Table of contents

1. General information
2. Website
3. Cookies
4. Social media
5. Data processing in the application process
6. Data protection informationen for visitors

1. General information

Controller responsible for data processing
Responsible for the processing of personal data within the meaning of the EU General Data Protection Regulation (GDPR):

Münch Chemie International GmbH
Viernheimer Straße 70-76
69469 Weinheim – Germany
Phone: +49 6201 9983-0
E-mail: This email address is being protected from spambots. You need JavaScript enabled to view it.
Homepage: https://www.muench-chemie.com/de/

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses, etc.).

Contact details of the data protection officer:
PROLIANCE GmbH
Dominik Fünkner
Data Protection Officer
Leopoldstr. 21
80802 München - Germany
Phone: +49 89250039227
E-Mail: This email address is being protected from spambots. You need JavaScript enabled to view it.
Homepage: www.proliance.ai

Personal data
Personal data will only be processed by us if there is a legal basis for this or if you have given us your consent.
If you contact us, you consent to the processing of your data for processing your enquiry and for further correspondence.

Duration of storage
Your data will be stored only for as long as necessary to process the relevant transaction. Mandatory statutory provisions, in particular statutory retention periods, remain unaffected by this.
Please also note the information on data protection in our online services.

Rights of data subjects
Right to lodge a complaint with the competent supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.
The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

In any case, you can contact:

The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg
Heilbronner Straße 35
70191 Stuttgart - Germany 

Barrier-free access via a ramp (navigation address):
Räpplenstraße 2
70191 Stuttgart - Germany

Phone: +49 711/61 55 41 – 0
E-mail: This email address is being protected from spambots. You need JavaScript enabled to view it.
Homepage: https://www.baden-wuerttemberg.datenschutz.de/

Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a commonly used, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.

Information
Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, the categories of personal data that are processed; their origin and recipients and the purpose of the data processing, the planned duration of the storage of the personal data concerning you or, if specific information on this is not possible, criteria for determining the storage period; the existence of a right to rectification or erasure of the personal data concerning you, a right to restriction of processing by the controller or a right to object to this processing and the existence of a right of appeal to a supervisory authority.

Transmission
You have the right to request information as to whether the personal data concerning you will be transferred to a third country or to an international organisation. In this context, you may request to be informed of the appropriate safeguards in accordance with Art. 46 GDPR in connection with the transfer.

Correction
You have the right to request that the controller rectify and/or complete your personal data if it is incorrect or incomplete. The controller must make the correction without delay.

Cancellation
According to the so-called ‘right to be forgotten’, you generally have the right to demand the deletion of your personal data, unless there is a retention obligation. However, this right is not guaranteed without exception. We remain authorised to process your personal data if such processing is necessary to comply with our legal obligations or if we need it to pursue our own legal claims.

Restriction of processing
Under certain circumstances, you are also entitled to demand the restriction of the use or the manner of use of your personal data. You have this right in particular if: (a) the data is inaccurate; (b) the processing is unlawful and you oppose the erasure; (c) we no longer need the data, but you require the data for the establishment, exercise or defence of legal claims. The consequence of restricting processing is that we may continue to store your data, but may not use it. We keep a list of those persons who have exercised the right to restrict processing in order to be able to ensure this restriction.

Contradiction
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6 para. 1 lit. e or f GDPR, including profiling based on those provisions.
The controller will no longer process the personal data concerning you unless the controller can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims.
If the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing, this also applies to profiling insofar as it is related to such direct marketing.
If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.
You have the option, in connection with the use of information society services – notwithstanding Directive 2002/58/EC – to exercise your right to object by means of automated procedures using technical specifications.

Notification
If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves to be impossible or involves a disproportionate effort.
You have the right to be informed by the controller about these recipients.
You can contact us at any time at the address provided in the imprint if you have any questions about this or other issues relating to personal data.

