Privacy Notice

2    Terms

The terms used below follow the definitions of article 12 para. 1 of the Basic Data Protection Regulation (GDPR) as well as of §2 of the Federal Data Protection Act (BDSG). The text of the GDPR is available here: eur-lex.europa.eu/legal-content/DE/TXT/HTML/, the text of the BDSG is available here: www.bgbl.de/xaver/bgbl/start.xav
 

3    Contact

The party responsible for the processing within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is:

3.1    The party responsible for the processing

The party responsible for the processing within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is:
CG TEC Carbon und Glasfasertechnik GmbH
Gewerbepark Hügelmühle 41
91174 Spalt
Telephone: +49 9175 908070
Fax: +49 9175 9080720
E-mail: info@cg-tec.de

3.2    The Data Protection Officer

Our Data Protection Officer is:
Jörg Stroh (external)
Gewerbepark Hügelmühle 41
91174 Spalt
Telephone: +49 9175 908070
Fax: +49 9175 9080720
E-Mail: datenschutz@cg-tec.de

In case of all questions and suggestions regarding data protection, the persons concerned can any time contact our Data Protection Officer directly.
When a person concerned contacts us through the contact form on the website or through e-mail, we voluntarily save these details sent to us for the processing of the enquiry as well as for follow-up questions. We save and use further personal data only if the person concerned consents to this or if this is legally permissible without special consent.
With the exception of any information required by the authorities and the external Data Protection Officer, this personal data is not forwarded to third parties.

3.3    Security of the contact

Within the scope of the applicable data protection laws and technical options, we take maximum efforts to ensure security of the personal data of the persons concerned. Personal data entered on the website is transferred to us in an encrypted form by means of the coding system SSL (Secure Socket Layer).
We would however like to point out that the data transmission in the Internet (e.g. when communicating through e-mails) can have security loopholes. Complete protection of the data from a third-party access is not possible.
To secure your data, we maintain technical and organisational security measures, which we constantly adapt to the state of the art. Furthermore, we do not guarantee that our offer will be available at certain times; disruptions, interruptions or failures cannot be ruled out. The servers used by us are regularly and carefully secured.

4    Legal basis for the processing of personal data

Insofar as we obtain the consent of the person concerned for the processing of personal data, art. 6 para. 1 lit. a of the EU Basic Data Protection Regulation (EU-GDPR) serves as the legal basis.
In the processing of personal data required for the fulfilment of a contract, to which the person concerned is a party, art. 6 para. 1 lit. b of the EU-GDPR serves as the legal basis. This also applies to processing operations that are necessary to execute pre-contractual measures.
Insofar as the processing of personal data is required to fulfil a legal obligation, which we are subject to, art. 6 para. 1 lit. c of the EU-GDPR serves as the legal basis.
In the event that vital interests of the person concerned or another natural person necessitate the processing of personal data, art. 6 para. 1 lit. d of the EU-GDPR serves as the legal basis.
If the processing is necessary to safeguard a legitimate interest of our company or of a third party and if the interests, fundamental rights and freedoms of the person concerned do not outweigh the former interest, art. 6 para. 1 lit. f of the EU-GDPR serves as the legal basis for the processing.

5     Data deletion and storage period

The personal data of the person concerned shall be deleted or blocked as soon as the purpose of storage ceases to apply. Furthermore, data may be stored if this has been stipulated by the European or national legislator in EU regulations, laws or other provisions, which the person responsible is subject to. The data shall also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfilment of a contract.

6    Data protection in case of job applications and in the application procedure

We collect and process personal data of applicants for processing the applications. The processing can also take place electronically. This is particularly the case if an applicant sends us the corresponding application documents electronically, for example by e-mail or through a web form (see also app.connectoor.de/agreements ) available on the website. If we make an employment contract with an applicant, the transmitted data is stored in compliance with the legal provisions for processing the employment relationship. If we do not make an employment contract with the applicant, the application documents are automatically deleted in two months from the announcement of the decision of rejection, unless the deletion is opposed by other legitimate interests on our part. These refer, for example, to burdens of proof in proceedings pursuant to the General Equal Treatment Act (AGG).

