In this data protection declaration, we use, inter alia, the following terms:

Transcription

1 Privacy Plicy 25th f May 2018 We are very delighted that yu have shwn interest in ur enterprise. Data prtectin is f a particularly high pririty fr the management f the Antrifttaler Kunststff Vertriebs GmbH. The use f the Internet pages f the Antrifttaler Kunststff Vertriebs GmbH is pssible withut any indicatin f persnal data; hwever, if a data subject wants t use special enterprise services via ur website, prcessing f persnal data culd becme necessary. If the prcessing f persnal data is necessary and there is n statutry basis fr such prcessing, we generally btain cnsent frm the data subject. The prcessing f persnal data, such as the name, address, address, r telephne number f a data subject shall always be in line with the General Data Prtectin Regulatin (GDPR), and in accrdance with the cuntry-specific data prtectin regulatins applicable t the Antrifttaler Kunststff Vertriebs GmbH. By means f this data prtectin declaratin, ur enterprise wuld like t infrm the general public f the nature, scpe, and purpse f the persnal data we cllect, use and prcess. Furthermre, data subjects are infrmed, by means f this data prtectin declaratin, f the rights t which they are entitled. As the cntrller, the Antrifttaler Kunststff Vertriebs GmbH has implemented numerus technical and rganizatinal measures t ensure the mst cmplete prtectin f persnal data prcessed thrugh this website. Hwever, Internet-based data transmissins may in principle have security gaps, s abslute prtectin may nt be guaranteed. Fr this reasn, every data subject is free t transfer persnal data t us via alternative means, e.g. by telephne. 1. Definitins The data prtectin declaratin f the Antrifttaler Kunststff Vertriebs GmbH is based n the terms used by the Eurpean legislatr fr the adptin f the General Data Prtectin Regulatin (GDPR). Our data prtectin declaratin shuld be legible and understandable fr the general public, as well as ur custmers and business partners. T ensure this, we wuld like t first explain the terminlgy used. In this data prtectin declaratin, we use, inter alia, the fllwing terms: a) Persnal data Persnal data means any infrmatin relating t an identified r identifiable natural persn ( data subject ). An identifiable natural persn is ne wh can be identified, directly r indirectly, in particular by reference t an identifier such as a name, an identificatin number, lcatin data, an nline identifier r t ne r mre factrs specific t the physical, physilgical, genetic, mental, ecnmic, cultural r scial identity f that natural persn. b) Data subject Data subject is any identified r identifiable natural persn, whse persnal data is prcessed by the cntrller respnsible fr the prcessing. page 1 f 15 Antrifttaler Kunststff Vertriebs GmbH Kirchstr Antrifttal-Ohmes inf@kunststff-vertrieb.de

2 c) Prcessing Prcessing is any peratin r set f peratins which is perfrmed n persnal data r n sets f persnal data, whether r nt by autmated means, such as cllectin, recrding, rganisatin, structuring, strage, adaptatin r alteratin, retrieval, cnsultatin, use, disclsure by transmissin, disseminatin r therwise making available, alignment r cmbinatin, restrictin, erasure r destructin. d) Restrictin f prcessing Restrictin f prcessing is the marking f stred persnal data with the aim f limiting their prcessing in the future. e) Prfiling Prfiling means any frm f autmated prcessing f persnal data cnsisting f the use f persnal data t evaluate certain persnal aspects relating t a natural persn, in particular t analyse r predict aspects cncerning that natural persn's perfrmance at wrk, ecnmic situatin, health, persnal preferences, interests, reliability, behaviur, lcatin r mvements. f) Pseudnymisatin Pseudnymisatin is the prcessing f persnal data in such a manner that the persnal data can n lnger be attributed t a specific data subject withut the use f additinal infrmatin, prvided that such additinal infrmatin is kept separately and is subject t technical and rganisatinal measures t ensure that the persnal data are nt attributed t an identified r identifiable natural persn. g) Cntrller r cntrller respnsible fr the prcessing Cntrller r cntrller respnsible fr the prcessing is the natural r legal persn, public authrity, agency r ther bdy which, alne r jintly with thers, determines the purpses and means f the prcessing f persnal data; where the purpses and means f such prcessing are determined by Unin r Member State law, the cntrller r the specific criteria fr its nminatin may be prvided fr by Unin r Member State law. h) Prcessr Prcessr is a natural r legal persn, public authrity, agency r ther bdy which prcesses persnal data n behalf f the cntrller. i) Recipient Recipient is a natural r legal persn, public authrity, agency r anther bdy, t which the persnal data are disclsed, whether a third party r nt. Hwever, public authrities which may receive persnal data in the framewrk f a particular inquiry in accrdance with Unin r Member State law shall nt be regarded as recipients; the prcessing f thse data by thse public authrities shall be in cmpliance with the applicable data prtectin rules accrding t the purpses f the prcessing. page 2 f 15 Antrifttaler Kunststff Vertriebs GmbH Kirchstr Antrifttal-Ohmes inf@kunststff-vertrieb.de

