Data Protection Declaration
according to the GDPR

I. General information

1. Contact details of the responsible person

Name: Michael Trapp
Address: Carl-Zeiss-Straße 5
Postal Code, City: 63165 Mühlheim am Main
Tel.: +49 (0) 6108 7978 - 0
Fax.: +49 (0) 6108 7978 - 79
E-Mail: info@sattlerkunststoffwerk.de

II. Specific information on the collection of personal data

1. Visit of the website

a) Purpose of data processing Each time a user accesses a page of our website and each time a file stored on the website is called up, access data about this process is stored in a log file. Each data record consists of:
(1) the page from which the file was requested,
(2) the name of the file,
(3) the date and time of the request,
(4) the amount of data transmitted,
(5) the access status (file transferred, file not found, etc.),
(6) a description of the type of operating system and web browser used,
(7) host name of the accessing computer,
(8) the client IP address.

We use this data to operate our website, in particular to determine the utilization of the website as well as malfunctions of the website and to make adjustments or improvements. The client IP address is used for the purpose of transmitting the requested data; it is anonymized after the technical requirement no longer applies by deleting the last block of digits (Ipv4) or the last octet (Ipv6).

b) Duration of storage

The data is stored each time a user accesses a page of our offer and each time our webpage is called up and is deleted as soon as it is no longer required for the purpose of collection, which is three months since the website was visited at the latest.

c) Legal basis

The temporary storage of the aforementioned data is carried out on the legal basis of Art. 6 para. 1 lit. f of the EU General Data Protection Regulation (hereinafter "GDPR"). The legitimate interest lies in the making available of our website and the examination of abusive use.

d) Objection and removal

The data subject may object to the processing by refraining from using our website and, subject to the conditions specified in more detail below in the "Rights" section, request the deletion of data collected from him/her in this way by means of an informal declaration.

2. Download portal available under the heading "Service“

a) Purpose of the data processing

We process the transmitted data to verify the enquirer as a potential customer, as we do not want to make our retrievable data available to the public. These data are name, address, email address, telephone and/or fax number, date and time of the enquiry and the description of the request, contract data, if applicable, if the enquiry is made in the context of entering into or processing a contract. The data will not be passed on to third parties. They are used to process the contact request of the person concerned to grant access to the download portal.

As a manufacturer of thermoplastic compounds, Sattler KunststoffWerk GmbH is entitled to intellectual property rights and thus has a legitimate interest in the protection of intellectual property rights. That is why technical information is only released to individually selected interested parties who are (potential) customers - and not competitors. Sattler KunststoffWerk GmbH produces thermoplastic compounds on a customized and order-related basis exclusively for business customers and thus has a legitimate interest in responding to enquiries from interested parties in a targeted and individual manner. Both require the provision of information concerning the real names (first name, last name) as well as the email address and company name.

b) Duration of storage

We store personal data that we collect and process for the purpose of contacting you for a period of three years at the end of the year following the complete performance of the reciprocally rendered service obligations. Insofar as the data is the subject of business letters within the meaning of Sections 147 (1) Nos. 2 and 3, 257 (1) Nos. 2 and 3 of the German Commercial Code (HGB), the data will be deleted at the end of six years at the end of the year. The same applies if they are part of other documents which are of importance for taxation within the meaning of section 147, paragraph 1, no. 5 AO, unless shorter retention periods are permitted in other tax laws. If the data is part of accounting records within the meaning of sections 147, paragraph 1, nos. 1, 4, 4a AO, 257, paragraph 1, nos. 1 and 4 HGB, the data shall be deleted at the end of ten years at the end of the year.

c) Legal basis

The storage of the aforementioned data is carried out on the legal basis of Art. 6 para. 1 lit. b DSGVO in the context of a contract initiation or fulfilment or according to Art. 6 para. 1 lit. f DSGVO. The legitimate interest of the responsible party is to be able to process the contact request and to prevent misuse of the contact request.

d) Objection and removal

The person concerned has the possibility of objecting to the storage of the data at any time. The data stored for the transaction will then be deleted. If a contract has been concluded, the above explanations on the keyword "Conclusion of contract" apply.

