Privacy Policy of CCT GmbH
Privacy Policy
1) Information on the Collection of Personal Data and Contact Details of the Controller
1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when using our website. Personal data is any data that can be used to personally identify you.
1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is CCT Composite Coating Services GmbH, Zeppelinstr. 33, 73760 Ostfildern, Germany, Tel.: +49 (0) 711 907346-0, Fax: +49 (0) 711 907346-20, Email: g.kurrle@cct-plating.com. The controller responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string “https://” and the lock symbol in your browser’s address bar.
2) Data Collection When Visiting Our Website
In the case of merely informational use of our website, i.e. if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to our server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:
- The website visited
- Date and time of access
- Amount of data sent in bytes
- Source/referrer from which you accessed the page
- Browser used
- Operating system used
- IP address used (if applicable, in anonymized form)
Processing takes place in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. However, we reserve the right to subsequently review the server log files if there are concrete indications of unlawful use.
3) Cookies
In order to make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your device and enable us or our partner companies (third-party cookies) to recognize your browser the next time you visit (persistent cookies). If cookies are set, they collect and process certain user information, such as browser and location data as well as IP address values, to an individual extent. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie.
If personal data is also processed through individual cookies implemented by us, this processing is carried out in accordance with Art. 6 (1) lit. b GDPR either for the performance of the contract, or in accordance with Art. 6 (1) lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the site visit.
We may work with advertising partners who help us make our online offering more interesting for you. For this purpose, cookies from partner companies (third-party cookies) may also be stored on your hard drive when you visit our website. If we work with the aforementioned advertising partners, you will be informed individually and separately about the use of such cookies and the scope of the information collected in each case within the paragraphs below.
Please note that you can set your browser so that you are informed about the setting of cookies and decide individually on their acceptance, or exclude the acceptance of cookies for certain cases or generally. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browsers under the following links:
Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
Opera: http://help.opera.com/Windows/10.20/de/cookies.html
Please note that if you do not accept cookies, the functionality of our website may be limited.
4) Contact
Personal data is collected when you contact us (e.g. via contact form or email). Which data is collected when using a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your inquiry, or for making contact and the associated technical administration. The legal basis for processing this data is our legitimate interest in responding to your inquiry pursuant to Art. 6 (1) lit. f GDPR. If your contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 (1) lit. b GDPR. Your data will be deleted once your inquiry has been finally processed. This is the case if it can be inferred from the circumstances that the matter in question has been conclusively resolved, and provided that no statutory retention obligations stand in the way.
5) Use of Customer Data for Direct Marketing
5.1 Registration for Our Email Newsletter
If you register for our email newsletter, we will regularly send you information about our offers. The only mandatory information required to send the newsletter is your email address. The provision of any further data is voluntary and is used to be able to address you personally. We use the so-called double opt-in procedure to send the newsletter. This means that we will only send you an email newsletter once you have expressly confirmed that you consent to receiving the newsletter. We will then send you a confirmation email asking you to confirm, by clicking on a corresponding link, that you wish to receive the newsletter in the future.
By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 (1) lit. a GDPR. When registering for the newsletter, we store the IP address assigned by your Internet Service Provider (ISP), as well as the date and time of registration, in order to be able to trace any possible misuse of your email address at a later date. The data collected by us when registering for the newsletter is used exclusively for the purposes of advertising via the newsletter. You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter, or by sending an appropriate message to the controller named at the outset. Once you have unsubscribed, your email address will be deleted immediately from our newsletter distribution list, unless you have expressly consented to further use of your data, or we reserve the right to use data beyond this that is legally permitted and about which we inform you in this statement.
5.2 Sending the Email Newsletter to Existing Customers
If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers by email for similar goods or services from our range to those already purchased. Pursuant to Section 7 (3) of the German Act Against Unfair Competition (UWG), we are not required to obtain separate consent from you for this. In this respect, data processing is carried out solely on the basis of our legitimate interest in personalized direct marketing in accordance with Art. 6 (1) lit. f GDPR. If you have initially objected to the use of your email address for this purpose, we will not send you any emails. You are entitled to object at any time, with effect for the future, to the use of your email address for the aforementioned advertising purpose by notifying the controller named at the beginning. Only transmission costs according to the basic tariffs will be incurred by you for this. After receipt of your objection, the use of your email address for advertising purposes will be discontinued immediately.