7     Notes on the use of this website

7.1    Cookies

Our website uses cookies. Cookies are text files, which are stored on the IT system of the person concerned through or by the browser. When the user accesses our website, a cookie may be stored on the user’s operating system.  This cookie contains a characteristic character string, which enables unique identification of the browser the next time the website is called up.
The legal basis for the processing of personal data using cookies is art. 6, para. 1, lit. f of the GDPR.
The purpose of using cookies is to simplify the use of websites for the person concerned.  Some functions of our website cannot be offered without the use of cookies. For these, the browser must be recognised even after a page change.
Cookies are stored on the IT system of the person concerned and are transmitted from it to our website.  The person concerned therefore has full control over the use of cookies.  By changing the settings in the browser, the person concerned can deactivate or restrict the transfer of cookies. Cookies that have already been stored can be deleted at any time. This can also take place automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to the full extent.

7.2    Collection of general data and information

We collect information about the person concerned when he/she uses this website. We automatically collect information about his/her usage behaviour and interaction with us and register information about his/her IT system (computer or mobile device). We collect, store and use data about every access to our online offer (so-called server log files). Access data includes name and URL of the retrieved file, date and time of retrieval, transferred data quantity, notification about successful retrieval (HTTP response code), browser type and browser version, operating system, referrer URL (i.e. the previously visited page), IP address and the requesting provider.
We use this log data without assignment to the person concerned or other profiling for statistical evaluations for the purpose of operation, security and optimisation of our online offer, as well as for the anonymous recording of the number of visitors to our website (traffic) and the extent and nature of use of our website and services, as well as for billing purposes, to measure the number of clicks received from cooperation partners. Based on this information, we can provide personalised and location-based content, analyse the traffic, search and rectify errors and improve our services. We reserve the right to check the log data subsequently if there is a justified suspicion of an illegal use based on concrete evidence. We store IP addresses in the log files for a limited period if this is necessary for security purposes or for the service provision or the billing of a service, e.g. if the person concerned uses one of our offers. We store IP addresses if we have a concrete suspicion of an offence in connection with the use of our website.

7.3    Links/forwarding to third-party websites

Pursuant to § 7 para. 1 of the German Telemedia Act, we, as content providers, are responsible for ‘our own content’ that we make available for use. Cross-references (“links”) to the ‘external’ contents made available by other providers should be distinguished from our own content.
When the link was first created, we have checked the external content to see whether it might trigger civil or criminal liability. We check the links to external contents regularly, but do not constantly check for changes. If we discover or are informed by third parties that a link provided triggers civil or criminal liability, we shall delete the link.

8    Rights of the person concerned

The person concerned can assert the following rights by contacting the above address in person or by post, clearly identifying himself or herself.

8.1    Right to information

The person concerned can demand a confirmation from us as to whether we are processing personal data concerning him/her. In case of such processing, the person concerned can demand the following information from us:

1. the purposes, for which the personal data is processed;
2. the categories of personal data being processed;
3. the recipients or categories of recipients, to whom the personal data of the person concerned has been disclosed or is still being disclosed;
4. the planned duration of storage of the personal data of the person concerned or, if concrete information about this is not possible, the criteria for determining the storage duration;
5. the existence of a right of rectification or deletion of the personal data of the person concerned, a right of restriction of the processing by us or a right to object to such processing;
6. the existence of a right of appeal to a supervisory authority;
7. if the personal data is not collected from the person concerned, all available information about the source of the data;
8. the existence of automated decision-making including profiling pursuant to art. 22 para. 1 and 4 of the GDPR and - at least in these cases - meaningful information about the logic involved as well as the implications and intended effects of such processing for the person concerned.

The person concerned has the right to demand information as to whether the personal data concerning him/her is transmitted to a third country or to an international organisation In this context, he/she may demand to be informed about the appropriate guarantees in accordance with art. 46 of the GDPR in connection with the transmission.

