Privacy

BÜFA Thermoplastic Composites GmbH & Co. KG

Privacy

Data protection declaration

Modern information and communication technologies are playing an increasingly important role in the activities of the BÜFA Group. We therefore take the protection of your privacy and the personal data you provide us with very seriously. Compliance with the provisions of the Federal Data Protection Act is a matter of course for us. In the following we will inform you about which data we may collect and how we handle it.

Responsibility

BÜFA Thermoplastic Composites GmbH & Co. KG
Stubbenweg 40
26125 Oldenburg
Telefon: +49 441 9317-0
E-Mail: thermoplasticcomposites@buefa.de

We are supported by our data protection officer in fulfilling our data protection obligations. In case of an inquiry, please name the company in question. The contact details of our data protection officer are as follows:

Dr. Uwe Schläger
datenschutz nord GmbH
Konsul-Smidt-Straße 88
28217 Bremen, Deutschland
web: www.datenschutz-nord-gruppe.de
email: office@datenschutz-nord.de
phone: 0421 69 66 32 0

This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the responsible person). You can recognize an encrypted connection by the character string “https://” and the lock symbol in your browser line.

What personal data are collected and processed?

You can visit our websites without us requiring any personal data from you. We only learn the name of your internet service provider, the website from which you are visiting us and the website you visit on our site. Personal data is only collected and processed if you use certain services. You will then be informed of this in detail in the menu.

For what purposes do we collect and process personal data?

Since we are constantly striving to improve both our service offerings and your experience with our websites in a continuous process, the above-mentioned general data is evaluated statistically. However, for this purpose we are interested in your personal opinion and your environment. For this reason, you will be asked for additional information at certain points. This is voluntary information, which we naturally treat confidentially.

When you visit our website, we collect the following data, which is technically necessary for us to display the website:

  • Our visited website
  • Date and time of access
  • Amount of sent data in bytes
  • Source/reference from which you came to the page
  • Used Browser
  • Operating system used
  • IP address used (if necessary: in anonymized form)

The processing is carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files subsequently if there are concrete indications of illegal use.

If you make use of our services, as a rule only such data is collected as we need to provide the services. As far as we ask you for further data, this is voluntary information. Personal data is processed exclusively for the purpose of fulfilling the requested service and to protect our own legitimate business interests.

Are personal data passed on to third parties?

We will only pass on your personal data to third parties to the extent that it is absolutely necessary to provide the requested service. In addition, we will not disclose, transfer, sell or otherwise market your personal data to other companies or institutions without your express consent. This does not apply if we are obliged to disclose and transfer the data by law or by court judgement.

Cookies

To make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your end device. Some of the cookies we use are deleted again after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your end device and enable us or our partner companies (third-party cookies) to recognize your browser the next time you visit us (persistent cookies). If cookies are set, they collect and process certain user information to an individual extent, such as browser and location data and IP address values. Persistent cookies are automatically deleted after a specified period of time, which may vary depending on the cookie.

Insofar as personal data is also processed by individual cookies implemented by us, the processing is carried out in accordance with Art. 6 Para. 1 letter b DSGVO either for the execution of the contract or in accordance with Art. 6 Para. 1 letter f DSGVO to protect our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.
Under certain circumstances, we work together with advertising partners who help us to make our Internet offer more interesting for you. For this purpose, cookies from partner companies are also stored on your hard drive when you visit our website (cookies from third parties). If we cooperate with the above-mentioned advertising partners, we will inform you individually and separately about the use of such cookies and the scope of the information collected in each case within the following paragraphs.
Please note that you can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or generally. Each browser differs in the way it manages the cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for each browser under the following links:

Internet Explorer: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox:https://support.mozilla.org/en-US/kb/enhanced-tracking-protection-firefox-desktop
Chrome: https://support.google.com/chrome/answer/95647?hl=en&hlrm=en
Safari: https://www.apple.com/legal/privacy/en-ww/
Opera: https://help.opera.com/en/latest/web-preferences/

Contacting

You have the possibility to get in contact with us in several ways. By contact form, by e-mail, by phone or by mail. If you contact us, we use the personal data that you voluntarily provide us with in this context solely for the purpose of contacting you and processing your request.

