Data status: 05.07.2021

When you use this website, various personal data are collected from you. Personal data are data with which you can be identified personally. 

The issue of data protection is important to us. We treat your personal data as confidential and in accordance with the statutory data protection regulations as well as this privacy policy. 

The purpose of providing the following privacy policy is therefore to inform you about how your personal data are handled when you visit our website and in particular about which data we collect from you, what we use the data for and for what purpose this is carried out. We wish to point out that data transmission on the Internet (e.g. when communicating by e-mail) can be subject to security vulnerability. It is not possible to protect such data completely against access by third parties.

1. General information on data protection 

Responsible party 

The party responsible for data processing carried out in connection with this website is: 

Technoform Glass Insulation GmbH
Matthäus-Merian-Straße 6
34253 Kassel 
Tel.: +49 (0) 5621 9583 100
E-mail: info [dot] oesde [at] technoform [dot] com

We have appointed a Data Protection Officer whose contact details are as follows:

deDATA GmbH & Co. KG
Habichtswalder Str. 18
34119 Kassel
Tel.: +49 (0) 561 316 85 89
E-mail: buero [at] dedata [dot] de

Retention period
Unless a more specific retention period is mentioned within this privacy policy, we will retain your personal data until the reason for the data processing no longer applies. If you make a justified request for deletion or revoke consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, the data will be deleted once these reasons no longer apply.

Note on data transmission to the USA and other third countries
Among other things, tools of companies based in the USA or other third countries that are not safe from the point of view of data protection are integrated on our website. If these tools are active, your personal data may be transmitted to these third countries and processed there. We wish to point out that a level of data protection comparable with the EU cannot be guaranteed in these countries. For example, US companies are obliged to hand over personal data to security authorities without you as the data subject being able to take legal action against this. The possibility cannot therefore be ruled out of US authorities (e.g. intelligence services) processing, evaluating and permanently storing your data located on US servers for monitoring purposes. We have no control over such processing activities. 

Analysis tools and tools of third-party providers
When you visit this website, your surfing behaviour may be statistically evaluated. This is done mainly using so-called analysis programs. Detailed information on these analysis programs can be found further on in the privacy policy.

SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content such as orders or enquiries that you send to us as the site operator, for example. An encrypted connection can be recognised by the fact that the address line of your browser will change from “http://” to “https://” and by the padlock symbol in your browser line.

If SSL or TLS encryption is activated, the data that you send to us cannot be read by third parties.

Your rights in connection with our data processing activities
You have the right to obtain information regarding the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to request the correction or deletion of those data. If you have given your consent regarding data processing, you can withdraw that consent at any time for the future. You also have the right to request the restriction of processing of your personal data under certain circumstances. In addition, you have the right to lodge a complaint with the competent supervisory authority. 

Further information on this and on exercising your rights can be found at the end of this privacy policy. 

2. Hosting 
Our website is hosted by an external service-provider (hoster). Personal data that we collect from you on our website are stored on the servers of this hoster. These data mainly include IP addresses, contact requests, meta and communication data, contract details, contact details, website access as well as other data that are generated via our website. 

The processing of data through the use of the hoster is carried out based on Art. 6(1f) of the GDPR. We are interested in providing you with our online offering securely, quickly and efficiently with the help of a professional provider

Our hoster will process your data only insofar as it is necessary to do so in order to fulfil its service obligations and follow our instructions with regard to these data. The registered office of the provider is located in the EU/EEA. There is no transmission of personal data to third countries outside the European area.

We use the following hoster:

EXPO-IP GmbH
Robert-Bosch-Str. 7
64293 Darmstadt
Tel.: +49 6151 800 2181
E-mail: info [at] expo-ip [dot] com

We have concluded an order processing contract with our hoster in order to ensure that processing is carried out in accordance with data protection regulations.

3. Data collection on this website

Cookies
Our website uses cookies. These are small text files which are stored on your terminal. So-called session cookies are only stored temporarily and only for the duration of a session and are deleted again after the visitor exits our website. Permanent cookies on the other hand remain on your terminal until you delete them via your browser or until they are deleted automatically by your web browser. 

A distinction is made between cookies which are technically necessary and cookies which are not technically necessary (e.g. for analysis purposes).