8.2    Right to rectification

The person concerned has a right of rectification and/or completion vis-à-vis us if the personal data processed concerning him/her is incorrect or incomplete. We must make the correction immediately.

8.3    Right to deletion

The person concerned has the right to request us to delete the personal data concerning him/her immediately and we shall be obliged to delete the personal data immediately if one of the following reasons applies:

1. The personal data is no longer necessary for the purposes, for which it was collected or otherwise processed.
2. The person concerned withdraws his/her consent on which the processing was based pursuant to art. 6 para. 1 lit. a of the GDPR or art. 9 para. 2 lit. a of the GDPR and there is no other legal basis for the processing.
3. The person concerned opposes the processing pursuant to art. 21 para. 1 of the GDPR and there are no overriding legitimate grounds for the processing or he/she opposes the processing pursuant to art. 21 para. 2 of the GDPR.
4. The personal data has been processed unlawfully.
5. The deletion of the personal data is necessary to fulfil a legal obligation under the Union law or the law of the Member States, which we are subject to.
6. The personal data has been collected in relation to information society services offered pursuant to art. 8 para. 1 of the GDPR.

If we have made the personal data public and we are obliged to delete it pursuant to art. 17 para. 1 of the GDPR, we shall take appropriate measures, including technical measures, under consideration of the available technology and the implementation costs, to inform the data processors, who process the personal data, that the person concerned has demanded the deletion of all links to this personal data or of copies or replications of this personal data.

8.4     Right to restriction of the processing

Under the following conditions, the person concerned may demand that the processing of the personal data concerning him/her be restricted:

1. if he/she contests the accuracy of the personal data concerning him/her for a period that enables us to verify the accuracy of the personal data;
2. the processing is unlawful and they refuse to delete the personal data and instead demand that the use of the personal data be restricted;
3. we no longer need the personal data for the purposes of processing, but need it to assert, exercise or defend legal claims, or
4. if he/she has filed an objection to the processing pursuant to art. 21 para. 1 of the GDPR and it is not yet clear as to whether our justified reasons outweigh his/her reasons.

If the processing of the personal data relating to him/her has been restricted, such data may be processed – apart from its storage – only with his/her consent or for the purpose of asserting, exercising or defending legal claims or protecting the rights of another natural or legal entity or on grounds of an important public interest of the Union or a Member State.
If the processing has been restricted in accordance with the above conditions, the person concerned shall be informed by us before the restriction is lifted.

8.5    Right to data transferability

The person concerned has the right to obtain the personal data concerning him/her that he/she has provided to us in a structured, current and machine-readable format and he/she has the right to transmit this data to another party responsible without our interference, provided that

1. the processing is based on a consent pursuant to article 6 para. 1 lit. a of the GDPR or article 9 para. 2 lit. a of the GDPR or on a contract pursuant to article 6 para. 1 lit. b of the GDPR, and
2. the processing is carried out using automated methods.

In exercising his/her right to data transferability pursuant to paragraph 1, he/she has the right to make sure that the personal data is transferred directly by us to another party responsible, insofar as this is technically feasible.

8.6    Right of objection

The person concerned shall have the right to object at any time to the processing of personal data concerning him/her under article 6 para. 1 lit. e or f of the GDPR for reasons arising from his/her particular situation; this is also applicable for profiling based on these provisions. We no longer process personal data unless we can prove compelling reasons worthy of protection for the processing that outweigh his/her interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If personal data is processed by us for the purpose of direct advertising, the person concerned has the right to object at any time to the processing of his/her personal data for the purpose of such advertising; this is also applicable for profiling insofar as it is related to such direct advertising. Exercise or defence of legal claims.

8.7    Automated decisions including profiling

The person concerned has the right to not be subject to a decision based exclusively on automated processing, including profiling, which has a legal effect against him/her or significantly affects him/her in a similar manner. This is not applicable if the decision

1. is necessary for the conclusion or fulfilment of a contract between him/her and us,
2. is admissible based on legal provisions of the Union or of the Member States, which we are subject to, and these legal provisions contain appropriate measures to safeguard the rights, freedoms and legitimate interests of the person concerned, or
3. takes place with the explicit consent of the person concerned.

