nous traitons vos données sur la base de l'art. 6(1)(b) GDPR. En outre, si vos données sont nécessaires au respect d'une obligation légale, nous les traitons sur la base de l'article 6, paragraphe 1, point c), du RGPD. 6(1)(c) GDPR. En outre, le traitement des données peut être effectué sur la base de notre intérêt légitime, conformément à l'article 6, paragraphe 1, point f), du RGPD. 6(1)(f) GDPR. Des informations sur la base juridique pertinente dans chaque cas individuel sont fournies dans les paragraphes suivants de la présente politique de confidentialité.

Désignation d'un délégué à la protection des données

Nous avons nommé un délégué à la protection des données.

BRB International B.V.

Téléphone : +31 475 560 300
Courriel : privacyofficer@brbbv.com

Informations sur le transfert de données vers des pays tiers non sécurisés par la législation sur la protection des données et le transfert vers des sociétés américaines non certifiées DPF

Nous utilisons, entre autres technologies, des outils provenant de sociétés situées dans des pays tiers qui ne sont pas sûrs au regard de la législation sur la protection des données, ainsi que des outils américains dont les fournisseurs ne sont pas certifiés au titre du cadre UE-États-Unis de protection des données (DPF). Si ces outils sont activés, vos données personnelles peuvent être transférées et traitées dans ces pays. Nous attirons votre attention sur le fait qu'aucun niveau de protection des données comparable à celui de l'UE ne peut être garanti dans les pays tiers qui ne sont pas sûrs en termes de législation sur la protection des données.

Nous tenons à souligner que les États-Unis, en tant que pays tiers sûr, ont généralement un niveau de protection des données comparable à celui du Canada et de l'UE. Le transfert de données vers les États-Unis est donc autorisé si le destinataire est certifié au titre du « cadre UE-États-Unis de protection des données » (DPF) ou s'il dispose d'assurances supplémentaires appropriées. Des informations sur les transferts vers des pays tiers, y compris les destinataires des données, figurent dans la présente politique de confidentialité.

Destinataires des données à caractère personnel

Dans le cadre de nos activités commerciales, nous coopérons avec diverses parties externes. Dans certains cas, cela nécessite également le transfert de données à caractère personnel à ces parties externes. Nous ne divulguons des données personnelles à des parties externes que si cela est nécessaire dans le cadre de l'exécution d'un contrat, si nous sommes légalement tenus de le faire (par exemple, la divulgation de données aux autorités fiscales), si nous avons un intérêt légitime dans la divulgation conformément à l'Art. 6 (1)(f) GDPR, la loi canadienne sur la protection de la vie privée ou si une autre base légale autorise la divulgation de ces données. Lorsque nous faisons appel à des sous-traitants, nous ne divulguons les données à caractère personnel de nos clients que sur la base d'un contrat valide relatif au traitement des données. En cas de traitement conjoint, un accord de traitement conjoint est conclu.

Revocation of your consent to the processing of data

A wide range of data processing transactions are possible only subject to your express consent. You can also revoke at any time any consent you have already given us. This shall be without prejudice to the lawfulness of any data collection that occurred prior to your revocation.

Right to object to the collection of data in special cases; right to object to direct advertising (Art. 21 GDPR)

IN THE EVENT THAT DATA ARE PROCESSED ON THE BASIS OF ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA BASED ON GROUNDS ARISING FROM YOUR UNIQUE SITUATION. THIS ALSO APPLIES TO ANY PROFILING BASED ON THESE PROVISIONS. TO DETERMINE THE LEGAL BASIS, ON WHICH ANY PROCESSING OF DATA IS BASED, PLEASE CONSULT THIS DATA PROTECTION DECLARATION. IF YOU LOG AN OBJECTION, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA, UNLESS WE ARE IN A POSITION TO PRESENT COMPELLING PROTECTION WORTHY GROUNDS FOR THE PROCESSING OF YOUR DATA, THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS OR IF THE PURPOSE OF THE PROCESSING IS THE CLAIMING, EXERCISING OR DEFENCE OF LEGAL ENTITLEMENTS (OBJECTION PURSUANT TO ART. 21(1) GDPR).