Technically necessary cookies are required for the purpose of carrying out the electronic communication process or for providing certain functions that you require (e.g. for the shopping basket function) or for website optimisation (e.g. cookies for measuring web audiences). These cookies are stored on your terminal when you visit our website. Unfortunately, it is not possible for our website to operate without these technically necessary cookies. We use these cookies on account of our legitimate interests in accordance with Art. 6(1f) of the GDPR. We have a legitimate interest in storing cookies in order for the services that we provide to be free from technical defects and optimised.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, the acceptance of cookies is excluded for certain cases or in general and the automatic deletion of cookies when the browser is closed is activated. Deactivating cookies can restrict the functionality of this website.

If third-party cookies or cookies for analysis purposes are used, you will be informed separately regarding this as part of this privacy policy and if necessary, your consent will be requested in accordance with Art. 6(1a) of the GDPR. In that case, you have the option to grant your consent via the consent banner which is displayed when you visit our website.

Cookie consent                                                                                                                                 
Our website uses a locally integrated consent banner to obtain your consent regarding the use of certain technologies (tools and plug-ins) and/or the storage of cookies on your terminal and to document that consent in accordance with data protection regulations. We will inform you separately as part of this privacy policy regarding the cookies and technologies for which consent is required. 
The choice made in the cookie banner represents your consent under data protection regulations in accordance with Art. 6(1a) of the GDPR or in the case of transmission to third countries in accordance with Art. 49(1a) of the GDPR. Your consent is granted voluntarily and you can withdraw it at any time with effect for the future. You can withdraw your consent by changing the choice you previously made in our cookie banner or by deleting all cookies via your browser and reloading our website. 

The consent banner places cookies in your browser in order to save the choice you made via the consent banner. These will continue to be stored until you ask us to delete them or you delete the cookies yourself or the reason for storing the data no longer applies. Mandatory retention periods will remain unaffected. The legal basis for the use of the consent banner is Art. 6(1c) of the GDPR. No further personal data relating to you will be transmitted to third parties in connection with the use of the consent banner. 

Server log files
When you visit our website, technical data (so-called server log files) are collected. These include the type and version of the browser that you are using, the operating system, the referrer URL, the host name of the accessing computer, the time of the page request, your IP address and the type of transmission protocol, e.g. https. The collection of these data is carried out on account of our legitimate interest in accordance with Art. 6(1f) of the GDPR in the website being displayed without any technical defects and optimised.

Contact form
Our website uses a contact form. The information that you enter on that form as well as the contact details stored will be stored by us for the purpose of processing your request and in case any subsequent queries should arise. The details input by you will be processed based on your consent in accordance with Art. 6(1a) of the GDPR. The data entered will be kept by us until you withdraw your consent or the reason for storing the data (in particular the completion of your request) no longer applies. Statutory retention periods will remain unaffected by this.

Queries by e-mail, telephone or fax
If you contact us by e-mail, telephone or fax, your contact details, queries and associated details will be stored by us.

If your contact is in connection with the fulfilment of a contract or with precontractual measures with us, your data will be processed based on Art. 6(1b) of the GDPR for the purpose of contract fulfilment. If that is not the case, the processing of your data based on our legitimate interest in accordance with Art. 6(1f) of the GDPR will be based on the quick and effective processing of enquiries sent to us. The enquiries that you send us as well as information connected to those enquiries will be kept by us until the reason for storing them (in particular the completion of your request) no longer applies or you ask us to delete them. Statutory retention periods will remain unaffected by this.

Registration options on the website 
You can register as a partner via our website. We will only use the details that you enter for the purpose of providing the service for which you have registered. Mandatory information in the registration process must be provided by you in full, otherwise we will not be able to accept your registration.

The data entered in connection with your registration is processed for the purpose of fulfilling the user relationship concluded between us and you and, if necessary, initiating further contractual relationships in accordance with Art. 6(1b) of the GDPR. In addition, we will inform you about important changes to our range of services as well as technical changes via the e-mail address you have provided.

These data will continue to be stored for as long as you remain registered on our website. Statutory retention periods will remain unaffected by this.

4. Plug-ins and tools 

Google Maps
Our website uses the mapping service Google Maps. The service-provider for Europe is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. Google Maps makes it easier for us to show you where places are and thus improve the service that we provide you with. For instance, you can see at a glance where we are and display the shortest route to our site, for example. 