Objection to advertising e-mails
The use of contact information published in accordance with the imprint obligation to send unsolicited advertising and information materials is hereby prohibited. The operators of this website expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, such as spam e-mails.

2. Website

Usage data
Every time our website is accessed and every time a file is retrieved, general data about this process is automatically stored in a log file. This data is stored exclusively for system-related and statistical purposes (on the basis of Art. 6 para. 1 lit. b GDPR) and, in exceptional cases, to report criminal offences (on the basis of Art. 6 para. 1 lit. e GDPR).
The data will not be passed on to third parties or otherwise analysed unless there is a legal obligation to do so (Art. 6 para. 1 lit. e GDPR).
In detail, the following data record is stored for each retrieval:

• Name of the retrieved file
• Date and time of the retrieval
• Amount of data transferred
• Message as to whether the retrieval was successful
• Description of the type of web browser used
• Operating system used
• The previously visited page
• Provider
• Your IP address

SSL and TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from ‘http://’ to ‘https://’ and by the lock symbol in your browser line.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Server log files
The website provider automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

• Browser type and browser version
• Visited page on our domain
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Date and time of the server request
• IP address

This data is not merged with other data sources.
Temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.
The server log files are stored to ensure the functionality of the website. Furthermore, the data helps us to optimise the website and to ensure the security of our information technology systems. The data is not analysed for marketing purposes in this context.
These purposes also constitute our legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f GDPR.
The basis for data processing is therefore Art. 6 para. 1 lit. f GDPR.

Contact form and contact via email
If you contact us via our contact form or by email, the personal data you provide will be processed for the purpose of handling your inquiry and any follow-up questions. This includes, in particular, the contact details you provide and the content of your message.
When using the contact form, technical data (e.g., IP address, date and time of the inquiry, browser type, and language settings) may also be processed to the extent necessary for providing the form, ensuring system security, and preventing misuse.
Your data is processed on the basis of Art. 6(1)(b) GDPR where your inquiry is related to the initiation or performance of a contract. In all other cases, the processing is based on our legitimate interest in the efficient handling of inquiries addressed to us pursuant to Art. 6(1)(f) GDPR.
As a general rule, your data will not be disclosed to third parties unless such disclosure is necessary to process your inquiry, we are legally obliged to do so, or you have expressly consented to the disclosure. Where external service providers are engaged as data processors, such processing is carried out on the basis of Art. 28 GDPR.
The data you submit will be deleted as soon as the purpose for which it was stored no longer applies and provided that no statutory retention obligations prevent its deletion. Statutory retention and documentation obligations remain unaffected.
Any additional technical data collected will generally be deleted no later than seven days after collection, unless a longer retention period is required due to security-related incidents.

Use of Captchas

Math Captcha
To protect our forms against abusive automated entries, we use a math CAPTCHA . Users must solve a simple arithmetic problem . This processing is based on Article 6 Paragraph 1 Letter f GDPR (legitimate interest), as it serves IT security and spam prevention.

Google reCAPTCHA
On our websites we integrate the service “Google reCAPTCHA” from Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA.

In the European Union (EU) and the European Economic Area (EEA), the service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Description of data processing and purpose

This service allows us to verify whether data entry on our website (e.g., in a contact form) is done by a human or by an automated program (bot). Such programs are used to cripple websites with excessive requests, to place spam messages via order or contact forms, or to gain access to the system through registration forms.

Since the service is provided by Google and loaded from its servers when the page is accessed, the usage data technically required for accessing the page is also transmitted:

• IP address of the requesting entity (router or mobile device),
• Date and time of the request,
• Name of the requested file,
• Website from which a file was requested (referrer URL),
• Access status,
• Web browser and operating system used,
• Language used.

To protect the websites, the service analyzes the behavior of the website visitor based on various characteristics and evaluates the behavior with a probability value to determine whether it is more likely a human input or that of a bot.

Various pieces of information can be evaluated and data processed for analysis, such as...

