Data privacy

1    Information on the data protection declaration

Thank you for your interest in our organisation. Data protection is of a particularly high priority for the management of CG TEC Carbon und Glasfasertechnik GmbH. If you wish to use certain services of our organisation, e. g. via our website, processing of personal data may become necessary. You are then a “data subject” or a “data subject” within the meaning of data protection regulations.

When processing personal data, such as the name, address, telephone number or email address of a data subject, we always take into account the requirements of the General Data Protection Regulation and the applicable country-specific data protection regulations. If there is no legal basis for the processing of personal data, we generally obtain the consent of the data subject for the necessary processing.

With this data protection declaration, we would like to provide the public with information about the nature, scope and purpose of the personal data collected, used and processed by us. Data subjects can also find out about their rights. The CG TEC Carbon und Glasfasertechnik GmbH maintains various technical and organizational measures to ensure the most comprehensive possible protection of the processed personal data. However, the transmission of personal data via the Internet may in principle have security gaps, so that 100% protection cannot be guaranteed. Therefore, every data subject is free to transmit such data to us by alternative means, for example by telephone.

2    Concept

The terms used below follow the definitions set out in Article 12 para. 1 of the General Data Protection Regulation (GDPR) and §2 of the Federal Data Protection Act (BDSG). The text of the GDPR can be viewed here: eur-lex.europa.eu/legal-content/DE/TXT/HTML/, the text des BDSG here: www.bgbl.de/xaver/bgbl/start.xav 

3    Contact

The controller within the meaning of the General Data Protection Regulation (GDPR) and other provisions of a data protection nature is:

3. 1 The controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other provisions of a data protection nature is:
CG TEC Carbon und Glasfasertechnik GmbH
Gewerbepark Hügelmühle 41
91174 Spalt, Germany
Tel: +49 9175 908070
Fax: +49 9175 9080720
Email: vasb@pt-grp.qr

3.2    The Data Protection Officer

Our Data Protection Officer is:
Jörg Stroh (extern)
Gewerbepark Hügelmühle 41
91174 Spalt, Germany
Tel: +49 9175 908070
Fax: +49 9175 9080720
E-Mail: qngrafpuhgm@pt-grp.qr

Data subjects may contact our Data Protection Officer at any time with any questions or suggestions regarding data protection.
If a data subject contacts us via the contact form of the website or e-mail, we store this voluntarily transmitted information to us for processing the request and in the event that follow-up questions arise. We only store and use further personal data if the person concerned consents to it or if this is legally permissible without special consent.
This personal data will not be passed on to third parties, with the exception of any necessary information from authorities and the external data protection officer.

3.3    Security of contact

Within the framework of the applicable data protection laws and technical possibilities, we make every effort to ensure the security of the personal data of the data subject. Personal data entered on the website is transmitted to us in encrypted form using the SSL (Secure Socket Layer) encryption system.
However, we would like to point out that data transmission over the Internet (e. g. when communicating via e-mail) may have security gaps. A complete protection of the data against access by third parties is not possible.
To secure your data, we maintain technical and organizational security measures, which we constantly adapt to the state of the art. We also do not guarantee that our offer will be available at certain times; disruptions, interruptions or failures cannot be excluded. The servers we use are regularly carefully backed up.

 

4    Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) as the legal basis.
When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR as the legal basis. This also applies to processing operations necessary to carry out pre-contractual measures.
Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR as the legal basis.
In the event that the vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR as the legal basis.
If processing is necessary to safeguard a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 lit. f GDPR as the legal basis for processing.

 

5    Data deletion and storage period

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Storage may also take place if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. The data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion of a contract or the performance of a contract.

 

6    Data protection for applications and the application process

We collect and process personal data of applicants for the purpose of processing the application process. Processing may also be carried out electronically. This is particularly the case if an applicant submits the relevant application documents electronically, for example by email or via a web form on the website (see also app.connectoor.de/agreements ), transmitted to us. If we conclude an employment contract with an applicant, the data transmitted will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If we do not conclude an employment contract with the applicant, the application documents will be automatically deleted two months after notification of the rejection decision, provided that deletion does not conflict with any other legitimate interests on our part. These include, for example, the obligation to provide evidence in proceedings under the General Equal Treatment Act (AGG).