8.8    Right to revoke consent under the Data Protection Law

The person concerned has the right to revoke his/her consent to the processing of personal data at any time. The revocation of consent shall not affect the legality of the processing carried out on the basis of the consent until the revocation.

8.9    Right of appeal to a supervisory authority

The person concerned has the right of appeal to a supervisory authority, in particular in the Member State where he/she resides, works or is suspected of having infringed the law, if he/she believes that the processing of his/her personal data is unlawful.

9    Existence of automated decision-making

An automated decision-making based on the collected personal data does not take place.

10    Other functions and tools of the website

10.1    Google Analytics (with anonymisation function)

We have integrated the Google Analytics component (with anonymisation function) into our website. Google Analytics is a web analysis service. Web analysis is the collection and evaluation of data about the behaviour of visitors to websites. A web analysis service mainly collects data about the website, from which a person concerned came to a website (so-called referrer), which subpages of the website were accessed, and how often and for how long a subpage was viewed.  Web analysis is primarily used to optimise a website and to conduct cost-benefit analysis of internet advertising.
The operating company of the Google Analytics component is Google Inc., 1600 AmphitheatrePkwy, Mountain View, CA 94043-1351, USA.
We use the “_gat._anonymizeIp” suffix for web analysis through Google Analytics. By means of this suffix, Google shortens and anonymises the IP address of the internet connection of the person concerned when he/she accesses our website from a European Union member state or from another contracting state of the Agreement on the European Economic Area.
The purpose of the Google Analytics component is to analyse the flow of visitors to our website. Among other things, Google uses the collected data and information to evaluate the use of our website to compile online reports for us that show the activities on our website and to provide other services in connection with the use of our website.
Google Analytics sets a cookie on the IT system of the person concerned. Setting the cookie allows Google to analyse the use of our website. Each time the person concerned visits one of the individual pages of our website, into which a Google Analytics component has been integrated, the relevant Google Analytics component automatically causes the internet browser on the IT system of the person concerned to transmit data to Google for the purpose of online analysis. Within the scope of this technical process, Google obtains knowledge of personal data, such as the IP address of the person concerned, which allows Google mainly to trace the origin of the visitors and clicks and subsequently issue commission statements.
Cookies are used to store personal information, such as access time, the location from which the access took place, and the frequency of visits to our website by the person concerned. Whenever one visits our website, this personal data, including the IP address of the internet connection used by the person concerned, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may disclose personal data collected through the technical process to third parties.
The person concerned can prevent the setting of cookies by our website at any time, as described above, by adjusting the settings of the internet browser used and thus permanently objecting to the setting of cookies.  Such a setting of the internet browser used would also prevent Google from placing a cookie on the IT system of the person concerned.  In addition, a cookie already set by Google Analytics can be deleted at any time via the internet browser or other software programs.
Furthermore, it is possible for the person concerned to object to and prevent the collection of data generated by Google Analytics relating to a use of our website and the processing of this data by Google.  For this, the person concerned must download and install a browser add-on from this link: tools.google.com/dlpage/gaoptout. This browser add-on informs Google Analytics via JavaScript that no data and information about visits to websites may be transmitted to Google Analytics. Google considers the installation of the browser add-on as an objection. If the IT system of the person concerned is deleted, formatted or reinstalled at a later time, he/she must reinstall the browser add-on to disable Google Analytics. If the browser add-on is uninstalled or deactivated by the person concerned or another person within his/her sphere of influence, it is possible to reinstall or reactivate the browser add-on.

Further information and the applicable Google data protection regulations can be found at www.google.de/intl/de/policies/privacy/ and at www.google.com/analytics/terms/de.html. Google Analytics is explained in more detail at  www.google.com/intl/de_de/analytics/.