• If applicable, the type of interaction (mouse movement, keyboard strokes)
• possibly speed of interaction,
• possibly time spent on a website,
• If applicable, data about the device used and its settings (language settings, location, browser settings, etc.)
• Pseudonymous user identification number from cookies and similar technologies.

The data collected during the analysis will be forwarded to Google.

Cookies and similar technologies, especially JavaScript, may be used to store and read data on your device. Further details can be found under "Cookies".

The purpose of data processing is to protect our web forms from input by bots and thus ensure the smooth and secure operation of the website and the connected systems.

Legal basis for data processing
The legal basis for the integration and use of the service is your consent, provided you have given it via our consent management platform.

The use of cookies and similar technologies is based on Section 25 Paragraph 1 of the German Telemedia Act (TDDG). Subsequent data processing is based on Article 6 Paragraph 1 Sentence 1 Letter a of the GDPR.

Your consent is voluntary and can be withdrawn at any time with effect for the future. To withdraw your consent, please use the button at the bottom right of the website to revisit the consent management platform and change your settings.

Recipient
When using this service, the data collected via our websites will be transmitted to the following recipients:

• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland,
• Google LLC, 1600 Amphitheater Parkway, Mountain View, California 94043, USA.

Further information on how the service provider handles personal data can be found at https://policies.google.com/privacy?hl=en.

Data processing in third countries
Your data will be transferred to recipients in third countries. For data transfers to the USA, the EU Commission has issued an adequacy decision regarding companies certified under the EU-US Data Privacy Framework. Google LLC is certified under the EU-US Data Privacy Framework. The data transfer is therefore based on Article 45(1) GDPR.

Storage duration
By integrating this service into our websites, data is transmitted to the recipients mentioned above and processed there for as long as necessary to achieve the stated purposes. The data processed by the service and made available to us is not stored in our own systems beyond this.

3. Cookies

Data processing and respective legal basis
Some of the Internet pages use so-called cookies. Cookies do not harm your computer and do not contain viruses. Cookies are used to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.
Most of the cookies we use are so-called ‘session cookies’. They are automatically deleted at the end of your visit. Other cookies remain stored on your end device until you delete them. These cookies allow us to recognise your browser on your next visit.
Cookies that are necessary to carry out the electronic communication process or to provide certain functions that you have requested (e.g. shopping basket function) are stored on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimised provision of its services. If other cookies (e.g. cookies for analysing your surfing behaviour) are stored, these are treated separately in this privacy policy.
You can now control the cookie settings centrally via the so-called ‘cookie consent solution’. When you visit our website for the first time, you will be actively asked for your consent to the use of cookies on our website and can give or withdraw this consent. You can also change or withdraw your consent at any time during your visit to our website using the red box at the bottom left. You can also separately accept and deactivate different types of cookies, including performance cookies.

Cookie list

Our website uses cookies, which are detailed in the cookie consent banner and where consent is required.
The following cookies are mentioned there:

External Services Overview

4. Social Media

We maintain profiles, appearances or pages on the following social media platforms:

Different responsibilities and roles
Depending on how the platform operators and we as the site operator are involved in the processing of your personal data, the respective responsibility or role differs.
For example, we may be jointly responsible with the platform operator or the platform operator may be solely responsible.

Shared responsibility with platform operators
Jointly responsible
There is a joint responsibility between us and the following platform operators:

As the site operator, we are jointly responsible with the providers of the respective platform for the processing of your personal data in connection with your visit to the presence, profile, page or fan page on the platforms if the platform operators provide aggregated information on visitors to our profiles, presences, pages or fan pages (e.g. so-called “insights” or “analytics”).
In the case of joint controllership, we have concluded agreements with the platform operators in accordance with Art. 26 GDPR on joint controllership for the processing of your personal data (e.g. Page Controller Addendum or Joint Controller Addendum).