As soon as you give your consent regarding the use of Google Maps, information relating to the use of this website, including your IP address, the date and time of your visit to the website in question, the URL of the website accessed and the (starting location) address entered in the route planner function can be sent to Google in the USA. Please also note the information in the section entitled “Note on data transmission to the USA and other third countries” with regard to this. We have no control over this data transmission. 

Google stores your data as usage profiles and uses it for the purposes of advertising, market research and/or needs-based website design. This type of evaluation is carried out in particular for the purpose of displaying appropriate ads and to inform other users of the social network regarding your activities on our website. 

If you are logged into Google, your data will be directly assigned to your account. If you do not want the assignment to your Google profile, you must log out before activating the button. 

You can object to the collection and forwarding of your personal data by deactivating the execution of JavaScript in your browser settings. You can also prevent the execution of JavaScript code entirely by installing a JavaScript blocker (e.g. https://noscript.net/ or https://www.ghostery.com). We wish to point out that in that case, you may not be able to make full use of all the functions on our website. You also have the option to stop all Google’s tracking activities by opting out: https://adssettings.google.com/authenticated. 

Further information on the purpose and scope of data collection and processing by Google can be found in the privacy policies of Google. These also contain further information regarding your rights and setting options for protecting your privacy: https://www.google.de/intl/de/policies/ privacy. 

The use of Google Maps is carried out based on your consent in accordance with Art. 6(1a) of the GDPR. The transmission of data to the USA is based on the standard contractual clauses of the EU Commission. You can find details here:
https://privacy.google.com/businesses/gdprcontrollerterms/
https://privacy.google.com/businesses/gdprcontrollerterms/sccs/

The way you grant consent is either by allowing use via the consent banner that appears when you access our website or by confirming use by means of the extended opt-in action. The granting of consent is voluntary. You can withdraw your consent at any time.

YouTube with enhanced data protection 
Videos from the YouTube video portal are integrated on our website so that YouTube videos can be watched directly on our website. The operator of YouTube is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

We have integrated all YouTube videos in enhanced data protection mode. According to YouTube, no information will therefore be stored about you before you watch the video. The data referred to in the next paragraph will not be transmitted until you click on the button to start the video. We have no control over this data transmission.

As soon as you play a YouTube video, a connection to YouTube's servers in the USA will be established automatically. Information will then be transmitted to the YouTube server including your IP address, the browser you are using, the operating system on your PC, information about pages you have previously visited and pages that you currently have open in parallel and search terms that you have used. Please also note the information in the section entitled “Note on data transmission to the USA and other third countries” with regard to this. For this purpose, YouTube uses cookies with the help of which data and information on the visitors to our website are also collected. YouTube stores your data as usage profiles and uses the data to collect video statistics, prevent fraud attempts and further improve the user experience. Such evaluation is carried out primarily for market research and advertising purposes in order to show you ads which match your interests as closely as possible.

If you watch the YouTube videos integrated on our website, YouTube will download DoubleClick by Google in order to show you relevant ads in the Google network DoubleClick. For this purpose, DoubleClick by Google uses a cookie to assign a pseudonymous identification number (ID) to your browser in order to check which ads have been accessed. We do not use DoubleClick ourselves. We therefore have no control over the data collected or data processing procedures carried out by DoubleClick by Google. 

You can object to the collection and forwarding of your personal data by deleting existing cookies via your browser settings or deactivating the execution of JavaScript in your browser settings. You can also prevent the execution of JavaScript code entirely by installing a JavaScript blocker (e.g. https://noscript.net/ or https://www.ghostery.com). We wish to point out that in that case, you may not be able to make full use of all the functions on our website. You can also prevent participation in the tracking process by setting your browser under https://www.google.de/settings/ads so that cookies from Google for conversion tracking are blocked. 

If you have a YouTube account and you are logged into that account, YouTube can assign your surfing behaviour directly to your YouTube account. If you do not want that to happen, you must log out of your YouTube account first before visiting our website. 

The processing of your personal data is carried out solely based on your consent in accordance with Art. 6(1a) of the GDPR. Consent is granted either by clicking on the playback button for the video or by permitting YouTube to use the data via the consent banner. By activating YouTube and granting your consent regarding processing, you are granting your consent regarding the processing and transmission of your personal data to YouTube’s US servers at the same time. This constitutes consent within the meaning of Art. 49(1a) of the GDPR. Further information on how user data is handled by YouTube can be found in the YouTube data privacy policy at: https://policies.google.com/privacy?hl=de.

