Privacy Policy
Data privacy

Privacy notice website

This privacy notice informs you about the processing of personal data in connection with the use of the Kömmerling Aluminium website. Kömmerling Aluminium is a brand of profine GmbH, which is the sole controller within the meaning of Art. 4 no. 7 GDPR. This privacy notice applies irrespective of the domains, platforms and devices used (e.g. desktop, mobile).


Personal data within the meaning of the General Data Protection Regulation (“GDPR”) means any information relating to an identified or identifiable natural person (“data subject”), such as name, address, e-mail address or IP address.
Unless otherwise defined, the terms used in this privacy notice correspond to the definitions set out in Art. 4 GDPR.


This privacy notice applies exclusively to the use of the Kömmerling Aluminium website as a marketing and information platform.

Who is responsible for data processing and whom can I contact?
Controller is:

profine GmbH
Zweibrücker Straße 200
66954 Pirmasens
+49 6331 56-0
+49 6331 56-2475
info@profine-group.com

 

You can reach our data protection officer at:

mip Consult GmbH

Rechtsanwalt Asmus Eggert

Data Protection Officer

Wilhelm-Kabus-Straße 9, 10829 Berlin

datenschutz@profine-group.com

What sources and data do we use?
 

We process personal data that we receive directly from you when you use our website or contact us, as well as personal data that is automatically transmitted by your browser when you access our website.


If you use the website for informational purposes only and do not actively provide data, we process only the personal data that your browser transmits to our servers. This data is technically necessary to display the website and to ensure stability and security. It includes in particular:

  • IP address
  • date and time of access
  • time zone difference to GMT
  • content of the request (accessed page)
  • HTTP status code
  • data volume transferred
  • referrer URL
  • operating system and interface
  • browser type, language and version

If you contact us via a contact form or by e-mail, we process the personal data you provide, such as:

  • title, first and last name
  • contact details (e-mail address, telephone number, address)
  • professional role or business affiliation
  • the content of your message

When using the contact form, additional technical data may be processed for the purpose of preventing misuse and spam (e.g. via Google reCAPTCHA). This may include in particular the IP address and user behavior data.

What do we process your data for (purpose of processing) and on what legal basis?
 
 

We process personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG) for the following purposes and on the basis of the following legal grounds:

Purposes
Legal Basis

Insofar as you have given us your consent to process personal data for certain purposes in particular for the use of statistical services (e. g. Google Analytics), this processing is lawful on the basis of your consent.

 

Consent may be withdrawn at any time. Please note that the withdrawal is only effective for the future. Processing that took place before the withdrawal is therefore not affected. You may withdraw your consent any time via consent management tool on our website.

Consent, Art. 6 para. 1 sentence 1 lit. a) GDPR

When contacting us by e-mail or telephone, your data will be processed for the purpose of handling the contact request and any related correspondence.
Art. 6 para. sentence 1 lit. b) GDPR or, where applicable, Art. 6 para. 1 sentence 1 lit. f) GDPR.

When you visit our website for the first time, you will be asked whether you also wish to accept non-essential cookies. If you consent to the use of non-essential cookies, this will allow us to analyze the use of our website. The use of statistical cookies (e. g. Google Analytics) is carried out exclusively on the basis of your consent.


To find out more about the cookies we use, including in particular how to manage and delete cookies, see the Cookies section below.

Consent, Art. 6 para. 1 sentence 1 lit. a) GDPR

We use cookies and similar technologies on our website. We store information on your device because this is absolutely necessary in order to make our website available to you, § 25 (2) No. 2 TDDDG. Data processing is carried out to protect our legitimate interest in accordance with Art. 6 (1) (f) GDPR in the secure and technically functional provision of the website.

 

When you visit our website for the first time, you will also be asked whether you consent to the setting of technically non-essential cookies and the use of similar technologies. Data collection and storage, as well as any subsequent data processing associated with this, only takes place on the basis of your express consent, Section 25 (1) TDDDG, Art. 6 (1) (a) GDPR.

 

If personal data is also processed by individual cookies or comparable technologies, processing is carried out either on the basis of Art. 6 (1) (a) GDPR (in the case of consent-based services, e.g. statistical services) or in accordance with Art. 6 (1) (f) GDPR in conjunction with § 25 (2) TDDDG (in the case of technically necessary services).

 

Further information on the use of cookies and similar technologies can be found under “Cookies and similar technologies.”

Storage of data on your device or access to data stored on your device, Art. 6 para. 1 sentence 1 lit. f) GDPR and § 25 TDDDG

We process your access data to protect the legitimate interests of us or of third parties. In particular, we pursue the following legitimate interests:

  • Ensuring IT security, in particular the security of the Website; we also store the IP address in the event that someone leaves behind illegal content
  • Advertising or market and opinion research, unless you have objected to the use of your data;
  • Assertion of legal claims and defence in legal disputes.

Within the framework of the balancing of interests for the protection of legitimate interests, Art. 6 para. 1 sentence 1 lit. f) GDPR

In addition, when using the contact form, personal data may be processed for the purpose of preventing misuse and spam (e.g. via Google reCAPTCHA).

