Data protection
Responsible authority
The responsible party in terms of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:
SPALECK Oberflächentechnik GmbH & Co. KG
Schlavenhorst 117
46395 Bocholt
Germany
Your rights as a data subject
- Information about your data stored with us and its processing,
- Correction of inaccurate personal data,
- Deletion of your data stored with us,
- Restriction of data processing, provided that we are not yet permitted to delete your data due to legal obligations.
- Objection to the processing of your data by us and
- Data portability, provided that you have consented to data processing or have entered into a contract with us.
If you have given us your consent, you may revoke it at any time with effect for the future.
You may file a complaint with the relevant supervisory authority at any time. The relevant supervisory authority depends on the state where you reside, work, or where the alleged violation occurred. A list of supervisory authorities (for the private sector) with their addresses can be found here.
Purposes of data processing by the responsible body and third parties
We process your personal data only for the purposes specified in this Privacy Policy. We do not disclose your personal data to third parties for any purposes other than those specified. We disclose your personal data to third parties only if:
- You have given your explicit consent to this,
- the processing is necessary for the performance of a contract with you,
- processing is necessary for compliance with a legal obligation,
- processing is necessary to safeguard legitimate interests and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data.
Deletion or blocking of data
We adhere to the principles of data avoidance and data minimisation. We therefore only store your personal data for as long as is necessary to achieve the purposes stated here or as required by the various storage periods stipulated by law. Once the respective purpose has ceased to apply or these periods have expired, the corresponding data is routinely blocked or deleted in accordance with the statutory provisions.
Collection of general information when visiting our website
When you access our website, information of a general nature is automatically collected by means of a cookie. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your Internet service provider and similar information. This is exclusively information that does not allow any conclusions to be drawn about your person.
This information is technically necessary in order to correctly deliver the content you have requested from websites and is mandatory when using the Internet. It is processed in particular for the following purposes:
- Ensuring problem-free connection to the website,
- Ensuring the smooth operation of our website,
- Assessment of system security and stability, as well as
- for other administrative purposes.
The processing of your personal data is based on our legitimate interest in the aforementioned purposes for data collection. We do not use your data to draw conclusions about your person. The recipients of the data are only the responsible body and, if applicable, contract processors.
We may statistically evaluate anonymous information of this kind in order to optimise our website and the technology behind it.
Inquiries by email, phone, or fax
Cookies
Like many other websites, we also use so-called “cookies.” Cookies are small text files that are transferred from a website server to your hard drive. This allows us to automatically collect certain data, such as your IP address, the browser you are using, your operating system, and your Internet connection.
Cookies cannot be used to start programmes or transfer viruses to a computer. The information contained in cookies enables us to make navigation easier for you and to ensure that our web pages are displayed correctly.
Under no circumstances will the data we collect be passed on to third parties or linked to personal data without your consent.
Cookie overview
Of course, you can also view our website without cookies. Internet browsers are usually set to accept cookies. In general, you can deactivate the use of cookies at any time via your browser settings. Please use the help functions of your internet browser to find out how to change these settings. Please note that individual functions of our website may not work if you have deactivated the use of cookies.
Contact Form
If you contact us by email or contact form with any questions, you give us your voluntary consent for the purpose of contacting you. To do this, you must provide a valid email address. This is used to assign the enquiry and subsequently respond to it. The provision of further data is optional. The information you provide will be stored for the purpose of processing your enquiry and for possible follow-up questions. Once your enquiry has been dealt with, your personal data will be automatically deleted.
Sending Emails via Brevo
For the technical delivery of emails, in particular notifications from our contact form and confirmation messages to senders, we use the Brevo service provided by Brevo GmbH, Köpenicker Straße 126, 10179 Berlin (hereinafter “Brevo”). Brevo GmbH is a subsidiary of Sendinblue SAS, 17 rue de Salneuve, 75017 Paris, France.
Purpose and Data Processed
Brevo handles the reliable delivery of our emails. When you use our contact form, the data you enter is processed via Brevo’s systems for delivery to us. This includes the contact information you provide—specifically your name and email address, as well as your phone number and company (if applicable)—the content of your message, and the date and time of submission. In addition, Brevo processes technical mailing data such as email headers, delivery status, and information about undeliverable messages to ensure the mailing system functions properly and to prevent abuse.
Legal Basis
The legal basis for the processing is Article 6(1)(f) of the GDPR. Our legitimate interest lies in ensuring that our email system functions properly, is reliable, and is protected against misuse. If your inquiry is related to the initiation or performance of a contract, Article 6(1)(b) of the GDPR also serves as the legal basis.
Data Processing and Locations of Processing
We have a data processing agreement with Brevo in accordance with Article 28 of the GDPR. Brevo processes the data exclusively in accordance with our instructions and not for its own purposes. The processing takes place on servers located within the European Union. In the exceptional case that processing is carried out by a subprocessor in a third country, such processing is safeguarded by appropriate safeguards, in particular the European Commission’s Standard Data Protection Clauses pursuant to Article 46(2)(c) of the GDPR.
Retention period
Brevo stores the technical shipping logs only for a limited period of time and then deletes them. We retain your request for as long as necessary to process it and then delete it, provided there are no legal retention requirements to the contrary.
More Information
For more information about Brevo’s data processing practices, please see Brevo’s Privacy Policy at www.brevo.com/de/legal/privacypolicy/.
Use of Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc. (hereinafter: Google). Google Analytics uses ‘cookies’, which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States. However, due to the activation of IP anonymisation on these web pages, your IP address will be truncated by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
The purposes of data processing are to evaluate the use of the website and to compile reports on activities on the website. Based on the use of the website and the internet, further related services are then to be provided. Processing is based on the legitimate interest of the website operator.
