Data Protection

Privacy Policy

Thank you for your interest in our enterprise. Data protection enjoys very high priority for the management of IGK Isolierglasklebstoffe GmbH. You can generally use the website of IGK Isolierglasklebstoffe GmbH without submitting any personal data whatsoever. However, if the data subject wishes to take advantage of special services via our website, it may be necessary to process personal data for this purpose. If it is necessary to process personal data and if there is no legal basis for such processing, we will generally obtain the consent of the data subject.

The processing of personal data, for example the name, address, e-mail address or telephone number of a data subject, always occurs in accordance with the General Data Protection Regulation, and in compliance with the country specific data protection provisions applicable to IGK Isolierglasklebstoffe GmbH. With this Privacy Policy, our enterprise would like to inform the public about the nature, scope and purpose of the processing of personal data collected, used and processed by us. Furthermore, data subjects will be informed of their rights via this privacy policy.

IGK Isolierglasklebstoffe GmbH as the processing controller has implemented numerous technical and organisational measures to ensure the most complete protection possible of personal data processed via this website. In spite of this, however, security loopholes are always possible in Internet-based transfers of data, so that we cannot guarantee total protection of the same. For this reason, any data subject is free to transfer personal data to us in alternative ways, for example by telephone.

 

  1. Definitions

The privacy policy of IGK Isolierglasklebstoffe GmbH is based on the notions which are used by the issuers of European guidelines and regulators on adoption of the General Data Protection Regulation (GDPR). Our privacy policy should be easy to read and understand, both for the public and for our customers and business partners. To guarantee this, we would like to explain the notions used beforehand.

In this privacy policy, we use the following notions amongst others:

  • a) Personal data

Personal data are any information relating to an identified or identifiable natural person (hereinafter “data subject”). A natural person is considered identifiable if they can be identified either directly or indirectly, in particular through the assignation of an identifier such as a name, an identification number, location data, online ID, or one or several other characteristics which form the expression of a person’s physical, physiological, genetic, psychological, economic, cultural or social identity.

  • b) Data subject

Data subject
A data subject is any identified or identifiable natural person whose personal data are processed by the controller responsible for processing.

  • c) Processing

Processing is any activity performed with or without help of automated processes or each such sequence of activities related to personal data such as the collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, the alignment or combination, restriction, erasure or destruction.

  • d) Restriction of processing

Restriction of processing means the marking of stored personal data with the aim of limiting their processing in the future.

  • e) Profiling

“Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic circumstances, health, personal preferences, interests, reliability, behaviour, location or movements.

  • f) Pseudonymisation

“Pseudonymisation means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.

  • g) Controller or processing controller

Controller or processing controller means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. If the purposes and means of this processing are specified by the Union law or the law of Member States, then the Controller and/or the specified criteria can be designated according to the Union law or the law of the Member States.

  • h) Processor

Processor means a natural or legal person, public authority, agency or other body who/which processes personal data on behalf of the controller.

  • i) Recipient

Recipient means a natural or legal person, public authority, agency or another body to which personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients.

  • j) Third party

‘Third party’ means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.

  • k) Consent

‘Consent’ of the data subject means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.

 

  1. Name and contact details of the data controller

The controller in accordance with the General Data Protection Regulation, other data protection laws which apply in the member states of the European Union and any other statutory data protection regulations is:

IGK Isolierglasklebstoffe GmbH
Managing Director Dr. Michael Vollrath-Rödiger, Frithjof Funck, Dr. Randolf Karrer
Gewerbepark Hasselroth

Albert-Einstein-Str. 5
63594 Hasselroth
Germany

Tel.: +49 6055 9060 0
Fax: +49 6055 9060 22
E-mail: datenschutz@igk.global
Website: www.igk.global

 

  1. Gathering of personal data and information

The website of IGK Isolierglasklebstoffe GmbH collects a range of general data and information with every access to the website by a data subject or an automated system. Said general data and information is stored by the EV Group in the log files of our server. We may collect (1) the type of browser and versions used, (2) the operating system used by the accessing system, (3) the website from where an accessing system has come across our website (so called referrer), (4) the sub pages accessed on our website via the accessing system, (5) the date and time of access to the website, (6) an Website: protocol, record – (IP address), (7) the Internet service provider of the accessing system and (8) other similar data and information utilised to fend off danger in the case of attacks on our information technology systems.