6) Web Analytics Services
Google Analytics 4
This website uses Google Analytics 4, a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which allows the use of websites to be analyzed.
When using Google Analytics 4, so-called "cookies" are used by default. Cookies are text files that are stored on your device and enable an analysis of your use of a website. The information collected by cookies about your use of the website (including the IP address transmitted by your device, shortened at the end, see below) is generally transmitted to a Google server and stored and processed there. This may also result in information being transmitted to the servers of Google LLC, based in the USA, and further processing of the information there.
When using Google Analytics 4, the IP address transmitted by your device when using the website is, by default and automatically, always collected and processed only in anonymized form, so that direct personal identification of the information collected is excluded. This automatic anonymization is achieved by Google shortening the IP address transmitted by your device at the end, within Member States of the European Union (EU) or other signatory states of the Agreement on the European Economic Area (EEA).
On our behalf, Google uses this and other information to evaluate your use of the website, to compile reports on your website activities and usage behavior, and to provide us with further services related to your use of the website and the internet. In doing so, the IP address transmitted by your device and shortened within the scope of Google Analytics 4 is not merged with other data from Google. The data collected within the scope of using Google Analytics 4 is retained for 2 months and then deleted.
Through a special feature, the so-called “demographic characteristics,” Google Analytics 4 also enables the creation of statistics with information on the age, gender, and interests of website users, based on an evaluation of interest-based advertising and the use of third-party information. This makes it possible to identify and distinguish between groups of website users for the purpose of target-group-optimized marketing measures. However, data collected via the “demographic characteristics” feature cannot be attributed to any specific person and therefore not to you personally. This data, collected via the “demographic characteristics” feature, is retained for two months and then deleted.
All processing described above, in particular the setting of Google Analytics cookies for the storage and reading of information on the device you use to access the website, only takes place if you have given us your express consent for this in accordance with Art. 6 (1) lit. a GDPR. Without your consent, Google Analytics 4 will not be used while you use the website. You can revoke your consent at any time with effect for the future once it has been given. To exercise your revocation, please deactivate this service via the “cookie consent tool” provided on the website.
We have concluded a so-called data processing agreement with Google for our use of Google Analytics 4, under which Google is obligated to protect the data of our website users and not to pass it on to third parties.
To ensure compliance with the European data protection level even in the event of a possible transfer of data from the EU or EEA to the USA and any further processing there, Google relies on the so-called Standard Contractual Clauses of the European Commission, which we have contractually agreed with Google.
Further legal information on Google Analytics 4, including a copy of the aforementioned Standard Contractual Clauses, can be found at the following link: https://policies.google.com/privacy?hl=de&gl=de
Details on the processing triggered by Google Analytics 4 and on how Google handles website data can be found here: https://policies.google.com/technologies/partner-sites
7) Site Functionalities
7.1 Instagram Plugin as a Shariff Solution
Our website uses so-called social plugins (“plugins”) of the online service Instagram, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”).
To increase the protection of your data when visiting our website, these buttons are not fully integrated as plugins, but are only embedded in the page using an HTML link. This type of integration ensures that when you access a page of our website that contains such buttons, no connection is yet established with Instagram's servers. If you click on the button, a new browser window opens and calls up the Instagram page, where you can interact with the plugins there (if applicable, after entering your login details).
Please refer to Instagram's privacy notices for the purpose and scope of data collection and the further processing and use of the data by Instagram, as well as your rights in this regard and the options available to protect your privacy: https://help.instagram.com/155833707900388/
7.2 LinkedIn Plugin as a Shariff Solution
Our website uses so-called social plugins (“plugins”) of the online service LinkedIn, which is operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”).