The legal basis for this data processing is art. 6 paragraph 1 letter a), art. 6 paragraph 1 letter b), art. 6 paragraph 1 letter c) DSGVO as well as art. 6 paragraph 1 letter f) DSGVO.

Google Analytics

We use the web analysis tool “Google Analytics” to design our websites according to your needs. Google Analytics creates usage profiles based on pseudonyms. For this purpose, permanent cookies are stored on your end device and read out by us. In this way we are able to recognize returning visitors and count them as such.

Within the framework of Google Analytics, Google Ireland Limited and Google LLC support us. (USA) support us as processors according to Art. 28 DSGVO. The data processing can therefore also take place outside the EU or EEA. With regard to Google LLC, no adequate level of data protection can be assumed due to the processing in the USA. There is a risk that authorities may access the data for security and monitoring purposes without you being informed or having the right to appeal. Please take this into account if you decide to give your consent to our use of Google Analytics.

The data processing is based on your consent according to Art. 6 para. 1 p. 1 lit. a DSGVO or § 15 TMG, if you have given your consent via our banner. The transfer to a third country takes place on the basis of Art. 49 para. 1 lit. a DSGVO.

You can revoke your consent at any time here. You can deactivate Google Analytics here.

Embedded Videos

On our websites we embed videos that are not stored on our servers. In order to ensure that calling up our web pages with embedded videos does not automatically lead to the reloading of third-party content, in a first step we only show locally stored preview images of the videos. This does not provide the third party provider with any information.

Only after a click on the preview image, content from the third party provider is loaded. The third party provider receives the information that you have called up our site and the usage data that is technically required in this context. We have no influence on further data processing by the third party provider. By clicking on the thumbnail, you give us the consent to reload contents of the third party provider.

The embedding takes place on the basis of your consent in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO or § 15 TMG, provided that you have given your consent by clicking on the preview image. Please note that the embedding of many videos leads to your data being processed outside the EU or EEA. In some countries, there is a risk that authorities may access the data for security and surveillance purposes without you being informed or having the right to appeal. If we use providers in insecure third countries and you give your consent, the transfer to an insecure third country is based on Art. 49 para. 1 lit. a DSGVO.

ProviderMaximum storage durationAdequate level of data protectionRevocation of consent
YouTube / Google (USA)Google does not specify a concrete duration for this.No adequate level of data protection. The data is transmitted on the basis of Art. 49 para. 1 letter a DSGVO.If you clicked on a thumbnail, the content of the third-party provider is immediately reloaded. If you do not want such reloading on other sites, please do not click on the thumbnails anymore.

Map Services

On our web pages we embed map services that are not stored on our servers. In order to avoid that calling up our web pages with embedded map services automatically leads to the reloading of third-party content, in a first step we only show locally stored preview images of the maps. This does not provide the third party provider with any information.

Only after a click on the preview image will the content of the third party provider be loaded. The third party provider is informed that you have called up our site and receives the usage data that is technically required in this context. We have no influence on further data processing by the third party provider. By clicking on the thumbnail, you give us the consent to reload contents of the third party provider.

The embedding takes place on the basis of your consent in accordance with Art. 6 Para. 1 S. 1 lit. a DSGVO or § 15 TMG, provided that you have given your consent by clicking on the preview image beforehand.

Please note that the embedding of some card services means that your data is processed outside the EU or EEA. In some countries, there is a risk that authorities may access the data for security and monitoring purposes without you being informed or having the right to appeal. If we use providers in insecure third countries and you give your consent, the transfer to an insecure third country is based on Art. 49 para. 1 lit. a DSGVO.

ProviderMaximum storage durationAdequate level of data protectionRevocation of consent
Google LLC (USA)Google does not specify a specific duration for this.No adequate level of data protection. The data is transmitted on the basis of Art. 49 para. 1 letter a DSGVO.If you clicked on a thumbnail, the content of the third-party provider is immediately reloaded. If you do not want such reloading on other sites, please do not click on the thumbnails anymore.