When using this general data and information, IGK Isolierglasklebstoffe GmbH does not draw conclusions on the identity of the data subject. This information is in fact required (1) to correctly display the content of our website, (2) to optimise the content as well as the advertising relating to the website, (3) to guarantee the long-term functionality of our IT systems and the technology of our website and (4) to provide prosecution authorities with the information necessary for the prosecution in case of a cyber attack. This data and information is collected anonymously by IGK Isolierglasklebstoffe GmbH for statistical purposes and also processed in order to improve data protection and security in our company with the aim of providing an ideal level of protection for the personal data we process. The anonymous data from the server log files is stored separately from all personal data submitted by a data subject.

 

  1. Registration on our website

The data subject has the possibility to register on the website of the processing controlling, stating their personal data. Which personal data are transferred to the processing controller in doing so, is laid down by the relevant input screen which is used for registration. The personal data entered by the data subject, will exclusively be collected and stored for internal use by the processing controller, and for their own purposes. The processing controller can initiate disclosure to one or several processors, for example a package service provider, who will also exclusively use the personal data for internally purposes, which are to be attributed to the processing controller.

By registering on the website of the processing controller, the IP address assigned by the Internet-Service-Provider (ISP) of the data subject, the date and time of registration will also be stored. These data are stored in light of the fact, that only in this way can abuse of our services be prevented, and if required, these data allow crimes committed to be solved. Thus the storage of such data is required for the legal protection of the processing controller. This data will not be disclosed to third parties, unless a legal obligation to disclosure exists or disclosure serves law enforcement purposes.

The registration of the data subject, with voluntary statement of personal data serves the processing controller to offer the data subject content or services which can only be offered to registered users, due to the nature of the matter. Registered persons have the possibility to change the personal data stated on registration at any time, or have it completely erased from the database of the processing controller.

The processing controller issues every data subject with information about the personal data stored about the data subject, at any time, on request. Furthermore, the processing controller rectifies or erases the personal data at the request or information of the data subject, unless legal storage obligations prevent this. A Data Protection Officer mentioned by name in this privacy policy, and all of the employees of the processing controller are available to the data subject as contacts in this context.

 

  1. Establish Contact options via the website

Due to legal provisions, the website of IGK Isolierglasklebstoffe GmbH comprises details allowing for fast electronic contacting, which also comprises a general address of the so-called electronic mail (e-mail address). If a data subject contacts the processing controller via e-mail or a contact form, the personal data transferred by the data subject will automatically be stored. Such personal data transferred to the processing controller on a voluntary basis, will be stored for purposes of processing, or to contact the data subject. These personal data will not be passed on to third parties.

 

  1. Erasure and blocking of personal data

The processing controller processes and stores the personal data of the data subject only for the period required to achieve the purpose of storage, or if this is provided for by the European guidelines and regulator or another legislator in laws or rules, which the processing controller is subject to.

If the purpose of storage is inapplicable or a storage period specified by the European guidelines and regulator or another legislator elapses, the personal data will be routinely blocked or erased according to the legal regulations.

 

  1. Rights of the Data Subjects
  • a) right of confirmation

Each data subject is assigned the right by the issuers of European guidelines and regulators to demand confirmation whether personal data are being stored about them by the processing controller. If a data subject would like to make use of this right to confirmation, they can contact our Data Protection Officer or another employee of the processing controller about this at any time.

  • b) Right of access

Any data subject of processing personal data has the right granted by the issuers of European guidelines and regulators to receive information about the personal data stored about them, from the processing controller free of charge, at any time, and obtain a copy of this information. Furthermore, the issuer of European guidelines and regulators have acknowledged disclosure of the following information about the data subject:

  • the purposes of processing
  • the categories of personal data processed
  • the recipients or categories of recipients to whom the personal data has been or will still be disclosed, especially for recipients in third countries or for international
  • where possible, the intended duration for which the personal data will be retained or, if this is not possible, the criteria for the determination of this duration
  • the existence of the right to request from the Data Controller rectification or erasure of personal data concerning you or restriction of processing of personal data concerning you or to object to such processing
  • the right to lodge a complaint with a supervisory authority
  • where the personal data are not collected from the data subject: Any available information as to their source
  • the existence of automated decision-making including profiling under Art. 22 (1) and (4) DS – GDPR and – at least in these cases – meaningful information on the logic involved as well as the significance and the envisaged consequences of such processing for the data subject

Furthermore, the data subject has a right to be provided with information as to whether any personal data was transmitted to a third country or to an international organisation. Where this is the case, the data subject also has the right to be informed of the appropriate safeguards relating to the transfer.

If a data subject would like to make use of this right of access, they can contact our Data Protection Officer or another employee of the processing controller about this at any time.

