1.  General information
1.1 Responsible body

The controller within the meaning of Art. 4 No. 7 GDPR, the other data protection laws applicable in the Member States of the European Union and other provisions of a data protection nature:

ChemCon GmbH
Legally represented by the Managing Director Dr. Raphael Vogler
Engesserstr. 4b
79108 Freiburg i.Br.
Deutschland
phone.: +49 761 5597 0
E-Mail: info@chemcon.com
 
Further details can be found in our imprint.

1.2 Data Protection Officer

You can reach and contact our data protection officer at the following address:

Malte Thoms
ChemCon GmbH
Data Protection Officer
Engesserstr. 4b
79108 Freiburg i.Br.
Deutschland
E-Mail: datenschutz@chemcon.com

1.3  General, principles of processing

With reference to the definition in Art. 4 No. 1 of Regulation (EU) 2016/679 (hereinafter referred to as: “General Data Protection Regulation” or “GDPR” for short), the term “personal data” means all data that can be related to you personally. This includes, for example, your name, address, email addresses and user behavior. With regard to the other terms, in particular the terms “processing”, “controller”, “processor” and “consent”, we refer to the statutory data protection definitions in Art. 4 GDPR.

We only process personal data to the extent necessary to provide our website and the content and services we offer. The processing of personal data only takes place regularly if you have given us your consent within the meaning of Art. 6 para. 1 lit. a) GDPR or if the processing is permitted by legal regulations, in particular by one of the legal bases mentioned in Art. 6 para. 1 lit. b) to lit. f) GDPR.

The purposes on which the processing of personal data is based are explained in the following sections for each of the aforementioned data processing operations. If we further process personal data for a different purpose that does not correspond to the purpose for which the personal data was originally collected, we will inform you of this again.
If we use contracted service providers or wish to use your data for advertising purposes, we will inform you in detail below about the respective processes.

Please note that you are not legally obliged to provide personal data. However, we sometimes need your personal data to provide our website and the content and services we offer. We will inform you about this in detail below. Please also note that if you do not provide us with the required data, you may not be able to use our website and/or the content and services we offer. However, failure to provide voluntary information will not result in any disadvantages.

In some cases, we use external service providers who have been carefully selected and commissioned by us to process personal data. These service providers are bound by our instructions and are regularly monitored by us. You will find more detailed information in the following sections.

Your personal data will be deleted or blocked as soon as the purpose of storage no longer applies. Data may also be stored if this has been provided for by national or European regulations to which we are subject; in these cases, the legal basis for further storage is Art. 6 para. 1 sentence 1 lit. c) GDPR in conjunction with the respective national or European regulation. In this case, the data will be blocked or erased when the storage period prescribed in the respective regulations has expired. The latter does not apply if further storage of the data is necessary for the conclusion or fulfillment of a contract; in these cases, the legal basis for further storage is Art. 6 para. 1 sentence 1 lit. b) GDPR.

If third parties to whom we transfer data are based in a country outside the European Union (EU) and the European Economic Area (EEA), we will inform you separately in the following sections. We only process data in third countries if there is an adequate level of data protection within the meaning of Art. 44 to 49 GDPR.

1.4 Your rights

You have the following rights vis-à-vis us with regard to your personal data:

• the right to information (Art. 15 DSGVO),
• the right to rectification (Art. 16 DSGVO),
• the right to erasure ("Right to be forgotten") (Art. 17 DSGVO),
• the right to restriction of processing (Art. 18 DSGVO),
• the right to object to the processing (Art. 21 Abs. 1 DSGVO),
• the right to data portability (Art. 20 DSGVO).

You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us (Art. 77 GDPR).

