This website and its contents are protected by copyright. Kautex Maschinenbau is the owner of all rights to the content and design. Of course we are pleased about link references on our sides and ask in this connection for your information. A link to our website is basically permitted and also desired, but the presentation in external frames is only permitted with our permission. We prohibit the reproduction, editing, translation, distribution, transmission (electronically or by other means), modification or use of our website for public or commercial purposes without prior affirmation, in particular the use in databases as well as electronic media and systems.

and

are registred trademarks of Kautex Maschinenbau GmbH.

Data protection declaration

Data protection declaration according to the General Data Protection Regulation (GDPR) effective from May 25th, 2018, applicable for all companies located in or doing business with the European Economic Area (EEA)

Below, we would like to provide you with information on the collection of personal data when you use our website. Personal data are all data which relate to you personally, for instance your name, address, e-mail address or user behaviour.

I. Name and address of the data controller

The data controller pursuant to Article 4(7) of the General Data Protection Regulation (“GDPR”) is:
Kautex Maschinenbau GmbH
Management Board:
Dipl.-Ing. Thomas Hartkämper (Chairman)
Kautexstr. 54
D-53229 Bonn
Germany

phone: +49 (0) 228 / 489-0
info(at)kautex-group.com
Website: www.kautex-group.com

II. Name and address of the data protection officer

The data controller’s data protection officer is:
Ziar Kabir
Hauptstr. 27
53604 Bad Honnef
Deutschland

phone: +49(0)2224 98829 0
dsb(at)kautex-group.com
Webseite: www.kautex-group.com

III. General information on data processing

1. Purpose and scope of the processing of personal data

We collect and use our users’ personal data on the basis of statutory provisions, to the extent that such collection is necessary for us to be able to provide and maintain the functions, contents and services of the website. When using special services, for instance a contact form, the collection and use of our users’ personal data takes place after the users have confirmed acknowledgement of this Privacy Policy.

2. Legal basis for the processing of personal data

The legal basis for the processing of personal data is as follows: if the data subject has given his or her consent: Article 6(1)(a) GDPR; if personal data are processed for the performance of a contract: Article 6(1)(b) GDPR; if personal data are processed for the performance of a legal obligation: Article 6(1)(c) GDPR; and if vital interests of the data subject or another individual require the processing of personal data: Article 6(1)(d) GDPR. If processing is necessary to safeguard a legitimate interest of our company or a third party, and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interests, Article 6(1)(f) GDPR serves as the legal basis for processing.

3. Deletion of data and storage time

Personal data of the data subject will be deleted or blocked as soon as the purpose of such storage, or the legal obligation to store, no longer applies. Data may be stored beyond this if this is required by law.

4. Encrypted transmission

For security reasons and to protect the transmission of personal data, such as the requests you send to us in our capacity as the site operator, this website uses SSL encryption (Secure Socket Layer), in each case in conjunction with the highest level of encryption supported by your browser. This is usually 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead.

IV. Provision of the website and creation of log files

1. Description and scope of data processing

Whenever you access our website for information purposes only, i.e. if you do not register or otherwise provide us with information, our system automatically collects personal data and information that your computer system transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary in order for us to display our website to you and to ensure stability and security:

(1) Information on the browser software, its language and the version used
(2) User’s operating system and user interface
(3) User IP address
(4) Date and time of access
(5) Content of the request (specific page)
(6) Access status/http status code
(7) Websites from which the user's system accesses our website

Data are also stored in the log files of our system. These data are not stored together with other personal data of the user.

2. Legal basis for data processing

The legal basis for the temporary storage of data is Article 6(1)(f) GDPR.

3. Purpose of data processing

The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. For this purpose, the user’s IP address must remain stored for the duration of the session. The data are stored in log files to ensure the functionality of the website. In addition, the data serve to optimise the website and to ensure the security of our information technology systems. An analysis of the data for marketing purposes does not take place in this context. These purposes also constitute our legitimate interest in data processing in accordance with Article 6(1)(f) GDPR.