  • c) Right to rectification

Each person affected by the processing of personal data has the right to demand the immediate correction of incorrect personal data. Furthermore, you have the right to request completion of incomplete personal data, also by a complementary declaration, taking into account the purposes of processing.

If a data subject would like to make use of this right to rectification, they can contact our Data Protection Officer or another employee of the processing controller about this at any time.

  • d) Right to Erasure (Right to be Forgotten”)

Each person affected by the processing of personal data has the right granted by the issuers of European guidelines and regulators, to demand the immediate erasure of the relevant personal data by the controller, if one of the following reasons applies, and processing is not required:

  • The personal data was collected for any purposes or processed in any other manner for which it is no longer required.
  • You withdraw your consent, on which any processing acc. to Art. 6 Para. 1 Letter a GDPR or Art. 9.(2) Letter a GDPR is based, or any other legal basis for processing is lacking.
  • You object to any processing acc. to Art. 21 (1) GDPR and there are no overriding legitimate grounds for any processing or you object to any processing acc. to Art. 21 (2) DS – GDPR.
  • The personal data have been unlawfully processed.
  • The personal data are to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.
  • The personal data were collected in relation to information society services acc. to Art. 8 (1) DS – GDPR.

If one of the aforementioned reasons applies and a data subject would like to arrange the erasure of personal data that is saved by IGK Isolierglasklebstoffe GmbH, they can contact our Data Protection Officer or another employee of the processing controller about this at any time. The Data Protection Officer of IGK Isolierglasklebstoffe GmbH or another employee will arrange for the erasure process to be complied with immediately.

If IGK Isolierglasklebstoffe GmbH has made any personal data public and our enterprise, as controller acc. to Art. 17 (1) DS – GDPR, is obliged to erase the personal data, IGK Isolierglasklebstoffe GmbH will take adequate measures, also of a technical kind, taking into account the technology available and the implementation costs, to inform other controllers processing the published personal data that the data subject requested such other controllers to erase all links to such personal data or of copies or replications of such personal data, unless processing is required. The Data Protection Officer of IGK Isolierglasklebstoffe GmbH or another employee will arrange the necessary measures in individual cases.

  • e) Right to Restriction of Processing

Each person affected by the processing of personal data has the right granted by the issuers of European guidelines and regulators to demand the restriction of processing by the controller if one of the following provisions applies:

  • The data subject challenges the accuracy of the personal data for a period that enables us to verify the accuracy of such personal data.
  • Processing is unlawful, but the data subject refuses erasure of the personal data, requesting instead that use of the personal data be restricted.
  • We do no longer need the personal data for the purposes of processing, but the data subject needs it to assert, exercise or defend legal claims.
  • The data subject has objected to any processing acc. to Art. 21 (1) DS – GDPR and it has not yet been established whether our legitimate grounds outweigh those of the data subject.

If one of the aforementioned reasons applies, and a data subject would like to demand the restriction of personal data that is saved by IGK Isolierglasklebstoffe GmbH, they can contact our Data Protection Officer or another employee of the processing controller about this at any time. The Data Protection Officer of IGK Isolierglasklebstoffe GmbH or another employee will arrange the restriction of processing.

  • f) Right to Data Portability

Each person affected by the processing of personal data has the right granted by the issuers of European guidelines and regulators, to receive the relevant personal data, which has been provided to the controller by the data subject, in a structured, current and machine readable format. Moreover, you have the right to transmit such Data to other controllers without hindrance by the controller, who was provided with the personal data, provided that such processing is based on the consent acc. to Art. 6 (1) Letter a GDPR or Art. 9 (2) Letter a GDPR or on a contract acc. to Art. 6 (1) Letter b GDPR and the processing is carried out by automated means, unless such processing is required to perform any task carried out in the public interest or in the exercise of official authority vested in the controller.

Furthermore, when exercising your right to data portability according to art. 20 (1) GDPR, the data subject has the right to effect that the personal data will be transmitted directly by us to another controller, where this is technically feasible and will not impair the rights and freedoms of others.

To establish the right to data portability, the data subject can contact the Data Protection Officer of IGK Isolierglasklebstoffe GmbH or another employee of the processing controller about this at any time.

  • g) Right to object

Each person affected by the processing of personal data has the right granted by the issuers of European guidelines and regulators to object, on grounds relating to your particular situation, at any time, to the processing of personal data concerning you that is based on Art. 6(1)(e) or (f) DS – GDPR. This also applies to profiling based on these provisions.

If you object, IGK Isolierglasklebstoffe GmbH will no longer process the personal data, unless we can demonstrate compelling legitimate grounds for such processing which override your interests, rights and freedoms or we show transparently that such processing serves the establishment, exercise or defence of legal claims.