 

7    Information regarding the use of this website

7.1    Cookies

Our website uses cookies. Cookies are text files that are stored on the IT system of the data subject via or by the browser. If the user visits our website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string that allows a unique identification of the browser when the website is called up again.
The legal basis for the processing of personal data using cookies is Art. 6 para. 1 lit. f GDPR.
The purpose of the use is to simplify the use of websites for the data subject. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change.
Cookies are stored on the data subject's IT system and transmitted from it to our website. Therefore, it also has full control over the use of cookies. By changing the settings in the browser, the data subject can deactivate or restrict the transmission of cookies. Cookies already stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

7.2    Collection of general data and information

We collect information about the data subject when they use this website. We automatically collect information about your usage behavior and your interaction with us and record data about your IT system (computer or mobile device). We collect, store and use data about every access to our online offer (so-called server log files). The access data includes name and URL of the retrieved file, date and time of retrieval, amount of data transferred, message about successful retrieval (HTTP response code), browser type and browser version, operating system, referrer URL (i. e. the previously visited page), IP address and the requesting provider.
We use these log data without attribution to the data subject or other profiling for statistical evaluations for the purpose of operating, securing and optimizing our online offer, but also for anonymous recording of the number of visitors to our website (traffic) as well as the extent and type of use of our website and services, as well as for billing purposes to measure the number of clicks received by cooperation partners. This information allows us to provide personalized and location-based content, analyze traffic, troubleshoot and fix errors, and improve our services. We reserve the right to check the log data retrospectively if there is a legitimate suspicion of unlawful use based on concrete indications. We store IP addresses in the log files for a limited period of time if this is necessary for security purposes or for the provision of services or the billing of services, e. g. if the data subject uses one of our services. We store IP addresses if we have specific suspicions of a criminal offence in connection with the use of our website.

 

7.3    Links/forwarding to third-party websites

We are a content provider according to § 7 para. 1 Telemedia Act is responsible for the “own content” that we make available for use according to general laws. These own contents should be distinguished from cross-references (“links”) to “third-party” contents provided by other providers.
When linking for the first time, we checked the third-party content to see if it could trigger civil or criminal liability. We check the references to third-party content regularly, but not constantly for changes. If we find or are advised by a third party that a link provided gives rise to civil or criminal liability, we will delete the link.

 

8    Rights of the person concerned

The data subject may exercise the rights set out below by contacting the above-mentioned address in person or by post with a clear identification of the person concerned.

8.1    Right of access

The data subject may request confirmation from us as to whether personal data concerning him or her are being processed by us. If such processing takes place, you may request from us the following information:

  1. the purposes for which the personal data are processed;
  2. the categories of personal data processed;
  3. the recipients or categories of recipients to whom the personal data concerning them have been or will be disclosed;
  4. the planned duration of the storage of the personal data concerning them or, where specific information is not possible, the criteria for determining the duration of the storage;
  5. the existence of a right to rectification or erasure of your personal data, a right to restriction of processing by us or a right to object to such processing;
  6. the existence of a right of appeal to a supervisory authority;
  7. all available information on the origin of the data where the personal data are not collected from the data subject;
  8. the existence of automated decision-making including profiling pursuant to Art. 22 para. 1 and 4 GDPR and – at least in these cases – meaningful information about the logic involved as well as the scope and intended effects of such processing for the data subject.

The data subject shall have the right to request information as to whether personal data concerning him or her are transferred to a third country or to an international organisation. In this context, it may request that the appropriate guarantees in accordance with Art. Art. 46 GDPR to be informed in connection with the transfer.

8.2    Right to rectification

The data subject has a right to rectification and/or completion vis-à-vis us if the personal data processed concerning him or her are incorrect or incomplete. We must make the correction without delay.