Art. 6 para. 1 sentence 1 lit. f) GDPR

Who can access my data?
 

Within the organization, departments that need to know your data to fulfill our contractual and regulatory obligations can access your data.

 

In addition, processors (Art. 28 GDPR) engaged by us may also obtain access to data for the above-mentioned purposes. These are companies in the categories IT and hosting services as well as telecommunications services. If we use processors to provide our services, we take appropriate legal precautions and corresponding technical and organizational measures to ensure the protection of personal data in accordance with the relevant legal provisions.

 

A transfer of data to third parties will be made only within the scope of legal requirements. We will disclose your data to third parties only if this is required, e.g. under Art. 6 Para. 1 Sentence 1 lit. b) GDPR for contractual purposes or based on legitimate interests pursuant to Art. 6 Para. 1 Sentence 1 lit. f) GDPR in the economic and effective operation of our business operations.

 

If your inquiry cannot be answered by the company you contacted, it may be forwarded to the responsible company within the profine-group. In such cases, the respective group company acts as an independent controller within the meaning of Art. 4 No. 7 GDPR and processes your data on its own responsibility.

 

The transfer takes place exclusively for the purpose of processing your request.

 

If your inquiry cannot be fully processed by us or by an affiliated company within the profine group, it may also be forwarded to external partners, in particular local distribution partners or service providers, who are better suited to handle your request. The selection of such partners depends on the nature and location of your request.

 

In such cases, these recipients process your personal data as independent controllers within the meaning of Art. 4 no. 7 GDPR. The transfer is carried out solely for the purpose of responding to your inquiry and is based on Art. 6 (1) sentence 1 lit. b or lit. f GDPR.

 

In this context, personal data may also be transferred to countries outside the European Union or the European Economic Area. Such transfers are carried out in accordance with Art. 44 et seq. GDPR and are based on appropriate safeguards, in particular the EU-U.S. Data Privacy Framework pursuant to Art. 45 GDPR or, where applicable, standard contractual clauses pursuant to Art. 46 GDPR or other legally recognized transfer mechanisms.

 

In the case of purely informative use of the website, personal data is processed only by us and our hosting service providers.

How long will my data be retained?

 
Technical Access and Log Data
 

For security reasons (e.g. to investigate misuse or fraudulent activities), log file information is stored for a maximum period of 14 days and then deleted. whose further retention is necessary for evidentiary purposes is excluded from deletion until the relevant incident has been finally clarified.


Contact and Business Communication Data
 

Where necessary, we process and store personal data for the duration of our business relationship. This also includes data processed in the course of initiating a contractual relationship, for example by e-mail.


Statutory Retention Obligations
 

We are subject to statutory retention and documentation obligations arising, in particular, from the German Commercial Code (Handelsgesetzbuch – HGB) and the German Fiscal Code (Abgabenordnung – AO). The retention periods specified therein generally range from six to ten years.


Statistical Services (e.g. Google Analytics)
 

Personal data collected on the basis of your consent for statistical purposes is stored for the duration defined by the respective service.

In Google Analytics, the retention period is configured as follows: event data is stored for 2 months and user-level data for up to 14 months. Data is automatically deleted after expiry of the configured retention period.

You may withdraw your consent at any time via consent management tool.


Statutory Limitation Periods
 

In addition, storage periods are determined by statutory limitation periods, which pursuant to Section 195 et seq. of the German Civil Code (BGB) are generally three years, but may extend to up to thirty years in certain cases.


Storage in Connection with Data Subject Rights

 

If you exercise your rights as a data subject, we will store the information provided in this context for the duration of the applicable statutory limitation period, generally three years, pursuant to Section 31(2) no. 1 OWiG, Section 41(1) BDSG and Art. 83(5)(b) GDPR. This period may be extended if the limitation period is interrupted, for example due to inquiries by supervisory authorities.

Are data transferred to a third country or to an international organization?
 

As a rule, personal data is processed within the European Union. However, in individual cases, data may be transferred to countries outside the European Union or the European Economic Area, in particular where service providers or companies within our group are located outside the EU/EEA.

 

This applies in particular to the use of Google Analytics and other services provided by companies based in third countries (e.g. Google reCAPTCHA).

 

When transferring data to the USA, we ensure that the recipients of the data are certified under the EU-U.S. Data Privacy Framework pursuant to Art. 45 GDPR. If a recipient is not certified under the EU-U.S. Data Privacy Framework, the transfer will be based on EU standard data protection clauses pursuant to Art. 46 GDPR. If we base the data transfer on the EU standard data protection clauses, we will take additional security measures to protect your data and to achieve an adequate level of protection for your personal data. You have the option of receiving or viewing a copy of the EU standard data protection clauses.

 

Where data is transferred to recipients in the United States, this may entail residual risks, in particular potential access by U.S. authorities.

 

Transfers are carried out primarily on the basis of the adequacy decision of the European Commission (Art. 45 GDPR) or, where required, on the basis of appropriate safeguards pursuant to Art. 46 GDPR.

What are my data subject rights?

