PRIVACY NOTICE
-
General Information
The following information will provide you with an easy to navigate overview of what will happen with your personal data when you visit this website. The term “personal data” comprises all data that can be used to personally identify you. For detailed information about the subject matter of data protection, please consult our Data Protection Declaration, which we have included beneath this copy.
-
Name and Address of the Controller
Controller in terms of the General Data Protection Regulation and other national privacy laws of the member states of the European Union as well as further privacy provisions is:
framas Kunststofftechnik GmbH
Rodalber Straße 180 66953 Pirmasens
Phone: +49 6331-51520
Email: info@framas.com
-
Name and Address of the Privacy Officer
Privacy Officer of the Controller is:
Deutsche Datenschutz Consult GmbH
www.deutsche-datenschutz-consult.de
Stresemannstraße 29
22769 Hamburg Germany
Telephone: +49 40 228 60 70 0
-
Personal Data Processed on this Website Access Log
Upon visiting our website we collect the following data that is transmitted by your browser:
- Timestamp
- Client IP address
- HTTP method (GET/POST etc.)
- Requested URLs
- HTTP status codes
- Bytes sent/received
- Referrer URLs
- User agent
- SSL/TLS protocol and cipher
The data is collected on the basis of Art. 6 sec. 1 lit. f GDPR.
The temporary storage and processing of the IP address is required for delivery of the requested website to your system. This constitutes our legitimate interest for processing the IP address.
The website hoster stores this data in an access log which will be overwritten after 30 days. The access log is stored in order to analyze threats and protect against misuse, which also constitutes a legitimate interest for processing the data.
Our website is hosted by:
Visible One Limited
Sing Mei Industrial Building,
29-37 Kwai Wing Rd, Kwai Chung, N.T., Hong Kong
-
Web Analytics (Matomo)
For analysing how our website is used and how we can optimise it, we use the open source software tool Matomo (formerly PIWIK), which is operated as local installation on the server. For this purpose, we collect the following data upon your visit:
- Masked IP (2–3 bytes truncated)
- timestamps
- visited URLs & page titles
- referrer
- device/browser info (OS, screen size, user agent)
- approximate geolocation (from masked IP).
The IP address is being anonymized immediately upon collection by masking the last two bytes (e.g.: 192.168.xxx.xxx).
The software runs exclusively on the servers of our website. The anonymised user data is only stored there. The data is not passed on to third parties.
The processing of the users’ personal data enables us to analyse the surfing behaviour of our users. By evaluating the data obtained, we are able to compile information on the use of the individual components of our website. In addition, we can also measure how successful individual marketing activities outside our website are. This helps us to optimise our website and blog and also to improve our marketing activities so that our website can fulfil its function as a valuable resource for specialist information in the industry and as a communication channel for interested parties and customers.
The collection and anonymisation of the data is based upon our legitimate interests following Art. 6 sec. 1 lit. f GDPR, which lies in the optimisation of our website while adhering to the data minimsation and storage limitation principles.
-
Contact Form
Our website provides a contact form that you can use to contact us electronically. In order to respond to your message, we require the following data from you:
- Your Message
Aside from the message body that you enter, you may (optionally) also add the following data if you feel that might help us deal with your inquiry better:
- First name
- Surname
- Email address
- Phone Number
- Company
- Address
Data you provide to us via the contact form will be transmitted to us and saved. Alternatively you can contact us directly via the provided email address.
There is not transfer of personal data to any third person in this context. All data you provide will be processed exclusively for dealing with your inquiry.
Where processing of the provided data is required for taking steps to entering into a contract with you or for fulfilling a contract with you, such processing takes place on the basis of art. 6 sec. 1 lit. b GDPR. Otherwise processing is based on art. 6 sec. 1 lit. f GDPR, with our legitimate interests being to enable direct and uncomplicated communication with customers and prospects and to deal with them in a professional and service oriented manner. A transfer of your personal data or processing for other purposes does not take place.
Your data will be deleted once it is no longer required for the purposes they were collected for. With respect to data collected by the contact form this is the case, when the conversation with you is completed, i.e. when the subject matter has been resolved.