3 j) Third party Third party is a natural r legal persn, public authrity, agency r bdy ther than the data subject, cntrller, prcessr and persns wh, under the direct authrity f the cntrller r prcessr, are authrised t prcess persnal data. k) Cnsent Cnsent f the data subject is any freely given, specific, infrmed and unambiguus indicatin f the data subject's wishes by which he r she, by a statement r by a clear affirmative actin, signifies agreement t the prcessing f persnal data relating t him r her. 2. Name and Address f the cntrller Cntrller fr the purpses f the General Data Prtectin Regulatin (GDPR), ther data prtectin laws applicable in Member states f the Eurpean Unin and ther prvisins related t data prtectin is: Antrifttaler Kunststff Vertriebs GmbH Kirchstr., Antrifttal-Ohmes Deutschland Phne: andre.bmbeck@kunststff-vertrieb.de Website: 3. Name and Address f the Data Prtectin Officer The Data Prtectin Officer f the cntrller is: André Bmbeck Antrifttaler Kunststff Vertriebs GmbH Kirchstr., Antrifttal-Ohmes Deutschland Phne: datenschutz@kunststff-vertrieb.de page 3 f 15 Antrifttaler Kunststff Vertriebs GmbH Kirchstr Antrifttal-Ohmes inf@kunststff-vertrieb.de

4 Website: Any data subject may, at any time, cntact ur Data Prtectin Officer directly with all questins and suggestins cncerning data prtectin. 4. Ckies The Internet pages f the Antrifttaler Kunststff Vertriebs GmbH use ckies. Ckies are text files that are stred in a cmputer system via an Internet brwser. Many Internet sites and servers use ckies. Many ckies cntain a s-called ckie ID. A ckie ID is a unique identifier f the ckie. It cnsists f a character string thrugh which Internet pages and servers can be assigned t the specific Internet brwser in which the ckie was stred. This allws visited Internet sites and servers t differentiate the individual brwser f the dats subject frm ther Internet brwsers that cntain ther ckies. A specific Internet brwser can be recgnized and identified using the unique ckie ID. Thrugh the use f ckies, the Antrifttaler Kunststff Vertriebs GmbH can prvide the users f this website with mre user-friendly services that wuld nt be pssible withut the ckie setting. By means f a ckie, the infrmatin and ffers n ur website can be ptimized with the user in mind. Ckies allw us, as previusly mentined, t recgnize ur website users. The purpse f this recgnitin is t make it easier fr users t utilize ur website. The website user that uses ckies, e.g. des nt have t enter access data each time the website is accessed, because this is taken ver by the website, and the ckie is thus stred n the user's cmputer system. Anther example is the ckie f a shpping cart in an nline shp. The nline stre remembers the articles that a custmer has placed in the virtual shpping cart via a ckie. The data subject may, at any time, prevent the setting f ckies thrugh ur website by means f a crrespnding setting f the Internet brwser used, and may thus permanently deny the setting f ckies. Furthermre, already set ckies may be deleted at any time via an Internet brwser r ther sftware prgrams. This is pssible in all ppular Internet brwsers. If the data subject deactivates the setting f ckies in the Internet brwser used, nt all functins f ur website may be entirely usable. 5. Cllectin f general data and infrmatin The website f the Antrifttaler Kunststff Vertriebs GmbH cllects a series f general data and infrmatin when a data subject r autmated system calls up the website. This general data and infrmatin are stred in the server lg files. Cllected may be (1) the brwser types and versins used, (2) the perating system used by the accessing system, (3) the website frm which an accessing system reaches ur website (s-called referrers), (4) the sub-websites, (5) the date and time f access t the Internet site, (6) an Internet prtcl address (IP address), (7) the Internet service prvider f the accessing system, and (8) any ther similar data and infrmatin that may be used in the event f attacks n ur infrmatin technlgy systems. When using these general data and infrmatin, the Antrifttaler Kunststff Vertriebs GmbH des nt draw any cnclusins abut the data subject. Rather, this infrmatin is needed t (1) deliver the cntent f ur website crrectly, (2) ptimize the cntent f ur website as well as page 4 f 15 Antrifttaler Kunststff Vertriebs GmbH Kirchstr Antrifttal-Ohmes inf@kunststff-vertrieb.de