 

In accordance with Art. 15 GDPR, you have the right of access as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data. In this case, we will provide you with the stored personal data. You also have the right to the information specified in detail in Art. 15 para 1 GDPR. However, the aforementioned right is not unlimited; the limitations of the right can be found in particular in Art. 15 para 4 GDPR.


You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you and to completion of incomplete personal data in accordance with Art. 16 GDPR.


You have the right to obtain the erasure of personal data concerning you without undue delay acc. Art. 17 GDPR. The right to erasure (“right to be forgotten”) is not unrestricted. In particular, erasure cannot be demanded, if we need to process your personal data further in order to perform our contract, to fulfil a legal obligation or to assert, exercise or defend legal claims. The requirements and restrictions of the right to deletion are set out in detail in Art. 17 GDPR.


You have the right, in accordance with Art. 18 GDPR, to request that the processing of your personal data be restricted if one of the conditions of Art. 18 para 1 GDPR is met. In this case, we may continue to store this data, but may process it only under strict conditions. The conditions and restrictions of the right to restrict processing are set out in detail in Art. 18 GDPR.


Pursuant to Art. 20 GDPR, you have a right to data portability. You may request to receive the personal data provided by you, which we process in an automated process on the basis of the contract existing between us or your consent, in a structured, common and machine-readable format. In addition, you may request us to transmit this data directly to another responsible party, insofar as this is technically feasible. The requirements and restrictions of the aforementioned rights in detail can be found in Art. 20 para 3 and 4 GDPR.


You can withdraw your consent to the processing of your personal data at any time. Please note that the withdrawal only takes effect for the future and does not affect the legality of the processing carried out based on the consent up to the withdrawal.

Information about your right to object according to Art. 21 GDPR
 

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6 para 1 lit e GDPR (data processing in the public interest) and Art. 6 para 1 lit f GDPR (data processing based on balancing of interests); this also includes profiling under these provisions within the meaning of Art. 4 No. 4 GDPR.

 

If you object, we will no longer process your personal data, unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing serves the purposes of asserting, exercising or defending legal claims.

 

In individual cases, we process your personal data for direct marketing purposes. You have the right to object at any time to the processing of personal data concerning you for the purposes of such marketing; this also applies to profiling insofar as it is associated with such direct marketing. If you object to the processing for direct marketing purposes, we will no longer process your personal data for such purposes.

 

Objections do not require a particular form and no costs are incurred, other than the transmission costs according to the basic tariffs. If possible, any objection should be addressed to the above-mentioned address or email.

The above notifications and measures requested by you will be made available to you free of charge in accordance with Art. 12 para 5 GDPR.

 

You have a right to complain to a data protection supervisory authority if you are of the opinion that the processing of your personal data violates the GDPR, without prejudice to any other administrative or judicial remedy.

To what extent do you apply automated individual decision-making, including profiling?

 

In the context of accessing our website or in the context of contacting us by e-mail or telephone, we do not use any fully automated decision-making pursuant to Art. 22 GDPR. Should we use these procedures in individual cases, we will inform you about this separately if this is required by law. We do not process your data automatically with the aim of evaluating certain personal aspects (profiling) within the meaning of Art. 4 No. 4 GDPR.

Is there an obligation for me to provide data?

 

You are not legally obliged to provide personal data. However, certain technical data is required to use the website (e.g. for the provision of the website and IT security).

 

If you contact us, the provision of the data necessary to process your enquiry is necessary; otherwise, we will not be able to respond.

Cookies

 
General
 

We ourselves and service providers engaged by us process personal data on this website and use cookies in this context.

 

Cookies are stored in the user’s browser on the end device. They contain information that is stored in relation to a visited website. The cookie is either sent by the web server to the browser or generated in the browser by a script (JavaScript). During subsequent visits to this website, the web server can read this cookie information directly or transmit the cookie information to the server via a script on the website. Where cookies are set, they generally collect and process certain user information, such as browser information, device information and IP address. Some of these cookies are essential for the functionality of our website, while other cookies help us to improve our website by providing us with insights into how you use the website.

 

You can individually prohibit the storage of cookies via your browser settings (you can find out how to configure cookie handling on the help pages of your browser). Assistance on managing cookies in the most common browsers can be found at the following addresses:

Please note that disabling cookies may result in functional restrictions on this website.

 

We will inform you about the specific use of the above technologies and the scope of the information collected in each case in the following paragraphs.

Consent Management with Borlabs
 

To enable you to conveniently manage your consents, a consent banner is displayed when you visit our website for the first time. You are given the opportunity to obtain information about the use of cookies and comparable technologies and the processing of personal data on our website and to grant your consent to services requiring consent. In this context, the IP address, the opt-in and opt-out data, the referrer URL, the user agent, your user settings, a consent ID, as well as the time of consent and the type of consent are collected. Your consent settings are stored in a cookie on your end device / in web storage. The validity period of the cookie(s) is 60 days.

 

If you have given us your consent to set cookies and comparable technologies and to process your data, you may withdraw your consent at any time with effect for the future via the consent settings in the footer of our website.

The collection and storage of information on your end device is carried out in accordance with Section 25(2) no. 2 TDDDG. Any subsequent processing of personal data is carried out pursuant to Art. 6(1) sentence 1 lit. f GDPR on the basis of our legitimate interest in consent management.