 

8.3    Right to erasure

The data subject has the right to request from us the erasure of personal data concerning him or her without undue delay, and we are obliged to erase personal data without undue delay if one of the following reasons applies:

  1. The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
  2. The data subject withdraws his or her consent on which the processing was based pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR and there is no other legal basis for the processing.
  3. The data subject objects to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or objects to the processing pursuant to Article 21(2) GDPR.
  4. The personal data has been processed unlawfully.
  5. The deletion of personal data is necessary to comply with a legal obligation under Union or Member State law to which we are subject.
  6. The personal data were collected in relation to offered information society services pursuant to Article 8(1) GDPR.

If we have made the personal data public and are we in accordance with Art. 17 para. 1 GDPR, we take reasonable measures, including technical measures, to inform controllers processing the personal data that the data subject has requested the erasure of all links to, or copies or replications of, such personal data, taking into account the available technology and the implementation costs.

 

8.4    Right to restriction of processing

Subject to the following conditions, the data subject may request the restriction of the processing of personal data concerning him or her:

  1. if you contest the accuracy of the personal data concerning you for a period that allows us to verify the accuracy of the personal data;
  2. the processing is unlawful and you oppose the erasure of the personal data and instead request the restriction of the use of the personal data;
  3. we no longer need the personal data for the purposes of processing, but we need it for the establishment, exercise or defence of legal claims; or
  4. if you object to processing pursuant to Art. 21 para. 1 GDPR and it is not yet clear whether our legitimate reasons outweigh your reasons.

Where the processing of personal data concerning him or her has been restricted, such data may only be processed with his or her consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or of a Member State.
If the restriction of processing has been restricted in accordance with the above conditions, the data subject will be informed by us before the restriction is lifted.

8.5    Right to data portability

The data subject has the right to receive the personal data concerning him or her, which he or she has provided to us, in a structured, commonly used and machine-readable format, and he or she has the right to transmit these data to another controller without hindrance from us, provided that:

  1. the processing is based on consent pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR or on a contract pursuant to Article 6(1)(b) GDPR and
  2. the processing is carried out by automated means.

In exercising your right to data portability pursuant to paragraph 1, you have the right to have the personal data transmitted directly by us to another controller, insofar as this is technically feasible.

8.6    Right of objection

The data subject shall have the right, on grounds relating to his or her particular situation, to object at any time to processing of personal data concerning him or her based on Article 6(1)(e) or (f) GDPR, including profiling based on these provisions. We no longer process the personal data unless we can demonstrate compelling legitimate grounds for processing that outweigh the interests, rights and freedoms of the data subject, or the processing serves the assertion, exercise or defence of legal claims.

If personal data are processed by us for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing. exercise or defence of legal claims.

8.7    Automated decision-making including profiling

The data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects against him or her or similarly significantly affects him or her. This shall not apply if the decision:

  1. is necessary for the conclusion or performance of a contract between you and us;
  2. is permitted by Union or Member State legislation to which we are subject and that legislation contains appropriate measures to safeguard the rights and freedoms and legitimate interests of the data subject; or
  3. with the explicit consent of the data subject.

8.8    Right to revoke data protection consent

The data subject has the right to withdraw consent to the processing of personal data at any time. The revocation of consent shall not affect the lawfulness of the processing carried out on the basis of the consent up to the revocation.

8.9   Right to lodge a complaint with a supervisory authority

The data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his/her residence, place of work or place of the alleged infringement, if he/she considers that the processing of personal data concerning him/her is unlawful.

 

9    Existence of automated decision-making

Automated decision-making on the basis of the collected personal data does not take place.

