Privacy Policy
Privacy policy pursuant to Articles 13 and 14 of the GDPR for the website www.applied-microspheres.com
We are delighted that you have visited our website www.applied-microspheres.com ("website") and are interested in our company. When you visit our website, we also process personal data within the meaning of Art. 4 No. 1 GDPR ("data") relating to you. With this privacy policy, we are providing you with information in accordance with the requirements of Art. 13, 14 GDPR.
1. Responsible body and data protection officer
The controller pursuant to Art. 4 No. 7 GDPR for the processing of your data in connection with this website is:
Applied Microspheres GmbH
Nestléstr. 41
55120 Mainz
Germany
Tel. +49 6131 5540080
Email: info@applied-microspheres.com
There is no obligation to appoint a data protection officer.
2. Purpose of data processing, legal basis, storage period, recipients, and third-country transfers
Depending on the purpose of processing, your data may be processed on a different legal basis. In operating our website, we are supported in part by processors who process your data on our behalf and on our instructions and are therefore recipients of your data ("service providers"). In addition, your data may also be disclosed to other companies.
Below, we list the different purposes for which your data may be processed on our website, stating the relevant legal basis and the storage period. We also inform you whether this company is a service provider and whether your data is transferred outside the EU or the European Economic Area ("EEA").
a. Accessing our website and server log file
In order to display our website on your device, it is technically necessary for our web server, on which our website is hosted, to process data from you. For this purpose , we process your IP address together with the date and time of access, the name and URL of the file accessed, the referrer URL (website from which access is made), the amount of data transferred, and the loading time in a server log file.
Your data is processed in accordance with Art. 6 (1) lit. f) GDPR. The processing of your IP address is necessary to safeguard our legitimate interests in the availability and correct display of our website. The further storage of your data in a server log file serves to safeguard our legitimate interests in operating our website securely and without errors and in being able to detect, limit, and eliminate malfunctions and errors.
Your data in our server log file is automatically deleted 14 days after visiting our website.
We use a service provider to host our website. This provider is based outside the EEA, but the data is stored in the EU.
In this context, it cannot be ruled out that your data may be transferred outside the European Economic Area and thus outside the scope of the GDPR as part of our processing operations in our IT systems or those of our service providers, or that your data may be accessed, e.g., in the context of support. This applies in particular to the transfer of your data to and access to your data from the USA. There is no unrestricted adequacy decision by the European Commission for the USA. Your data will therefore also be transferred in accordance with Art. 46 (2) (c) GDPR on the basis of standard contractual clauses.
b. Contact
On our website, we give you the opportunity to contact us on various topics.
If you contact us using our contact form, the mandatory information you need to provide is marked as such. This information is necessary in order to process your request. All other information is voluntary and is only used to respond to your request in a more tailored manner. You can also contact us by telephone, email, post, or fax. The data we process from you in this context may vary depending on the communication channel, but usually includes your first and last name, your address, your telephone number, your email address, and your fax number.
If your contact is aimed at concluding a contract or is related to a contract, we process your data on the basis of Art. 6 (1) lit. b) GDPR. If your contact is of a general nature, we process your data in accordance with Art. 6 (1) lit. f) GDPR on the basis of our legitimate interests in responding to your inquiry about our company and/or our offers individually and in the best possible way.
We delete your data if it is related to a contractual relationship, if necessary only after the expiry of commercial or tax law retention obligations, which can be up to 6 years from the end of the year in which you contacted us. We delete all other data once your enquiry has been finally clarified and we are not subject to any legal obligation to retain the relevant data.
We use Microsoft365 to respond to emails. In doing so, it cannot be ruled out that your data may be transferred to our IT systems or those of our service providers outside the European Economic Area and thus outside the scope of the GDPR, or that your data may be accessed, e.g., in the context of support provided by Microsoft or comparable cloud providers. This applies in particular to the transfer of your data to and access to your data from the USA. There is no unrestricted adequacy decision by the European Commission for the USA. Therefore, the transfer of your data is also carried out in accordance with Art. 46 (2) (c) GDPR on the basis of the European Commission's standard contractual clauses.
c. Technically necessary Cookies and local storage
Cookies are small files that we send to your device's browser and store there when you visit our website. We use technically necessary cookies on our website to ensure the basic functions of our website. The cookies contain a so-called session ID, which can be used to assign various requests from your device during your visit to our website. We also store data locally in the cache, a temporary storage area of your browser (local storage).
The legal basis for storing information in the form of cookies or in local storage on your device or for accessing this information on your device is Section 25 (2) No. 2 TDDDG ("Telecommunications Digital Services Data Protection Act, Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz").
The legal basis for the associated processing of your data is Art. 6 (1) lit. f) GDPR. The use of technically essential cookies and local storage is necessary to safeguard our legitimate interests in the availability, correct display, and full functionality of our website.
Technically necessary cookies are deleted at the latest after you close the browser you are using. Data in local storage remains for one month even after you close your browser, unless you clear your cache.
If you do not want cookies to be set on your device or data to be stored in your local storage, you can control this centrally via the browser you are using. You can also delete both cookies and data from local storage via your browser.