Processing of personal data in the context of the use of external online

 

Google-Services
 

We use services provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) on our website.

 

When using the Google services listed below, the data collected in this context may be transferred to servers of Google LLC in the United States. Such transfers are carried out in accordance with the EU-U.S. Data Privacy Framework pursuant to Art. 45 GDPR or, where applicable, on the basis of standard contractual clauses pursuant to Art. 46 GDPR.

 

The collection and storage of data is carried out in accordance with Section 25(1) TDDDG, and the subsequent processing of personal data is carried out solely on the basis of your explicit consent pursuant to Art. 6(1) sentence 1 lit. a GDPR. You may revoke your consent at any time with effect for the future via the consent management tool on our website.

 

Further information on the processing of your data can be found in the sections below. Additional information on the processing of your data by Google is available in Google’s privacy policy.

Google Tag Manager
 

We use Google Tag Manager to integrate additional third-party services, such as Google Ads or Google Analytics. Google Tag Manager itself does not set any cookies; however, when loading the tool, a connection to Google’s servers may be established, whereby your IP address may be transmitted to Google. Data processing is carried out pursuant to Art. 6(1) sentence 1 lit. f GDPR on the basis of our legitimate interest in effective tag management.

Any services integrated via Google Tag Manager that require consent are only activated after you have given your consent.

Google Ads Conversion Tracking
We use the online advertising program “Google Ads” to place advertisements within the Google advertising network. In connection with this service, we use Google Ads Conversion Tracking in order to measure the success of our advertising campaigns and to enable fair calculation of advertising costs. In addition, we pursue the objective of displaying advertising that is relevant to you and making our website more attractive to you. For conversion tracking purposes, Google sets a cookie when a user clicks on an ad placed by Google. If the user subsequently visits certain pages of this website, Google and we can recognize that the user clicked on the ad and was redirected to this website. The following data is processed in connection with this service: the IP address, browser and device information, the referrer URL, the time of the visit, the cookie ID and general usage data, such as the ads clicked on and the web request. The information obtained via the conversion cookie is used to compile statistics. This allows us to learn the total number of users who clicked on our ad and were redirected to our website. We do not receive any information that allows users to be personally identified. The standard lifespan of Google Ads cookies is 30 days. The data is deleted as soon as it is no longer required for the processing purposes. Further information on Google’s use of data for advertising purposes can be found at: https://www.google.com/policies/technologies/ads.
Google Ads Remarketing

We use Google Ads Remarketing as part of Google Ads. The Google Ads Remarketing function enables us to specifically address users within the Google advertising network who have already interacted with our website.

For these purposes, when our website and other websites on which Google marketing services are active are accessed, a Google code is executed directly by Google and so-called (re)marketing tags (also referred to as “web beacons”) are integrated into the website. In addition, Google sets cookies in the browser of your end device, which enable interest-based advertising based on the websites you have visited by means of a pseudonymous cookie ID.

The following data is processed: the IP address, browser and device information, the referrer URL, the time of the visit, the cookie ID, the web request and general usage data, such as the pages visited. Google uses this data to create pseudonymous user profiles. The collected data is stored for up to 13 months.

Further processing of data only takes place if you have given Google your consent to link your internet and app browser history to your Google account and to use information from your Google account to personalize ads that you view on the web. If you are logged into Google during your visit to our website, Google will use your data together with Google Analytics data to create and define audience lists for cross-device remarketing.

You can opt out of personalized advertising at https://myadcenter.google.com/.

Google Tag Manager
 

We use Google Tag Manager to integrate additional third-party services, such as  Google Analytics. Google Tag Manager itself does not set any cookies; however, when loading the tool, a connection to Google’s servers may be established, whereby your IP address may be transmitted to Google. Data processing is carried out pursuant to Art. 6(1) sentence 1 lit. f GDPR on the basis of our legitimate interest in effective tag management.

 

Any services integrated via Google Tag Manager that require consent are only activated after you have given your consent.

Google Analytics
 

We use the web analytics service Google Analytics. On our behalf, Google collects information about the use of our website in order to evaluate it and to compile reports on website activity. For these purposes, Google sets cookies on our website that are stored on your end device.

 

In connection with Google Analytics, the following data is processed: the IP address, browser and device information, and the referrer URL. In addition, information about user behavior on the website is collected. Google creates pseudonymous user profiles.  The retention period is configured within Google Analytics as follows: event data is stored for 2 months and user-level data for up to 14 months.

 

For accesses originating from the European Union, IP address data is shortened prior to storage (IP anonymization). In Google Analytics 4, all data from devices located in the EU (based on the geographical location according to the IP address) is collected via EU-based domains and servers before being forwarded to Analytics servers for processing. Google’s Analytics servers are located in the United States.

 

In addition, we use the Google Analytics Remarketing function in order to display advertisements placed by us within the Google advertising network only to users who have already interacted with our website and shown an interest in our website. The collected usage data is transmitted to Google in order to tailor our advertising to specific products or services in which the user has expressed a potential interest (“remarketing”).