1.5 Objection or revocation against the processing of your data

You can revoke any consent you have given us to process your personal data at any time. The revocation affects the permissibility of the processing of your personal data after its pronouncement to us.
With regard to the processing of your personal data, you can object to the processing insofar as this processing is based on a weighing of interests. In this context, we ask you to explain the reasons arising from your particular situation as to why you object to the processing of your personal data by us. In the event that your objection is justified, we will examine the situation. We will then either no longer process your personal data, adjust the further data processing if necessary or state compelling reasons worthy of protection as to why we continue to process your personal data.
You can also object to the processing of your personal data for the purposes of advertising and data analysis at any time.
You can send your revocation or objection to our contact details above.

2. Processing of personal data when using our website

Below we inform you about the collection and processing of personal data when using our website www.chemcon.com (hereinafter referred to as “website”):

2.1 Processing of personal data when using our website for information purposes

If you visit our website without registering or otherwise providing us with information (“informational use”), we only collect the personal data that your web browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to enable you to view our website and to ensure stability and security:

• IP address
• Date and time of the request
• Time zone difference to Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Access status/HTTP status code
• Amount of data transferred in each case
• Website from which the request comes
• Browser
• Operating system and its interface
• Language and version of the browser software.

The aforementioned data is also stored in log files on our servers. This data is not stored together with your other personal data.

The collection and temporary storage of the IP address is necessary to enable the delivery of our website to your end device. For this purpose, your IP address must be stored for the duration of your visit to our website. The storage of the above-mentioned data in log files serves to ensure the functionality and optimization of our website and to ensure the security of our information technology systems. This data is not analyzed for marketing purposes. Our legitimate interest in data processing lies in the aforementioned purposes. The legal basis for the collection and temporary storage of the aforementioned data and log files is Art. 6 para. 1 sentence 1 lit. f) GDPR. 

The website is hosted by Leitwerk AG, Im Ettenbach 13a, 77767 Appenweier, Germany, a provider with server locations in Germany, with whom we have concluded an order processing contract in accordance with Art. 28 GDPR. This ensures that the standards and regulations of European data protection law are complied with. Further information can be found in the section “Third-party services”. Server location is in Appenweier.

The aforementioned data for the provision of our website is deleted when the respective session has ended. The data in log files is deleted after four weeks at the latest. The collection of the above data for the provision of our website and the storage of this data in log files is absolutely necessary for the operation of our website. There is no possibility of objection.

2.2 Cookies

In addition to the above-mentioned data, we use technical aids for various functions when using our website, in particular cookies, which can be stored on your end device. Cookies are small text files that are stored on the storage medium of your end device, for example on a hard disk, and through which certain information flows to us as the body that sets the cookie. Cookies cannot execute programs or transfer viruses to your end device. When you access our website and at any time thereafter, you have the choice of whether you generally allow cookies to be set or which individual additional functions you would like to select. You can make changes in your browser settings or via our Consent Manager. This website uses the following types of cookies, the scope and function of which are explained below.
Cookies that are stored in your web browser:

• Transient cookies: These cookies are automatically deleted when you close your web browser. These include session cookies in particular. These store a so-called session ID, which can be used to assign various requests from your web browser to the shared session. This makes it possible to recognize your device when you return to our website. Session cookies are deleted as soon as you log out or close the web browser.
• Persistent cookies: These cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can delete these cookies at any time in the settings of your web browser.

Details can be found in our Consent Manager and on our website on cookies.

The processing of personal data by the aforementioned cookies serves the following purposes:

• Technically necessary cookies: The technical structure of our website requires us to use technologies, in particular cookies. Without these, our website cannot be displayed or used in full and/or without errors. For example, some functions of our website require that your web browser can still be identified even after a page change. In these cases, these are generally transient cookies that are deleted at the end of your website visit, at the latest when you close your browser. You cannot deselect these cookies if you wish to use our website. The individual cookies can be seen in our Consent Manager and on our cookies website. As far as technically necessary cookies are concerned, our legitimate interest in data processing lies in the aforementioned purposes. The legal basis in these cases is Art. 6 para. 1 sentence 1 lit. f) GDPR, Section 25 para. 2 no. 2 TDDDG.
• Optional cookies (with your consent): We only set various cookies with your consent, which you can select on your first visit to our website via the so-called cookie consent tool. The functions are only activated if you give your consent. These cookies are used in particular to enable us to analyze visits to our website and thereby improve our website and/or individual functions as well as the overall user experience, e.g. to make it easier for you to use different browsers or devices, to recognize you when you visit us again or to place advertising (possibly also to tailor advertising to your interests, measure the effectiveness of advertisements or show interest-based advertising). The legal basis for this processing is Art. 6 para. 1 sentence 1 lit. a) GDPR, § 25 para. 1 TDDDG. You can withdraw your consent at any time without this affecting the lawfulness of processing up to the point of withdrawal. The functions we use, which you can display and revoke via the Consent Manager, as well as the cookies used, the data processed and the purposes of processing are described in detail there and on our website on cookies.

The above cookies are stored on your end device and transmitted from it to our server. You can therefore configure the processing of data and information by cookies yourself. You can make appropriate configurations in the settings of your web browser, through which you can, for example, reject third-party cookies or cookies altogether. In this context, we would like to point out that you may then not be able to use all the functions of our website properly. Alternatively, you can also make the appropriate settings in our Consent Manager. Regardless of this, we recommend that you regularly delete cookies and your browser history manually.

2.3 Further functions and offers on our website

In addition to the aforementioned informational use of our website, we offer various services that you can use if you are interested. This usually requires the provision of further personal data. We require this data to provide the respective service. The above data processing principles apply.

In some cases, we use external service providers who have been carefully selected and commissioned by us to process this data. These service providers are bound by our instructions and are regularly monitored by us.

Insofar as personal data is passed on to third parties in the course of services that we offer together with partners, you can find more detailed information in the following descriptions of the individual services.

If these third parties are based in a country outside the European Economic Area, you can find more detailed information about the consequences of this circumstance in the following descriptions of the individual services.

2.4 Contacting us

If you contact us by e-mail, the personal data you send us with your e-mail will be stored. We also have a contact form on our website that you can use to contact us. The data you enter in the input mask will be transmitted to us and stored. Mandatory information such as first name, surname or e-mail address are marked accordingly. Further details are voluntary. The data will only be used to answer your questions. The data will not be passed on to third parties.

The processing of your above personal data serves solely to process your inquiries. Our legitimate interest in processing the data also lies in the aforementioned purposes. Insofar as you have given us your consent for this, the legal basis for the processing of this data is Art. 6 para. 1 sentence 1 lit. a) GDPR. Insofar as you wish to work towards the conclusion of a contract through your request or the request serves the execution or processing of an existing contractual relationship between you and us, Art. 6 para. 1 sentence 1 lit. b) GDPR constitutes an additional legal basis. Otherwise, the legal basis for the processing of this data is Art. 6 para. 1 sentence 1 lit. f) GDPR.

Subject to deviating statutory retention periods, the data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. This is the case when we have finally processed your request.

You can withdraw your consent to the processing of your personal data at any time. The legality of the data processing that has already taken place remains unaffected by the revocation. Details on revoking your consent can be found in section 1 of our privacy policy. If you contact us by email, you can object to the storage of your personal data at any time. We would like to point out that in this case your request cannot be processed any further. You can also declare your revocation or objection by sending an e-mail to our e-mail address given above.

3 Third-party services

We use the following third-party services to process personal data:

3.1 Hosting by Leitwerk

We use hosting services from Leitwerk AG, Im Ettenbach 13a, 77767 Appenweier, Germany (hereinafter referred to as “Leitwerk”) to provide our website. Leitwerk offers a variety of IT services, including the hosting services we use. When using our website, personal data may therefore be processed, including IP addresses, usage data and information about interactions with our website.

We use Leitwerk for the purpose of providing our website as error-free, secure and user-friendly as possible and to optimize it. In addition, Leitwerk may process personal data for security purposes, including the detection of and defense against fraud and abuse. The legal basis for the processing of personal data is Art. 6 para. 1 sentence 1 lit. f) GDPR, as the processing is necessary to safeguard our legitimate interests.