IF YOUR PERSONAL DATA IS BEING PROCESSED IN ORDER TO ENGAGE IN DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR AFFECTED PERSONAL DATA FOR THE PURPOSES OF SUCH ADVERTISING AT ANY TIME. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS AFFILIATED WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT ADVERTISING PURPOSES (OBJECTION PURSUANT TO ART. 21(2) GDPR).

Right to log a complaint with the competent supervisory agency

In the event of violations of the GDPR or Canada's Privacy Act, data subjects are entitled to log a complaint with a supervisory agency, in particular in the member state where they usually maintain their domicile, place of work or at the place where the alleged violation occurred. The right to log a complaint is in effect regardless of any other administrative or court proceedings available as legal recourses.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you should demand the direct transfer of the data to another controller, this will be done only if it is technically feasible.

Information about, rectification and eradication of data

Within the scope of the applicable statutory provisions, you have the right to demand information about your archived personal data, their source and recipients as well as the purpose of the processing of your data at any time. You may also have a right to have your data rectified or eradicated. If you have questions about this subject matter or any other questions about personal data, please do not hesitate to contact us at any time.

Right to demand processing restrictions

You have the right to demand the imposition of restrictions as far as the processing of your personal data is concerned. To do so, you may contact us at any time. The right to demand restriction of processing applies in the following cases:

  • In the event that you should dispute the correctness of your data archived by us, we will usually need some time to verify this claim. During the time that this investigation is ongoing, you have the right to demand that we restrict the processing of your personal data.
  • If the processing of your personal data was/is conducted in an unlawful manner, you have the option to demand the restriction of the processing of your data instead of demanding the eradication of this data.
  • If we do not need your personal data any longer and you need it to exercise, defend or claim legal entitlements, you have the right to demand the restriction of the processing of your personal data instead of its eradication.
  • If you have raised an objection pursuant to Art. 21(1) GDPR, your rights and our rights will have to be weighed against each other. As long as it has not been determined whose interests prevail, you have the right to demand a restriction of the processing of your personal data.

If you have restricted the processing of your personal data, these data – with the exception of their archiving – may be processed only subject to your consent or to claim, exercise or defend legal entitlements or to protect the rights of other natural persons or legal entities or for important public interest reasons cited by the European Union or a member state of the EU.

SSL and/or TLS encryption

For security reasons and to protect the transmission of confidential content, such as purchase orders or inquiries you submit to us as the website operator, this website uses either an SSL or a TLS encryption program. You can recognize an encrypted connection by checking whether the address line of the browser switches from “http://” to “https://” and also by the appearance of the lock icon in the browser line.

If the SSL or TLS encryption is activated, data you transmit to us cannot be read by third parties.

4. Recording of data on this website

Cookies

Our websites and pages use what the industry refers to as “cookies.” Cookies are small data packages that do not cause any damage to your device. They are either stored temporarily for the duration of a session (session cookies), or they are permanently archived on your device (permanent cookies). Session cookies are automatically deleted once you terminate your visit. Permanent cookies remain archived on your device until you actively delete them, or they are automatically eradicated by your web browser.

Cookies can be issued by us (first-party cookies) or by third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain services of third-party companies into websites (e.g., cookies for handling payment services).

Cookies have a variety of functions. Many cookies are technically essential since certain website functions would not work in the absence of these cookies (e.g., the shopping cart function or the display of videos). Other cookies may be used to analyze user behaviour or for promotional purposes.