 

You can opt out of personalized advertising at myadcenter.google.com/.

Our social media pages

 

You can find us on social networks and platforms, so that we can also communicate with you there and inform you about our services.

 

 

We point out that your data may be processed outside the European Union / European Economic Area and that the data is usually processed for market research and advertising purposes. Profiles can be created from the usage behaviour and resulting interests of the users. These profiles can in turn be used, for example, to place advertisements within and outside the platforms that presumably correspond to the interests of the users. For this purpose, cookies may be stored on the computers of the users, in which the usage behaviour and the interests of the users are stored. Other data may also be stored in these usage profiles, especially if the users are members of the respective platforms and are logged in to them.

 

We only link to our company profiles on the respective social networks on our website. However, please note that when you click on a link to the social networks, data is transmitted to their servers. If you are logged in to the respective social network at this time with your username and password, the information that you have visited our company profile on the respective social network from our website will be transmitted there and the respective provider can store this information in your user account.

 

In principle, we have no influence on the data processing of the social networks. However, we receive statistics from them about the use and visits of our company profile in their social network (e.g. information about the number of views, interactions such as likes and comments as well as summarized demographic and other information or statistics). For more information about the data processed by the social networks, please see the respective privacy notices linked below.

 

Insofar as we receive your personal data in the context of our social media profiles (e.g. in the context of a communication), you are entitled to the rights mentioned in this privacy notice. You can address your requests regarding data processing within the scope of our company profiles to us via the contact data mentioned above.

 

If you also wish to exercise rights against the provider of the social network, the easiest way to do so is to contact the respective network directly. The network knows both the details of the technical operation of the platform and the associated data processing as well as the specific purposes of the data processing. The contact details can be found in the privacy notice linked below. We will also be happy to support you in exercising your rights, insofar as this is possible for us.

 

The legal basis for the linking and operation of our company profiles in social networks, including the receipt of statistical data (e.g. insights), is Art. 6 para. 1 sentence 1 lit. f GDPR based on our legitimate interest in corporate communication and public relations. The legal basis is also Art. 6 para 1 lit. b GDPR if we receive and process your data as part of a contract-related inquiry.

 

For information on the respective processing and the objection options, we refer to the privacy notice of the networks linked below:

  • Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland), We operate our Facebook page on the basis of a shared personal data processing agreement with Facebook – Privacy Information: https://www.facebook.com/about/privacy/ , Opt-Out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com.
  • Instagram (Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland), online photo and video sharing service, privacy information https://help.instagram.com/519522125107875/?helpref=hc_fnav
  • LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland), social network for maintaining existing and making new business contacts – privacy information https://www.linkedin.com/legal/privacy-policy , opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out .
  • Google YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), video portal – privacy information: https://policies.google.com/privacy, opt-out: https://adssettings.google.com/authenticated
  • Vimeo (Vimeo, Inc. 555 West 18th Street ,New York, New York 10011, Privacy@vimeo.com – Privacy Information (https://vimeo.com/).

Newsletter

 

With the following information, we inform you about our newsletter as well as the registration, dispatch and evaluation procedure and inform you about your rights of objection. If you subscribe to our newsletter, you agree to receive the newsletter and the described procedures.

 

Newsletter content: We send newsletters, e-mails and other electronic notifications with promotional information (hereinafter “newsletter”) only on the basis of the consent of the recipient or on the basis of a legal permission. If we specifically describe individual newsletters as part of the registration process, this description is decisive for the consent of a newsletter subscriber. If there is no separate description, you will receive information about our products, offers and promotions as well as information about our company in our newsletters.

 

Double-Opt-In: The registration for our newsletter takes place in the so-called Double-Opt-In procedure. This means that after registering for the newsletter, we will send you an e-mail in which we ask you to confirm your registration. This confirmation serves to ensure that only persons who have access to the specified e-mail address register for our newsletter. We log the registrations to the newsletter in order to be able to prove the registration process according to the legal requirements. This includes the storage of the registration and confirmation time, as well as the IP address. Changes to your data stored with the newsletter service provider are also logged.

 

The newsletter is sent using CleverReach, a service provided by CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany.

 

CleverReach processes the personal data on our behalf as a processor within the meaning of Art. 28 GDPR. Further information on data protection at CleverReach can be found at: https://www.cleverreach.com/en/privacy-policy/

 

According to its own information, CleverReach uses the data in pseudonymised form, i.e. without direct attribution to a specific person, to optimise and improve its own services. CleverReach does not use the data of our newsletter recipients to contact them itself or to pass the data on to third parties.

 

To subscribe to the newsletter, it is sufficient to provide your e-mail address. Optionally, we may ask for your name in order to address you personally in the newsletter.

 

The newsletters contain a so-called web beacon, i.e. a pixel-sized file that is retrieved from the server of the newsletter service provider when the newsletter is opened. Within the scope of this retrieval, technical information, such as information on the browser and your system, as well as your IP address and the time of the retrieval are initially collected. This information is used for the technical improvement of the services on the basis of the technical data or the target groups and your reading behaviour on the basis of their retrieval locations (which can be determined with the help of the IP address) or the access times. Statistical surveys also include determining whether newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to individual newsletter recipients. However, it is neither our intention nor that of the dispatch service provider to observe individual users. The evaluations serve us much more to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.