To increase the protection of your data when visiting our website, these buttons are not fully integrated as plugins, but are only embedded in the page using an HTML link. This type of integration ensures that when you access a page of our website that contains such buttons, no connection is yet established with LinkedIn's servers. If you click on the button, a new browser window opens and calls up the LinkedIn page, where you can interact with the plugins there (if applicable, after entering your login details).
Please refer to LinkedIn's privacy notices for the purpose and scope of data collection and the further processing and use of the data by LinkedIn, as well as your rights in this regard and the options available to protect your privacy: https://www.linkedin.com/legal/privacy-policy
7.3 Xing Plugins
The “XING Share Button” is used on this website. When you access this website, your browser briefly establishes a connection to the servers of XING AG (“XING”), which provide the “XING Share Button” functions (in particular the calculation/display of the counter value). XING does not store any personal data about you when you access this website. In particular, XING does not store any IP addresses. There is also no evaluation of your usage behavior through the use of cookies in connection with the “XING Share Button.” You can retrieve the current privacy information on the “XING Share Button” and additional information on this website: https://www.xing.com/app/share?op=data_protection
7.4 Use of YouTube Videos
This website uses the YouTube embedding function to display and play videos from the provider “YouTube,” which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).
The extended data protection mode is used here, which, according to the provider, only initiates the storage of user information when the video(s) are played. Once playback of embedded YouTube videos is started, the provider “YouTube” uses cookies to collect information about user behavior. According to information from “YouTube,” this data is used, among other things, to collect video statistics, improve user-friendliness, and prevent abusive practices. If you are logged into Google, your data will be directly assigned to your account when you click on a video. If you do not want this assignment to your YouTube profile, you must log out before activating the button. You have the right to object to the creation of these user profiles, and to exercise this right you must contact YouTube. In the course of using YouTube, personal data may also be transmitted to the servers of Google LLC in the USA.
Regardless of whether the embedded videos are played, a connection to the Google network is established every time this website is accessed, which may trigger further data processing operations beyond our control.
All processing described above, in particular the reading of information on the device used via the tracking pixel, only takes place if you have given us your express consent to do so in accordance with Art. 6 (1) lit. a GDPR. Without this consent, YouTube videos will not be used during your visit to the site.
You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the “cookie consent tool” provided on the website, or via alternative options communicated to you on the website.
Further information on data protection at “YouTube” can be found in the YouTube Terms of Service at https://www.youtube.com/static?template=terms as well as in Google's privacy policy at https://www.google.de/intl/de/policies/privacy
7.5 Applications for Job Postings via Email
On our website, we advertise currently vacant positions in a separate section, to which interested parties can apply via email to the contact address provided.
Inclusion in the application process requires that applicants provide us, together with their application by email, with all personal data required for a well-founded and informed assessment and selection.
The required information includes general personal information (name, address, a telephone or electronic contact option) as well as performance-specific evidence of the qualifications required for a position. Health-related information may also be required, which, in the interest of social protection, must be given special consideration under labor and social law with respect to the applicant.
Which components an application must contain in an individual case in order to be considered, and in what form these components must be submitted by email, can be found in the respective job posting.
After receipt of an application sent using the specified email contact address, the applicant data is stored by us and evaluated exclusively for the purpose of processing the application. For any queries arising during processing, we use, at our discretion, either the email address provided by the applicant with their application or a specified telephone number.
The legal basis for this processing, including contact for queries, is generally Art. 6 (1) lit. b GDPR (for processing in Germany in conjunction with Section 26 (1) of the German Federal Data Protection Act (BDSG)), according to which going through the application process is considered the initiation of an employment contract.
Insofar as special categories of personal data within the meaning of Art. 9 (1) GDPR (e.g. health data such as information on severe disability status) are requested from applicants as part of the application process, processing is carried out in accordance with Art. 9 (2) lit. b GDPR, so that we can exercise the rights arising from labor law and the law on social security and social protection and fulfill our obligations in this regard.