Cookies, which are required for the performance of electronic communication transactions, for the provision of certain functions you want to use (e.g., for the shopping cart function) or those that are necessary for the optimization (required cookies) of the website (e.g., cookies that provide measurable insights into the web audience), shall be stored on the basis of Art. 6(1)(f) GDPR, unless a different legal basis is cited. The operator of the website has a legitimate interest in the storage of required cookies to ensure the technically error-free and optimized provision of the operator’s services. If your consent to the storage of the cookies and similar recognition technologies has been requested, the processing occurs exclusively on the basis of the consent obtained (Art. 6(1)(a) GDPR and § 25 (1) TTDSG); this consent may be revoked at any time.

You have the option to set up your browser in such a manner that you will be notified any time cookies are placed and to permit the acceptance of cookies only in specific cases. You may also exclude the acceptance of cookies in certain cases or in general or activate the delete function for the automatic eradication of cookies when the browser closes. If cookies are deactivated, the functions of this website may be limited.

Which cookies and services are used on this website can be found in this privacy policy.

Consent with Usercentrics

 

This website uses the consent technology of Usercentrics to obtain your consent to the storage of certain cookies on your device or for the use of specific technologies, and to document the former in a data protection compliant manner. The party offering this technology is Usercentrics GmbH, Sendlinger Straße 7, 80331 München, Germany, website: https://usercentrics.com/ (hereinafter referred to as “Usercentrics”).

 

Whenever you visit our website, the following personal data will be transferred to Usercentrics:

  • Your declaration(s) of consent or your revocation of your declaration(s) of consent
  • Your IP address
  • Information about your browser
  • Information about your device
  • The date and time you visited our website
  • Geolocation

Moreover, Usercentrics shall store a cookie in your browser to be able to allocate your declaration(s) of consent or any revocations of the former. The data that are recorded in this manner shall be stored until you ask us to eradicate them, delete the Usercentrics cookie or until the purpose for archiving the data no longer exists. This shall be without prejudice to any mandatory legal retention periods.

Usercentrics uses cookies to obtain the declarations of consent mandated by law. The legal basis for the use of specific technologies is Art. 6(1)(c) GDPR.

Data processing

We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.

Server log files

The provider of this website and its pages automatically collects and stores information in so-called server log files, which your browser communicates to us automatically. The information comprises:

  • The type and version of browser used
  • The used operating system
  • Referrer URL
  • The hostname of the accessing computer
  • The time of the server inquiry
  • The IP address

This data is not merged with other data sources.

This data is recorded on the basis of Art. 6(1)(f) GDPR. The operator of the website has a legitimate interest in the technically error free depiction and the optimization of the operator’s website. In order to achieve this, server log files must be recorded.

Contact form

If you submit inquiries to us via our contact form, the information provided in the contact form as well as any contact information provided therein will be stored by us in order to handle your inquiry and in the event that we have further questions. We will not share this information without your consent.

The processing of these data is based on Art. 6(1)(b) GDPR, if your request is related to the execution of a contract or if it is necessary to carry out pre-contractual measures. In all other cases the processing is based on our legitimate interest in the effective processing of the requests addressed to us (Art. 6(1)(f) GDPR) or on your agreement (Art. 6(1)(a) GDPR) if this has been requested; the consent can be revoked at any time.

The information you have entered into the contact form shall remain with us until you ask us to eradicate the data, revoke your consent to the archiving of data or if the purpose for which the information is being archived no longer exists (e.g., after we have concluded our response to your inquiry). This shall be without prejudice to any mandatory legal provisions, in particular retention periods.

Request by e-mail, telephone, or fax

If you contact us by e-mail, telephone or fax, your request, including all resulting personal data (name, request) will be stored and processed by us for the purpose of processing your request. We do not pass these data on without your consent.

These data are processed on the basis of Art. 6(1)(b) GDPR if your inquiry is related to the fulfillment of a contract or is required for the performance of pre-contractual measures. In all other cases, the data are processed on the basis of our legitimate interest in the effective handling of inquiries submitted to us (Art. 6(1)(f) GDPR) or on the basis of your consent (Art. 6(1)(a) GDPR) if it has been obtained; the consent can be revoked at any time.