CRM System from Microsoft

We use the CRM system Dynamics 365 of the provider Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA, to be able to process user inquiries faster and more efficiently (legitimate interest according to Art. 6 Par. 1 lit. f. DSGVO ).

The data processing can also take place outside the EU or the EEA. With regard to Microsoft, no adequate level of data protection can be assumed due to processing in the USA. There is a risk that authorities may access the data for security and monitoring purposes without you being informed or having the right to appeal.

Dynamics 365 uses the users’ data only for the technical processing of the inquiries and does not pass them on to third parties. In order to use Dynamics 365, it is necessary to provide at least a correct e-mail address. A pseudonymous use is possible. In the course of processing service requests, it may be necessary to collect additional data (name, address).

If users do not agree to data collection via and data storage in Dynamics 365’s external system, we offer them alternative contact options for submitting service requests by e-mail, telephone, fax or mail.

For more information, users can refer to Dynamics 365’s privacy policy: https://docs.microsoft.com/en-ie/dynamics365/get-started/gdpr/

Newsletter

With the following notes we inform you about the contents of our newsletter as well as the registration, dispatch and statistical evaluation procedure and your rights of disagreement. By subscribing to our newsletter, you agree to receive it and to the described procedures.

Content of the newsletter: We send newsletters, e-mails and other electronic notifications containing advertising information (hereinafter referred to as “newsletter”) only with the consent of the recipients or a legal permission. If, in the course of registering for the newsletter, its contents are specifically described, they are decisive for the consent of the users. Furthermore, our newsletters contain information about our services and about our company.

Newsletter registrations are logged in order to be able to prove the registration process according to the legal requirements. This includes the storage of the registration and confirmation time as well as the IP address. Changes to your data stored by the shipping service provider are also logged.

Registration data: To subscribe to the newsletter, it is sufficient to enter your e-mail address. Optionally, we ask you to enter a name for personal contact in the newsletter.

The dispatch of the newsletter and the associated measurement of success is based on the consent of the recipients in accordance with Art. 6 para. 1 lit. a, Art. 7 DSGVO in conjunction with § 7 para. 2 No. 3 UWG or on the basis of the legal permission in accordance with § 7 para. 3 UWG.

The logging of the registration procedure is based on our legitimate interests according to art. 6 para. 1 lit. f DSGVO. We are interested in the use of a user-friendly and secure newsletter system that serves our business interests as well as the expectations of the users and also allows us to prove their consent.

Cancellation / Revocation: You can cancel the receipt of our newsletter at any time, i.e. revoke your consent. A link to cancel the newsletter can be found at the end of each newsletter. We may store the unsubscribed e-mail addresses for up to three years on the basis of our legitimate interests before we delete them in order to be able to prove a previously given consent. The processing of this data is limited to the purpose of a possible defense against claims. An individual request for deletion is possible at any time, provided that the former existence of a consent is confirmed at the same time.

Use of GoolgeAds

On our websites, we use Google Ads Conversion from Google (Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) so that you can see targeted advertising on other websites based on your visit to our websites and we can see how effective our advertising efforts have been.

Since we use Google, a provider based in the USA, it cannot be ruled out that your data will also be processed in the USA. Please note that we have no influence on further data processing by the provider and that there is no adequate level of data protection in the USA. There is therefore a risk that authorities may access the data for security and monitoring purposes without you being informed or having the right to appeal. Please take this into account if you decide to give your consent to our use of Google Ads.

The data processing is based on your consent according to Art. 6 para. 1 p. 1 lit. a DSGVO or § 15 TMG, if you have given your consent via our banner. The transfer to a third country takes place on the basis of Art. 49 para. 1 lit. a DSGVO.

You can revoke your consent at any time. Please follow this link and make the appropriate settings via our banner or click here to revoke on all domains of the processing company.

Click here to read the data processor’s privacy policy.

Click here to read the data processor’s cookie policy.