5 its advertisement, (3) ensure the lng-term viability f ur infrmatin technlgy systems and website technlgy, and (4) prvide law enfrcement authrities with the infrmatin necessary fr criminal prsecutin in case f a cyber-attack. Therefre, the Antrifttaler Kunststff Vertriebs GmbH analyzes annymusly cllected data and infrmatin statistically, with the aim f increasing the data prtectin and data security f ur enterprise, and t ensure an ptimal level f prtectin fr the persnal data we prcess. The annymus data f the server lg files are stred separately frm all persnal data prvided by a data subject. 6. Subscriptin t ur newsletters On the website f the Antrifttaler Kunststff Vertriebs GmbH, users are given the pprtunity t subscribe t ur enterprise's newsletter. The input mask used fr this purpse determines what persnal data are transmitted, as well as when the newsletter is rdered frm the cntrller. The Antrifttaler Kunststff Vertriebs GmbH infrms its custmers and business partners regularly by means f a newsletter abut enterprise ffers. The enterprise's newsletter may nly be received by the data subject if (1) the data subject has a valid address and (2) the data subject registers fr the newsletter shipping. A cnfirmatin will be sent t the address registered by a data subject fr the first time fr newsletter shipping, fr legal reasns, in the duble pt-in prcedure. This cnfirmatin is used t prve whether the wner f the address as the data subject is authrized t receive the newsletter. During the registratin fr the newsletter, we als stre the IP address f the cmputer system assigned by the Internet service prvider (ISP) and used by the data subject at the time f the registratin, as well as the date and time f the registratin. The cllectin f this data is necessary in rder t understand the (pssible) misuse f the address f a data subject at a later date, and it therefre serves the aim f the legal prtectin f the cntrller. The persnal data cllected as part f a registratin fr the newsletter will nly be used t send ur newsletter. In additin, subscribers t the newsletter may be infrmed by , as lng as this is necessary fr the peratin f the newsletter service r a registratin in questin, as this culd be the case in the event f mdificatins t the newsletter ffer, r in the event f a change in technical circumstances. There will be n transfer f persnal data cllected by the newsletter service t third parties. The subscriptin t ur newsletter may be terminated by the data subject at any time. The cnsent t the strage f persnal data, which the data subject has given fr shipping the newsletter, may be revked at any time. Fr the purpse f revcatin f cnsent, a crrespnding link is fund in each newsletter. It is als pssible t unsubscribe frm the newsletter at any time directly n the website f the cntrller, r t cmmunicate this t the cntrller in a different way. 7. Newsletter-Tracking The newsletter f the Antrifttaler Kunststff Vertriebs GmbH cntains s-called tracking pixels. A tracking pixel is a miniature graphic embedded in such s, which are sent in HTML frmat t enable lg file recrding and analysis. This allws a statistical analysis f the success r failure f nline marketing campaigns. Based n the embedded tracking pixel, the Antrifttaler Kunststff Vertriebs GmbH may see if and when an was pened by a data subject, and which links in the were called up by data subjects. Such persnal data cllected in the tracking pixels cntained in the newsletters are stred and analyzed by the cntrller in rder t ptimize the shipping f the newsletter, as well as t page 5 f 15 Antrifttaler Kunststff Vertriebs GmbH Kirchstr Antrifttal-Ohmes inf@kunststff-vertrieb.de

6 adapt the cntent f future newsletters even better t the interests f the data subject. These persnal data will nt be passed n t third parties. Data subjects are at any time entitled t revke the respective separate declaratin f cnsent issued by means f the duble-pt-in prcedure. After a revcatin, these persnal data will be deleted by the cntrller. The Antrifttaler Kunststff Vertriebs GmbH autmatically regards a withdrawal frm the receipt f the newsletter as a revcatin. 8. Cntact pssibility via the website The website f the Antrifttaler Kunststff Vertriebs GmbH cntains infrmatin that enables a quick electrnic cntact t ur enterprise, as well as direct cmmunicatin with us, which als includes a general address f the s-called electrnic mail ( address). If a data subject cntacts the cntrller by r via a cntact frm, the persnal data transmitted by the data subject are autmatically stred. Such persnal data transmitted n a vluntary basis by a data subject t the data cntrller are stred fr the purpse f prcessing r cntacting the data subject. There is n transfer f this persnal data t third parties. 9. Rutine erasure and blcking f persnal data The data cntrller shall prcess and stre the persnal data f the data subject nly fr the perid necessary t achieve the purpse f strage, r as far as this is granted by the Eurpean legislatr r ther legislatrs in laws r regulatins t which the cntrller is subject t. If the strage purpse is nt applicable, r if a strage perid prescribed by the Eurpean legislatr r anther cmpetent legislatr expires, the persnal data are rutinely blcked r erased in accrdance with legal requirements. 10. Rights f the data subject a) Right f cnfirmatin Each data subject shall have the right granted by the Eurpean legislatr t btain frm the cntrller the cnfirmatin as t whether r nt persnal data cncerning him r her are being prcessed. If a data subject wishes t avail himself f this right f cnfirmatin, he r she may, at any time, cntact any emplyee f the cntrller. b) Right f access Each data subject shall have the right granted by the Eurpean legislatr t btain frm the cntrller free infrmatin abut his r her persnal data stred at any time and a cpy f this infrmatin. Furthermre, the Eurpean directives and regulatins grant the data subject access t the fllwing infrmatin: the purpses f the prcessing; the categries f persnal data cncerned; the recipients r categries f recipients t whm the persnal data have been r will be disclsed, in particular recipients in third cuntries r internatinal rganisatins; where pssible, the envisaged perid fr which the persnal data will be stred, r, if nt pssible, the criteria used t determine that perid; page 6 f 15 Antrifttaler Kunststff Vertriebs GmbH Kirchstr Antrifttal-Ohmes inf@kunststff-vertrieb.de