 

The dispatch of the newsletter and the measurement of its success are based on the consent of the recipients in accordance with Art. 6 Para. 1 Sentence 1 lit. a), Art. 7 GDPR in conjunction with § 7 Para. 2 No. 3 UWG or on the basis of the legal permission in accordance with § 7 Para. 3 UWG.

 

The logging of the registration process takes place on the basis of our legitimate interests pursuant to Art. 6 (1) sentence 1 lit. f) GDPR and serves as proof of consent to receive the newsletter.

 

You can unsubscribe from our newsletter at any time, i.e. revoke your consent. You will find a link to cancel the newsletter at the end of each newsletter. If users have only subscribed to the newsletter and cancelled this subscription, their personal data will be deleted.

Whistleblower system and complaints procedure

 

profine GmbH operates a whistleblowing system in accordance with applicable legal requirements.

 

Information on the processing of personal data in connection with the whistleblowing system can be found in the separate privacy notice available on the profine compliance website: www.profine-group.com/en/sustainability/#!/compliance

 

Third party providers that use cookies

 

Google Analytics


We use the web analytics tool “Google Analytics” from Google Ireland Limited (registration number: 368047), Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) hereinafter “Google”.

 

The web analysis service Google Analytics uses cookies. The information generated by the cookies about the use of our website is usually transferred to a Google server in the USA and stored there. There are corresponding risks associated with the processing of your data in the USA. By giving your consent via our cookie banner, you consent to the processing of your data in the USA, despite potential access by US authorities, Art. 49 para. 1 p. 1 lit. a GDPR.

 

Google processes the data for us in order to evaluate the use of our website by website visitors, to create reports about the activities within our website and to provide other services associated with the use of the website. In doing so, pseudonymous usage profiles of the website visitors are created from the processed data.

 

During your visit to the website, the following information is collected, among other things:

  • pages viewed,
  • the achievement of contact targets, such as contact requests or newsletter sign-ups,
  • Your use of our website, for example clicks and time spent on one of our pages,
  • Your approximate location (country and city),
  • Your IP address (in shortened form, so that no clear assignment is possible),
  • technical information such as browser, Internet provider, terminal device
    and screen resolution,
  • via which website or advertising medium you came to us.
 

Google Analytics stores cookies in your browser for a period of two years since your last visit. These cookies contain a randomly generated user ID that can be used to recognise you on future visits to the website.

The recorded data is stored together with the randomly generated user ID, which enables the evaluation of pseudonymous user profiles. This user-related data is automatically deleted after 14 months. Other data remains stored in aggregated form indefinitely. The IP address transmitted by your browser will not be merged with other data from Google.

We use Google Analytics with IP anonymization enabled. This means that the IP address of the user is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

They can prevent the storage of cookies either by rejecting them in our cookie banner or by setting their browser software accordingly; users can also prevent the collection of the data generated by the cookie and the transmission to Google as well as the processing of this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

 

We use Google Analytics Remarketing to display the ads we place with Google or its partners only to users who have also shown an interest in our website or who have certain products or services (e.g. interests in certain topics on our website), which we transmit to Google (so-called “remarketing”). With the help of remarketing, we want to ensure that our ads correspond to the interests of users and are not harassing. You can permanently object to cross-device remarketing/targeting by deactivating personalized advertising in your Google account; follow this link: https://www.google.com/settings/ads/onweb/.

 

Further information on data processing by Google, setting and objection options can be found on the Google website at https://policies.google.com/technologies/partner-sites.

 
 



Google Ads


We use the Google Ads service of Google Ireland Limited (registration number: 368047), Gordon House, Barrow Street, Dublin 4, Ireland (parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) hereinafter “Google”.

 

The processing of data within the scope of this service also takes place in the USA. The processing of your data in the USA is associated with corresponding risks. By giving your consent via our cookie banner, you consent to the processing of your data in the USA, despite potential access by US authorities, Art. 49 para. 1 p. 1 lit. a GDPR.

Google Ads is an internet banner advertising service that allows us to display ads in both Google search engine results and the Google advertising network. Google Ads allows us to pre-define certain keywords that will display an ad in Google’s search engine results only when the user performs a keyword-relevant search. In the Google advertising network, our ads are displayed on topic-relevant websites by means of an automatic algorithm and in compliance with the keywords we have previously defined.

 

The purpose of our use of Google Ads is to advertise our website by displaying advertisements on the websites of third party companies and in the search engine results of Google and, if applicable, to display third-party advertisements on our website.

 

If you access our website via a Google ad, a so-called conversion cookie is stored on your computer by Google. A conversion cookie loses its validity after thirty days and is not used for your identification, but it is tracked whether certain subpages of our website were called. Through the conversion cookie, both we and Google can track whether you have reached our website via an ad, completed an action (e.g. a purchase) or cancelled.

The data and information collected through the use of the conversion cookie are used by Google to create visit statistics for our website. These visit statistics are in turn used by us to determine the total number of users who were referred to us via ads. We use this information to measure the success of our ads and to optimize our ads for the future. Neither our company nor other advertisers of Google Ads receive information from Google by means of which the data subject could be identified.

