PolyComp GmbH

Privacy policy

The security and protection of your data is important to us, PolyComp GmbH (hereinafter "we"). We operate our websites in accordance with the applicable regulations for the protection of personal data and data security, in particular the provisions of the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Federal Data Protection Act (BDSG).

At this point, we would like to inform you about which data we collect, process and use when you use our websites, for what purpose and on what legal basis this is done, to whom we may make it available and what rights you are entitled to in this respect.

Scope of application, responsible body

This data protection information applies to the websites operated under the domain

website ("website").

The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws and other data protection regulations is

PolyComp GmbH
Robert-Koch-Straße 25
Glashütte industrial estate
22851 Norderstedt
Local court Kiel, HRB 3392 NO

datenschutz@polycomp.de

General information on data processing

We only process your personal data insofar as this is necessary for the provision of our services. In addition, we only process personal data if you actively provide it to us, e.g. as part of a registration, by filling out forms, sending e-mails and inquiries or when ordering a newsletter or other services.

We will only use the personal data provided by you for the purpose of processing the contract and handling your inquiries. Your personal data will only be processed and used for other purposes, such as consulting, advertising and market research, if you have previously consented to the corresponding use or if we are entitled or obliged to process it on the basis of a statutory provision.

Provision of the website and creation of log files

When you use our website, we only collect the personal data that your browser transmits to our server. When you access the website, we collect the following data, which is technically necessary for us to enable you to visit the website and to ensure stability and security (legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR):

  • Websites from which you have accessed our website

  • Date and time of access

  • Name of the internet access provider

  • Browser type/version and language

  • the operating system used

  • Access status/http status code

  • amount of data transferred in each case

  • Device (PC, tablet PC or smartphone)

  • pages visited on our website incl. length of stay

  • the last website you visited

  • Your anonymized IP address

We only evaluate this data for statistical purposes. A personal evaluation does not take place. Temporary storage of your IP address is necessary to enable delivery of the website to your end device. For this purpose, the user's IP address must remain stored for the duration of the session. The data is stored in log files to ensure the functionality of the website.

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. If the data is stored in log files, this is the case after 90 days at the latest. Storage beyond this period is possible; in this case, the IP addresses are deleted or anonymized so that it is no longer possible to identify the accessing client.

Cookies

In order to optimize the functionality and usability of the website, we use so-called cookies. Cookies are small text files that are stored on your hard disk with the help of your browser and through which certain information flows to the place that sets the cookie (here by us). Cookies cannot execute programs or transmit viruses to your end device.

The legal basis for the processing of personal data using cookies is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in ensuring and optimizing the functionality and usability of the website.

We use the following types of cookies for our website: 

Necessary cookies. These cookies are necessary for the website to function properly. 

Performance cookies. These cookies are used to collect statistical information about the use of our website and are used to improve the performance and optimization of the website.

Usercentrics Consent Management Platform

We use the Usercentrics Consent Management Tool from Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany on our website. 

The purpose of using Usercentrics is to manage your consents and to be able to prove compliance with legal requirements on our part. When you access our website for the first time and each time there is a change to the data processing requiring consent, you will be shown our consent banner. In the consent banner, you have the option of voluntarily consenting to us setting cookies - over and above the technologies that are absolutely necessary - and subsequently processing your data for the further development and improvement of our website. Our cookie consent tool also provides you with information about exactly which cookies we use.

If you confirm the "Accept all" button of the cookie banner, you give your consent to the preset cookies, which can be revoked at any time. You can change your cookie settings at any time or withdraw your consent by clicking on the link below (Cookie preferences).

The following data is processed by Usercentrics: Opt-in and opt-out data, consent ID, time of consent, consent type, referrer URL (via which website/advertising media you came to this website), user settings, template version and banner language.

The legal basis for the processing of your personal data is the fulfillment of our legal obligation regarding the obtaining of consent and its verifiability in accordance with Art. 6 para. 1 lit. c GDPR.

The consent data will be stored for three years and then deleted immediately. 

You can find out more about the data processed through the use of Usercentrics in the privacy policy at: https://usercentrics.com/de/datenschutzerklaerung/.

Storyblok

We use the Storyblok content management system on our website, which is provided by Storyblok GmbH, Peter-Behrens-Platz 2, 4020 Linz, Austria. This tool helps us to control the content of our website.

Storyblok is ISO 27001 certified. This recognizes that all products, operations, support processes and data storage protocols meet the highest international security standards. Compliance with ISO 27001 is certified by TÜV Rheinland and reassessed annually.