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. Deletion is always subject to the proviso that the deletion does not conflict with any statutory retention periods.

In order to oblige Leitwerk to process the transmitted data only in accordance with our instructions and to comply with the applicable data protection regulations, we have concluded an order processing contract with Leitwerk (Art. 28 GDPR).

Information from the third-party provider: Leitwerk AG, Im Ettenbach 13a, 77767 Appenweier, Germany.

Further information on the use of data by Leitwerk, on setting and objection options and on data protection can be found on the following Leitwerk website

Privacy policy: https://www.leitwerk.de/datenschutzerklaerung/
 

3.2 Use of Google Analytics

We use “Google Analytics” on our website, a web analytics service provided by Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) (hereinafter referred to as “Google”). Google uses cookies, i.e. small text files that are stored on your end device and enable your use of our website to be analyzed. The information generated by the cookie about the use of our website is usually transmitted to a Google server in Ireland and stored there. If anonymization of the IP address to be transmitted by the cookie is activated on the website (“IP anonymization”), your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google will use this information to evaluate your use of our website on our behalf, to compile reports on website use and to provide us with other services relating to website and Internet use. Pseudonymous user profiles can be created from the processed data. The IP address transmitted when using Google Analytics is not merged with other Google data. We only use Google Analytics with the activated IP anonymization described above. This means that your IP address is only processed by Google in abbreviated form. This makes it impossible to identify you personally. You can find more information about this on the Google website linked below: https://support.google.com/analytics/answer/12017362?hl=en. 

We use Google Analytics for the purpose of analyzing the use of our website and continuously improving individual functions and offers as well as the user experience. By statistically evaluating user behavior, we can improve our offer and make it more interesting for you as a user. This data processing only takes place if you have given us your prior consent. The legal basis is Art. 6 para. 1 sentence 1 lit. a) GDPR.

You can prevent the storage of cookies generated by Google Analytics by making the appropriate settings in your web browser. We would like to point out that in this case you may not be able to use all the functions of our website. If you wish to prevent the collection of data generated by the cookie and related to your user behavior (including your IP address) and the processing of this data by Google, you can download and install the web browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=en.

Die Daten werden gelöscht, sobald sie für die Erreichung des Zweckes ihrer Erhebung nicht mehr erforderlich sind. Eine Löschung der Daten auf Nutzer- und Ereignisebene, die mit Cookies, Nutzerkennungen (z. B. User ID) und Werbe-IDs (z. B. DoubleClick-Cookies, Android-Werbe-ID, IDFA [Apple-Kennung für Werbetreibende]) verknüpft sind, erfolgt spätestens 14 Monate nach ihrer Erhebung.

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. Data at user and event level that is linked to cookies, user IDs and advertising IDs (e.g. DoubleClick cookies, Android advertising ID, IDFA [Apple ID for advertisers]) is deleted no later than 14 months after it is collected.

Even if the company Google Ireland Limited (see address above) is responsible for all Google services in Europe, we would like to point out that it cannot be completely ruled out that Google Analytics may also process personal data outside the EU or the EEA, such as in the USA by the parent company Google LLC (see address above).

Insofar as Google also processes personal data outside the EU or the EEA in the USA, data transfers are carried out on the basis of the EU Commission's adequacy decision of July 10, 2023 and thus on the basis of Art. 45 GDPR. Google has submitted to the EU-U.S. Data Privacy Framework concluded between the European Union and the USA and is certified. Google thereby undertakes to comply with the standards and regulations of European data protection law. Further information can be found in Google's entry on the EU-U.S. Data Privacy Framework website linked below: https://www.dataprivacyframework.gov/list.