5. Own services 

Applications

You can send us your application by e-mail, by post or using an online application form. 

When you send us your application, we will process the data and information contained therein solely for the purpose of deciding whether or not to establish an employment relationship with you. The legal basis for this is § 26(1) of the Federal Data Protection Act in conjunction with Art. 6(1b) of the GDPR. For this purpose, we use your master data and contact details, your qualification credentials and other details such as number of children, marital status, application photograph, nationality and religion as well as any further data that you provide us with as part of your application.

If your application is successful, we will transfer your applicant data to your personnel file for the purpose of implementing the employment relationship in accordance with § 26(1) of the Federal Data Protection Act in conjunction with Art. 6(1b) of the GDPR.

If you withdraw your application, we are unable to offer you a job or you turn down any such offer, we will retain your application data for six months from the end of the application process. The data will then be deleted or the application documents will be destroyed. Storage is carried out based on our legitimate interest in retaining the application data and documents for the purpose of providing documentary evidence in the case of a legal dispute in accordance with Art. 6(1f) of the GDPR. Should it become evident that the data and documents will still be required due to an imminent or pending legal dispute, they will be retained beyond the six-month period. 

Your application documents will be forwarded within our company solely to persons who are involved in the processing of applications.  

6. Your rights in connection with data processing

If we process your personal data, you have a number of different rights as the data subject. You can assert those rights by sending us an e-mail to the e-mail address shown in the imprint, stating the right that you are asserting. We may possibly contact you with queries for the purpose of verifying your identity in order for us to be able to rule out fraud beyond doubt.

Rights to information, correction and deletion 
In accordance with Art. 15 of the GDPR, you have a comprehensive right to obtain information regarding the processing of your personal data at any time. Under certain conditions, you also have a right to correction in accordance with Art. 16 of the GDPR as well as to deletion of your data in accordance with Art. 17 of the GDPR.

Right to object to data collection in special cases as well as to direct marketing 
In accordance with Art. 21(1) of the GDPR, you have the right to object to data processing that we carry out based on our legitimate interests in accordance with Art. 6 (1f) of the GDPR at any time. If you object to such processing, we will suspend the data processing unless there are compelling legitimate reasons for continuing the processing which outweigh your interests or the processing is carried out in order to exercise, defend or assert legal claims.

In accordance with Art. 21(2) of the GDPR, you also have the right to object to the processing of your personal data for the purpose of direct marketing at any time. In that case, we will stop processing your personal data for direct marketing purposes with immediate effect.

Right to restrict processing
In accordance with Art. 18 of the GDPR, you can request the restriction of our processing of your personal data insofar as one of the following conditions is met:

• you doubt the correctness of the data stored by us and therefore want processing to be restricted while the correctness of the data is being verified by us,
• the processing of the data is being/has been carried out unlawfully and instead of deleting the data, you only want to restrict the processing thereof,
• if we no longer require the data, you can choose to restrict the processing of the data instead of deleting it if you still require the data for the purpose of exercising, defending or asserting legal claims or
• you have objected to processing in accordance with Art. 21 of the GDPR and want processing to be restricted while the objection is being verified.

If processing has been restricted, apart from merely storing your data, we may only process your data for the purpose of defending, asserting or exercising legal claims, protecting natural persons or legal entities or for reasons of substantial public interest with your express consent.

Right to data portability
You have the right to ask us to transfer data that we process automatically based on your consent or in the performance of a contract to you or to a third party in a common machine-readable format. If you request the direct transmission of the data to another responsible party, this will only be carried out if it is technically feasible to do so.

Withdrawal of consent
Some of the data processing activities that we carry out are only permissible with your express consent. The granting of consent is always voluntary. You can also withdraw any consent that you have previously granted us wholly or partially at any time with immediate effect. The legality of the data processing carried out up to the time of the withdrawal will remain unaffected by that withdrawal. How you can exercise your right of withdrawal is described in more detail in this privacy policy in the data protection information on the respective service.

Right to complain to the supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority at any time if you believe that we have violated legal provisions during the processing of your personal data.  

The data protection supervisory authority that is responsible will depend on the location of your usual place of residence, your place of work, the location of the alleged violation or the location of the responsible party. The responsible supervisory authority for our registered office is:

The Hessian Commissioner for Data Protection and Freedom of Information
Postfach 3163
65021 Wiesbaden

A list of all supervisory authorities and their contact details can be obtained via the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.