Data Protection

Privacy policy

We, as the operator of the website https://kluthe.com/  (also "website"), are responsible within the meaning of the applicable data protection law, in particular the General Data Protection Regulation ("GDPR"), for the personal data of the user ("you") of this website.

In the following, we will inform you clearly within the scope of our information obligations (Art. 13 et seq. GDPR) about which data is processed when you visit our website and on what legal basis this is done (Section A - General Data Protection Information). Specific information that only applies to our subpage https://kluthe.com/magazin can be found under "Section B – Kluthe Magazine".  You will also receive information about your rights with regard to us and with regard to the competent supervisory authority (Section C – Your Rights).

1.    Information about the responsible party

Responsible for the website is:

Chemische Werke Kluthe GmbH
Gottlieb-Daimler-Str. 12
69115 Heidelberg

Phone: +49 6221 5301-0
E-mail: info@kluthe.com
Internet: www.kluthe.com

2.    Data protection supervisor

We have appointed a company data protection officer, who you can contact as follows:

Chemische Werke Kluthe GmbH
- Attn: Data Protection Officer -
Gottlieb-Daimler-Str. 12
69115 Heidelberg

E-mail: Datenschutz@kluthe.com

3.    Informational use of our website

If you call up our website in order to merely visit it, so-called log files are processed by being automatically recorded by our system.

The following log files are processed automatically:

•    IP address of the requesting computer
•    Date and time of the server request
•    Information about the requested file (name and URL)
•    Amount of data transferred to you
•    Notification of whether the request was successful
•    Identification data of the browser and operating system used,
•    Website from which the access was made

The log files contain your IP address and possibly other personal data. Therefore, an assignment to you is possible in principle. However, we only store your data temporarily and, in particular, not together with other personal data.

The processing of the above-mentioned data is necessary for the provision of our website. We also store the data for the purpose of the security of our information technology systems. For these purposes, we also have a legitimate interest in processing the data on the legal basis of  Art. 6 para. 1 sentence 1 lit. f GDPR. The log files, which also contain your IP address, will be deleted or anonymized immediately after they are no longer required to achieve the aforementioned purposes, but no later than three months.

4.    Website Hosting:

Our website is operated on the servers of the provider interneX GmbH, Lagerstraße 15, 3950 Gmünd, Austria, with server location in Austria. This means that the data that we collect when you visit and use this website is stored by our hoster.

The legal basis for the processing of your personal data is Article 6 (1) (1) (f) GDPR, as it is in our legitimate interest to use the services of a professional provider for the secure and efficient provision of our website. We have concluded an order processing agreement with interneX GmbH.

5.    Contact form / Feedback

You can contact us electronically via our contact form, for example give us feedback, to send inquiries about the products and services we offer or to ask general questions. If you use this option, you will provide us with the following data:

•    Subject
•    Name (to address you and for the purpose of abuse prevention)
•    E-mail address (to contact you)
•    ZIP code (optional)
•    Telephone (optional)
•    Your message to us

The legal basis for the processing of your data for the purpose of processing your contact is Art. 6 para. 1 sentence 1 lit. f DSGVO. It is our legitimate interest to process your data transmitted to us in order to contact you. The data will be stored until it is no longer required to achieve the purpose of the conversation with you and the request for your contact has been comprehensively clarified.

If your contact is aimed at concluding a contract with us, the additional legal basis for the processing of your personal data is Art. 6 para. 1 sentence 1 lit. b GDPR. This data will be stored for as long as it is necessary for the execution of the contract or the pre-contractual measures. In addition, we only store your data in order to comply with legal obligations (e.g. tax obligations) (Art. 6 para. 1 sentence 1 lit. c GDPR).

In addition to the data you provide to us, we store the time (date and time) of the transmission of your data to us, as well as your IP address. The processing of this data corresponds to our legitimate interest (Art. 6 para. 1 sentence 1 lit. f GDPR) in order to ensure the security of our systems and to counteract misuse. This data, which we additionally collect during your contact, will be deleted as soon as it is no longer needed, at the latest when the request of your contact has been comprehensively clarified.

You can inform us at any time (see section 1 above) that we should delete the data provided in the course of the conversation. In this case, as far as permissible, all personal data of the conversation will be deleted and a continuation of the conversation is not possible.

6.    Contact by e-mail or telephone

You have the option to contact us by e-mail or phone. Your personal data transmitted in this way will be stored by us. The data will only be processed in order to process your contact properly, whereby this corresponds to our legitimate interest.

