Data protection declaration

The following data protection declaration applies to the use of our Internet presence and informs you, as a relevant person as defined by data protection law and a user of this Internet presence, about the processing of personal data. Personal data are individual items of information concerning the personal or factual circumstances of a particular or identifiable natural person.

Responsible entity as defined by the GDPR is

KHW Kunststoff- und Holzverarbeitungswerk GmbH
Alte Lage 1a
99331 Geratal OT Geschwenda

Telephone: +49 (0) 36205 749-0

Internet: www.khw-geschwenda.de
E-mail: info(at)khw-geschwenda.de

(Responsible entity in the following)

The data protection officer of the responsible entity is

André Stämmler
c/o Landgraf Datenschutz UG (limited liability company)
Markt 22
07743 Jena
dsb@landgraf-datenschutz.de

You can directly contact our data protection officers with any questions or suggestions concerning data protection.

1. General Information

When you visit our website, the provider of this platform (or its web space provider) gathers data concerning every access to the offering. This access data includes:

• the name of the website called up,
• IP address of the requesting computer,
• the date and the time of day of the calling up,
• the transmitted quantity of data,
• the type and version of the browser,
• the operating system used by the user,
• the website from which the user visited the Internet presence (referrer URL),
• the IP address of the requesting computer,
• the requesting provider

The data named are processed by the operator for the following purposes:

• improvement and guaranteeing the establishment of the connection to the website,
• improvement of possibilities for using the website,
• evaluation of system security and stability, as well as
• for administrative purposes.

The legal basis for data processing is Art. 6, Par. 1, No. 1 lit. f GDPR. The justified interest of the provider arises from the purposes for the gathering of data listed above. The data are anonymous and are stored separately from any potentially provided personal data. Inferences to a particular person are not possible.

Your personal data are only transmitted to third parties for the following purpose. Transmission does not take place for any other reason:

Personal data of the user are only forwarded to third parties when:

• the user has provided his/her express consent in accordance with Art. 6, Par. 1, No. 1 lit. a GDPR,
• forwarding in accordance with Art. 6, Par. 1, No. 1 lit. f GDPR is necessary for the assertion, exercise or defence of legal claims and there is no reason to presume that you have a predominant, interest worthy of protection in your data not being forwarded,
• in the event that a legal obligation of forwarding exists in accordance with Art. 6, Par. 1, No. 1 lit. c GDPR, and when
• this is permitted by law and in accordance with Art. 6, Pr. 1, No. 1 lit. b GDPR for the processing of contractual relationships with the user.

The data are automatically deleted following the expiration of a predefined period when further storage for documentation purposes is not required.

Cookies, general

We use cookies for our Internet presence. Cookies are small (text) files that are created and stored on your end device (e.g. smartphone, notebook, tablet, PC). Most cookies are so-called “session cookies” that are deleted following the end of your visit. However, in individual cases these cookies provide information used to automatically recognise the user again. Using a so-called cookie ID, Internet pages and servers can be assigned to the concrete Internet browser in which the cookie has been saved.

Cookies help improve the user-friendliness of our Internet presence and enable a technically error-free and optimised state for our Internet presence. Should you not agree to the use of cookies, it is possible to limit their usage or completely deactivate them in the browser settings. Limitation or deactivation can result in limitations to the usage of this Internet presence. The legal basis for data processing is Art. 6, Par. 1, No. 1 lit. f GDPR. Our justified interest arises from the purposes for the gathering of data listed above.

Some of the cookies are deleted as soon as you close your browser (transient cookies). Other cookies (persistent cookies) remain on your end device and make it possible for us to recognise your browser. These cookies are automatically deleted upon expiration of a predefined period.

Your rights as an affected person

You have the following rights with regard to the personal data concerning yourself:

• Withdrawal of consent
• information;
• correction;
• deletion;
• limitation of processing;
• right to transferability of the data;
• complaints registered with a regulatory authority;

You also have the right to register a complaint with a data protection regulatory authority concerning the processing of your personal data by us.