 

10    Other features and tools of the website

10.1    Google Analytics (with anonymization function)

We have integrated the component Google Analytics (with anonymization function) on our website. Google Analytics is a web analytics service. Web analysis is the collection, collection and evaluation of data about the behavior of visitors to websites. A web analysis service collects, among other things, data about which website a data subject came to a website (so-called referrer), which sub-pages of the website were accessed or how often and for how long a sub-page was viewed. A web analysis is mainly used for the optimization of a website and for the cost-benefit analysis of Internet advertising.
The operating company of the Google Analytics component is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
We use the addition "_gat._anonymizeIp" for web analysis via Google Analytics. By means of this addition, the IP address of the Internet connection of the data subject is abbreviated and anonymised by Google if our websites are accessed from a Member State of the European Union or from another State party to the Agreement on the European Economic Area.
The purpose of the Google Analytics component is to analyze the flow of visitors to our website. Google uses the data and information obtained, among other things, to evaluate the use of our website, to compile online reports for us that show the activities on our websites, and to provide other services related to the use of our website.
Google Analytics sets a cookie on the IT system of the data subject. By setting the cookie, Google enables an analysis of the use of our website. With each call-up to one of the individual pages of our website on which a Google Analytics component has been integrated, the Internet browser on the IT system of the data subject is automatically prompted by the respective Google Analytics component to transmit data to Google for the purpose of online analysis. As part of this technical procedure, Google receives knowledge of personal data, such as the IP address of the data subject, which Google uses, among other things, to understand the origin of visitors and clicks and subsequently to enable commission settlements.
By means of the cookie, personal information, for example the access time, the place from which an access originated and the frequency of visits to our website by the data subject, is stored. With each visit to our websites, these personal data, including the IP address of the Internet connection used by the data subject, are transmitted to Google in the United States of America. These personal data are stored by Google in the United States of America. Google may pass on this personal data collected through the technical process to third parties.
The data subject can prevent the setting of cookies by our website, as already described above, at any time by means of an appropriate setting of the Internet browser used and thus permanently object to the setting of cookies. Such a setting of the Internet browser used would also prevent Google from setting a cookie on the IT system of the data subject. In addition, a cookie already set by Google Analytics can be deleted at any time via the Internet browser or other software programs.
Furthermore, the data subject has the possibility to object to the collection of data generated by Google Analytics and related to the use of our website as well as to the processing of such data by Google and to prevent such processing. For this purpose, the data subject must download and install a browser add-on at the link tools.google.com/dlpage/gaoptout. This browser add-on informs Google Analytics via JavaScript that no data and information about visits to websites may be transmitted to Google Analytics. Google regards the installation of the browser add-on as an objection. If the IT system of the data subject is deleted, formatted or reinstalled at a later date, the data subject must reinstall the browser add-on in order to deactivate Google Analytics. If the browser add-on is uninstalled or deactivated by the data subject or another person within their sphere of control, it is possible to reinstall or reactivate the browser add-on.
Further information and Google's applicable privacy policy can be found at www.google.de

10.2    Facebook

We have integrated components of the company Facebook on our website. Facebook is a social network.
A social network is a social meeting place operated on the Internet, an online community that usually allows users to communicate and interact with each other in virtual space. A social network can serve as a platform for the exchange of opinions and experiences or enable the Internet community to provide personal or company-related information. Facebook allows users of the social network to create private profiles, upload photos, and network via friend requests, among other features.
The operating company of Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. The controller of personal data, if a data subject lives outside the United States or Canada, is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Whenever one of the individual pages of our website is called up on which a Facebook component (Facebook plug-in) has been integrated, the Internet browser on the IT system of the data subject is automatically prompted by the respective Facebook component to download a representation of the corresponding Facebook component from Facebook. A complete overview of all Facebook plug-ins can be found at
developers.facebook.com/docs/plugins/. As part of this technical process, Facebook receives information about which specific sub-page of our website is visited by the data subject.
If the data subject is logged in to Facebook at the same time, Facebook recognizes which specific subpage of our website the data subject is visiting with each call to our website by the data subject and for the entire duration of the respective stay on our website. This information is collected by the Facebook component and assigned by Facebook to the respective Facebook account of the person concerned. If the data subject activates one of the Facebook buttons integrated on our website, for example the "Like" button, or if the data subject makes a comment, Facebook assigns this information to the data subject's personal Facebook user account and stores this personal data.
Facebook always receives information via the Facebook component that the data subject has visited our website if the data subject is logged into Facebook at the same time as calling up our website; this takes place regardless of whether the data subject clicks on the Facebook component or not. If the data subject does not want this information to be transmitted to Facebook, he or she can prevent the transmission by logging out of his or her Facebook account before accessing our website.
The data policy published by Facebook, which is available at en-de.facebook.com/about/privacy/, provides information about the collection, processing and use of personal data by Facebook. It also explains the setting options Facebook offers to protect the privacy of the data subject. In addition, different applications are available that allow you to suppress data transmission to Facebook. Such applications can be used by the data subject to suppress data transmission to Facebook.