-
Business Correspondence
Whenever you communicate with us via email, we will collect, save and process your name, your email address and any contents of such communication. The personal data will be processed for the performance of a contract with you or the legal entity you represent, or, at your request, in order to take steps to enter into a contract.
Processing of the personal data is commonly based upon Art. 6 sec. 1 lit. b GDPR, if the communication takes place for the performance or preparation of a contract with yourself.
In case you represent a legal person when communicating with us, processing of your personal data is based upon Art. 6 sec. 1 lit. f GDPR, whereas our legitimate interest consists of building up and taking care of business relationships. In specific cases processing may also be based upon Art. 6 sec. 1 lit. a GDPR to the extent you gave us your consent for contacting you and/or communicating with you.
We may disclose your personal data if and insofar this
- a) is necessary for the performance of the contract according to Art. 6 sec. 1 lit. b GDPR,
- b) is necessary for compliance with legal obligations according to Art. 6 sec. 1 lit. c GDPR,
- c) is necessary for our and our customers‘ legitimate interests to provide/receive efficient and economic performance, or
- d) takes place within the scope of the consent provided by you following Art. 6 sec. 1 lit. a GDPR. Possible recipients of your personal data are:
- external specialists used for the performance of the contract, and
- third parties necessarily or typically involved in the performance of the contract, such as accounting centres or similar service providers.
Your personal data will generally be stored only as long as they are required for conducting the correspondence. Aside from this, we are legally obliged to store business correspondence for a period of six years. In that respect, our storage of your personal data takes place in order to comply with our legal obligations following Art. 6 sec.1 lit. c GDPR. Upon expiry of the statutory period of record keeping your personal data will be deleted, unless further storage is required for entering into a contract or performance of a contract.
-
Job Applications
If you submit a job application to us, we will process any affiliated personal data (e.g., contact and communications data, application documents, notes taken during job interviews, etc.), if they are required to make a decision concerning the establishment or an employment relationship. The legal grounds for the aforementioned are Art. 6 sec. 1 lit b GDPR as processing is required to decide upon entering into a contractual relationship with you.
Within our company, your personal data will only be shared with individuals who are involved in the processing of your job application.
If your job application should result in your recruitment, the data you have submitted will be archived on the grounds of Art. 6 sec. 1 lit. b GDPR for the purpose of implementing the employment relationship in our data processing system.
If we are unable to make you a job offer or you reject a job offer or withdraw your application, we reserve the right to retain the data you have submitted on the basis of our legitimate interests (Art. 6 sec. 1 lit. f GDPR) for up to 3 months from the end of the application procedure (rejection or withdrawal of the application). Afterwards the data will be deleted, and the physical application documents will be destroyed. The storage serves in particular as evidence in the event of a legal dispute. If it is evident that the data will be required after the expiry of the 3 month period (e.g., due to an impending or pending legal dispute), deletion will only take place when the purpose for further storage no longer applies.
Longer storage may also take place if we have obtained your consent (Art. 6 sec. 1 lit. a GDPR) or if statutory data retention requirements preclude the deletion.
If we do not make you a job offer, you may be able to join our applicant pool. In case of admission, all documents and information from the application will be transferred to the applicant pool in order to contact you in case of suitable vacancies.
Admission to the applicant pool is based exclusively on your consent (Art. 6 sec. 1 lit. a GDPR). The submission is voluntary and has no relation to the ongoing application procedure. The affected person can revoke his consent at any time. In this case, the data from the applicant pool will be irrevocably deleted, provided there are no legal reasons for storage.
The data from the applicant pool will be irrevocably deleted no later than two years after consent has been granted.
-
Social Media Appearances
We maintain publicly available profiles in social networks. The individual social networks we use can be found below.
Social networks such as Facebook, Google+ etc. can generally analyse your user behaviour comprehensively if you visit their website or a website with integrated social media content (e.g. like buttons or banner ads). When you visit our social media pages, numerous data protection-relevant processing operations are triggered. In detail:
If you are logged in to your social media account and visit our social media page, the operator of the social media portal can assign this visit to your user account. Under certain circumstances, your personal data may also be recorded if you are not logged in or do not have an account with the respective social media portal. In this case, this data is collected, for example, via cookies stored on your device or by recording your IP address.