If IGK Isolierglasklebstoffe GmbH processes personal data for direct marketing purposes, then the data subject has the right to object to the processing of personal data for the purposes of such advertising at any time. This also applies to profiling, if it is connected to such direct marketing. If the data subject objects to IGK Isolierglasklebstoffe GmbH processing data for the purposes of direct marketing, IGK Isolierglasklebstoffe GmbH will no longer process the personal data for these purposes.

In addition, the data subject has the right to object on grounds relating to their particular situation, to processing of personal data concerning them for scientific or historical research purposes or statistical purposes pursuant to Art. 89(1) DS – GDPR, unless processing is required for carrying out a task that is in the public interest.

To establish the right to objection, the data subject can contact the Data Protection Officer of IGK Isolierglasklebstoffe GmbH or another employee about this at any time. Furthermore, the data subject may also exercise their right to object by automated means, using technical specifications in the context of the use of information society services, and notwithstanding Directive 2002/58/EC.

  • h) Automated Individual Decision-Making Including Profiling

Each person affected by the processing of personal data has the right granted by the issuers of European guidelines and regulators, not to be subject to a decision which is based solely on automated processing, including profiling, and which produces legal effects concerning him or her or similarly significantly affects him or her, unless the decision (1) is necessary for the entering or performance of a contract between the data subject and a controller or (2) is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or (3) when the data subject has given his or her explicit consent.

If the decision (1) is necessary for the entering or performance of a contract between the data subject and a controller or (2) when the data subject has given his or her explicit consent, IGK Isolierglasklebstoffe GmbH shall implement suitable measures to safeguard the rights and freedoms and legitimate interests of the data subject, which includes the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest the decision.

If a data subject would like to make use rights regarding automated decisions, they can contact our Data Protection Officer or another employee of the processing controller about this at any time.

  • i) Right to withdraw consent given under data protection law

Each person affected by the processing of personal data has the right granted by the issuers of European guidelines and regulators, to withdraw consent to processing of personal data at any time.

If a data subject would like to make use of this right to withdrawal of Consent, they can contact our Data Protection Officer or another employee of the processing controller about this at any time.

If a data subject would like to make use rights regarding automated decisions, they can contact our Data Protection Officer or another employee of the processing controller about this at any time.

  • j) Right to lodge a complaint

Each person affected by the processing of personal data has the right to complain to the relevant supervisory authority if they are of the opinion that the processing of their personal data is unlawful (Art. 77 GDPR).

The address of the supervisory authority in charge for us is:

The Hesse Data Protection Officer
PO Box 3163
65021 Wiesbaden

  1. Data protection in applications and in the application process

The processing controller collects and processes personal data of applicants for the purposes of managing the application process. Processing can also take place electronically. This is particularly the case if an applicant transfers such application documents to the processing controller electronically, for example by e-mail or a web form on the website. If the processing controller enters into an employment contract with the user, the data transferred will be stored for the purpose of managing the employment relationship observing the applicable legal provisions. If the processing controller does not enter into an employment contract with the applicant, the application documents will be automatically erased two months after announcement of the rejection decision, unless an erasure prejudices other legitimate interests of the processing controller. Other legitimate interests in this context shall include, for example, burden of proof in a process under the General Equal Treatment Act (AGG).

  1. Legal bases of the processing

Art. 6(1) Point I(a) DS – GDPR serves our enterprise as a legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is a necessity for the performance of a contract, to which the data subject is party, as is the case in processing operations for example, which is a necessity for the delivery of goods or the provision of such a service or return service, then the processing is based on Art. 6 I lit. b GDPR. The same applies for such processing operations in order to take steps prior to entering into a contract, such as in the case of queries about our products or services. If our enterprise is subject to a legal obligation, whereby the processing of personal data is a necessity, for example to fulfil tax obligations, then the processing is based on Art. 6 I lit. c GDPR. In rare cases, the processing of personal data could be necessary to protect vital interests of the data subject or another natural person. This would be the case for example, if a visitor was to be injured in our operation and as a result his name, age, health insurance data or other vital information have to be transferred to a doctor, hospital or other third party. Then, the processing would be based on Art. 6 I point. d GDPR. Finally, processing operations could be based on Art. 6 I point f GDPR. This legal basis applies to processing operations, that are not encompassed by any of the aforementioned legal bases if processing is a necessity to safeguard the legitimate interest of our enterprise, if the interests, basic rights and freedoms of the data subject do not prevail. Such processing operations are particularly permitted, because they are specifically mentioned by the European legislator. Thus, they are of the opinion that a legitimate interest could be assumed, if the data subject is a customer of the controller (recital 47 sentence 2 GDPR).