Google Tag Manager

Google Tag Manager is a solution that allows us to manage so-called website tags via an interface (and thus integrate e.g. Google Analytics and other Google marketing services into our online offering). The Tag Manager itself (which implements the tags) does not process any personal user data. With regard to the processing of users’ personal data, we refer to the following information on Google services. Usage guidelines: https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/

Live-Chat Smartsupp

This website uses the Chat – Plugin Smartsupp. Provider is Smartsupp, Milady Horakove 13, 602 00 Brno, Czech Republic

You can use Smartsupp to start direct communication with employees. The Smartsupp plugin on this website records data (browser information, page content visited and conversation) when the website is visited, and when information is exchanged between the visitor and our employee, anonymously. This uses “session” cookies, which are deleted after the visit of the website. The cookies do not contain any personal data. The data is usually transferred in encrypted form to servers in the EU.

The storage is based on Art. 6 para. 1 lit. a and f DSGVO. The visitor can use this function voluntarily to contact the operator of the offer directly. Furthermore, the website operator has a legitimate interest in the analysis of user behavior in order to optimize both his web offer and his advertising.

You can prevent Smartsupp from collecting your data by not using the chat function of this website. You can also install an add-in in your browser that blocks this plug-in.

A processing of the data takes place when you visit the website. Smartsupp describes the handling of the data transparently in accordance with the DSGVO (German Data Protection Act) at https://www.smartsupp.com/help/privacy-policy/.

Description and amount of data processing. We use the Usercentrics Consent Management System as a consent management tool within the scope of the analytics activities on our website. The Usercentrics Consent Management System collects log file and consent data using JavaScript. This JavaScript makes it possible to inform the user about his or her consent to certain tags on our website and to obtain, manage and document this consent:

(1) Consent data or data of consent (anonymous logfile data (Consent ID, Processor ID, Controller ID), Consent Status, Timestamp)

(2) Device data or data of the used devices (including shortened IP addresses (IP v4, IP v6), device information, timestamp)

(3) User data or user data (including email, ID, browser information, SettingIDs, changelog) The ConsentID (contains the above mentioned data), the status of the Consent incl. timestamp are stored in the local memory of your browser and simultaneously on the used cloud servers. Further processing will only take place if you submit a request for information or revoke your consent. In this case, the relevant information is provided to the person responsible (FIELD M) in a compact data format in an easily readable text form for the purpose of data exchange (JSON file). No user information is stored for the statistics of the use of the granted or not granted consent. Only the frequency and locations of clicks are stored.

Use of IP addresses

It is pointed out that this website uses Google Analytics with the extension “_anonymizeIp()” and that IP addresses are therefore only processed in abbreviated form in order to exclude any direct personal reference.

Security

We have taken technical and organizational measures to protect the personal data you have made available from loss, destruction, manipulation and unauthorized access. This includes the encrypted transmission of data using sha256RSA (2048 bits) signature algorithm. All our employees and third parties involved in data processing are bound by the Federal Data Protection Act and the confidential handling of personal data.
We reserve the right to change this declaration at any time. It does not constitute any contractual or other formal right towards or on behalf of a party.

Privacy policy for our social media sites

In the following we would like to inform you about the handling of your data in accordance with Art. 13 of the Basic Data Protection Regulation (DSGVO).

We, BÜFA Thermoplastic Composites GmbH & Co. KG, operate the following social media sites:

LinkedIn: https://www.linkedin.com/company/buefa-thermoplastic-composites

You can find our contact details in our imprint: https://www.linkedin.com/company/buefa-thermoplastic-composites/about/

Besides us, there is the operator of the social media platform itself. In this respect, the operator is also another responsible party who carries out data processing, but we have only limited influence on it. At the points where we can exert influence and parameterize the data processing, we work within the framework of the possibilities available to us to ensure that the operator of the social media platform handles the data in a manner that is in line with data protection regulations. In many places, however, we cannot influence the data processing by the operator of the social media platform and do not know exactly which data is processed by the operator.

