Data protection

This privacy policy clarifies the nature, scope and purpose of the processing of personal data (hereinafter referred to as “data”) within our website and the associated websites, functions and content (hereinafter collectively referred to as “website”).
With regard to the terms used, such as “processing” or “controller”, we refer to the definitions in Art. 4 of the General Data Protection Regulation (GDPR).

Responsible for data processing:
PFALZKOM GmbH
Wredestraße 35
67059 Ludwigshafen
E-Mail-Adresse: info@pfalzkom.de

Types of data processed:
– inventory data (e.g., names, addresses).
– contact data (e.g., e-mail, telephone numbers).
– content data (e.g., text input, photographs, videos).
– usage data (e.g., websites visited, interest in content, access times).
– meta/communication data (e.g., device information, IP addresses).

Categories of data subjects:
Visitors and users of the website (hereinafter we also refer to the data subjects collectively as “users”).

Purpose of processing:
– Provision of the website, its functions and content.
– Answering contact requests and communicating with users.
– Security measures.
– Reach measurement/marketing

Terms used:
“Personal data” means any information relating to an identified or identifiable natural person (hereinafter “data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier (e.g. a cookie) or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. “Processing” means any operation or set of operations which is performed on personal data, whether or not by automated means. The term is far-reaching and covers practically any handling of data. The “controller” is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

Relevant legal bases:
In accordance with Art. 13 GDPR, we inform you of the legal bases of our data processing. If the legal basis is not mentioned in the privacy policy, the following applies:

The legal basis for obtaining consent is Art. 6 para. 1 lit. a and Art. 7 GDPR, the legal basis for processing to fulfill our services and carry out contractual measures as well as answering inquiries is Art. 6 para. 1 lit. b GDPR, the legal basis for processing to fulfill our legal obligations is Art. 6 para. 1 lit. c GDPR, and the legal basis for processing to safeguard our legitimate interests is Art. 6 para. 1 lit. f GDPR. In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.

Cooperation with processors and third parties:
If we disclose data to other persons and companies (processors or third parties) as part of our processing, transfer it to them or otherwise grant them access to the data, this will only be done on the basis of legal permission (e.g. if the transfer of data to third parties, such as payment service providers, is required to fulfill the contract in accordance with Art. 6 para. 1 lit. b GDPR), you have consented, a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.). If we commission third parties with the processing of data on the basis of a “order processing contract”, this is done on the basis of Art. 28 GDPR.

Transfers to third countries:
If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or in the context of the use of third-party services or disclosure or transfer of data to third parties, this will only take place if it is done to fulfill our (pre)contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we process or have the data processed in a third country only if the special requirements of Art. 44 et seq. GDPR are met. This means that processing takes place, for example, on the basis of special guarantees, such as the officially recognized determination of a level of data protection corresponding to the EU or compliance with officially recognized special contractual obligations.

Rights of data subjects:
You have the right to obtain confirmation as to whether or not data in question is being processed and to obtain information about this data as well as further information and a copy of the data in accordance with Art. 15 GDPR. Per Art. 16 GDPR, you have the right to request the completion of data concerning you or the rectification of inaccurate data concerning you. In accordance with Art. 17 GDPR, you have the right to demand that the data in question be deleted immediately or, alternatively, to demand that the processing of the data be restricted in accordance with Art. 18 GDPR. You have the right to request to receive the data concerning you that you have provided to us in accordance with Art. 20 GDPR and to request that it be transferred to other data controllers. In accordance with Art. 77 GDPR, you also have the right to lodge a complaint with the competent supervisory authority.

Right of revocation:
If you have given your consent to the use of your personal data, you can revoke this at any time in accordance with Art. 7 para. 3 GDPR with effect for the future. The revocation of consent is for the future and does not affect the legality of the data processed until the revocation. Please address your objection or revocation to the aforementioned data controller.