7 the existence f the right t request frm the cntrller rectificatin r erasure f persnal data, r restrictin f prcessing f persnal data cncerning the data subject, r t bject t such prcessing; the existence f the right t ldge a cmplaint with a supervisry authrity; where the persnal data are nt cllected frm the data subject, any available infrmatin as t their surce; the existence f autmated decisin-making, including prfiling, referred t in Article 22(1) and (4) f the GDPR and, at least in thse cases, meaningful infrmatin abut the lgic invlved, as well as the significance and envisaged cnsequences f such prcessing fr the data subject. Furthermre, the data subject shall have a right t btain infrmatin as t whether persnal data are transferred t a third cuntry r t an internatinal rganisatin. Where this is the case, the data subject shall have the right t be infrmed f the apprpriate safeguards relating t the transfer. If a data subject wishes t avail himself f this right f access, he r she may, at any time, cntact any emplyee f the cntrller. c) Right t rectificatin Each data subject shall have the right granted by the Eurpean legislatr t btain frm the cntrller withut undue delay the rectificatin f inaccurate persnal data cncerning him r her. Taking int accunt the purpses f the prcessing, the data subject shall have the right t have incmplete persnal data cmpleted, including by means f prviding a supplementary statement. If a data subject wishes t exercise this right t rectificatin, he r she may, at any time, cntact any emplyee f the cntrller. d) Right t erasure (Right t be frgtten) Each data subject shall have the right granted by the Eurpean legislatr t btain frm the cntrller the erasure f persnal data cncerning him r her withut undue delay, and the cntrller shall have the bligatin t erase persnal data withut undue delay where ne f the fllwing grunds applies, as lng as the prcessing is nt necessary: The persnal data are n lnger necessary in relatin t the purpses fr which they were cllected r therwise prcessed. The data subject withdraws cnsent t which the prcessing is based accrding t pint (a) f Article 6(1) f the GDPR, r pint (a) f Article 9(2) f the GDPR, and where there is n ther legal grund fr the prcessing. The data subject bjects t the prcessing pursuant t Article 21(1) f the GDPR and there are n verriding legitimate grunds fr the prcessing, r the data subject bjects t the prcessing pursuant t Article 21(2) f the GDPR. The persnal data have been unlawfully prcessed. The persnal data must be erased fr cmpliance with a legal bligatin in Unin r Member State law t which the cntrller is subject. The persnal data have been cllected in relatin t the ffer f infrmatin sciety services referred t in Article 8(1) f the GDPR. If ne f the afrementined reasns applies, and a data subject wishes t request the erasure f persnal data stred by the Antrifttaler Kunststff Vertriebs GmbH, he r she may, at any page 7 f 15 Antrifttaler Kunststff Vertriebs GmbH Kirchstr Antrifttal-Ohmes inf@kunststff-vertrieb.de

8 time, cntact any emplyee f the cntrller. An emplyee f Antrifttaler Kunststff Vertriebs GmbH shall prmptly ensure that the erasure request is cmplied with immediately. Where the cntrller has made persnal data public and is bliged pursuant t Article 17(1) t erase the persnal data, the cntrller, taking accunt f available technlgy and the cst f implementatin, shall take reasnable steps, including technical measures, t infrm ther cntrllers prcessing the persnal data that the data subject has requested erasure by such cntrllers f any links t, r cpy r replicatin f, thse persnal data, as far as prcessing is nt required. An emplyees f the Antrifttaler Kunststff Vertriebs GmbH will arrange the necessary measures in individual cases. e) Right f restrictin f prcessing Each data subject shall have the right granted by the Eurpean legislatr t btain frm the cntrller restrictin f prcessing where ne f the fllwing applies: The accuracy f the persnal data is cntested by the data subject, fr a perid enabling the cntrller t verify the accuracy f the persnal data. The prcessing is unlawful and the data subject ppses the erasure f the persnal data and requests instead the restrictin f their use instead. The cntrller n lnger needs the persnal data fr the purpses f the prcessing, but they are required by the data subject fr the establishment, exercise r defence f legal claims. The data subject has bjected t prcessing pursuant t Article 21(1) f the GDPR pending the verificatin whether the legitimate grunds f the cntrller verride thse f the data subject. If ne f the afrementined cnditins is met, and a data subject wishes t request the restrictin f the prcessing f persnal data stred by the Antrifttaler Kunststff Vertriebs GmbH, he r she may at any time cntact any emplyee f the cntrller. The emplyee f the Antrifttaler Kunststff Vertriebs GmbH will arrange the restrictin f the prcessing. f) Right t data prtability Each data subject shall have the right granted by the Eurpean legislatr, t receive the persnal data cncerning him r her, which was prvided t a cntrller, in a structured, cmmnly used and machine-readable frmat. He r she shall have the right t transmit thse data t anther cntrller withut hindrance frm the cntrller t which the persnal data have been prvided, as lng as the prcessing is based n cnsent pursuant t pint (a) f Article 6(1) f the GDPR r pint (a) f Article 9(2) f the GDPR, r n a cntract pursuant t pint (b) f Article 6(1) f the GDPR, and the prcessing is carried ut by autmated means, as lng as the prcessing is nt necessary fr the perfrmance f a task carried ut in the public interest r in the exercise f fficial authrity vested in the cntrller. Furthermre, in exercising his r her right t data prtability pursuant t Article 20(1) f the GDPR, the data subject shall have the right t have persnal data transmitted directly frm ne cntrller t anther, where technically feasible and when ding s des nt adversely affect the rights and freedms f thers. In rder t assert the right t data prtability, the data subject may at any time cntact any emplyee f the Antrifttaler Kunststff Vertriebs GmbH. page 8 f 15 Antrifttaler Kunststff Vertriebs GmbH Kirchstr Antrifttal-Ohmes inf@kunststff-vertrieb.de