However, blocking or deleting cookies may significantly limit the usability of our website for you.
d. Matomo
We use the web analysis tool Matomo (formerly Piwik) from InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand, NZBN 6106769, ("InnoCraft Ltd.") on our website.
Matomo is an open-source web analytics tool. We use information provided to us by your device. Every time your web browser sends a request to our web server, technical data is automatically transmitted. This is necessary so that our web servers can provide the content you have requested in the best possible way for the device you are using. The technical data allows us to distinguish between the devices used by different users. Matomo collects and stores the following data:
- the user's IP address, truncated by the last two bytes (anonymized);
- the subpage accessed and the time of access;
- the page from which the user accessed our website (referrer);
- which browser with which plug-ins, which operating system, and which screen resolution is used;
- the length of time spent on the website and
- the pages accessed from the subpage visited.
The IP address is truncated immediately after collection and before storage. Returning users are identified using a so-called config_id. This is a random string of characters that is calculated using the first 2 bytes of the IP address, as well as the browser plug-ins, the operating system, and the user's selected browser language, and is then hashed. The ID is deleted after 24 hours and recreated so that the user cannot be recognized by the website when they visit again.
The legal basis for the associated processing of your data is Art. 6 (1) lit. f) GDPR. Our legitimate interests lie in the need to continuously optimize our website and for market research purposes.
Matomo's privacy policy can be found at the following link: https://matomo.org/docs/privacy/.
Matomo is hosted on our web server.
e. LinkedIn
We maintain a presence on www.linkedin.com.
When you visit our page, various data is collected and processed. We are jointly responsible with LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland ("LinkedIn Ireland") for some of the processing of your data that takes place on www.linkedin.com. For other data processing, we are solely responsible or LinkedIn Ireland is solely responsible.
If you contact us on LinkedIn, we will process your name and other information that you provide to us. We are solely responsible for this processing of your data. The processing of this data that you provide to us is based on Art. 6 (1) lit. f) GDPR and pursues our legitimate interests in an appropriate and interactive company presentation.
Together with LinkedIn Ireland, we are responsible for the "Page Insights" feature, which provides us with statistical evaluations of your use of and interaction with our website in aggregated and anonymized form. You can view the joint responsibility agreement pursuant to Art. 26 GDPR at the following link: https://legal.linkedin.com/pages-joint-controller-addendum.
LinkedIn Ireland is solely responsible for any further unilateral processing of your data by LinkedIn Ireland. LinkedIn Ireland uses cookies and other technologies to collect data from you. You can find out for what purposes and on what legal basis this processing takes place in the LinkedIn Cookie Policy (https://de.linkedin.com/legal/cookie-policy?trk=homepage-basic_footer-cookie-policy) and the LinkedIn Privacy Policy (https://de.linkedin.com/legal/privacy-policy?trk=lithograph_footer-privacy-policy).
Please note that LinkedIn Ireland may also collect and process data about you when you visit the website www.linkedin.com, even if you do not have a LinkedIn account or are not logged in to LinkedIn. However, we do not know what data LinkedIn Ireland collects about you and for what purposes it is processed.
3. Third country transfer
The use of the companies mentioned in section 2 may result in your data being transferred to a third country and thus outside the EEA. Details can be found in the respective description.
4. No automated decision-making
We do not carry out automated decision-making.
5. Necessity of data collection
You are not contractually or legally obliged to provide us with the relevant data, but you cannot visit our website or contact us without disclosing your data.
6. Recipients of the data
When you visit our website, the recipients of your data are initially only the aforementioned service providers and companies. In addition, we are supported in the maintenance, care, and further development of our website by service providers engaged by us, who process your data only on our instructions and on our behalf.
Any further disclosure of your data will only take place on the basis of a legal obligation, for example to authorities or for the purpose of preventing, asserting, exercising, or defending legal claims.
7. Rights of the data subject
Under the GDPR, you have the following rights and claims against the controller:
- the right to information (Art. 15 GDPR)
- the right to rectification (Art. 16 GDPR)
- the right to erasure (Art. 17 GDPR)
- the right to restriction of processing (Art. 18 GDPR)
- the right to data portability (Art. 20 GDPR)
You have the right to withdraw your consent given to us at any time with effect for the future. You can object to the processing of your data for the purpose of safeguarding legitimate interests as described here at any time with effect for the future in accordance with Art. 21 GDPR . If the processing is not for direct marketing purposes, the right to object only exists for reasons arising from your particular situation.
8. Right to lodge a complaint with a supervisory authority
The data subject has the right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. Accordingly, without prejudice to any other administrative or judicial remedy, every data subject may lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work, or place of the alleged infringement, if the data subject considers that the processing of personal data relating to them infringes the GDPR.
The following data protection supervisory authority is responsible for us:
Rhineland-Palatinate
The State Commissioner for Data Protection and Freedom of Information Rhineland-Palatinate
Hintere Bleiche 34
55116 Mainz
Tel.: +49 (0) 6131 8920-0
Fax
Email: poststelle@datenschutz.rlp.de
The online complaint form can be found at the following link:
https://www.datenschutz.rlp.de/de/themenfelder-themen/online-services/beschwerdeformular/