 

Instead of using our cookie banner, you can also prevent the setting of cookies by means of an appropriate setting in your internet browser. Such a setting of the internet browser used would also prevent Google from setting a conversion cookie on your computer. In addition, a cookie already set by Google Ads can be deleted at any time via the browser. Furthermore, it is possible to object to interest-based advertising by Google. To do this, you must call up the link www.google.de/settings/ads from any of the Internet browsers you use (on any device) and make the desired settings there.

If you wish to object to interest-based advertising by Google, you can use the opt-out options provided by Google: http://www.google.com/ads/preferences.

Further information and Google’s applicable privacy policy can be found at https://policies.google.com/technologies/partner-sites.

 



Google reCaptcha


We use the reCAPTCHA function of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”) on the basis of our legitimate interests. This function is primarily used to distinguish whether an input is made by a natural person or is abusive through machine and automated processing. The service includes the sending of the IP address and possibly other data required by Google for the service reCAPTCHA to Google and to prevent abuse and spam.

The use of Google reCAPTCHA may also involve the transmission of personal data to the servers of Google LLC. in the USA. There are corresponding risks associated with the processing of your data in the USA.

Further information on Google reCAPTCHA as well as Google’s privacy notice  can be found at: https://www.google.com/intl/de/policies/privacy/.

 



Our social media pages


You will find us with presences within social networks and platforms, so that we can also communicate with you there and inform you about our services.

 

We point out that your data may be processed outside the European Union and that the data is usually processed for market research and advertising purposes. Usage profiles can be created from the usage behaviour and resulting interests of the users. These usage profiles can in turn be used, for example, to place advertisements within and outside the platforms that presumably correspond to the interests of the users. For this purpose, cookies may be stored on the computers of the users, in which the usage behaviour and the interests of the users are stored. Other data may also be stored in these usage profiles, especially if the users are members of the respective platforms and are logged in to them.

We only link to our company profiles on the respective social networks on our website. However, please note that when you click on a link to the social networks, data is transmitted to their servers. If you are logged in to the respective social network at this time with your user name and password, the information that you have visited our company profile on the respective social network from our website will be transmitted there and the respective provider can store this information in your user account.

 

In principle, we have no significant influence on the data processing of the social networks. However, we receive statistics from the providers about the use and visits of our company profiles in the social networks (e.g. information about the number of views, interactions such as likes and comments as well as summarized demographic and other information or statistics). For more information on the data used by the providers, please see the providers’ privacy notices linked below.

Insofar as we receive your personal data in the context of our social media presences (e.g. in the context of a communication), you are entitled to the rights mentioned in this privacy notice  above in this respect. You can address your requests with regard to data processing within the scope of our company profiles to us via the contact data mentioned above.

 

If you also wish to assert rights against the provider of the social network, the easiest way to do so is to contact the respective provider directly. The provider knows both the details of the technical operation of the platform and the associated data processing as well as the specific purposes of the data processing. The contact details can be found in the privacy notice linked below. We will also be happy to support you in asserting your rights, insofar as this is possible for us.

The processing of users’ personal data is generally based on your consent in accordance with Art. 6 (1) sentence 1 lit. a) GDPR. The legal basis is also Art. 6 (1) lit. b GDPR if we receive and process your data as part of a contract-related inquiry via our social media presence. The legal basis for the linking and operation of our company profiles in the social networks, including the receipt of statistics on the use of our company profiles, is Art. 6 (1) lit. f GDPR based on our legitimate interest in our corporate communication in the respective social networks.

 

For information on the respective processing and the respective objection options, we refer to the privacy notice of the providers linked below:

  • Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland), Facebook pages based on a personal data sharing agreement – privacy information: https://www.facebook.com/about/privacy/ , opt-out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com,
  • Google/YouTube (Google Ireland Limited (registration number: 368047), Gordon House, Barrow Street, Dublin 4, Ireland) – privacy information: https://policies.google.com/privacy, opt-out: https://adssettings.google.com/authenticated,.
  • Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA) – Privacy Information/ Opt-Out: http://instagram.com/about/legal/privacy/ .
  • Twitter (Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 IRELAND) – Privacy Information: https://twitter.com/de/privacy, Opt-Out: https://twitter.com/personalization
  • LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland) – Privacy Information https://www.linkedin.com/legal/privacy-policy  , Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out,
  • Xing (XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany) – Privacy Information/ Opt-Out: https://privacy.xing.com/de/datenschutzerklaerung .
  • Vimeo (Vimeo, Inc. 555 West 18th Street, New York, New York 10011, Privacy@vimeo.com – Privacy Information (https://vimeo.com/privacy).


In the case of assertion of data subject rights, we recommend that these are asserted with the providers, as the providers have direct access to the data. However, if you would like our support, please feel free to contact us using the contact details above.


Whistleblower system and complaints procedure


Compliance with laws and internal regulations is a top priority for profine. Against this background, we have supplemented our compliance system with a whistleblower system. Employees, business partners, but also third parties have the possibility to anonymously report irregular behavior at any time.