3. Contact forms (available under the headings "Contact" and under "Colours")

a) Purpose of the data processing

A user can contact us via contact form, email or telephone. We store the data thus transmitted to us and provided by the person concerned in order to process the enquiry. These data are the company, name, email address, telephone, date and time of the enquiry and the description of the request, and, if applicable, contractual data if the enquiry is made in the context of entering into or processing a contract. The data will not be passed on to third parties. They are used to process the contact request of the person concerned.

As a manufacturer of thermoplastic compounds, Sattler KunststoffWerk GmbH is entitled to intellectual property rights and thus has a legitimate interest in the protection of intellectual property rights. That is why technical information is only released to individually selected interested parties who are (potential) customers - and not competitors. Sattler KunststoffWerk GmbH produces thermoplastic compounds on a customized and order-related basis exclusively for business customers and thus has a legitimate interest in responding to enquiries from interested parties in a targeted and individual manner. Both require the provision of information concerning the real names (first name, last name) as well as the email address and company name.

b) Duration of storage

We store personal data that we collect and process for the purpose of contacting you for a period of three years at the end of the year following the complete performance of the reciprocally rendered service obligations. Insofar as the data is the subject of business letters within the meaning of Sections 147 (1) Nos. 2 and 3, 257 (1) Nos. 2 and 3 of the German Commercial Code (HGB), the data will be deleted at the end of six years at the end of the year. The same applies if they are part of other documents which are of importance for taxation within the meaning of section 147, paragraph 1, no. 5 AO, unless shorter retention periods are permitted in other tax laws. If the data is part of accounting records within the meaning of sections 147, paragraph 1, nos. 1, 4, 4a AO, 257, paragraph 1, nos. 1 and 4 HGB, the data shall be deleted at the end of ten years at the end of the year.

c) Legal basis

The storage of the aforementioned data is carried out on the legal basis of Art. 6 para. 1 lit. b DSGVO in the context of a contract initiation or fulfilment or according to Art. 6 para. 1 lit. f DSGVO. The legitimate interest of the responsible party is to be able to process the contact request and to prevent misuse of the contact request.

d) Possibility of objection and removal

The person concerned has the possibility of objecting to the storage at any time. The data stored for the transaction will then be deleted. If a contract has been concluded, the above explanations on the keyword "Conclusion of contract" apply.

III. Rights of the data subject

If personal data are processed by the user on our website, the person concerned (data subject) has the following rights against the controller pursuant to GDPR.

1. Right to information according to Art. 15 DSGVO

The data subject has the right to the following information:

(a) the purposes of the processing;

(b) the categories of personal data processed;

(c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular in the case of recipients in third countries or international organisations;

(d) if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining that duration;

(e) the existence of a right to obtain the rectification or deletion of personal data concerning him or her, or the restriction of processing by the controller, or a right to object to such processing;

f) the existence of a right of appeal to a supervisory authority;

(g) where the personal data are not collected from the data subject, any available information on the origin of the data;

(h) the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the GDPR and, at least in those cases, meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.

(i) where personal data are transferred to a third country or to an international organisation, the data subject shall have the right to be informed of the appropriate safeguards pursuant to Article 46 GDPR in relation to the transfer.

We shall provide the data subject with a copy of the personal data that is the subject of the processing. For any further copies requested by the data subject, the controller may charge a reasonable fee based on the administrative costs.

2. Right of rectification according to Art. 16 DSGVO

The data subject shall have the right to obtain from the controller the rectification without delay of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to obtain the completion of any incomplete personal data, including by means of a supplementary declaration.

3. Right to deletion according to Art. 17 DSGVO

The data subject shall have the right to obtain from the controller the deletion without delay of personal data concerning him or her, and the controller shall be obliged to delete personal data without delay where one of the following grounds applies:

(a) the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;

(b) the data subject revokes the consent on which the processing was based pursuant to Article 6(1)(a) or Article 9(2)(a) of the GDPR and there is no other legal basis for the processing;

(c) the data subject objects to the processing pursuant to Article 21(1) of the GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) of the GDPR;

(d) the personal data have been processed unlawfully;

(e) the deletion of the personal data is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject;

(f) the personal data have been collected in relation to information society services offered in accordance with Article 8(1) of the GDPR.