Data security

In the context of the visit to this website, the SSL (Secure Socket Layer) procedure is used in connection with the respective highest encoding level supported by the browser used by the user. This is generally a 256 bit encoding. If the browser used by a user does not support 256 bit encoding, 128 bit v3 technology is resorted to. The encoded transmission of a page of this Internet presence can be recognised by the key or lock symbol in the status bar of the browser.

In addition to the SSL encoding, technical and organisational security measures are used to protect the data against random or intentional manipulation, loss, destruction or unauthorised access by third parties. These security measures are continually improved in keeping with technological developments.

Google Web Fonts

We use web fonts provided by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). The service serves the purpose of the uniform and correct representation of fonts on our page. To this purpose, your browser connects with the servers of Google and loads the required web fonts into your browser cache as soon as you call up a page of our Internet presence. In the process, Google determines that our website was called up via your IP address.

The legal basis for the usage of Google Web Fonts is Art. 6, Par. 1 lit. f GDPR (justified interest). Our justified interest is the uniform and correct representation of the fonts on our Internet presence.

You can find further information on Google Web Fonts and data protection at Google in general under:

• https://developers.google.com/fonts/faq
• https://www.google.com/policies/privacy/ (Data protection declaration of Google)

Contact form

You have the possibility to contact us through various communications channels, such as e-mail, telephone, mail or using a contact form. When you contact us, we save your data for the purpose of processing the enquiry. The data is not forwarded to third parties. The processing of personal data takes place in accordance with Art. 6, Par. 1, No. 1 lit. f GDPR. Justified interest here is to be found in the processing of your enquiry. If your contact has the aim of concluding a contract, the legal basis is also Art. 6, Par. 1, No. 1 lit. b GDPR. We delete this data as soon as your enquiry has been conclusively clarified and to the extent that no legal obligations of retention contradict this.

Ordering through the online shop

You have the possibility to submit orders through the online shop of our website. We gather the following data for an order: First name, last name, street address, postal code and city, e-mail address.

The entered data is processed in order to implement the contract (Art. 6, Par. 1 lit. b GDPR). The data are deleted as soon as you cancel an order. When an order has been completed, we delete the data following expiration of the retention periods according to tax law.

2. Web Analysis

We use web tracking and web analysis services. These involve services that enable analysis of the usage of our website. We use this data for the improvement of the website and to design our offering to be of more interest to you. The legal basis for the use of web analysis tools is Art. 6, Par. 1 No. 1 lit. f GDPR. We have a justified interest in the analysis of the user behaviour of our website in order to optimise both our offering and our advertising.

Matomo (formerly Piwik)

This Internet presence uses Piwik. Piwik is an open source software for the statistical evaluation of user access to websites (http://piwik.org). Piwik uses so-called “cookies” for the evaluation of user access. This information is stored exclusively on our servers in Germany.

You can prevent the evaluation of this data by deleting existing cookies and prohibiting the storage of cookies. It is possible to prohibit the storage of cookies with the setting in your browser. The prevention of the use of Piwik is possible by removing the following check and in this way activating the opt-out plug-in:

Prohibiting the use of cookies can result in the limitation of your use of the website. We use Piwik with the “AnonymizeIP” add-on. IP addresses are then only further processed in an abbreviated form. Direct linking to a particular person is thus excluded. The IP address transmitted from your browser via Piwik is not linked with other data collected by us.

3. Payment service providers

paypal

Among other services, we offer payment via PayPal. Provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (“PayPal” in the following).

When you select payment via PayPal, the payment data you enter is transmitted to PayPal.

The legal basis for the transmission of your data to PayPal is Art. 6, Par. 1 lit. a GDPR (Declaration of consent) and Art. 6, Par. 1 lit. b GDPR (Processing for the fulfilment of a contract). You have the possibility to withdraw your consent to data processing at any time. Withdrawal does not impact the effectiveness of data processing procedures in the past.