This agreement specifies the data processing operations for which we or the respective platform operator are responsible. You can view these agreements under the following links:

Further information on data processing by the platform operators can be found in their privacy policies:

Contacting the data protection officers of the platform operators
You can contact the data protection officers of the platform operators here:

Data processing under joint responsibility
Accessing and storing information in terminal equipment
When you access our profiles on the aforementioned platforms, cookies and similar technologies are used on your device by the platform operator to store data on your device or to read data from it. This access or storage may involve further processing of personal data within the meaning of the GDPR.
In cases where such access to information or such storage of information is absolutely necessary for the technically error-free provision of the services, this is done on the basis of Section 25 (1) sentence 1, para. 2 no. 2 Telemedia Act (TDDDG). Connection data processing may be carried out on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR.
In cases in which such a process serves other purposes (e.g. the needs-based design of our website), this is only carried out on the basis of Section 25 (1) Telemedia Act (TDDDG) with your consent in accordance with Art. 6 (1) sentence 1 lit. a GDPR. Consent can be revoked at any time for the future. The provisions of the GDPR and the German Federal Data Protection Act (BDSG) apply to the processing of your personal data.
Further information on the use of cookies and similar technologies, as well as their legal basis, can be found in the respective privacy policy of the platform operator. Links to the respective privacy policies can be found above. If you have any further questions, please contact the operator of the respective social media platform directly.

Data processing for advertising and market research purposes
Generally, personal data on our social media profile is primarily processed for market research and advertising purposes of the platform operator. Insofar as the data collection also takes place directly on our social media profile, we participate in the data processing of the platform operator and are therefore jointly responsible with the platform operator in this respect.
During data processing, cookies and similar technologies are used that enable the platform operator to recognize you when you visit a social media profile. For members of the social media platform, the platform operator also carries out a comprehensive analysis of your interactions on the platform (clicks, comments and likes) and processes the information you provide to the platform operator, such as your master data, your profile picture or name. In particular, demographic information (age, gender, country, industry, profession, etc.) from your own member profile may also be processed.
The collected data can be used to create user profiles. These are then used by the platform operator to place advertisements inside and outside the platform that presumably correspond to your interests.
Although we do not have direct access to the data processed by the platform operator, we also benefit from this data processing by placing corresponding advertisements inside or outside the platforms based on the target groups identified by the platform operator.
The legal basis for the processing of your personal data is your consent given to the platform operator pursuant to Art. 6 para. 1 lit. a GDPR.
Please note that we have no influence on the data collection and further processing under the responsibility of the platform operator. As a result, we cannot provide any information about the extent. Location, and duration of data storage by the platform operator.
Further information on this can be found in the data protection information of the respective provider.

Data processing in the context of “Insights” or “Analytics”
In addition, your data is processed jointly responsible in connection with so-called “Page Insights” or “Page Analytics”.
“Page Insights” or “Page Analytics” are analysis functions provided by the platform operator, by means of which the master data processed by you, in particular demographic data and the data on your interactions with our profile, are collected jointly by the platform operator and us.
The platform operator then analyses this data and creates summarized (so-called aggregated data) for us, from which we can see which demographic target group has visited our profile and how our profile was used by them.
In this respect, we also have no direct access to the data processed by the platform operator. This data is only made available to us by the platform operator in aggregated form. This means that we cannot recognize individual visitors or their interactions from the aggregated data.
We then use this aggregated data to tailor our social media profile to the target group and generally to optimize it in relation to the aforementioned advertising purposes (increasing the reach and awareness of our profile and evaluating the success of marketing campaigns).
The legal basis for the processing of your personal data is your consent given to the platform operator pursuant to Art. 6 para. 1 lit. a GDPR.
Please note that we have no influence on the data collection and further processing under the responsibility of the platform operator. As a result, we cannot provide any information about the extent to which, where and for how long the data is stored by the platform operator.
Further information on this can be found in the data protection information of the respective provider.