Right to object:
If we process your personal data based on a so-called balancing of interests in accordance with Art. 21 GDPR, you can object to the storage or use of your data at any time for reasons arising from your particular situation, in whole or in part, for the future, without affecting the legality of any storage or processing that has taken place up to that point. In this case, we will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

Cookies and right to object to direct advertising:
“Cookies” are small files that are stored on users’ computers. Different information can be stored within the cookies. A cookie is primarily used to store information about a user (or the device on which the cookie is stored) during or after their visit to an online service. Temporary cookies, or “session cookies” or “transient cookies”, are cookies that are deleted after a user leaves an online service and closes their browser. For example, the content of a shopping cart in an online store or a login status can be stored in such a cookie. “Permanent” or “persistent” cookies are cookies that remain stored even after the browser is closed. For example, the login status can be saved if users visit it after several days. The interests of users can also be stored in such a cookie and used for reach measurement or marketing purposes. “Third-party cookies” are cookies offered by providers other than the controller who operates the online service (otherwise, if they are only the controller’s cookies, they are referred to as “first-party cookies”). We may use temporary and permanent cookies and provide information about this in our privacy policy. If users do not want cookies to be stored on their computer, they are asked to deactivate the corresponding option in the system settings of their browser. Saved cookies can be deleted in the system settings of the browser. The exclusion of cookies can lead to functional restrictions of this website. A general objection to the use of cookies used for online marketing purposes can be declared for a large number of services, especially in the case of tracking, via the US website https://www.aboutads.info/choices/ or the EU website https://www.youronlinechoices.com/. Furthermore, the storage of cookies can be disabled in the browser settings. Please note that you may then not be able to use all the functions of this website.

Deletion of data:
The data processed by us will be deleted or its processing restricted in accordance with Art. 17 and 18 GDPR. Unless expressly stated in this privacy policy, the data stored by us will be deleted as soon as it is no longer required for its intended purpose and the deletion does not conflict with any statutory retention obligations. If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. This means that the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons. According to legal requirements in Germany, the retention period is 6 years in accordance with Section 257 (1) of the German commercial code [HGB] (trading books, inventories, opening balance sheets, annual financial statements, commercial letters, accounting documents, etc.) and 10 years in accordance with Section 147 (1) of the German tax code [AO] (books, records, management reports, accounting documents, commercial and business letters, documents relevant for taxation, etc.).

Business-related processing:
In addition, we process – contract data (e.g., subject matter of the contract, term, customer category). – Payment data (e.g. bank details, payment history) of our customers, interested parties and business partners for the purpose of providing contractual services, service and customer care, marketing, advertising and market research.

Collection of access data and log files:
We, or our hosting provider, collect data on the basis of our legitimate interests within the meaning of Art. 6 para. 1 lit. f. GDPR. We collect data about every access to the server on which this service is located (so-called server log files). The access data includes the name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user’s operating system, referrer URL (the previously visited page), IP address and the requesting provider. Log file information is stored for security reasons (e.g. to investigate misuse or fraud) for a maximum period of 1 month and then deleted. Data whose further retention is required for evidentiary purposes is excluded from deletion until the respective incident has been finally clarified.

Provision of contractual services:
We process inventory data (e.g., names and addresses as well as contact data of users), contract data (e.g., services used, names of contact persons, payment information) for the purpose of fulfilling our contractual obligations and services in accordance with Art. 6 para. 1 lit. b. GDPR. The entries marked as mandatory in online forms are required for the conclusion of the contract. As part of the use of our online services, we store the IP address and the time of the respective user action. The storage is based on our legitimate interests, as well as those of the user in protection against misuse and other unauthorized use. This data will not be passed on to third parties unless it is necessary to pursue our claims or there is a legal obligation to do so pursuant to Art. 6 para. 1 lit. c GDPR. We process usage data (e.g., the websites visited within our online presence, interest in our products) and content data (e.g., entries in the contact form or user profile) for advertising purposes in a user profile, e.g., to display product information to users based on the services they have used to date. The deletion of the data takes place after the expiry of statutory warranty and comparable obligations, the necessity of storing the data is reviewed every three years; in the case of statutory archiving obligations, the deletion takes place after their expiry. Information in any customer account remains until it is deleted.