Further information and access to our whistleblowing system can be found here.
We use the whistleblowing system “INVENSITY” of Invensity GmbH, Mainzer Straße 19, 65185 Wiesbaden. Within the framework of our whistleblowing procedure, tips can be given anonymously. In order to submit a report via our whistleblower portal, it is sufficient if you provide information about the location, the time and the circumstances of the reportable circumstance in the description of the facts. The transmission of your report will be encrypted and, according to information provided by Invensity, in pseudonymous form, i.e. without attribution to a user, with your metadata removed. However, you may voluntarily disclose personal data about yourself as part of the reporting process. If you do not disclose any personal data, the case handlers have no possibility to establish a personal reference to you.

 

In order to receive and clarify serious cases of suspected breaches of rules at profine, the following data may (optionally) be processed within the framework of the whistleblower system: Details of the accused person (e.g. surname, first name, position and employment details), details of the alleged breaches of conduct. We ask reporting individuals to refrain from providing sensitive information about the accused unless it is necessary to describe their concerns. However, we cannot exclude the receipt and thus the processing of personal data of the special category as defined in Art. 9 of the GDPR.

profine GmbH will only process your data to the extent permitted by an applicable legal provision. The establishment of the whistleblower portal serves the fulfilment of our legal obligations pursuant to Art. 6 (1) lit. c GDPR in conjunction with Directive (EU) 2019/1937. Directive (EU) 2019/1937. Furthermore, we base the processing of personal data on our legitimate interest in adequately preventing and combating corruption pursuant to Art. 6 (1) lit. f GDPR. By submitting the reporting form, the persons providing the information declare their consent to any data processing that may concern them (Art. 6 (1) a GDPR).

 




Cookies

 

This website uses cookies.


We use necessary cookies to make our website work. In order to continuously improve your user experience on our website and to display advertisements on our partner websites, we and our partners also want to set cookies that are not strictly necessary for the website to function. In order for us to use these cookies, we need your consent. We also share information about your use of our website with our social media, advertising and analytics partners. Our partners may combine this information with other data that you have provided to them or that they have collected in the course of your use of the Services.

 

Please note that in some cases, information from the use of cookies is processed in the USA. The protection of personal data in the USA does not correspond to the requirements in the UK and the EU, in particular there is a lack of enforceable rights that safeguard the protection of your data against access by government agencies. Thus, there is a risk that these government agencies can access the personal data without the data transmitter or the recipient being able to effectively prevent this. For information on what data is processed in the USA and further information on cookies and data protection, please refer to our data protection notice.

 

Do you consent to the use of cookies and the associated processing of your personal data in the UK, the EU and the USA?

If you consent to the use of cookies and processing in the USA (Art. 49 para. 1 p. 1 lit. a UK&EU-GDPR), you can withdraw this consent at any time with effect for the future by calling up our cookie settings in the data protection otice and selecting there in detail which cookies you do not wish to accept.

 

Cookies are small text files that can be used by websites to make a user’s experience more efficient. The law states that we can store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies we need your permission. This site uses different types of cookies. Some cookies are placed by third party services that appear on our pages. You can at any time change or withdraw your consent from the Cookie Declaration on our website. Learn more about who we are, how you can contact us and how we process personal data in our Privacy Policy. Please state your consent ID and date when you contact us regarding your consent.


Your consent applies to the following domains: www.koemmerling-aluminium.com

How long will my data be retained?

 
Technical Access and Log Data
 

For security reasons (e.g. to investigate misuse or fraudulent activities), log file information is stored for a maximum period of 14 days and then deleted. whose further retention is necessary for evidentiary purposes is excluded from deletion until the relevant incident has been finally clarified.

Contact and Business Communication Data
 

Where necessary, we process and store personal data for the duration of our business relationship. This also includes data processed in the course of initiating a contractual relationship, for example by e-mail.

Statutory Retention Obligations
 

We are subject to statutory retention and documentation obligations arising, in particular, from the German Commercial Code (Handelsgesetzbuch – HGB) and the German Fiscal Code (Abgabenordnung – AO). The retention periods specified therein generally range from six to ten years.

 

Statistical Services (e.g. Google Analytics)
 

Personal data collected on the basis of your consent for statistical purposes is stored for the duration defined by the respective service.

In Google Analytics, the retention period is configured as follows: event data is stored for 2 months and user-level data for up to 14 months. Data is automatically deleted after expiry of the configured retention period.

You may withdraw your consent at any time via consent management tool.

5.5 Statutory Limitation Periods

In addition, storage periods are determined by statutory limitation periods, which pursuant to Section 195 et seq. of the German Civil Code (BGB) are generally three years, but may extend to up to thirty years in certain cases.

5.6 Storage in Connection with Data Subject Rights

If you exercise your rights as a data subject, we will store the information provided in this context for the duration of the applicable statutory limitation period, generally three years, pursuant to Section 31(2) no. 1 OWiG, Section 41(1) BDSG and Art. 83(5)(b) GDPR. This period may be extended if the limitation period is interrupted, for example due to inquiries by supervisory authorities.

05.01.2022