Data processing based on consent
If you are asked by the respective platform operator for consent to processing for a specific, common purpose, the legal basis for processing is Art. 6 para. 1 lit. a., Art. 7 GDPR. Any consent given can be revoked at any time with effect for the future.

Recipients and data transfer to third countries
If we pass on personal data to the operators of social media platforms, the latter are recipients of the data within the meaning of Art. 4 No. 9 GDPR.

When you visit our social media profiles, your data may also be processed in countries outside the European Union (EU) and the European Economic Area (EEA) in third countries, in particular in the USA.
For data transfers to the USA, there is an adequacy decision of the EU Commission pursuant to Art. 45 para. 1 GDPR with regard to companies with certification under the EU-U.S. Data Privacy Framework, which can be viewed at the following link: Data protection adequacy for non-EU countries.

If your data is transferred to other third countries for which no adequacy decision exists, there is a risk that the authorities there may access your data for security and surveillance purposes without you being informed or having the right to appeal.
To ensure an adequate level of data protection when transferring your data to the third country, standard data protection clauses of the European Commission are concluded in accordance with Art. 46 para. 2 lit. c GDPR. They oblige the recipient of the data to process it in accordance with the European level of protection.
If the standard data protection clauses are not sufficient to guarantee the level of protection, additional technical, contractual or organizational measures will be implemented to secure data transmission. We also regularly review and assess whether these additional measures continue to ensure an adequate level of data protection or whether further additional measures may need to be taken.

Exercising your rights in the event of joint responsibility
Your rights as a data subject of data processing
If, as a visitor to the site, you would like to exercise your rights (information, correction, cancellation, restriction, data portability, complaint to the supervisory authority, objection or revocation), you can contact both the platform operator and us.

Responsibility of the platform operators
If your personal data is processed by one of the operators of social media platforms listed below, this processing is the responsibility of the platform operator within the meaning of Art. 7 No. 4 GDPR.

We have no influence on data processing by the platform operators. For further information, please check the privacy policy of the respective platform operator:

For the assertion of your rights as a data subject, we would like to point out that these can be asserted most effectively with the respective providers. Only they have access to the data collected from you. Should you nevertheless require assistance, please feel free to contact us at any time.

Our own responsibility
We are solely responsible for the following data processing via our social media profiles.
Data processing through the operation of the social media profile
When you visit or interact with our social media profile, we process your personal data.
This may be information that you actively provide (comments, likes and information that you make publicly available, such as your profile picture or name). Depending on the provider and your settings on the provider's platform, we may also be informed about who has accessed our profile on the platform.
The legal basis for the processing of personal data when operating our social media profile is Art. 6 para. 1 sentence 1 lit. f GDPR.
The legitimate interest lies in addressing visitors with advertising and in providing an effective opportunity for communication and interaction with our company on the social media platform.

Data processing when contacting us
We collect personal data ourselves if you contact us, for example, via the contact form or a messenger function on the respective platform.
Which data is collected depends on the information you provide and the contact details you provide or share. This data is stored by us for the purpose of processing the request and in the event of follow-up questions.
The legal basis for processing the data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.
Your data will be deleted after final processing of your request, provided that there are no legal storage obligations to the contrary. We assume that processing has been completed when it can be inferred from the circumstances that the matter in question has been conclusively clarified.

Data processing for the fulfilment of a contract
If your contact via a social network or other platform is aimed at concluding a contract for the delivery of goods or the provision of services with us, we process your data to fulfil the contract or to carry out pre-contractual measures or to provide the desired services.
The legal basis for the processing of your data in this case is Art. 6 para. 1 sentence 1 lit. b GDPR.
Your data will be deleted if it is no longer required for the performance of the contract or if it is clear that the pre-contractual measures will not lead to the conclusion of a contract in accordance with the purpose of the contact.
Please note, however, that it may be necessary to store personal data of our contractual partners even after conclusion of the contract in order to comply with contractual or legal obligations.