4. Right to restriction of processing according to Art. 18 DSGVO

The data subject shall have the right to obtain from the controller the restriction of processing where one of the following conditions is met:

(a) the accuracy of the personal data is contested by the data subject for a period enabling the controller to verify the accuracy of the personal data;

(b) the processing is unlawful and the data subject objects the deletion of the personal data and requests instead the restriction of the use of the personal data;

(c) the controller no longer needs the personal data for the purposes of processing but the data subject needs them for the establishment, exercise or defence of legal claims; or

(d) the data subject has objected to the processing pursuant to Article 21(1) of the GDPR, as long as it is not yet established whether the legitimate grounds of the controller override those of the data subject.

5. Right to information according to Art. 19 DSGVO

If the data subject has asserted rectification pursuant to Article 16 of the GDPR, deletion pursuant to Article 17(1) of the GDPR or restriction of processing pursuant to Article 18 of the GDPR against the controller with respect to his or her personal data, and if the controller has informed all recipients to whom data subject's personal data have been disclosed of the data subject's request (unless this was impossible or involved disproportionate effort), the data subject has the right to be informed by the controller about the recipients.

6. Right to data portability according to Art. 20 DSGVO

The data subject has the right to receive the personal data concerning him or her that he or she has provided to a controller in a structured, commonly used and machine-readable format and has the right to transmit this data to another controller without hindrance from us, provided that

a) the processing is based on consent pursuant to Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a or on a contract pursuant to Art. 6 para. 1 lit. b DSGVO and

(b) the processing is carried out with the aid of automated procedures. The rights and freedoms of other persons must not be affected by this. When exercising the right to data portability pursuant to para. 1, the data subject shall have the right to obtain that the personal data be transferred directly from us to another controller, where technically feasible.

The exercise of the right to data portability shall be without prejudice to the right to deletion pursuant to Article 17 GDPR. The right to data portability shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

7. Right of objection according to Art. 21 DSGVO

The data subject shall have the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her which is carried out on the basis of Article 6(1)(e) or (f) DSGVO; this shall also apply to any profiling based on these provisions.

We shall no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims.

If personal data are processed for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing; this shall also apply to profiling insofar as it is related to such direct marketing.

If the data subject objects to the processing for direct marketing purposes, the personal data will no longer be processed for these purposes. Consent given by the data subject can be revoked at any time. However, the collection and processing carried out up to this point remains lawful.

8. Automated decisions in individual cases incl. profiling according to Art. 22 DSGVO

The data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her. This shall not apply if the decision

a) is necessary for the conclusion or performance of a contract between the data subject and us,

b) is permitted by Union or Member State legislation to which we are subject and that legislation contains appropriate measures to safeguard the rights and freedoms and legitimate interests of the data subject; or

c) is done with the explicit consent of the data subject.

These decisions shall not be based on special categories of personal data pursuant to Article 9(1) GDPR, unless Article 9(2)(a) or (g) GDPR applies and appropriate measures have been taken to protect the rights and freedoms and legitimate interests of the data subject. In the cases mentioned under a) and c), we shall take reasonable steps to safeguard the rights and freedoms as well as the legitimate interests of the data subject, which shall include, at least, the right to obtain the intervention of a person on our part, to express his or her point of view and to contest the decision.

9. Right to complain to a supervisory authority pursuant to Art. 77 DSGVO

Without prejudice to any other administrative or judicial remedy, every data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her residence, place of work or the place of the alleged infringement, if the data subject considers that the processing of personal data relating to him or her infringes the GDPR.

The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 GDPR..

10. Right to effective judicial remedy under Art. 79 GDPR

Without prejudice to any available administrative or non-judicial remedy, including the right to lodge a complaint with a supervisory authority pursuant to Article 77 GDPR, every data subject shall have the right to an effective judicial remedy if he or she considers that his or her rights under the GDPR have been infringed as a result of the processing of his or her personal data that does not comply with the GDPR.

Actions against us or against a Processor shall be brought in the courts of the Member State in which we or Processors have an establishment. Alternatively, such actions may be brought in the courts of the Member State where the data subject is domiciled, unless we or the processor are a public authority of a Member State acting in the exercise of its public powers.