Using the data collected in this way, the operators of the social media portals can create user profiles in which their preferences and interests are stored. This way you can see interest-based advertising inside and outside of your social media presence. If you have an account with the social network, interest-based advertising can be displayed on any device you are logged in to or have logged in to.
Please also note that we cannot retrace all processing operations on the social media portals. Depending on the provider, additional processing operations may therefore be carried out by the operators of the social media portals. Details can be found in the terms of use and privacy policy of the respective social media portals.
Our social media appearances should ensure the widest possible presence on the Internet. This is a legitimate interest within the meaning of Art. 6 sec. 1 lit. f GDPR. The analysis processes initiated by the social networks may be based on divergent legal bases to be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6 sec. 1 lit. a GDPR).
If you visit one of our social media sites (e.g., Facebook), we, together with the operator of the social media platform, are responsible for the data processing operations triggered during this visit. You can in principle protect your rights (information, correction, deletion, limitation of processing, data portability and complaint) vis-à-vis us as well as vis-à-vis the operator of the respective social media portal (e.g. Facebook).
Please note that despite the shared responsibility with the social media portal operators, we do not have full influence on the data processing operations of the social media portals. Our options are determined by the company policy of the respective provider.
We maintain social media appearances on the following platforms:
- Facebook: The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Facebook’s statement the collected data will also be transferred to the USA and to other third party countries. We have signed an agreement with Facebook on shared responsibility for the processing of data (Controller Addendum). This agreement determines which data processing operations we or Facebook are responsible for when you visit our Facebook Fanpage. This agreement can be viewed at the following link: https://www.facebook.com/legal/terms/page_controller_addendum. Details can be found in the Facebook privacy policy: https://www.facebook.com/about/privacy/.
- Instagram: The provider is Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. For details on how they handle your personal information, see the Instagram Privacy Policy: https://help.instagram.com/519522125107875.
-
Your Rights
Right of Access
You have the right to obtain from us confirmation as to whether or not personal data concerning you are being processed. Upon request we gladly inform you in writing about which personal data are being processed by us, including their origin, any recipients of your personal data as well as the purpose of processing.
Right to Object
Where we process your personal data for direct marketing purposes, you may object to our processing and we will immediately cease processing for this purpose. Where we process your personal data on the basis of our legitimate interests, you may object to the processing on grounds relating to you or your particular situation. We will then only continue processing if we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or if we require the personal data for the establishment, exercise or defence of legal claims.
Right to Rectification
You have the right to obtain from us rectification of personal data concerning you to the extent we save such data and provided it is inaccurate.
Right to Restriction of Processing
You have the right, under the preconditions of Art. 18 sec. 1 GDPR (for example if the accuracy of the data is disputed or the processing is unlawful), to obtain from us restriction of processing, which means that we may only process your personal data subject to such restriction under the preconditions of Art. 18 sec. 2 GDPR (for example with your consent or for the exercise or defence of legal claims).
Right to Erasure
You have the right to obtain from us the erasure of your personal data under the preconditions of Art. 17 sec. 1 lit. a-f GDPR (for example if the personal data is no longer needed or processing is unlawful) unless exceptions following Art. 17 sec. 3 lit. a-e GDPR apply (for example if there are legal obligations to process the personal data).
Right to Data Portability
You have the right to receive from us your personal data that you have provided to us in a structured, commonly used and machine-readable format and to transmit those data to another controller without hindrance from us.
Right to Lodge a Complaint with a Supervisory Authority
You have the right to lodge a complaint with a supervisory authority, if you feel our processing of your personal data is unlawful.
-
No automated Decision-Making
While using our services, you are not subject to any exclusively automatic decision-making process – including profiling – that takes legal effect or affects you significantly in any similar manner.
-
IT Security Notice
For our website we make use of ssl encryption (secure socket layer) with the highest encryption level supported by your browser. Usually this will be 256-bit encryption . If your browser doesn’t support this, our website falls back to 128-bit technology. Most browsers show encryption status by displaying a closed lock icon next to the URL or in the status bar.
We have implemented appropriate technical and organisational measures to protect the integrity, confidentiality and availability of your personal data. The measures we have implemented are being continuously improved and updated according to the progress of technological development.