Data processing based on consent
If we ask you for your consent to processing for a specific purpose, the legal basis for processing is Art. 6 para. 1 lit. a., Art. 7 GDPR. Any consent given can be revoked at any time with effect for the future.

5. Data processing in the application process

Description of data processing and purpose
In accordance with the provisions of Articles 13, 14 and 21 of the General Data Protection Regulation (GDPR), we hereby inform you about the processing of personal data transmitted by you as part of the application process and any personal data collected by us and your rights in this regard. To ensure that you are fully informed about the processing of your personal data as part of the application process, please take note of the following information.

Legal basis for data processing
We process your personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG), insofar as this is necessary for the decision on the establishment of an employment relationship with us. The legal basis for this is Art. 88 GDPR in conjunction with Section 26 BDSG for the purposes of the employment relationship, if this is necessary for the decision on the establishment of an employment relationship.
Furthermore, we may process your personal data if this is necessary to fulfil legal obligations (Art. 6 para. 1 lit. c GDPR) or to defend or assert legal claims. The legal basis for this is Art. 6 para. 1 lit. f GDPR. The legitimate interest is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG).
If you grant us your express consent to process personal data for specific purposes, the legality of this processing is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR, Section 26 para. 2 BDSG. Any consent given can be revoked at any time with effect for the future.
If there is an employment relationship between you and us, we may, in accordance with Art. 88 GDPR in conjunction with Section 26 BDSG, further process the personal data already received from you for the purposes of the employment relationship, insofar as this is necessary for the performance or termination of the employment relationship or for the exercise or fulfilment of the rights and obligations of the representation of employees' interests arising from a law or a collective agreement, a works or service agreement (collective agreement).

Source
We process personal data that we receive from you by post or e-mail when you contact us or submit your application.

Recipients of the data
We only pass on your personal data within our company to those departments and persons who need this data to fulfil contractual and legal obligations or to implement our legitimate interest.
Otherwise, data will only be passed on to recipients outside the company if this is permitted or required by law, if the transfer is necessary to fulfil legal obligations or if we have your consent.

Data processing in third countries
A transfer to a third country is not intended.

Duration of data storage
We store your personal data for as long as this is necessary for the decision on your application. Your personal data or application documents will be deleted no later than six months after the end of the application process (e.g. the announcement of the rejection decision), unless longer storage is legally required or permitted. We only store your personal data beyond this if this is required by law or in a specific case for the assertion, exercise or defence of legal claims for the duration of a legal dispute.
In the event that you have consented to your personal data being stored for a longer period, we will store it in accordance with your declaration of consent.
If the application procedure is followed by an employment, training or internship relationship, your data will, if necessary and permissible, initially continue to be stored and then transferred to the personnel file.

Necessity of the provision of personal data
The provision of your personal data as part of the application process is voluntary. However, we can only decide to establish an employment relationship or establish an employment relationship with you if you provide the personal data that is required to complete the application.

Your rights
Every data subject has the right of access under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR, the right to notification under Art. 19 GDPR and the right to data portability under Art. 20 GDPR.
In addition, you have the right to lodge a complaint with a data protection supervisory authority in accordance with Art. 77 GDPR if you believe that your personal data is being processed unlawfully. The right to lodge a complaint is without prejudice to any other administrative or judicial remedy.
If the processing of data is based on your consent, you are entitled to withdraw your consent to the use of your personal data at any time in accordance with Art. 7 GDPR. Please note that the revocation only takes effect for the future. Processing that took place before the withdrawal is not affected. Please also note that we may have to retain certain data for a certain period of time in order to comply with legal requirements.

Right to object:
Insofar as your personal data is processed in accordance with Art. 6 para. 1 lit. f GDPR to safeguard legitimate interests, you have the right to object to the processing of this data at any time in accordance with Art. 21 GDPR for reasons arising from your particular situation. We will then no longer process this personal data unless we can demonstrate compelling legitimate grounds for the processing. These must outweigh your interests, rights and freedoms, or the processing must serve the assertion, exercise or defence of legal claims.
To protect your rights, you can contact us using the contact details provided in section 1.