The following data is processed by Storyblok: Your IP address, details of your operating system, date and time of request, content information, internet service provider and proof of performance. 

The legal basis for the processing of your personal data is the fulfillment of our legal obligation regarding the obtaining of consent and its verifiability in accordance with Art. 6 para. 1 lit. a GDPR.

Storyblok stores personal data on its own secure servers within the EEA for 12 months if you are an applicant and 24 months if you were an employee, after which it deletes it immediately. 

For more information on the data processed through the use of Storyblok, please see the privacy policy at https://www.storyblok.com/privacy-policy

Matomo

We use the web analysis service Matomo from InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand, NZBN 6106769 on our website.

This is an open source software with which we can analyze your use of our website. Matomo is only activated on the basis of your prior active consent through corresponding interaction with the cookie banner on our website.

The following data is collected by Matomo: Your IP address, date and time of your visit, usage data, usage behavior, technical information about your browser as well as device information, downloads, referrer URL (via which website/advertising media you came to this website) and location information.

The software runs on servers in Frankfurt, Germany (hosted by AWS New Zealand). Offsite backups are stored in Dublin, Ireland. The data is not passed on to third parties. It is not possible to identify a specific person, as your IP address is anonymized immediately after processing and before storage.

This website uses Matomo with the "AnonymizeIP" extension. This means that IP addresses are further processed in abbreviated form, so that they cannot be directly linked to individuals. The IP address transmitted by your browser using Matomo is not merged with other data collected by us.

You can object to the processing of your data by rejecting tracking by Matomo in the cookie preferences. You can find out more about the data processed through the use of Matomo in the privacy policy at: https://matomo.org/privacy-policy/.

Vimeo

Our website uses plugins from the video portal Vimeo. The provider is Vimeo Inc, 555 West 18th Street, New York, New York 10011, USA.

When you visit one of our pages equipped with a Vimeo plugin, a connection to the Vimeo servers is established. The Vimeo server is informed which of our pages you have visited. If you are logged in to Vimeo as a member, Vimeo assigns this information to your personal user account. When you click on the start button of a video, this information can also be assigned to an existing user account. You can prevent this assignment by logging out of your Vimeo user account before using our website and deleting the corresponding cookies from Vimeo. Vimeo also obtains your IP address. This also applies if you are not logged in to Vimeo or do not have a Vimeo account. The information collected by Vimeo is transmitted to the Vimeo server in the USA.

Further information on the handling of user data can be found in Vimeo's privacy policy at: https://vimeo.com/privacy.

We use this service within our website on the basis of a legitimate interest - in the analysis, optimization and economic operation of our online offer. The legal basis is Art. 6 para. 1 lit. f GDPR.

You can also prevent Vimeo from loading via your browser settings (deactivate JavaScript and iFrames).

reCaptcha v3

We use the open source technology reCaptcha v3 from Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland on our website.

This service helps our website to prevent spam and block bots. The program recognizes whether the user is a real person or a bot in order to protect our website from cyber attacks. 

ReCaptcha v3 works with an algorithm that collects and analyzes a user's interactions with a website to create a score. The final score indicates whether the activity is suspicious. This version aims to improve the user experience by eliminating the need for questions and creating a seamless user experience.

The following data is processed by reCaptcha: Mouse and keyboard behavior (every action you perform with the mouse or keyboard), information about your operating system, date and language settings of your browser, the Google cookies placed on the website, your answers to the question fields on the website, referrer URL (via which website/advertising media you came to this website), CSS information, all JavaScript objects, screen resolution and the plug-ins installed in your browser. The algorithm also recognizes IP addresses that were previously recognized as human by cookies.

The legal basis for the processing of your personal data is the fulfillment of our legal obligation regarding the obtaining of consent and its verifiability in accordance with Art. 6 para. 1 lit. a GDPR. In addition, there is a legitimate interest in the use of Google reCaptcha to optimize and increase the security of the online offer, the legal basis for which is Art. 6 para. 1 lit. f GDPR.

Further information on the data processed through the use of reCaptcha v3 can be found in the privacy policy at: https: //policies.google.com/privacy.