The data sent by you to us via contact requests remain with us until you request us to delete, revoke your consent to the storage or the purpose for the data storage lapses (e.g. after completion of your request). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.

5. Analysis tools and advertising

Google Tag Manager

We use the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

The Google Tag Manager is a tool that allows us to integrate tracking or statistical tools and other technologies on our website. The Google Tag Manager itself does not create any user profiles, does not store cookies, and does not carry out any independent analyses. It only manages and runs the tools integrated via it. However, the Google Tag Manager does collect your IP address, which may also be transferred to Google’s parent company in the United States.

The Google Tag Manager is used on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the quick and uncomplicated integration and administration of various tools on his website. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time.

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyze the behavior patterns of website visitors. To that end, the website operator receives a variety of user data, such as pages accessed, time spent on the page, the utilized operating system and the user’s origin. This data is assigned to the respective end device of the user. An assignment to a user-ID does not take place.

Furthermore, Google Analytics allows us to record your mouse and scroll movements and clicks, among other things. Google Analytics uses various modeling approaches to augment the collected data sets and uses machine learning technologies in data analysis.

Google Analytics uses technologies that make the recognition of the user for the purpose of analyzing the user behavior patterns (e.g., cookies or device fingerprinting). The website use information recorded by Google is, as a rule transferred to a Google server in the United States, where it is stored.

The use of these services occurs on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TTDSG. You may revoke your consent at any time.

Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active

IP anonymization

Google Analytics IP anonymization is active. As a result, your IP address will be abbreviated by Google within the member states of the European Union or in other states that have ratified the Convention on the European Economic Area prior to its transmission to the United States. The full IP address will be transmitted to one of Google’s servers in the United States and abbreviated there only in exceptional cases. On behalf of the operator of this website, Google shall use this information to analyze your use of this website to generate reports on website activities and to render other services to the operator of this website that are related to the use of the website and the Internet. The IP address transmitted in conjunction with Google Analytics from your browser shall not be merged with other data in Google’s possession.

Browser plug-in

You can prevent the recording and processing of your data by Google by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

For more information about the handling of user data by Google Analytics, please consult Google’s Data Privacy Declaration at: https://support.google.com/analytics/answer/6004245?hl=en.

Contract data processing

We have executed a contract data processing agreement with Google and are implementing the stringent provisions of the German data protection agencies to the fullest when using Google Analytics.

6. Plug-ins and Tools

YouTube with expanded data protection integration

Our website embeds videos of the website YouTube. The website operator is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in the expanded data protection mode. According to YouTube, this mode ensures that YouTube does not store any information about visitors to this website before they watch the video. Nevertheless, this does not necessarily mean that the sharing of data with YouTube partners can be ruled out as a result of the expanded data protection mode. For instance, regardless of whether you are watching a video, YouTube will always establish a connection with the Google Marketing Network.

As soon as you start to play a YouTube video on this website, a connection to YouTube’s servers will be established. As a result, the YouTube server will be notified, which of our pages you have visited. If you are logged into your YouTube account while you visit our site, you enable YouTube to directly allocate your browsing patterns to your personal profile. You have the option to prevent this by logging out of your YouTube account.

Furthermore, after you have started to play a video, YouTube will be able to place various cookies on your device or comparable technologies for recognition (e.g. device fingerprinting). In this way YouTube will be able to obtain information about this website’s visitors. Among other things, this information will be used to generate video statistics with the aim of improving the user friendliness of the site and to prevent attempts to commit fraud.

Under certain circumstances, additional data processing transactions may be triggered after you have started to play a YouTube video, which are beyond our control.

The use of YouTube is based on our interest in presenting our online content in an appealing manner. Pursuant to Art. 6(1)(f) GDPR, this is a legitimate interest. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time.