You can prevent cookies from being stored by adjusting your browser software settings accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available under the following link: Browser add-on to deactivate Google Analytics.
Google Tag Manager
Our website uses Google Tag Manager. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is used to manage website tags via an interface. The tool itself (which implements the tags) does not process any personal data belonging to users. However, Google Tag Manager triggers other tags, which may collect data. Google Tag Manager does not access this data.
The use of Google Tag Manager is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR in order to ensure the technically error-free and optimised provision of our services.
For more information, please see Google’s privacy policy.
Google Search Console
We use Google Search Console, a service provided by Google Ireland Limited. Search Console enables us to analyse and optimise our website in terms of its findability in the Google search engine. No personal data of website visitors is processed or stored in the process.
Use is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR in optimising our website for search engines.
Google Ads with conversion tracking
We intend to use Google Ads with conversion tracking. The provider is Google Ireland Limited. A cookie is set when a user clicks on an ad placed by Google. These cookies expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognise that the user has clicked on the ad and been redirected to this page.
The information collected by the conversion cookie is used to generate conversion statistics. We learn the total number of users who clicked on an ad and were redirected to a page tagged with a conversion tracking tag. However, we do not receive any information that can be used to personally identify users.
The storage of conversion cookies is based on your consent in accordance with Article 6(1)(a) of the GDPR.
Google Remarketing
This website intends to use the remarketing function of Google Ads. The provider is also Google Ireland Limited. With the help of this function, we can present interest-based advertisements to visitors to our website on other websites within the Google advertising network.
Google uses cookies to analyze website usage, which forms the basis for creating interest-based advertisements. These cookies collect information about visits to the website and anonymized data about website usage. No personal data about website visitors is stored.
The use of Google Remarketing is only permitted with your express consent in accordance with Art. 6 (1) (a) GDPR.
Use of Google Maps
This website uses Google Maps API to visually display geographic information. When using Google Maps, Google also collects, processes, and uses data about how visitors use the map functions. For more information about data processing by Google, please refer to Google’s privacy policy. There you can also change your personal privacy settings in the privacy center.
Detailed instructions on managing your own data in connection with Google products can be found here.
Use of Cloudflare (Content Delivery Network and security services)
To ensure the secure, reliable, and fast delivery of this website, we use services provided by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA (hereinafter “Cloudflare”).
How It Works and Its Purpose
Cloudflare acts as a reverse proxy. All data traffic between your browser and this website is routed through Cloudflare’s servers. Cloudflare delivers content via a global content delivery network, encrypts the connection, reduces loading times, and protects this website from unauthorized access. These include, in particular, distributed denial-of-service (DDoS) attacks, automated requests from bots, and application-layer attacks.
Processed Data
Every time you access this website, Cloudflare processes the following data: your IP address, the URL you accessed, the date and time of access, the amount of data transferred, the previously visited page (referrer), information about your browser and operating system (user agent), the HTTP status code, and the country or region of origin of the request.
Cookies
Cloudflare uses technically necessary cookies, specifically “__cf_bm,” “cf_clearance,” and “_cfuvid.” These are used exclusively to distinguish between human users and automated requests, as well as to ensure the security of the connection. They are not used for advertising or analytics purposes.
Legal Basis
The legal basis for the processing is Article 6(1)(f) of the GDPR. Our legitimate interest lies in the security, stability, availability, and performance of our online services. We rely on Section 25(2)(2) of the TDDDG for the storage of the aforementioned cookies, as they are strictly necessary for the provision of the service you have expressly requested.
Data Processing
We have a data processing agreement with Cloudflare in accordance with Article 28 of the GDPR. Cloudflare processes the data exclusively in accordance with our instructions and not for its own purposes.
Locations of Data Processing and Transfer to Third Countries
Cloudflare operates a globally distributed network and generally processes requests at the nearest data center. Requests from visitors in Europe are primarily processed at locations within the European Union. Depending on the visitor’s network connection, current network load, or service disruptions, processing may also take place at locations outside the European Union, such as in the United Kingdom. In addition, logs and metadata are stored in Cloudflare’s central infrastructure, which includes locations in the United States.
For transfers to the United Kingdom, the European Commission has issued an adequacy decision pursuant to Article 45 of the GDPR. For transfers to the United States, we rely on the European Commission’s Standard Data Protection Clauses agreed upon with Cloudflare pursuant to Article 46(2)(c) of the GDPR. In addition, Cloudflare, Inc. is certified under the EU-U.S. Data Privacy Framework, for which the European Commission has also issued an adequacy decision pursuant to Article 45 of the GDPR.
Retention period
Cloudflare stores log data only for a limited period of time for security and operational purposes, after which it is deleted or aggregated.
More Information
For more information about Cloudflare’s data processing practices, please see Cloudflare’s Privacy Policy at www.cloudflare.com/de-de/privacypolicy/ as well as in the information on GDPR compliance at www.cloudflare.com/de-de/trust-hub/gdpr/.
Changes to our privacy policy
We reserve the right to update this Privacy Policy to ensure that it always complies with current legal requirements or to reflect changes to our services in the Privacy Policy, such as when we introduce new services. The updated Privacy Policy will then apply to your next visit.
Questions for the Data Protection Officer
If you have any questions regarding data protection, please contact our Data Protection Officer by email:
SPALECK Oberflächentechnik GmbH & Co. KG
Marius Schüling
Schlavenhorst 117
46395 Bocholt
Deutschland
E-Mail: da*********@*****ck.com
This privacy policy was created using the privacy policy generator from activeMind AG.