4. Duration of storage

The data will be deleted as soon as they are no longer necessary in order to achieve the purpose for which they were collected. If data are collected in order to make the website available, this is the case once the respective session has ended. If the data are stored in log files, this is the case after seven days at the latest. Further storage is possible. In this case, the users’ IP addresses are deleted or alienated in such a way that identification of the calling client is no longer possible.

5. Possibility to object and request erasure

An objection against the collection and processing of personal data is only possible with regard to voluntary information given within the scope of a declaration of consent, but not in the case of data in log files which are absolutely necessary for the operation of the website.

V. Use of cookies

1. Description and scope of data processing

Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user's terminal device (PC, laptop, tablet, smartphone etc.). When a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic sequence of characters that enables a unique identification of the browser when the website is called up again. Cookies do no damage to your terminal device, do not contain viruses, Trojans or other malware. The information stored in the cookie results in each case in connection with the specific terminal device that is being used. However, this does not mean that we immediately learn of your identity.

We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change. The following data are stored and transmitted in the cookies: (1) Session ID
(2) Consent to cookie notice

2. Legal basis for data processing

The legal basis for the processing of personal data is Article 6(1)(f) GDPR.

3. Purpose of data processing

The use of cookies is intended to simplify the use of websites for the users. Some functions of our website cannot be offered without using cookies. For these functions, it is necessary that the browser is recognized even after a page change.

We need cookies for the following applications:
(1) To prevent / detect misuse of the website
(2) To store the declaration accepting the cookie notice
The user data collected by technically necessary cookies will not be used to create user profiles. The above purposes also constitute our legitimate interest in the processing of personal data pursuant to Article 6(1)(f) GDPR.

4. Duration of storage, possibility to object and request erasure

Cookies are stored on the user's computer and transmitted by this computer to our site. Therefore, you as the user have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your internet browser. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website in full.

VI. Contact form and e-mail contact

1. Description and scope of data processing

Our website contains various contact forms which can be used for contacting us electronically. If a user uses this option, the data entered in the input mask will be transmitted to us and stored.

If you voluntarily provide us with data beyond the mandatory fields, e.g. in forms, that are not necessary for the performance of our contractual obligations, we will process such data on the basis that we assume that the processing and use of such data is in your interest. You are free to decide at any time whether you want to use a form or not.

At the time the message is sent, the following data are also stored:
(1) IP address
(2) Date and time of sending the form
During the sending process, reference is made to this Privacy Policy, and a confirmation of acknowledgement is requested. Alternatively, you can contact us via the e-mail address provided. In this case, the user's personal data transmitted by e-mail will be stored. In this context, the data will not be transmitted to third parties. The data are used exclusively for processing the conversation.

2. Legal basis for data processing/h3>

The legal basis for the processing of the data is Article 6(1)(a) GDPR, or Article 6(1)(f) if data transmitted in the course of sending an e-mail are processed.

If the e-mail contact aims at the conclusion of a contract, Article 6(1)(b) GDPR constitutes an additional legal basis for processing.

3. Purpose of data processing

The processing of the personal data from the input mask serves exclusively to deal with the relevant inquiry. If you contact us by e-mail, this also constitutes the necessary legitimate interest in the processing of the data. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

4. Duration of storage

The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form and those that were sent by e-mail, this is the case when the respective conversation with the user is over. The conversation is over when it can be inferred from the circumstances that the facts in question have been finally clarified. The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

5. Possibility to object and request erasure

The user has the possibility to revoke his or her consent to the processing of personal data at any time. If the user contacts us by e-mail, he or she can object to the storage of personal data at any time. In such a case, the conversation cannot be continued. If the user objects to optional personal data that are not marked as mandatory in the contact forms, a conversation may be able to be continued. To revoke the consent to the processing of personal data transmitted via the contact form or by e-mail, simply send an informal e-mail to dsb(at)kautex-group.com. All personal data stored in the course of you contacting us will be deleted in this case.