Data processing by us

The data you enter on our social media pages such as comments, videos, pictures, likes, public messages etc. are published by the social media platform and will not be used or processed by us at any time for other purposes. We only reserve the right to delete content if this should be necessary. We may share your content on our site if this is a feature of the social media platform and communicate with you via the social media platform. The legal basis is Art. 6 para. 1 p. 1 lit. f DSGVO. The data processing is carried out in the interest of our public relations and communication.

If you would like to object to a specific data processing on which we have an influence, please contact us using the contact data given in the imprint. We will then check your objection.
If you send us an inquiry on the social media platform, depending on the required answer, we may also refer you to other, secure communication channels that guarantee confidentiality. You always have the possibility to send us confidential inquiries to our address mentioned in the imprint.

As already mentioned, we make sure that our social media pages comply with data protection regulations as far as possible in those places where the provider of the social media platform gives us the opportunity to do so. In particular, we therefore do not use demographic, interest, behavioral or location-based target group definitions for advertising that the operator of the social media platform may provide us with. Overall, we do not use the social media platform for advertising purposes. With regard to statistics provided to us by the social media platform provider, we can only influence them to a limited extent and cannot turn them off. However, we make sure that no additional optional statistics are made available to us.
Data processing by the operator of the social media platform
The operator of the social media platform uses web tracking methods. The web tracking can also be carried out independently of whether you are logged in or registered on the social media platform. As already mentioned, we can hardly influence the web tracking methods of the social media platform. For example, we cannot switch this off.

Please be aware: It cannot be ruled out that the provider of the social media platform may use your profile and behavioral data to evaluate your habits, personal relationships, preferences, etc. In this respect, we have no influence on the processing of your data by the provider of the social media platform.

For more information on data processing by the provider of the social media platform and further options for objection, please refer to the provider’s privacy policy:

LinkedIn: https://www.linkedin.com/legal/privacy-policy

Your rights as a user

When processing your personal data, the DSGVO grants you as a website user certain rights:

1.) Right to information (Art. 15 DSGVO):
You have the right to obtain confirmation as to whether or not personal data concerning you are being processed; if this is the case, you have the right to be informed of this personal data and to receive the information specified in Art. 15 DSGVO.

2.) Right of correction and deletion (art. 16 and 17 DSGVO):
You have the right to request without delay the rectification of inaccurate personal data concerning you and, if necessary, the completion of incomplete personal data.
You also have the right to request that personal data concerning you be deleted immediately if one of the reasons listed in Art. 17 DPA applies, e.g. if the data is no longer needed for the purposes for which it was collected.

3.) Right to restrict processing (Art. 18 DSGVO):
You have the right to request the restriction of processing if one of the conditions listed in Art. 18 DPA is met, e.g. if you have lodged an objection to processing, for the duration of any examination.

4.) Right to data transferability (Art. 20 DSGVO):
In certain cases, which are listed in detail in Art. 20 DSGVO, you have the right to receive the personal data concerning you in a structured, common and machine-readable format or to request that this data be transferred to a third party.

5.) Right of objection (Art. 21 DSGVO):
If data are collected on the basis of Art. 6 para. 1 lit. f (data processing to safeguard legitimate interests), you have the right to object to the processing at any time for reasons arising from your particular situation. We will then no longer process the personal data unless there are demonstrably compelling reasons for processing which are worthy of protection and which outweigh the interests, rights and freedoms of the data subject, or unless the processing serves to assert, exercise or defend legal claims.

Your rights as a user

According to Art. 77 DSGVO, you have the right to appeal to a supervisory authority if you believe that the processing of data concerning you violates data protection regulations. In particular, the right of complaint can be asserted with a supervisory authority in the member state of your residence, your place of work or the place of the suspected violation.

Contact details of the data protection officer

Our data protection officer will be happy to provide you with information or suggestions on the subject of data protection:

Dr. Uwe Schläger
data protection nord GmbH
Consul-Smidt-Strasse 88
28217 Bremen
Web: www.datenschutz-nord-gruppe.de
e-mail: office@datenschutz-nord.de
Phone: 0421 69 66 32 0