9 g) Right t bject Each data subject shall have the right granted by the Eurpean legislatr t bject, n grunds relating t his r her particular situatin, at any time, t prcessing f persnal data cncerning him r her, which is based n pint (e) r (f) f Article 6(1) f the GDPR. This als applies t prfiling based n these prvisins. The Antrifttaler Kunststff Vertriebs GmbH shall n lnger prcess the persnal data in the event f the bjectin, unless we can demnstrate cmpelling legitimate grunds fr the prcessing which verride the interests, rights and freedms f the data subject, r fr the establishment, exercise r defence f legal claims. If the Antrifttaler Kunststff Vertriebs GmbH prcesses persnal data fr direct marketing purpses, the data subject shall have the right t bject at any time t prcessing f persnal data cncerning him r her fr such marketing. This applies t prfiling t the extent that it is related t such direct marketing. If the data subject bjects t the Antrifttaler Kunststff Vertriebs GmbH t the prcessing fr direct marketing purpses, the Antrifttaler Kunststff Vertriebs GmbH will n lnger prcess the persnal data fr these purpses. In additin, the data subject has the right, n grunds relating t his r her particular situatin, t bject t prcessing f persnal data cncerning him r her by the Antrifttaler Kunststff Vertriebs GmbH fr scientific r histrical research purpses, r fr statistical purpses pursuant t Article 89(1) f the GDPR, unless the prcessing is necessary fr the perfrmance f a task carried ut fr reasns f public interest. In rder t exercise the right t bject, the data subject may cntact any emplyee f the Antrifttaler Kunststff Vertriebs GmbH. In additin, the data subject is free in the cntext f the use f infrmatin sciety services, and ntwithstanding Directive 2002/58/EC, t use his r her right t bject by autmated means using technical specificatins. h) Autmated individual decisin-making, including prfiling Each data subject shall have the right granted by the Eurpean legislatr nt t be subject t a decisin based slely n autmated prcessing, including prfiling, which prduces legal effects cncerning him r her, r similarly significantly affects him r her, as lng as the decisin (1) is nt is necessary fr entering int, r the perfrmance f, a cntract between the data subject and a data cntrller, r (2) is nt authrised by Unin r Member State law t which the cntrller is subject and which als lays dwn suitable measures t safeguard the data subject's rights and freedms and legitimate interests, r (3) is nt based n the data subject's explicit cnsent. If the decisin (1) is necessary fr entering int, r the perfrmance f, a cntract between the data subject and a data cntrller, r (2) it is based n the data subject's explicit cnsent, the Antrifttaler Kunststff Vertriebs GmbH shall implement suitable measures t safeguard the data subject's rights and freedms and legitimate interests, at least the right t btain human interventin n the part f the cntrller, t express his r her pint f view and cntest the decisin. If the data subject wishes t exercise the rights cncerning autmated individual decisinmaking, he r she may, at any time, cntact any emplyee f the Antrifttaler Kunststff Vertriebs GmbH. page 9 f 15 Antrifttaler Kunststff Vertriebs GmbH Kirchstr Antrifttal-Ohmes inf@kunststff-vertrieb.de

