Data protection
Statement on the Processing of Personal Data in accordance with the General Data Protection Regulation (GDPR)
1. Preamble
The protection of your personal data is of great importance to us. We process your personal data exclusively in accordance with the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and the German Telecommunications Digital Services Data Protection Act (TDDDG).
This Privacy Policy informs you, in accordance with Articles 13 and 14 GDPR, about which personal data we collect in connection with your visit to our website and within the scope of our business relationships, the purposes for which this data is processed, and the rights to which you are entitled.
2. Controller
The controller within the meaning of the GDPR is:
Kettenfabrik Unna GmbH & Co. KG
Max-Planck-Straße 2
59423 Unna
Telephone: +49 (0)2303 8806-0
Fax: +49 (0)2303 8806-86
Email: information@ketten.com
Represented by the Managing Director: Dr. Ingo Jasper, Alexander Hopp
If you have any questions regarding data protection, you may contact us at any time using the contact details provided above.
3. Collection of Personal Data
We process personal data only to the extent necessary for the provision of our website and the conduct of our business relationships.
This includes in particular:
- Name
- Company address
- Contact details (telephone number, email address)
- Delivery and invoicing data
- Payment data
- Contract data
- Voluntary information (e.g. service requests)
- Consent to marketing measures
The data is generally collected directly from you. In individual cases, we may also receive personal data from third parties where there is a legal basis for doing so.
4. Purposes and Legal Bases of Processing Personal data is processed in particular for the following purposes:
- Processing inquiries
- Preparing quotations
- Conclusion and performance of contracts
- Customer support
- Invoicing
- Creditworthiness checks
- Compliance with legal obligations
- Protection of legitimate interests
- Providing information about our products and services (where legally permitted)
- Statistical analyses and optimization of our services
Processing is carried out on the basis of:
- Art. 6 (1) lit. a GDPR (Consent)
- Art. 6 (1) lit. b GDPR (Contract)
- Art. 6 (1) lit. c GDPR (Legal obligation)
- Art. 6 (1) lit. f GDPR (Legitimate interests)
Where cookies or comparable technologies are used, processing is additionally based on Section 25 TDDDG.
5. Processing of Your Data We implement appropriate technical and organizational measures to protect your personal data against loss, destruction, manipulation, and unauthorized access.
Our security measures are regularly reviewed and adapted to reflect the current state of the art.
Statistical analyses are generally carried out in anonymized or pseudonymized form.
6. Recipients of Personal Data Personal data is disclosed only where this is necessary or legally permissible.
Recipients may include, in particular:
- IT service providers
- Hosting service providers
- Banks
- Tax consultants
- Auditors
- Public authorities
- Sales representatives
- Credit agencies
- Debt collection agencies
- Legal advisors
In addition, we use external service providers for the operation of our website:
- Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
- Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
- Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark (Cookiebot)
Where required, data processing agreements have been concluded with all service providers.
7. Data Retention We store personal data only for as long as necessary to fulfill the respective processing purposes or to comply with statutory retention obligations.
Retention periods arise in particular from:
- German Commercial Code (HGB)
- German Fiscal Code (AO)
- German Civil Code (BGB)
After the applicable retention periods have expired, the data will be deleted unless further legal grounds for storage exist.
8. Cookies Our website uses cookies and comparable technologies.
Cookies serve, in particular, for:
- the technical provision of the website,
- storing your consent,
- statistical analysis, and
- marketing purposes.
Cookies that are not technically necessary are only set with your explicit consent.
The legal basis for this is Art. 6 (1) lit. a GDPR in conjunction with Section 25 (1) TDDDG.
9. Cookiebot (Consent Management) We use
Cookiebot, provided by Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark, to manage your cookie preferences.
Cookiebot stores your consent or withdrawal of consent so that your preferences can be recognized when you revisit our website. In particular, the following data may be processed:
- IP address (shortened/anonymized)
- Date and time of consent
- Browser information
- Consent status
- Random consent ID
The storage of this information is necessary to comply with our legal obligation to document consent in accordance with Art. 7 GDPR.
The legal basis is:
- Art. 6 (1) lit. c GDPR
- Art. 6 (1) lit. f GDPR
- Section 25 (2) No. 2 TDDDG
You may change or withdraw your consent at any time via the cookie settings dialog provided on our website.
10. Google Tag Manager We use Google Tag Manager, a service provided by Google Ireland Limited.
Google Tag Manager is used solely for the management and deployment of website tags. The Tag Manager itself does not process personal data and does not set cookies.
However, services such as Google Analytics are only loaded via the Tag Manager after you have given your consent.
Legal basis:
- Art. 6 (1) lit. a GDPR
- Section 25 (1) TDDDG
11. Google Analytics This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited.
Google Analytics enables us to analyze the use of our website in order to continuously improve our online offering.
In particular, the following information may be processed:
- IP address (shortened)
- Device information
- Browser information
- Pages visited
- Time spent on the website
- Visitor origin
- Interactions on the website
IP anonymization is enabled.
Google Analytics is activated only after you have given your explicit consent.
Legal basis:
- Art. 6 (1) lit. a GDPR
- Section 25 (1) TDDDG
You may withdraw your consent at any time via the cookie settings.
12. YouTube Videos from the
YouTube platform are embedded on selected pages of our website.
The provider is Google Ireland Limited.
The videos are loaded only after you have given your consent. When a video is played, personal data may be transmitted to Google. This may include, for example:
- IP address
- Browser information
- Device information
- Information about your usage behavior
Where YouTube's enhanced privacy mode is used, Google states that data is only transmitted once a video is actively played.
Legal basis:
- Art. 6 (1) lit. a GDPR
- Section 25 (1) TDDDG
13. International Data Transfers Personal data may be transferred to the United States in connection with the use of Google services.
Google is certified under the EU-U.S. Data Privacy Framework. Where required, data transfers are also carried out on the basis of the Standard Contractual Clauses approved by the European Commission.
Further information is available at:
https://policies.google.com/privacy 14. Rights of Data Subjects You have the right at any time to:
- obtain information in accordance with Art. 15 GDPR,
- request the rectification of inaccurate personal data in accordance with Art. 16 GDPR,
- request the erasure of your personal data in accordance with Art. 17 GDPR,
- request the restriction of processing in accordance with Art. 18 GDPR,
- receive your personal data in a structured, commonly used and machine-readable format in accordance with Art. 20 GDPR,
- object to the processing of your personal data in accordance with Art. 21 GDPR,
- withdraw any consent you have given with effect for the future.
To exercise your rights, please contact:
Kettenfabrik Unna GmbH & Co. KG Max-Planck-Straße 2
59423 Unna
Email:
information@ketten.com 15. Right to Lodge a Complaint You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates the GDPR.
The competent supervisory authority is, in particular, the authority responsible for your habitual residence, your place of work, or the place of the alleged infringement.
16. Amendments to this Privacy Policy We reserve the right to amend this Privacy Policy where necessary due to changes in legal requirements, technical developments, or further development of our website.
The version published on our website at the time of your visit shall apply.