VII. Analysis & social media tools

1. Tracking tools

The tracking measures listed below and used by us are carried out on the basis of Article 6(1)(f) GDPR. With the tracking measures used, we want to ensure that our website is designed in a demand-oriented manner, and is continually optimised. On the other hand, we use the tracking measures to statistically record usage of our website and to evaluate it for the purpose of optimising our offers for you. These interests are to be regarded as legitimate within the meaning of the aforementioned provision. The respective data processing purposes and data categories can be found in the corresponding tracking tools.

a) Google Analytics

For the purpose of demand-oriented design and continuous optimisation of our website, we use Google Analytics, a web analysis service provided by Google Inc. (https://www.google.de/intl/de/about/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google”). In this context, pseudonymised user profiles are created and cookies (see V.) are used. The information generated by the cookie about your use of this website such as
• browser type/version,
• operating system used,
• referrer URL (the previously visited page),
• host name of the accessing computer (IP address),
• time of the server request,

are transferred to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on the website activities, and to provide further services associated with usage of the website and the internet for the purposes of market research and demand- oriented design of these internet pages. This information may also be transmitted to third parties if this is mandatory under applicable law, or if third parties process such data on behalf. Under no circumstances will your IP address be linked to other Google data. The IP addresses are anonymised so that identification is not possible (IP masking).

You can prevent the installation of cookies by setting the browser software accordingly; however, we must inform you that, in this case, you may not be able to fully use all features on this website. Furthermore, you can prevent the collection of the data generated by the cookie relating to your use of the website (including your IP address), as well as the processing of these data by Google, by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=de). As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent Google Analytics from collecting data by clicking on this link. The opt-out cookie is only valid in this browser and only for our website, and is stored on your device. If you delete the cookies in this browser, you will have to set the opt-out cookie again. More information about privacy in connection with Google Analytics can be found, for instance, in the Google Analytics Help Centre (https://support.google.com/analytics/answer/6004245?hl=en).

b.) Web analytics service Kyto GmbH

This website uses KytoGen, a web analytics service provided by Kyto GmbH, Bundesallee 23, 10717 Berlin, Germany.

This product collects and processes your personal data and uses it to create usage profiles under a pseudonym. These usage profiles are completely anonymized whenever technically possible and appropriate. The collected data, which may also include personal data, will either be transferred to Kyto or Kyto collects this data directly. No personal identification of visitors to this website takes place, and no other personal data is merged with the usage profile. If your IP address is collected, it is matched against a public IP database and analysed accordingly. This enables Kyto to identify your company (legal entity). Any IP addresses recorded are anonymized immediately by deleting the last number block.

Kyto may use information obtained from visits to this website to create anonymized usage profiles. Identified company visitors to the website are enriched with non-personal company data. This includes company name and address, industry and company size.

2. Social Media Plugins

a) Shariff component for Xing and LinkedIn

When using the social media plugins from Xing and LinkedIn, the Shariff component is used, which ensures that the plugins are used in accordance with data protection regulations. Shariff was developed for the German computer magazine c't and is published via GitHub, Inc.

The social media plugins of social networks always transfer personal data to the respective social network as soon as a web page is accessed into which the respective plugin is integrated. If the Shariff component is used, personal data will only be transmitted to social networks if the user actively uses one of the buttons provided by the plugins. Further information on the Shariff component has been published by the c't computer magazine at https://www.heise.de/newsticker/meldung/Datenschutz-und-Social-Media-Der-c-t-Shariff-ist-im-Einsatz-2470103.html The purpose of using the Shariff component is to protect the personal data of visitors to our website and at the same time enable us to use the social media plugins of the social networks on the website.