10 i) Right t withdraw data prtectin cnsent Each data subject shall have the right granted by the Eurpean legislatr t withdraw his r her cnsent t prcessing f his r her persnal data at any time. If the data subject wishes t exercise the right t withdraw the cnsent, he r she may, at any time, cntact any emplyee f the Antrifttaler Kunststff Vertriebs GmbH. 11. Data prtectin prvisins abut the applicatin and use f Facebk On this website, the cntrller has integrated cmpnents f the enterprise Facebk. Facebk is a scial netwrk. A scial netwrk is a place fr scial meetings n the Internet, an nline cmmunity, which usually allws users t cmmunicate with each ther and interact in a virtual space. A scial netwrk may serve as a platfrm fr the exchange f pinins and experiences, r enable the Internet cmmunity t prvide persnal r business-related infrmatin. Facebk allws scial netwrk users t include the creatin f private prfiles, uplad phts, and netwrk thrugh friend requests. The perating cmpany f Facebk is Facebk, Inc., 1 Hacker Way, Menl Park, CA 94025, United States. If a persn lives utside f the United States r Canada, the cntrller is the Facebk Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbur, Dublin 2, Ireland. With each call-up t ne f the individual pages f this Internet website, which is perated by the cntrller and int which a Facebk cmpnent (Facebk plug-ins) was integrated, the web brwser n the infrmatin technlgy system f the data subject is autmatically prmpted t dwnlad display f the crrespnding Facebk cmpnent frm Facebk thrugh the Facebk cmpnent. An verview f all the Facebk Plug-ins may be accessed under During the curse f this technical prcedure, Facebk is made aware f what specific sub-site f ur website was visited by the data subject. If the data subject is lgged in at the same time n Facebk, Facebk detects with every call-up t ur website by the data subject and fr the entire duratin f their stay n ur Internet site which specific sub-site f ur Internet page was visited by the data subject. This infrmatin is cllected thrugh the Facebk cmpnent and assciated with the respective Facebk accunt f the data subject. If the data subject clicks n ne f the Facebk buttns integrated int ur website, e.g. the "Like" buttn, r if the data subject submits a cmment, then Facebk matches this infrmatin with the persnal Facebk user accunt f the data subject and stres the persnal data. Facebk always receives, thrugh the Facebk cmpnent, infrmatin abut a visit t ur website by the data subject, whenever the data subject is lgged in at the same time n Facebk during the time f the call-up t ur website. This ccurs regardless f whether the data subject clicks n the Facebk cmpnent r nt. If such a transmissin f infrmatin t Facebk is nt desirable fr the data subject, then he r she may prevent this by lgging ff frm their Facebk accunt befre a call-up t ur website is made. The data prtectin guideline published by Facebk, which is available at prvides infrmatin abut the cllectin, prcessing and use f persnal data by Facebk. In additin, it is explained there what setting ptins page 10 f 15 Antrifttaler Kunststff Vertriebs GmbH Kirchstr Antrifttal-Ohmes inf@kunststff-vertrieb.de

11 Facebk ffers t prtect the privacy f the data subject. In additin, different cnfiguratin ptins are made available t allw the eliminatin f data transmissin t Facebk. These applicatins may be used by the data subject t eliminate a data transmissin t Facebk. 12. Data prtectin prvisins abut the applicatin and use f Instagram On this website, the cntrller has integrated cmpnents f the service Instagram. Instagram is a service that may be qualified as an audivisual platfrm, which allws users t share phts and vides, as well as disseminate such data in ther scial netwrks. The perating cmpany f the services ffered by Instagram is Instagram LLC, 1 Hacker Way, Building 14 First Flr, Menl Park, CA, UNITED STATES. With each call-up t ne f the individual pages f this Internet site, which is perated by the cntrller and n which an Instagram cmpnent (Insta buttn) was integrated, the Internet brwser n the infrmatin technlgy system f the data subject is autmatically prmpted t the dwnlad f a display f the crrespnding Instagram cmpnent f Instagram. During the curse f this technical prcedure, Instagram becmes aware f what specific sub-page f ur website was visited by the data subject. If the data subject is lgged in at the same time n Instagram, Instagram detects with every call-up t ur website by the data subject and fr the entire duratin f their stay n ur Internet site which specific sub-page f ur Internet page was visited by the data subject. This infrmatin is cllected thrugh the Instagram cmpnent and is assciated with the respective Instagram accunt f the data subject. If the data subject clicks n ne f the Instagram buttns integrated n ur website, then Instagram matches this infrmatin with the persnal Instagram user accunt f the data subject and stres the persnal data. Instagram receives infrmatin via the Instagram cmpnent that the data subject has visited ur website prvided that the data subject is lgged in at Instagram at the time f the call t ur website. This ccurs regardless f whether the persn clicks n the Instagram buttn r nt. If such a transmissin f infrmatin t Instagram is nt desirable fr the data subject, then he r she can prevent this by lgging ff frm their Instagram accunt befre a call-up t ur website is made. Further infrmatin and the applicable data prtectin prvisins f Instagram may be retrieved under and Data prtectin prvisins abut the applicatin and use f LinkedIn The cntrller has integrated cmpnents f the LinkedIn Crpratin n this website. LinkedIn is a web-based scial netwrk that enables users with existing business cntacts t cnnect and t make new business cntacts. Over 400 millin registered peple in mre than 200 cuntries use LinkedIn. Thus, LinkedIn is currently the largest platfrm fr business cntacts and ne f the mst visited websites in the wrld. The perating cmpany f LinkedIn is LinkedIn Crpratin, 2029 Stierlin Curt Muntain View, CA 94043, UNITED STATES. Fr privacy matters utside f the UNITED STATES LinkedIn Ireland, Privacy Plicy Issues, Wiltn Plaza, Wiltn Place, Dublin 2, Ireland, is respnsible. page 11 f 15 Antrifttaler Kunststff Vertriebs GmbH Kirchstr Antrifttal-Ohmes inf@kunststff-vertrieb.de