Cumulatively or alternatively, the processing of special categories of data may also be based on Art. 9 (1) lit. h GDPR, if it is carried out for the purposes of preventive or occupational medicine, for assessing the applicant's ability to work, for medical diagnosis, care or treatment in the health or social sector, or for the management of systems and services in the health or social sector.
If, as a result of the evaluation described above, an applicant is not selected, or if an applicant withdraws their application prematurely, the data transmitted by email as well as all electronic correspondence, including the original application email, will be deleted after appropriate notification, at the latest after 6 months. This period is based on our legitimate interest in being able to answer any follow-up questions regarding the application and, if necessary, to fulfill our documentation obligations arising from the regulations on equal treatment of applicants.
In the event of a successful application, the data provided will be further processed on the basis of Art. 6 (1) lit. b GDPR (for processing in Germany in conjunction with Section 26 (1) BDSG) for the purposes of carrying out the employment relationship.
8) Tools and Other
8.1 Cookie Consent Tool
This website uses a so-called “cookie consent tool” to obtain effective user consent for cookies and cookie-based applications that require consent. The “cookie consent tool” is displayed to users when the page is accessed in the form of an interactive user interface, on which consent for certain cookies and/or cookie-based applications can be given by checking boxes. By using the tool, all cookies/services requiring consent are only loaded once the respective user has given the corresponding consent by checking the boxes. This ensures that such cookies are only set on the respective user's device if consent has been given.
The tool sets technically necessary cookies to store your cookie preferences. In principle, no personal user data is processed in this process.
If, in individual cases, personal data (such as the IP address) is nevertheless processed for the purpose of storing, assigning, or logging cookie settings, this is done in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in legally compliant, user-specific, and user-friendly consent management for cookies, and thus in a legally compliant design of our website.
A further legal basis for the processing is also Art. 6 (1) lit. c GDPR. As the controller, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user's consent.
Further information on the operator and the setting options of the cookie consent tool can be found directly in the corresponding user interface on our website.
8.2 - Google Maps
On our website, we use Google Maps (API) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google Maps is a web service for displaying interactive maps in order to visually present geographic information. By using this service, our location is displayed to you and any directions are made easier.
Already when accessing the subpages in which the Google Maps map is embedded, information about your use of our website (such as your IP address) is transmitted to Google servers and stored there; this may also result in transmission to the servers of Google LLC in the USA. This occurs regardless of whether Google provides a user account through which you are logged in, or whether a user account exists at all. If you are logged into Google, your data will be directly assigned to your account. If you do not want this assignment to your Google profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates it. Collection, storage, and evaluation are carried out in accordance with Art. 6 (1) lit. f GDPR on the basis of Google's legitimate interest in displaying personalized advertising, market research, and/or the needs-based design of Google websites. You have the right to object to the creation of these user profiles, and to exercise this right you must contact Google. If you do not agree to the future transmission of your data to Google in connection with the use of Google Maps, you also have the option of completely deactivating the Google Maps web service by disabling the use of JavaScript in your browser. Google Maps, and thus the map display on this website, cannot then be used.
You can view Google's terms of use at https://www.google.de/intl/de/policies/terms/regional.html; the additional terms of use for Google Maps can be found at https://www.google.com/intl/de_US/help/terms_maps.html
Detailed information on data protection in connection with the use of Google Maps can be found on Google's website (“Google Privacy Policy”): https://www.google.de/intl/de/policies/privacy/
Insofar as legally required, we have obtained your consent to the processing of your data as described above in accordance with Art. 6 (1) lit. a GDPR. You can revoke your consent at any time with effect for the future. To exercise your revocation, please follow the option described above for lodging an objection.
8.3 - Doofinder
To make visiting our website attractive and to present you with better search results more quickly, we use the search function of doofinder. This serves to safeguard our predominant legitimate interest, within the scope of a balancing of interests, in an optimized presentation of our offering in accordance with Art. 6 (1) lit. f GDPR. The operator of the site is DooFinder S.L., Madrid 28037, Rufino González 23 bis, 1º 1, Spain. In order to use doofinder's search function, the browser you use must establish a connection to doofinder's servers. This allows doofinder to learn that our website was accessed via your IP address.