We use the social media plugins from Xing and LinkedIn as part of the Shariff component.

b) Scope of data processing

We have no influence on the data collected and data processing procedures, nor are we aware of the full extent of data collection, the purposes of processing, or the storage periods. We also have no information on the deletion of the data collected by the plug-in provider.

c) Assertion of the right to object

The plug-in provider stores the data collected about you as user profiles and uses these for purposes of advertising, market research and/or demand-oriented design of its website. Such an analysis takes place in particular (also for users not logged in) for the presentation of demand-oriented advertising and in order to inform other users of the social network about your activities on our website. You have a right to object to the creation of these user profiles, whereby you will have to contact the respective plug-in provider to exercise this right. Through the plug-ins, we offer you the possibility of interacting with social networks and other users, so that we can improve our offer and make it more interesting for you as a user. The legal basis for the use of plug-ins is Article 6(1)(f) GDPR.

d) Transferring your data

The data are transferred regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, your data collected by us will be directly attributed to your existing account with the plug-in provider. If you click the activated button and, for example, link the page, the plug-in provider will also store this information in your user account and will publicly communicate it to your contacts. We recommend that you log out regularly after using a social network, especially before activating the button, as this will allow you to avoid attribution to your profile with the plug-in provider.

e) Further information

For more information on the purpose and scope of data collection and processing by the plug-in provider, please refer to the privacy policies of these providers as stated below. They will also provide you with further information about your rights in this regard and about setting options to protect your privacy.

f) Addresses of the respective plug-in providers and URL with their privacy policies:

Xing AG, Gänsemarkt 43, 20354 Hamburg, DE http://www.xing.com/privacy.
- LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA http://www.linkedin.com/legal/privacy-policy. LinkedIn has submitted to the EU-US Privacy-Shield https://www.privacyshield.gov/EU-US-Framework.

VIII. Tools / other technologies with data protection relevance

1. YouTube (Embedded Videos)

The Youtube embedding function is used on this website to play and display videos uploaded on the Youtube platform. The provider Youtube belongs to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Embedding is carried out in the so-called "privacy enhanced mode", which, according to the provider, does not process personal data until the user has started playing the video. Once the user starts playing the video, YouTube, according to the the company itself, collects information that is used to compile video statistics, improve user-friendliness and prevent misuse of the features. If the user is logged into his/her Google account within the browser, the data collected by YouTube will be attributed to his/her account. To prevent this, users should log out of their account before the playing of embedded YouTube videos starts. YouTube uses cookies to process the above-mentioned data, among other things. The data are stored as usage profiles and analysed by Google (even if the user is not logged in). The legal basis for such an analysis is Article 6(1)(f) GDPR, on the basis of Google's legitimate interests in the demand-oriented design of its content, market research and/or the display of personalised advertising. The user has the right to object to the creation of these user profiles. This right must be asserted directly vis-à-vis YouTube. Google LLC, based in the USA, is certified for the US / European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU. For more information about YouTube's privacy policy, please see the provider's privacy policy at https://www.google.de/intl/de/policies/privacy

2. Google reCAPTCHA

This website uses the reCAPTCHA feature from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). This feature can be used to distinguish abusive submissions made through automated or machine processing (often to create spam entries via contact forms) from submissions by individuals. The reCAPTCHA feature is used in the contact forms of the website. When this feature is used, the user's IP address and any other data required by Google for the service will be transmitted to Google.

The legal basis is Article 6(1)(f) GDPR, based on the legitimate interest of the website operator in preventing misuse of the contact forms.

Google LLC, based in the USA, is certified for the US / European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU. Further information about Google reCAPTCHA as well as the Google privacy policy can be found at https://www.google.com/intl/de/policies/privacy/

3. Google Maps

This website uses Google Maps from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Using the embedded maps of Google Maps, we can display our location and make it easier for you to get to us.

Sobald der Nutzer eine Webseite mit eingebundener Google Maps-Karte aufruft, werden personenbezogene Daten (wie z.B. Ihre IP-Adresse) an Google übertragen. Diese Daten werden auch dann übermittelt, wenn Sie nicht in einem Nutzerkonto von Google eingeloggt sind. Sollten Sie in einem Benutzerkonto eingeloggt sein, wird Google diese Daten Ihrem Benutzerkonto zuweisen.