12 With each call-up t ne f the individual pages f this Internet site, which is perated by the cntrller and n which a LinkedIn cmpnent (LinkedIn plug-in) was integrated, the Internet brwser n the infrmatin technlgy system f the data subject is autmatically prmpted t the dwnlad f a display f the crrespnding LinkedIn cmpnent f LinkedIn. Further infrmatin abut the LinkedIn plug-in may be accessed under During the curse f this technical prcedure, LinkedIn gains knwledge f what specific sub-page f ur website was visited by the data subject. If the data subject is lgged in at the same time n LinkedIn, LinkedIn detects with every callup t ur website by the data subject and fr the entire duratin f their stay n ur Internet site which specific sub-page f ur Internet page was visited by the data subject. This infrmatin is cllected thrugh the LinkedIn cmpnent and assciated with the respective LinkedIn accunt f the data subject. If the data subject clicks n ne f the LinkedIn buttns integrated n ur website, then LinkedIn assigns this infrmatin t the persnal LinkedIn user accunt f the data subject and stres the persnal data. LinkedIn receives infrmatin via the LinkedIn cmpnent that the data subject has visited ur website, prvided that the data subject is lgged in at LinkedIn at the time f the call-up t ur website. This ccurs regardless f whether the persn clicks n the LinkedIn buttn r nt. If such a transmissin f infrmatin t LinkedIn is nt desirable fr the data subject, then he r she may prevent this by lgging ff frm their LinkedIn accunt befre a call-up t ur website is made. LinkedIn prvides under the pssibility t unsubscribe frm messages, SMS messages and targeted ads, as well as the ability t manage ad settings. LinkedIn als uses affiliates such as Eire, Ggle Analytics, BlueKai, DubleClick, Nielsen, Cmscre, Elqua, and Ltame. The setting f such ckies may be denied under The applicable privacy plicy fr LinkedIn is available under The LinkedIn Ckie Plicy is available under Data prtectin prvisins abut the applicatin and use f YuTube On this website, the cntrller has integrated cmpnents f YuTube. YuTube is an Internet vide prtal that enables vide publishers t set vide clips and ther users free f charge, which als prvides free viewing, review and cmmenting n them. YuTube allws yu t publish all kinds f vides, s yu can access bth full mvies and TV bradcasts, as well as music vides, trailers, and vides made by users via the Internet prtal. The perating cmpany f YuTube is YuTube, LLC, 901 Cherry Ave., San Brun, CA 94066, UNITED STATES. The YuTube, LLC is a subsidiary f Ggle Inc., 1600 Amphitheatre Pkwy, Muntain View, CA , UNITED STATES. With each call-up t ne f the individual pages f this Internet site, which is perated by the cntrller and n which a YuTube cmpnent (YuTube vide) was integrated, the Internet brwser n the infrmatin technlgy system f the data subject is autmatically prmpted t dwnlad a display f the crrespnding YuTube cmpnent. Further infrmatin abut YuTube may be btained under During the curse f this technical prcedure, YuTube and Ggle gain knwledge f what specific sub-page f ur website was visited by the data subject. page 12 f 15 Antrifttaler Kunststff Vertriebs GmbH Kirchstr Antrifttal-Ohmes inf@kunststff-vertrieb.de

13 If the data subject is lgged in n YuTube, YuTube recgnizes with each call-up t a subpage that cntains a YuTube vide, which specific sub-page f ur Internet site was visited by the data subject. This infrmatin is cllected by YuTube and Ggle and assigned t the respective YuTube accunt f the data subject. YuTube and Ggle will receive infrmatin thrugh the YuTube cmpnent that the data subject has visited ur website, if the data subject at the time f the call t ur website is lgged in n YuTube; this ccurs regardless f whether the persn clicks n a YuTube vide r nt. If such a transmissin f this infrmatin t YuTube and Ggle is nt desirable fr the data subject, the delivery may be prevented if the data subject lgs ff frm their wn YuTube accunt befre a call-up t ur website is made. YuTube's data prtectin prvisins, available at prvide infrmatin abut the cllectin, prcessing and use f persnal data by YuTube and Ggle. 15. Payment Methd: Data prtectin prvisins abut the use f PayPal as a payment prcessr On this website, the cntrller has integrated cmpnents f PayPal. PayPal is an nline payment service prvider. Payments are prcessed via s-called PayPal accunts, which represent virtual private r business accunts. PayPal is als able t prcess virtual payments thrugh credit cards when a user des nt have a PayPal accunt. A PayPal accunt is managed via an address, which is why there are n classic accunt numbers. PayPal makes it pssible t trigger nline payments t third parties r t receive payments. PayPal als accepts trustee functins and ffers buyer prtectin services. The Eurpean perating cmpany f PayPal is PayPal (Eurpe) S.à.r.l. & Cie. S.C.A., Bulevard Ryal, 2449 Luxemburg, Luxemburg. If the data subject chses "PayPal" as the payment ptin in the nline shp during the rdering prcess, we autmatically transmit the data f the data subject t PayPal. By selecting this payment ptin, the data subject agrees t the transfer f persnal data required fr payment prcessing. The persnal data transmitted t PayPal is usually first name, last name, address, address, IP address, telephne number, mbile phne number, r ther data necessary fr payment prcessing. The prcessing f the purchase cntract als requires such persnal data, which are in cnnectin with the respective rder. The transmissin f the data is aimed at payment prcessing and fraud preventin. The cntrller will transfer persnal data t PayPal, in particular, if a legitimate interest in the transmissin is given. The persnal data exchanged between PayPal and the cntrller fr the prcessing f the data will be transmitted by PayPal t ecnmic credit agencies. This transmissin is intended fr identity and creditwrthiness checks. PayPal will, if necessary, pass n persnal data t affiliates and service prviders r subcntractrs t the extent that this is necessary t fulfill cntractual bligatins r fr data t be prcessed in the rder. page 13 f 15 Antrifttaler Kunststff Vertriebs GmbH Kirchstr Antrifttal-Ohmes inf@kunststff-vertrieb.de