Contacting us:
When contacting us (e.g. via contact form, e-mail, telephone), the user’s details are processed to process the contact request and its handling in accordance with Art. 6 para. 1 lit. b) GDPR. User data may be stored in a customer relationship management system (“CRM system”) or comparable inquiry organization. We delete the requests if they are no longer required. We review the necessity every two years; furthermore, the statutory archiving obligations apply.

Marketing automation / e-mails

On the basis of your express consent, we will send you e-mails with downloads (e.g. white papers, checklists), our newsletter or comparable information. Which personal data is transmitted to us when an order is placed is determined by the input screen used for this purpose (e.g. name and e-mail address). The legal basis for the processing is your consent to receive the information offers. Our information contains tracking pixels. This allows a statistical evaluation of the success of online marketing campaigns to be carried out and the information on offer to be further improved.

Marketing Automation / Evalanche:
We use the email marketing automation solution Evalanche to send some information. The provider is SC-NETWORKS GMBH, Enzianstr. 2, 82319 Starnberg, Germany. Evalanche is a service that can be used to organize and analyze the sending of e-mails or newsletters, among other things. The data you enter to access our information service is stored on Evalanche’s servers in Germany. We require a valid e-mail address for effective registration. We use the “double opt-in” procedure to check that a registration is actually made by the owner of an e-mail address. For this purpose, we log the subscription to the newsletter, the sending of a confirmation email and the receipt of the reply requested therein in order to be able to prove the registration process in accordance with the legal requirements. This includes storing the time of registration and confirmation as well as the IP address. Changes to your stored data are also logged. If you have given us your consent, we will create a profile of your usage data after your registration in order to provide you with targeted content. The type of data processing is described in more detail below.
Evalanche uses tracking pixels. This allows us to recognize whether and when an information offer has been opened by you or not. As part of this retrieval, technical information, such as information about the browser and your system, the end device used and the mail client, as well as your IP address and the time of retrieval, is initially collected. The statistical surveys also include determining which links are clicked and whether the delivery of the e-mails was successful. In Evalanche, this information is assigned to the corresponding user profiles in order to enable a personalized evaluation of the recipient’s actions. The legal basis for processing is your consent to the information offer and personal tracking.
Depending on your consent to personal tracking, Evalanche uses either only necessary cookies (type 5) or additional functional cookies (type 1-3).

• Type 1 = Tracking of recipients using the aforementioned objects and tracking data (duration of storage: 24 months)
• Type 2 = Tracking (anonymous history) (duration of storage: 24 months)
• Type 3 = Transfer of conversion information (duration of storage: 30 days)
• Type 5 = System cookie to identify the user as part of session management (duration of storage: deleted after the browser session ends).
  The data you provide us with for the purpose of subscribing to our information service will be stored by us until you unsubscribe and deleted from both our servers and Evalanche’s servers after you unsubscribe from the information service. Data stored by us for other purposes (e.g. e-mail addresses for inquiries) remain unaffected by this.
  You can revoke your consent to the storage of your personal data and its use for obtaining our information offer at any time with effect for the future. We provide a link for this purpose in every e-mail message. For more information, please refer to Evalanche’s privacy policy at: https://www.sc-networks.de/datenschutz/

Google

Google Analytics
On the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our website within the meaning of Art. 6 para. 1 lit. f. GDPR), we use Google Analytics, a web analysis service of Google LLC (“Google”). Google uses cookies. The information generated by the cookie about the use of the website by the user is usually transmitted to a Google server in the USA and stored there. Google will use this information on our behalf to evaluate the use of our website by users, to compile reports on the activities within this website and to provide us with further services associated with the use of this website and the use of the internet. Pseudonymous user profiles can be created from the processed data. We only use Google Analytics with activated IP anonymization. This means that the IP address of the user is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by the user’s browser will not be merged with other Google data. Users can prevent the storage of cookies by setting their browser software accordingly; users can also prevent the collection of data generated by the cookie and related to their use of the website by Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de. You can find further information on data use by Google, settings and opt-out options on the Google websites: https://www.google.com/intl/de/policies/privacy/partners (“Data use by Google when you use our partners’ websites or apps”), http://www.google.com/policies/technologies/ads (“Data use for advertising purposes”), http://www.google.de/settings/ads (“Manage information that Google uses to show you advertising”).