As soon as the user accesses a website with an integrated Google Maps map, personal data (e.g. your IP address) are transferred to Google. These data will be transmitted even if you are not logged into a Google user account. If you are logged into an account, Google will attribute this information to your account.

The data are stored as usage profiles and analysed by Google (even if the user is not logged in). The legal basis for such an analysis is Article 6(1)(f) GDPR, on the basis of Google's legitimate interests in the demand-oriented design of its content, market research and/or the display of personalised advertising. The user has the right to object to the creation of these user profiles. This right must be asserted directly vis-à-vis Google.

Google LLC, based in the USA, is certified for the US / European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU. You can review Google's Terms of Use at http://www.google.de/intl/de/policies/terms/regional.html the additional Terms of Use for Google Maps can be found at https://www.google.com/intl/de_US/help/terms_maps.html

Detailed information on data protection in connection with the use of Google Maps can be found on the Google website (“Google Privacy Policy”): http://www.google.de/intl/de/policies/privacy/

X. Rights of the data subject

If your personal data are processed, you are a data subject within the meaning of the GDPR, and have the following rights vis-à-vis the data controller. If you have any questions about data protection and in particular about the rights of data subjects, please contact our data protection officer (see II. above).

1. Right to access data (Article 15 GDPR)

You can request that the data controller confirm whether personal data concerning you are processed by us. If such processing has taken place, you can request that the data controller provide you with access to the following information about your personal data processed by us, pursuant to Article 15 GDPR.

2. Right to rectification (Article 16 GDPR)

In accordance with Article 16 GDPR you have the right to request immediate rectification of incorrect data or completion of personal data stored by us.

3. Right to restriction of processing (Article 18 GDPR)

Under the conditions of Article 18 GDPR, you may request that the processing of your personal data be restricted. Where processing has been restricted according to the above conditions, you will be informed by the data controller before the restriction is lifted.

4. Right to erasure (§ 17 GDPR)

You can request erasure of your personal data stored by us in accordance with Article 17 GDPR.

5. Right to request notification of third parties

If you have exercised your right vis-à-vis the data controller regarding rectification, erasure or restriction of processing, the data controller is obligated to inform all recipients to whom the personal data concerning you have been disclosed of this correction or erasure of the data or restriction on processing, unless this proves impossible or involves disproportionate efforts. You shall also have the right to be informed of the identity of such recipients.

6. Right to data portability

You have the right, in accordance with Article 20 GDPR, to receive the personal data you have provided to us in a structured, commonly used and machine-readable format or to request transmission of such data to another data controller.

7. Right to object

If your personal data are processed on the basis of legitimate interests pursuant to Article 6(1)(f) GDPR, you have the right to object to the processing of your personal data pursuant to Article 21 GDPR, on grounds relating to your particular situation or if the objection is directed against direct marketing. In the latter case, you have a general right to object, which we will implement without you having to specify a particular situation.
If you wish to exercise your right to revoke or object, simply send an e-mail to dsb(at)kautex-group.com.

8. Right to revoke the data protection declaration of consent

You have the right to revoke your data protection declaration of consent at any time. The withdrawal of this consent shall not affect the lawfulness of the processing carried out on the basis of the consent before its withdrawal.

9. Automated individual decision-making, including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This shall not apply if the decision
(1) is necessary for entering into, or performing, a contract between you and the data controller,
(2) is authorised by Union or member state law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or
(3) is based on your explicit consent.

However, these decisions may not be based on special categories of personal data pursuant to Article 9(1) GDPR, unless Article 9(2)(a) or (2)(g) applies, and suitable measures have been taken to protect your rights and freedoms and your legitimate interests.

In the cases referred to in subsections (1) and (3), the data controller shall take suitable measures to safeguard your rights, freedoms and legitimate interests, including at least the right to obtain human intervention on the part of the controller, as well as the right to express your point of view and to contest the decision.

10. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you shall have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR. The supervisory authority with which the complaint has been lodged will inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Article 78 GDPR.

Created on 16 May 2018