14 The data subject has the pssibility t revke cnsent fr the handling f persnal data at any time frm PayPal. A revcatin shall nt have any effect n persnal data which must be prcessed, used r transmitted in accrdance with (cntractual) payment prcessing. The applicable data prtectin prvisins f PayPal may be retrieved under Legal basis fr the prcessing Art. 6(1) lit. a GDPR serves as the legal basis fr prcessing peratins fr which we btain cnsent fr a specific prcessing purpse. If the prcessing f persnal data is necessary fr the perfrmance f a cntract t which the data subject is party, as is the case, fr example, when prcessing peratins are necessary fr the supply f gds r t prvide any ther service, the prcessing is based n Article 6(1) lit. b GDPR. The same applies t such prcessing peratins which are necessary fr carrying ut pre-cntractual measures, fr example in the case f inquiries cncerning ur prducts r services. Is ur cmpany subject t a legal bligatin by which prcessing f persnal data is required, such as fr the fulfillment f tax bligatins, the prcessing is based n Art. 6(1) lit. c GDPR. In rare cases, the prcessing f persnal data may be necessary t prtect the vital interests f the data subject r f anther natural persn. This wuld be the case, fr example, if a visitr were injured in ur cmpany and his name, age, health insurance data r ther vital infrmatin wuld have t be passed n t a dctr, hspital r ther third party. Then the prcessing wuld be based n Art. 6(1) lit. d GDPR. Finally, prcessing peratins culd be based n Article 6(1) lit. f GDPR. This legal basis is used fr prcessing peratins which are nt cvered by any f the abvementined legal grunds, if prcessing is necessary fr the purpses f the legitimate interests pursued by ur cmpany r by a third party, except where such interests are verridden by the interests r fundamental rights and freedms f the data subject which require prtectin f persnal data. Such prcessing peratins are particularly permissible because they have been specifically mentined by the Eurpean legislatr. He cnsidered that a legitimate interest culd be assumed if the data subject is a client f the cntrller (Recital 47 Sentence 2 GDPR). 17. The legitimate interests pursued by the cntrller r by a third party Where the prcessing f persnal data is based n Article 6(1) lit. f GDPR ur legitimate interest is t carry ut ur business in favr f the well-being f all ur emplyees and the sharehlders. 18. Perid fr which the persnal data will be stred The criteria used t determine the perid f strage f persnal data is the respective statutry retentin perid. After expiratin f that perid, the crrespnding data is rutinely deleted, as lng as it is n lnger necessary fr the fulfillment f the cntract r the initiatin f a cntract. page 14 f 15 Antrifttaler Kunststff Vertriebs GmbH Kirchstr Antrifttal-Ohmes inf@kunststff-vertrieb.de

15 19. Prvisin f persnal data as statutry r cntractual requirement; Requirement necessary t enter int a cntract; Obligatin f the data subject t prvide the persnal data; pssible cnsequences f failure t prvide such data We clarify that the prvisin f persnal data is partly required by law (e.g. tax regulatins) r can als result frm cntractual prvisins (e.g. infrmatin n the cntractual partner). Smetimes it may be necessary t cnclude a cntract that the data subject prvides us with persnal data, which must subsequently be prcessed by us. The data subject is, fr example, bliged t prvide us with persnal data when ur cmpany signs a cntract with him r her. The nn-prvisin f the persnal data wuld have the cnsequence that the cntract with the data subject culd nt be cncluded. Befre persnal data is prvided by the data subject, the data subject must cntact any emplyee. The emplyee clarifies t the data subject whether the prvisin f the persnal data is required by law r cntract r is necessary fr the cnclusin f the cntract, whether there is an bligatin t prvide the persnal data and the cnsequences f nn-prvisin f the persnal data. 20. Existence f autmated decisin-making As a respnsible cmpany, we d nt use autmatic decisin-making r prfiling. This Privacy Plicy has been generated by the Privacy Plicy Generatr f the DGD - Yur External DPO that was develped in cperatin with German Lawyers frm WILDE BEUGER SOLMECKE, Clgne. page 15 f 15 Antrifttaler Kunststff Vertriebs GmbH Kirchstr Antrifttal-Ohmes inf@kunststff-vertrieb.de