The legal basis for the processing of your personal data is Art. 6 para. 1 sentence 1 lit. f GDPR. The data will be stored until it is no longer required to achieve the purpose of the conversation with you and the request for your contact has been comprehensively clarified.

If your contact is aimed at concluding a contract with us, the additional legal basis for the processing of your personal data is Art. 6 para. 1 sentence 1 lit. b GDPR. This data will be stored for as long as it is necessary for the execution of the contract or the pre-contractual measures. In addition, we only store your data in order to comply with legal obligations (e.g. tax obligations) (Art. 6 para. 1 sentence 1 lit. c GDPR).

You can inform us at any time (see section 1 above) that we should delete the data provided in the course of the conversation. In this case, as far as permissible, all personal data of the conversation will be deleted and a continuation of the conversation is not possible.

7.    Applications

On our website we inform you about vacancies in our teams and you can send us your application by e-mail or by post.

7.1    Applications by e-mail

If you apply to us by e-mail, the personal data you provide will be processed by us to handle the application process. This means that your application will be viewed by the employees who are responsible for a pre-selection. Your data will not be passed on to third parties and we will not use your data for other purposes.

The legal basis for the processing of your data is Article 88 (1) GDPR in conjunction with Section 26 of the German Federal Data Protection Act (BDSG).

Your applicant data will be stored by us. If we reject your application, we will only store the data for as long as necessary, for a maximum period of six months, unless you give us your consent that we may store the applicant data for a longer period of time in order to contact you even after the six months have expired. You can revoke your consent at any time. If you give us your consent for longer storage, we will delete your data at the latest as soon as one year has elapsed since the last application-related contact between you and us. The legal basis for this processing of your data is Art. 6 para. 1 sentence 1 lit. f GDPR, Art. 88 para. 1 GDPR  in conjunction with § 26 BDSG and - if you have given us your consent - Art. 6 para. 1 sentence 1 lit. a GDPR. In this respect, our legitimate interest lies in being able to inform you of a change in our decision shortly after the rejection of your application or to inform you about any identical new job advertisements.

Upon your request (e.g. by e-mail), all personal data of the application will be deleted, unless a longer storage period is necessary to protect our legitimate interests and provided that your interests do not prevail (Art. 6 para. 1 sentence 1 lit. f DSGVO).

In addition to the data that you voluntarily provide to us with your application, we may receive the time (date and time) of the transmission of your data to us. The processing of this data corresponds to our legitimate interest (Art. 6 para. 1 sentence 1 lit. f GDPR) in order to ensure the security of our systems and to counteract misuse. This data, which we additionally collect in the course of sending us e-mails, will be deleted as soon as they are no longer needed, at the latest after completion of the application process.

7.2    Applications by post

Your personal data transmitted by post will be processed by us for the purpose of handling the application process. This means that your application will be viewed by the employees who are responsible for a pre-selection. Your data will not be passed on to third parties and we will not use your data for other purposes.

The legal basis for the processing of your data is Article 88 (1) GDPR in conjunction with Section 26 of the German Federal Data Protection Act (BDSG).

Your applicant data will be stored by us. If we reject your application, we will only store the data for as long as necessary, for a maximum period of six months, unless you give us your consent that we may store the applicant data for a longer period of time in order to contact you even after the six months have expired. You can revoke your consent at any time. If you give us your consent for longer storage, we will delete your data at the latest as soon as one year has elapsed since the last application-related contact between you and us. The legal basis for this processing of your data is Art. 6 para. 1 sentence 1 lit. f GDPR, Art. 88 para. 1 GDPR  in conjunction with § 26 BDSG and - if you have given us your consent - Art. 6 para. 1 sentence 1 lit. a GDPR. In this respect, our legitimate interest lies in being able to inform you of a change in our decision shortly after the rejection of your application or to inform you about any identical new job advertisements.

Upon your request (e.g. by e-mail), all personal data of the application will be deleted, unless a longer storage period is necessary to protect our legitimate interests and provided that your interests do not prevail (Art. 6 para. 1 sentence 1 lit. f DSGVO)

Documents that we have received from you by post will be returned to you immediately after completion of the application process.

7.3    Job interview

We process your applicant data, in particular first and last name, e-mail address and, if applicable, address or telephone numbers, in order to invite you to an interview in the event that your application has been selected in the pre-selection.

The legal basis for the processing of your data is Article 88 (1) GDPR in conjunction with Section 26 of the German Federal Data Protection Act (BDSG).

7.4    Offer of employment

If you receive an offer from us to enter into an employment relationship with us, the privacy policy for employees applies in addition to this privacy policy.