 10.3 You Tube

On our website we use components of the company YouTube. YouTube is a platform for free publishing and viewing videos. It is also possible to comment or rate the videos.

Betreibergesellschaft von YouTube ist die YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. Die YouTube LLC ist eine Tochtergesellschaft der Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
Bei jedem Aufruf einer der Einzelseiten unserer Website, auf welcher das YouTube-Plug-In implementiert ist, lädt der Webbrowser der betroffenen Person automatisch eine Darstellung der entsprechenden YouTube-Komponente von YouTube herunter. Weitere Infos siehe www.youtube.com/yt/about/de/. Im Rahmen des Verfahrens erhält YouTube Informationen darüber, welche Unterseite unserer Website durch die betroffene Person besucht wird.
Falls die betroffene Person während der Nutzung unserer Website parallel bei YouTube angemeldet ist, erkennt YouTube während der gesamten Dauer des Aufenthaltes auf unserer Website, welche konkrete Unterseite besucht wurde. Diese Daten werden durch das YouTube-Plugin gesammelt und von YouTube dem spezifischen YouTube-Account des Nutzers zugeordnet.
Klickt die betroffene Person einen auf unserer Website angebrachten YouTube-Buttons, weist YouTube diese Information dem spezifischen YouTube-Benutzerkonto der betroffenen Person zu und speichert diese personenbezogenen Daten.
Immer wenn die betroffene Person zum Zeitpunkt des Aufrufs unserer Website gleichzeitig bei YouTube eingeloggt ist erhält YouTube die Information, dass die betroffene Person unsere Website mit einem enthaltenen YouTube-Video besucht hat. Dies erfolgt unabhängig davon, ob die betroffene Person das YouTube- Video anklickt oder nicht. Die betroffene Person kann die Übermittlung dieser Informationen an YouTube dadurch verhindern, dass sie sich vor einem Aufruf unserer Website von ihrem YouTube-Account abmeldet (ausloggt).
Unter www.youtube.de/t/privacy veröffentlicht Google eine Datenrichtlinie, die Informationen über die Erhebung, Verarbeitung und Nutzung personenbezogener Daten durch Google und YouTube gibt.

11 Newsletter to existing customers

We regularly inform our business partners (e.g. customers, suppliers) about information about our organisation by means of the newsletter. Since the requirements of §7 paragraph 3 UWG (law against unfair competition) are met, we do not require your consent to distribute the newsletter.  This data is passed on to the service provider for newsletter distribution.
We regularly inform our business partners (e.g. customers, suppliers) about information about our organisation by means of the newsletter. Since the requirements of §7 paragraph 3 UWG (law against unfair competition) are met, we do not require your consent to distribute the newsletter.  This data is passed on to the service provider for newsletter distribution.
We store your email address for newsletter distribution until 5 years after your last order.
The receipt of the newsletter can be canceled at any time via a link in the newsletter or a direct message (contact details see above) to us."
Der Empfang des Newsletters kann jederzeit über einen Link im Newsletter oder eine direkte Mitteilung (Kontaktdaten siehe oben) an uns abbestellt werden.“

 

12 Passing on contact data to logistics service providers

For the fulfillment of delivery contracts, we pass on your address to the logistics service provider in the case of a parcel shipment, and your address and telephone number in the case of a bulky goods/pallet shipment.