For more information on how YouTube handles user data, please consult the YouTube Data Privacy Policy under: https://policies.google.com/privacy?hl=en.

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active

Vimeo Without Tracking (Do-Not-Track)

This website uses plugins of the Vimeo video portal. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.

Whenever you visit one of our pages featuring Vimeo videos, a connection with the servers of Vimeo is established. In conjunction with this, the Vimeo server receives information about which of our sites you have visited. Vimeo also receives your IP address. However, we have set up Vimeo in such a way that Vimeo cannot track your user activities and does not place any cookies.

We use Vimeo to make our online presentation attractive for you. This is a legitimate interest on our part pursuant to Art. 6(1)(f) GDPR. If a respective declaration of consent was requested (e.g. concerning the storage of cookies), processing shall occur exclusively on the basis of Art. 6(1)(a) GDPR; the given consent may be revoked at any time.

Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission and, according to Vimeo, on “legitimate business interests”. Details can be found here: https://vimeo.com/privacy.

For more information on the handling of user data, please consult Vimeo’s data privacy policy at: https://vimeo.com/privacy

Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter referred to as “reCAPTCHA”) on this website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

The purpose of reCAPTCHA is to determine whether data entered on this website (e.g., information entered into a contact form) is being provided by a human user or by an automated program. To determine this, reCAPTCHA analyzes the behavior of the website visitors based on a variety of parameters. This analysis is triggered automatically as soon as the website visitor enters the site. For this analysis, reCAPTCHA evaluates a variety of data (e.g., IP address, time the website visitor spent on the site or cursor movements initiated by the user). The data tracked during such analyses are forwarded to Google.

reCAPTCHA analyses run entirely in the background. Website visitors are not alerted that an analysis is underway.

Data are stored and analyzed on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the protection of the operator’s websites against abusive automated spying and against SPAM. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time.

For more information about Google reCAPTCHA please refer to the Google Data Privacy Declaration and Terms Of Use under the following links: https://policies.google.com/privacy?hl=en and https://policies.google.com/terms?hl=en.

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active

7. Custom Services

Handling applicant data

We offer website visitors the opportunity to submit job applications to us (e.g., via e-mail, via postal services on by submitting the online job application form). Below, we will brief you on the scope, purpose and use of the personal data collected from you in conjunction with the application process. We assure you that the collection, processing, and use of your data will occur in compliance with the applicable data privacy rights and all other statutory provisions and that your data will always be treated as strictly confidential.

Scope and purpose of the collection of data

If you submit a job application to us, we will process any affiliated personal data (e.g., contact and communications data, application documents, notes taken during job interviews, etc.), if they are required to make a decision concerning the establishment or an employment relationship. The legal grounds for the aforementioned are § 26 BDSG according to German Law (Negotiation of an Employment Relationship), Art. 6(1)(b) GDPR (General Contract Negotiations) and – provided you have given us your consent – Art. 6(1)(a) GDPR. You may revoke any consent given at any time. Within our company, your personal data will only be shared with individuals who are involved in the processing of your job application.

If your job application should result in your recruitment, the data you have submitted will be archived on the grounds of § 26 BDSG and Art. 6(1)(b) GDPR for the purpose of implementing the employment relationship in our data processing system.

Data Archiving Period

If we are unable to make you a job offer or you reject a job offer or withdraw your application, we reserve the right to retain the data you have submitted on the basis of our legitimate interests (Art. 6(1)(f) GDPR) for up to 6 months from the end of the application procedure (rejection or withdrawal of the application). Afterwards the data will be deleted, and the physical application documents will be destroyed. The storage serves in particular as evidence in the event of a legal dispute. If it is evident that the data will be required after the expiry of the 6-month period (e.g., due to an impending or pending legal dispute), deletion will only take place when the purpose for further storage no longer applies.

Longer storage may also take place if you have given your agreement (Article 6(1)(a) GDPR) or if statutory data retention requirements preclude the deletion.