6. Data protection information for visitors

Description of data processing and purpose
In accordance with the provisions of Articles 13, 14 and 21 of the General Data Protection Regulation (GDPR), we hereby inform you about the processing of your personal data and your rights under data protection law in this regard. Which data is processed in detail and how it is used depends largely on the reason for your visit. To ensure that you are fully informed about the processing of your personal data in the course of your visit, please take note of the following information.

Purposes and legal bases of processing
We process your personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG), insofar as this is necessary to document your visit.
If you give us your express consent to process personal data for specific purposes, the lawfulness of this processing is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR. Any consent given can be revoked at any time with effect for the future.
Your personal data is processed to protect our legitimate interests and to defend and assert legal claims in accordance with Art. 6 para. 1 lit. f GDPR. We have an interest in knowing which persons are in our company, when and for what reason, in order to ensure security in our company and to be able to prosecute any criminal offenses.

Categories of personal data
We only process data that is related to your visit. This may be general data about you or people in your company (name, address, contact details, etc.) as well as any other data that you transmit to us during your visit.

Data sources
We process personal data that you provide during your visit.

Recipients of the data
We only share your personal data within our company to those departments and persons who need this data to document your visit or to implement our legitimate interest.
Otherwise, data will only be passed on to recipients outside the company if this is permitted or required by law, if the transfer is necessary to process your visit, if we have your consent or if we are authorized to provide information. Under these conditions, recipients of personal data may be, for example:

• Public bodies and institutions (e.g. public prosecutor's office, police, supervisory authorities, tax office) if there is a legal or official obligation
• Recipients to whom the disclosure is directly necessary for the assertion of any damages (e.g. lawyers, courts)

Transfer to a third country
A transfer to a third country is not intended.

Duration of data storage
Your data will be deleted as soon as it is no longer required for the above-mentioned purpose, but at the latest after 48 hours. Deletion takes place in particular when we have been able to carry out any necessary investigations for the prosecution of criminal offenses.
In addition, we are subject to various retention and documentation obligations, including those arising from the German Commercial Code (HGB) and the German Fiscal Code (AO). The retention and documentation periods stipulated there are two to ten years.
Finally, the storage period also depends on the statutory limitation periods, which, for example, according to §§ 195 ff. of the German Civil Code (BGB), are generally three years, but in certain cases can be up to thirty years.

Necessity of the provision of personal data
The provision of personal data for the processing of your visit is voluntary. However, we can only process your visit if you provide the personal data required to document your visit and ensure security in our company.

Your rights
Every data subject has the right of access under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR, the right to notification under Art. 19 GDPR and the right to data portability under Art. 20 GDPR.
In addition, you have the right to lodge a complaint with a data protection supervisory authority in accordance with Art. 77 GDPR if you believe that your personal data is being processed unlawfully. The right to lodge a complaint is without prejudice to any other administrative or judicial remedy.
If the processing of data is based on your consent, you are entitled to withdraw your consent to the use of your personal data at any time in accordance with Art. 7 GDPR. Please note that the revocation only takes effect for the future. Processing that took place before the withdrawal is not affected. Please also note that we may have to retain certain data for a certain period of time in order to comply with legal requirements.

Right to object:
Insofar as your personal data is processed in accordance with Art. 6 para. 1 lit. f GDPR to safeguard legitimate interests, you have the right to object to the processing of this data at any time in accordance with Art. 21 GDPR for reasons arising from your particular situation. We will then no longer process this personal data unless we can demonstrate compelling legitimate grounds for the processing. These must outweigh your interests, rights and freedoms, or the processing must serve the assertion, exercise or defence of legal claims.
To protect your rights, you can contact us using the contact details provided in section 1.