Information from the third-party provider: Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Further information on the use of data by Google, on setting and objection options and on data protection can be found on the following Google websites:

• Terms of use for Google services: https://policies.google.com/terms?hl=en,
• Privacy policy for Google services: https://policies.google.com/privacy?hl=en, 
• Legal framework for data transfers: https://policies.google.com/privacy/frameworks?hl=en
• Data use by Google when you use websites or apps on which Google services are used: https://policies.google.com/technologies/partner-sites?hl=en,
• Use of data for advertising purposes: https://policies.google.com/technologies/ads?hl=en,
• Settings for personalized advertising by Google: http://www.google.de/settings/ads

3.3 Use of iFrames from FAMIGO

We use iFrames (location marketing tool) from FAMIGO GmbH, In der Spöck 10, 77656 Offenburg, Germany (“FAMIGO”) on our website. FAMIGO's iFrames enable the embedding of external content such as graphics from FAMIGO on our website. By using iFrames, content from FAMIGO is displayed directly on our site without users having to leave the site. FAMIGO collects the following log files:
Browser type and browser version,
Operating system used,
referrer URL,
Host name of the accessing computer,
Time of the server request
The log files are stored for a period of 90 days.

The purpose of processing the data is to enable the use of iFrames with embedded content on our website and thus to be able to display essential website content. This is also our legitimate interest. The legal basis for the processing of personal data is Art. 6 para. 1 sentence 1 lit. a) GDPR (consent). Otherwise, the legal basis for the processing of personal data is Art. 6 para. 1 sentence 1 lit. f GDPR (legitimate interest).

Subject to deviating statutory retention periods, the data will be deleted as soon as it is no longer required for the purpose for which it was collected. FAMIGO deletes personal data when the purpose of the data processing has been achieved or no longer exists.The deletion of personal data is subject to the proviso that there are no statutory retention periods to the contrary.

In order to oblige FAMIGO to process the transmitted data only in accordance with our instructions and to comply with the applicable data protection regulations, we have concluded an order processing contract with FAMIGO (Art. 28 GDPR).

Information from the third-party provider: FAMIGO GmbH, In der Spöck 10, 77656 Offenburg, Germany

Further information on the use of data by FAMIGO, on setting and objection options and on data protection can be found on the following FAMIGO website: https://famigo.info/index.php/datenschutzerklaerung/

4 Processing of personal data in connection with job applications

If you wish to apply for jobs advertised by us, it is necessary to provide personal data. This data may include personal master data such as first name, surname, address, date of birth, contact details such as telephone number or e-mail address as well as data relating to your educational and/or professional background such as school grades. Data that must be provided in order to complete the application process can either be found in the respective job advertisement or is otherwise marked as such. The provision of further data is voluntary. If you send us your application (e.g. by e-mail), you consent to the processing of your data for the purpose of carrying out the application process. The data will not be passed on to third parties.

The processing of personal data serves solely to process your application and to carry out the application procedure. Insofar as you have given us your consent for this, the legal basis for the processing of this data is Art. 6 para. 1 sentence 1 lit. a) GDPR. Otherwise, the legal basis for the processing of this data is Art. 6 para. 1 sentence 1 lit. b) GDPR (contract fulfillment) and Art. 6 para. 1 Art. 6 para. 1 sentence 1 lit. f) GDPR (legitimate interest) and Art. 88 GDPR i.V.m. § Section 26 (1) sentence 1 BDSG (employment relationship; legal basis until repealed by the legislator).
The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the event that the application process for the job advertisement for which you are applying has been completed, we will delete your data immediately, otherwise after six months at the latest. Your data will not be deleted if further processing and storage of your personal data is necessary in individual cases for the assertion, exercise or defense of legal claims. In this case, we have a legitimate interest in the further processing and storage of your personal data. The legal basis is Art. 6 para. 1 sentence 1 lit. f) GDPR. Your personal data will not be erased even if we are obliged by law to continue storing your personal data.

You can withdraw any consent you have given us at any time. In particular, you have the option of withdrawing your application at any time. You should only provide us with the personal data that is necessary for participation in the application process and its implementation. There is no legal or contractual obligation to provide data. However, we would like to point out that we cannot carry out the application process without this data and cannot consider your application. You can have the data stored about you changed at any time. You can declare your revocation by sending an e-mail to the e-mail address given in the imprint.