Social shares

On our websites in our job advertisements, social shares are provided by the social networks "LinkedIn" (provider: LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA), "XING" (provider: Xing AG, Gänsemarkt 43, 20354 Hamburg, Germany) and "Facebook" (provider: Meta Platforms, Inc., 1601 S. California Ave, Palo Alto, California 94304, USA) on the basis of Art. 6 para. 1 lit. f GDPR. For reasons of data protection, we have deliberately decided against using direct plug-ins from social networks. Therefore, when you visit our websites, no data is automatically transmitted to the above-mentioned social networks. Only when you actively click on the respective button (i.e. the LinkedIn, Xing or Facebook logo) does your Internet browser establish a connection to the servers of the respective social network. If you follow the links while visiting our website and are logged in to LinkedIn, Xing or Facebook via your personal user account, the information that you have visited our website may be forwarded to the operator of the social network in question. In this case, LinkedIn, Xing or Facebook can assign your visit to our website to your user account. If you do not want social networks to be able to assign your visit to our website to your respective user account, you must log out of these social networks before visiting our website.

We would like to point out that we have no knowledge of the content of the transmitted (personal) data or its use by LinkedIn, Xing or Facebook.

Further information on this can be found in the privacy policies of LinkedIn, Xing and Facebook at

 

Data security

We take appropriate technical and organizational measures to ensure that the data collected in the course of using the services we provide is protected against loss, incorrect changes or unauthorized access by third parties. Our security measures are continuously revised and adapted in line with technological developments.

Your rights

If we process personal data about you, you are entitled to the following rights as a data subject within the meaning of the GDPR:

Right to information

You can request confirmation from us as to whether we process personal data about you.

If this is the case, you can request the following information from us:

1. the purposes for which the personal data is processed;

2. the categories of personal data being processed

3. the recipients or categories of recipients to whom your personal data has been or will be disclosed

4. the planned duration of the storage of your personal data or, if specific information on this is not possible, criteria for determining the storage period

5. the existence of a right to rectification or erasure of your personal data, a right to restriction of processing by the controller or a right to object to such processing

6. the existence of a right to lodge a complaint with a supervisory authority

7. all available information about the origin of the data if personal data about you is not collected from you but from third parties.

You have the right to request information as to whether your personal data is transferred to a third country or to an international organization. In this context, you may request to be informed about the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.

 

Right to rectification

You have the right to rectification and/or completion if your personal data processed by us is incorrect or incomplete. If this is the case, we will make the correction immediately.

Right to restriction of processing

Under the following conditions, you can request the restriction of the processing of your personal data:

1. if you contest the accuracy of your personal data for a period enabling us to verify the accuracy;

2. the processing is unlawful and you oppose the erasure of your personal data and request the restriction of their use instead

3. we no longer need your personal data for the purposes of the processing, but you require it for the establishment, exercise or defense of legal claims; or

4. you have objected to processing pursuant to Art. 21 (1) GDPR pending the verification whether our legitimate grounds as the controller override your grounds as the data subject.

If the processing of your personal data has been restricted, this data - apart from its storage - may only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

If the restriction of processing has been restricted in accordance with the above conditions, we will inform you before the restriction is lifted.

 

Right to erasure

Obligation to erase

You can demand that we delete your personal data immediately if one of the following reasons applies:

1. your personal data are no longer necessary for the purposes for which they were collected or otherwise processed.

2. if the processing was based on Art. 6 para. 1 lit. a GDPR, you revoke your consent and there is no other legal basis for the processing

3. you object to the processing pursuant to Art. 21 para. 1 GDPR and there are no overriding legitimate grounds for the processing, or you object to the use of your personal data for advertising purposes pursuant to Art. 21 para. 2 GDPR

4. your personal data has been processed unlawfully.

5. the deletion of your personal data is necessary to fulfill a legal obligation.

Exceptions

The right to erasure does not exist if the processing is necessary

1. for exercising the right of freedom of expression and information

2. for compliance with a legal obligation or for the performance of a task carried out in the public interest

3. for the establishment, exercise or defense of legal claims.

Right to lodge a complaint with a supervisory authority

Without prejudice to any other legal remedies, you have the right to lodge a complaint with a competent supervisory authority if you believe that the processing of your personal data violates applicable data protection law.

Revocation of consent

Insofar as the processing of personal data is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR, you can revoke your consent at any time with effect for the future by sending an e-mail to datenschutz@polycomp.de.

Contact / Information

All inquiries, explanations and queries regarding the use of data can be sent by e-mail to our data protection officer at

datenschutz@polycomp.de

or by post to

K.D. Feddersen Holding GmbH

Gotenstr. 11A    

20097 Hamburg

Status: October 2022

****