Google Re/Marketing Services
We use on the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our website within the meaning of Art. 6 para. 1 lit. f. GDPR) the marketing and remarketing services (“Google Marketing Services” for short) of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, (“Google”). Google marketing services allow us to display advertisements for and on our website in a more targeted manner in order to present users only with advertisements that potentially match their interests. If, for example, a user is shown ads for products that they have been interested in on other websites, this is referred to as “remarketing”. For these purposes, when our and other websites on which Google marketing services are active are called up, a code from Google is executed directly by Google and (re)marketing tags (invisible graphics or code, also known as “web beacons”) are integrated into the website. With their help, an individual cookie, i.e. a small file, is stored on the user’s device (comparable technologies can also be used instead of cookies). The cookies can be set by various domains, including google.com, doubleclick.net, invitemedia.com, admeld.com, googlesyndication.com or googleadservices.com. This file records which websites the user has visited, what content they are interested in and which offers they have clicked on, as well as technical information on the browser and operating system, referring websites, time of visit and other information on the use of the website. The IP address of users is also recorded, whereby we inform Google Analytics that the IP address is shortened within member states of the European Union or in other contracting states of the Agreement on the European Economic Area and only in exceptional cases is it transmitted in full to a Google server in the USA and shortened there. The IP address is not merged with the user’s data within other Google offers. Google may also combine the aforementioned information with information from other sources. If the user subsequently visits other websites, they can be shown ads tailored to their interests. User data is processed pseudonymously as part of Google marketing services. This means that Google does not store and process the user’s name or email address, for example, but processes the relevant data in relation to cookies within pseudonymous user profiles. This means that, from Google’s point of view, the ads are not managed and displayed for a specifically identified person, but for the cookie owner, regardless of who this cookie owner is. This does not apply if a user has expressly permitted Google to process the data without this pseudonymization. The information collected by Google marketing services about users is transmitted to Google and stored on Google’s servers in the USA. The Google marketing services we use include the online advertising program “Google AdWords”. In the case of Google AdWords, each AdWords customer receives a different “conversion cookie”. Cookies can therefore not be tracked via the websites of AdWords customers. The information collected with the help of the cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. AdWords customers find out the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information with which users can be personally identified. We can integrate third-party advertisements on the basis of the Google marketing service “AdSense”. AdSense uses cookies to enable Google and its partner websites to serve ads based on users’ visits to this website or other websites on the internet. We may also use the “Google Tag Manager” to integrate and manage Google analysis and marketing services on our website. Further information on the use of data for marketing purposes by Google can be found on the overview page: https://www.google.com/policies/technologies/ads, Google’s privacy policy is available at https://www.google.com/policies/privacy. If you wish to object to interest-based advertising by Google marketing services, you can use the settings and opt-out options provided by Google: https://www.google.com/ads/preferences.

Integration of third-party services and content:
We use content or service offers from third-party providers within our website on the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our website within the meaning of Art. 6 para. 1 lit. f. GDPR) in order to integrate their content and services, such as videos or fonts (hereinafter uniformly referred to as “content”). This always presupposes that the third-party providers of this content are aware of the IP address of the user, as they would not be able to send the content to their browser without the IP address. The IP address is therefore required to display this content. We endeavor to only use content whose respective providers only use the IP address to deliver the content. Third-party providers may also use pixel tags (invisible graphics, also known as “web beacons”) for statistical or marketing purposes. Pixel tags can be used to analyze information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user’s device and may contain, among other things, technical information about the browser and operating system, referring websites, time of visit and other information about the use of our website, as well as being linked to such information from other sources.

Contact external data protection officer:
PFALZWERKE AKTIENGESELLSCHAFT
Data Protection Officer
Wredestraße 35
67059 Ludwigshafen
E-mail: datenschutz@pfalzwerke.de

Cookie policy
This cookie policy was created and updated by the company CookieFirst.com.

Click here for the privacy policy for contract customers available for download as a pdf file
Click here for the privacy policy with legal notice for our social media profiles on social media platforms.