  1. Legitimate interests in processing, which are followed by the controller or a third party

If the processing of personal data is based on Art. 6 I point f GDPR, our legitimate interest is carrying out our business activities in favour of the well-being of all our employees and our shareholders.

  1. Duration for which personal data are stored

The criteria for the duration of storage of personal data is the relevant legal storage period. After expiry of the period, the corresponding data will be routinely erased, unless they are still required for the contract performance.

  1. Statutory or contractual requirements for the provision of personal data; necessary to enter into a contract, obligation of data subject to provide personal data; possible consequences of failure to provide such data

We make you aware that the provision of personal data is sometimes a statutory requirement (e.g. tax regulations) or can arise from contractual regulations (e.g. Details about the contractual partner). Sometimes, it can be necessary for a data subject to provide personal data to enter into a contract, which as a result must be processed by us. For example, the data subject is obliged to provide us with personal data if our enterprise enters into a contract with them. If the personal data are not provided, this has the consequence that the contract cannot be entered into with the data subject. Before provision of personal data by the data subject, the data subject must contact our Data Protection Officer. Our Data Protection Officer explains to the data subject in relation to the individual case, whether the provision of data is a statutory or contractual requirement or necessary to enter into a contract, whether there is an obligation to provide personal data, and what the consequences of not providing personal data would be.

  1. Existence of automated decision-making

As a responsible enterprise, we refrain from automated decision making or profiling.

  1. Cookies

Some of the websites use cookies. Cookies do not harm your computer and do not contain viruses. Cookies serve the purpose of making our website more user-friendly, effective and secure. Cookies are small text files that are placed on your computer and stored by your browser.

Most of the cookies used by us are so-called “session cookies“. These are deleted automatically at the end of your visit. Other cookies are stored on your end device until you delete them. These cookies allow us to recognise your browser during your next visit to our site.

You can set your browser to inform you when cookies are being placed and to only allow cookies on a case-by-case basis, to refuse cookies in certain cases or in general, and to activate the automatic deletion of cookies when you close the browser. Deactivating cookies may limit the full functionality of this website.

Contact form

If you send us enquiries using the contact form, we will store your data from the enquiry form including the contact data specified there by you for processing the enquiry and in case follow-up questions arise. We will not pass such information on without your consent.

Google Analytics

This website uses the functions of the web analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.

Google Analytics uses so-called “cookies“. These are text files stored on your computer allowing them to analyse how you use our website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

IP anonymisation

We have activated the IP anonymisation function on this website. This means that your IP address is abbreviated by Google within European Union member states or other states which are part of the European Economic Area before it is transmitted to the US. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and abbreviated there. On behalf of the provider of this website, Google uses this information to analyse your use of the website, to compile reports about the website activity and to provide further services which are connected to the use of this website and of the Internet for its operator. IP addresses which Google Analytics transmits from your browser will not be combined with other data from Google.

Browser plug in

By changing your browser settings accordingly, you may prevent cookies from being stored; however, we point out that you may not have full access to all the functions of this website if this is the case.. In addition, you can prevent Google from collecting and processing the data generated by the cookie relating to your use of our websites (including your IP address) by downloading and installing the browser plug-in, which is available under: https://tools.google.com/dlpage/gaoptout?hl=de

Objection to collection of data

You can prevent Google Analytics from collecting your data by clicking on the following link. This places an opt-out cookie which prevents the future collection of your data when visiting this website: Deactivate Google Analytics

Please refer to the privacy policy of Google for further information about the handling of user data at Google Analytics:
https://support.google.com/analytics/answer/6004245?hl=de

Demographic data in Google Analytics

This website uses the “demographic data” function of Google Analytics. This allows for the compilation of reports that contain information regarding the age, gender and interests of the visitors to the website. These data originate from interest-based advertising from Google as well as third-party visitor data. These data cannot be associated with a specific person. You can deactivate this function using the display settings in your Google account at any time or you can generally prohibit the collection of your data by Google Analytics as described in the section “objection to data processing”.

  1. YouTube

Our website uses plug-ins of the YouTube website operated by Google. The operator of the websites is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. If you visit one of our websites that features a YouTube plug-in, a connection with the YouTube servers is established. In this context, the YouTube server is informed about which of our websites you have visited.

If you are logged in to your YouTube account YouTube allows you to associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account.

For more information on how we handle user data, please refer to the YouTube privacy policy at: https://www.google.de/intl/de/policies/privacy

 

This post is also available in: German French Spanish