10.2    Facebook

We have integrated components of Facebook into our website. Facebook is a social network.
A social network is an internet-based social meeting place, an online community that usually enables users to communicate with each other and interact in virtual space.  A social network can serve as a platform for the exchange of opinions and experiences or enable the internet community to provide personal or company-related information. Among other things, Facebook enables social network users to create private profiles, upload photos and network through friendship requests.
The operating company of Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. The party responsible for the processing of personal data if a person concerned lives outside the USA or Canada is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Each time the person concerned visits one of the individual pages of our website, into which a Facebook component (Facebook plug-in) has been integrated, the internet browser on the IT system of the person concerned is automatically prompted by the relevant Facebook component to download a representation of the Facebook component in question from Facebook.  An overview of all Facebook plug-ins can be found at developers.facebook.com/docs/plugins/. Within the scope of this technical process, Facebook is informed as to which specific subpage of our website is being visited by the person concerned.
If the person concerned is logged on to Facebook at the same time, Facebook recognises the specific subpage of our website visited by the person concerned during each visit to our website and for the entire duration of his/her visit to our website. This information is collected by the Facebook component and assigned by Facebook to the respective Facebook account of the person concerned.  If the person concerned clicks one of the Facebook buttons integrated on our website, such as the “Like” button, or the person concerned makes a comment, Facebook assigns this information to the personal Facebook user account of the person concerned and stores this personal data.
The Facebook component always informs Facebook that the person concerned has visited our website whenever the person concerned is logged on to Facebook at the same time when he/she is accessing our website, regardless of whether he/she clicks on the Facebook component or not. If the person concerned does not want this information to be transmitted to Facebook, he/she can prevent it from being transmitted by logging out of his/her Facebook account before visiting our website.
The data policy published by Facebook, available at de-de.facebook.com/about/privacy/ provides information about the collection, processing and use of personal data by Facebook. It also explains as to what setting options Facebook offers to protect the privacy of the person concerned. Various applications are also available to allow suppression of data transmission to Facebook. The person concerned can use such applications to suppress data transmission to Facebook.

 10.3 YouTube

We use components from YouTube on our website. YouTube is a platform to publish and watch videos free of charge. One can also comment on videos and rate them.

The operating company for YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube LLC is a subsidiary of Google Inc., 1600 AmphitheatrePkwy, Mountain View, CA 94043-1351, USA.
Each time the person concerned visits one of the individual pages of our website, on which the YouTube plug-in has been implemented, the internet browser of the person concerned automatically downloads a representation of the YouTube component in question from YouTube.  Further information can be found at www.youtube.com/yt/about/de/. Within the scope of the process, YouTube is informed as to which subpage of our website is visited by the person concerned.
If the person concerned is simultaneously logged in to YouTube when using our website, YouTube recognises during the entire duration of his/her visit to our website as to which specific subpage was visited.  This data is collected by the YouTube plug-in and assigned by YouTube to the specific YouTube account of the user.
When the person concerned clicks a YouTube button provided on our website, YouTube assigns this information to the specific YouTube user account of the person concerned and stores this personal data.
Whenever the person concerned is logged in to YouTube simultaneously when he/she is accessing our website, YouTube receives information that the person concerned has visited our website with a YouTube view contained. This happens regardless of whether the person concerned clicks on the YouTube video or not. The person concerned can prevent the transmission of this information to YouTube by logging out of his/her YouTube account before visiting our website.
The privacy policy published by Google, available at www.youtube.de/t/privacy, provides information about the collection, processing and use of personal data by Google and YouTube.

11 Newsletter to existing customers

We regularly inform our business partners (e.g. customers, suppliers) about our organisation by means of the newsletter. Since the requirements of §7 para. 3 UWG (Unfair Competition Act) have been met, we do not require your consent to distribute the newsletter.  This data is forwarded to the service provider for distribution of the newsletter.
We store your e-mail address for the newsletter dispatch for up to 5 years from your last order.
You can unsubscribe from the newsletter at any time using a link in the newsletter or by sending a direct notification to us (for contact details, refer above).”