Further information on Doofinder search can be found at https://www.doofinder.com/de/ and in doofinder's privacy policy: https://www.doofinder.com/de/privacy-policy
- Elasticsearch
This website uses the “Elasticsearch” service from ELASTIC, 800 West El Camino Real, Suite 350, Mountain View, California 94040, USA, to provide a search function for articles via the search field and for navigation and filtering.
For this purpose, Elasticsearch collects and stores certain user information (such as the user or session ID) in anonymized form.
Insofar as personal data is also processed in this context, the processing is carried out in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in providing a fault-tolerant search for articles, as well as making it easier to find our products in the shop, and thus in the optimal marketing of our offering.
Further information on Elasticsearch's privacy policy is available here: https://www.elastic.co/de/legal/privacy-statement
- Fact Finder
This website uses the “Fact Finder” service from Omikron Data Quality GmbH, Habermehlstr. 17, 75172 Pforzheim, to provide a search function for articles via the search field and for navigation and filtering.
For this purpose, Fact Finder collects and stores certain user information (such as the user or session ID) in anonymized form.
Insofar as personal data is also processed in this context, the processing is carried out in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in providing a fault-tolerant search for articles, as well as making it easier to find our products in the shop, and thus in the optimal marketing of our offering.
Further information on Fact-Finder's privacy policy is available here: https://www.fact-finder.de/dsgvo
- FINDOLOGIC
This website uses the “FINDOLOGIC” service from FINDOLOGIC GmbH, Jakob-Haringer-Straße 5a, 5020 Salzburg, Austria, to provide a search function for articles via the search field and for navigation and filtering.
For this purpose, FINDOLOGIC collects and stores certain user information (such as the user or session ID) in anonymized form.
Insofar as personal data is also processed in this context, the processing is carried out in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in providing a fault-tolerant search for articles, as well as making it easier to find our products in the shop, and thus in the optimal marketing of our offering.
Further information on FINDOLOGIC's privacy policy is available here: https://findologic.com/datenschutz/
9) Rights of the Data Subject
9.1 Applicable data protection law grants you the following data subject rights (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data, whereby reference is made to the cited legal basis for the respective conditions of exercise:
Right of access pursuant to Art. 15 GDPR;
Right to rectification pursuant to Art. 16 GDPR;
Right to erasure pursuant to Art. 17 GDPR;
Right to restriction of processing pursuant to Art. 18 GDPR;
Right to notification pursuant to Art. 19 GDPR;
Right to data portability pursuant to Art. 20 GDPR;
Right to withdraw consent given pursuant to Art. 7 (3) GDPR;
Right to lodge a complaint pursuant to Art. 77 GDPR.
9.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF A BALANCING OF INTERESTS DUE TO OUR PREDOMINANT LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.
10) Duration of Storage of Personal Data
The duration of storage of personal data is determined by the respective legal basis, the purpose of processing, and, where applicable, additionally by the respective statutory retention period (e.g. retention periods under commercial and tax law).
When processing personal data on the basis of express consent pursuant to Art. 6 (1) lit. a GDPR, this data is stored until the data subject revokes their consent.
If statutory retention periods exist for data processed within the scope of transactional or quasi-transactional obligations on the basis of Art. 6 (1) lit. b GDPR, this data is routinely deleted after the retention periods have expired, provided it is no longer required for the performance or initiation of a contract and/or we no longer have a legitimate interest in its continued storage.
When processing personal data on the basis of Art. 6 (1) lit. f GDPR, this data is stored until the data subject exercises their right to object pursuant to Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or the processing serves the establishment, exercise, or defense of legal claims.
When processing personal data for the purpose of direct marketing on the basis of Art. 6 (1) lit. f GDPR, this data is stored until the data subject exercises their right to object pursuant to Art. 21 (2) GDPR.
Unless otherwise indicated by other information in this statement regarding specific processing situations, stored personal data is otherwise deleted once it is no longer necessary for the purposes for which it was collected or otherwise processed.