5 Note on our presence in social networks

We have presences on the following social media platforms:

• Facebook (operator in the EU: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; US parent company: Meta Platforms, Inc., 1601 Willow Road Menlo Park, California 94025, USA; privacy policy: https://www.facebook.com/privacy/policy)
• LinkedIn (operator in the EU: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland; US parent company: LinkedIn Corporation, 1000 West Maude Avenue, Sunnyvale, 94085 California, USA; privacy policy: https://de.linkedin.com/legal/privacy-policy)
• XING (Operator: New Work SE, Am Strandkai 1, 20457 Hamburg, Germany; Information on data protection and privacy policy: https://privacy.xing.com/en und https://privacy.xing.com/en/privacy-policy

However, we do not use any social media plugins on our website, only links to the aforementioned social network. Data is not transmitted to the social media platforms when you visit our website.

We use the technical platform and services of the aforementioned third-party providers for these information services. We would like to point out that you use our presence on these social media platforms and their functions on your own responsibility. This applies in particular to the use of interactive functions (e.g. commenting, sharing, rating). When you visit our website, the provider of the social media platform may collect your IP address and other information that is stored on your device in the form of cookies.

The data collected about you in this context is processed by the provider's platform and may be transferred to countries outside the European Union, in particular the USA. According to its own information, the respective provider maintains an appropriate level of data protection that corresponds to that of the former EU-US Privacy Shield. Insofar as the respective provider has submitted to the EU-U.S. Data Privacy Framework concluded between the European Union and the USA and has certified itself, any data transfers are based on the adequacy decision of the EU Commission of July 10, 2023 and thus on the basis of Art. 45 GDPR. In other cases, we have concluded the standard data protection clauses with the provider's companies as a precautionary measure.

We do not know how the respective social media platform uses the data from your visit to our account and interaction with our posts for its own purposes, how long this data is stored and whether data is passed on to third parties. Data processing may differ depending on whether you are registered and logged in to the social network or whether you visit the site as a non-registered and/or non-logged-in user. When you access a post or the account, the IP address assigned to your end device is transmitted to the provider of the social media platform. If you are currently logged in as a user, a cookie on your device can be used to track how you have moved around the network. Buttons integrated into websites enable the provider's platform to record your visits to these websites and assign them to your respective profile. This data can be used to tailor content or advertising to you. If you want to avoid this, you should log out or deactivate the “stay logged in” function, delete the cookies on your device and restart your browser.

We only process the data from your use of our service that you provide to us and that requires interaction. For example, if you ask a question that we can only answer by email, we will store your information in accordance with the general principles of our data processing, which we describe in this privacy policy. The legal basis for the processing of your data on the social media platform is then Art. 6 para. 1 sentence 1 lit. f) GDPR. If you have given us your consent for this, the legal basis for the processing of this data is Art. 6 para. 1 sentence 1 lit. a) GDPR. Insofar as you wish to work towards the conclusion of a contract through your question, Art. 6 para. 1 sentence 1 lit. b) GDPR constitutes an additional legal basis.

To exercise your rights as a data subject, you can contact us or the provider of the social media platform. If one party is not responsible for responding or must receive the information from the other party, we or the provider will then forward your request to the respective partner. Please contact the provider and operator of the social media platform directly if you have any questions about profiling and the processing of your data when using the social media platform. If you have any questions about the processing of your interaction with us on our website, please write to the contact details we have provided above.

What information the social media platform receives and how it is used is described by the provider of the respective social media platform in its privacy policy listed above. There you will also find information about contact options and the settings options for advertisements.

6 Status of and changes to our privacy policy

We always keep our privacy policy up to date. This privacy policy has the following status: May 28, 2024.

If we further develop our website, services and offers, it may be necessary to adapt and amend our privacy policy. The same applies if legal or official requirements change.