7.5    Contact by e-mail or contact form

If you have any questions about our vacancies or would like to receive more information about them, you can contact us by e-mail or via our contact form. If you use the latter option, please provide us with the following information:

•    Subject
•    Name (to address you and for the purpose of abuse prevention)
•    E-mail address (to contact you)
•    Telephone (optional)
•    Your message to us.

The legal basis for the processing of your data for the purpose of processing your contact is Art. 6 para. 1 sentence 1 lit. f DSGVO. It is our legitimate interest to process your data transmitted to us in order to contact you. The data will be stored until it is no longer required to achieve the purpose of the conversation with you and the request for your contact has been comprehensively clarified.

If your contact is aimed at establishing an employment relationship with us, the additional legal basis is Art. 88 para. 1 GDPR in conjunction with § 26 BDSG. This data will be stored for as long as it is necessary for the execution of the contract or the pre-contractual measures. In addition, we only store your data in order to comply with legal obligations (e.g. tax obligations) (Art. 6 para. 1 sentence 1 lit. c GDPR).

In addition to the data, you provide to us, we store the time (date and time) of the transmission of your data to us, as well as your IP address. The processing of this data corresponds to our legitimate interest (Art. 6 para. 1 sentence 1 lit. f GDPR) in order to ensure the security of our systems and to counteract misuse. This data, which we additionally collect during your contact, will be deleted as soon as it is no longer needed, at the latest when the request of your contact has been comprehensively clarified.

You can inform us at any time (see section 1 above) that we should delete the data provided in the course of the conversation. In this case, as far as permissible, all personal data of the conversation will be deleted, and a continuation of the conversation is not possible.

8.    Links to Social Networks

On our website, we use small icons and other links, each of which refers to our presence on third-party platforms (Facebook, XING, and LinkedIn). In each case, these are hyperlinks, so no data from you is automatically transmitted, but only when you click on the icons or the corresponding link and a new window opens in your browser with the third-party website.

8.1    Facebook fan page

We operate a fan page on the social media platform Facebook (Meta Platforms Inc., Meta Platforms Ltd, 4 Grand Canal Square, Grand Canal Harbour, D2 Dublin, Ireland (hereinafter: "Facebook")), which we link to on our website via the Facebook icon. As long as you do not click on the link, Facebook will not receive any data from you. If you click on the link, for example, to view our company presence on Facebook or to "like" our page, Facebook receives data from you (which data Facebook receives also depends on whether you are logged in to Facebook with your user profile while you click on the page or not). In addition, Facebook uses so-called cookies, which are stored on your device when you visit our fan page, even if you do not have your own Facebook profile or are not logged in during your visit to our fan page. These cookies allow Facebook to create user profiles based on your preferences and interests and to show you targeted advertising (inside and outside Facebook). Cookies remain on your device until you delete them. You can find more information about the cookies used by Facebook at https://www.facebook.com/policies/cookies/   

According to Facebook, it uses this data for a wide variety of purposes and transmits it worldwide, both internally to other Facebook companies and to a wide variety of external partners. Facebook relies on various legal bases for this data processing, which you can find in detail in Facebook's data policy. The data policy can be found at the following link: https://www.facebook.com/policy.php  

While Facebook uses this data on its own responsibility for various purposes, we can only see aggregated data, i.e. statistics (e.g. user growth, user demographics, use of the individual functionalities) on our company homepage, which no longer have any personal reference. These are called "Page Insights". More information about Page Insights can be found at the following link: https://www.facebook.com/legal/terms/information_about_page_insights_data

In accordance with the provisions of the GDPR, we are jointly responsible with Facebook for data processing on our fan page (Art. 26 GDPR). Accordingly, we have entered into an agreement with Facebook, provided by Facebook, which regulates this joint responsibility. You can find the agreement in German at the following link: https://www.facebook.com/legal/terms/page_controller_addendum

As a result, Facebook is primarily responsible for the aggregated insight data. In addition, Facebook will comply with all obligations under the GDPR with regard to the processing of Insight data (including Art. 12, 13 GDPR, Art. 15-22 GDPR and Art. 32-34 GDPR). If you send us an enquiry regarding our Facebook fan page, we will inform Facebook as soon as possible. According to our agreement, Facebook will respond to the request.

Our legitimate interests in the processing of personal data lie in the use and linking of different communication channels, marketing via high-reach social media platforms and the analysis and evaluation of the success of our communication and marketing efforts. The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. f GDPR. If you consent to data processing (in particular to the setting of cookies), the processing is also carried out on the basis of Art. 6 para. 1 sentence 1 lit. a DSGVO or § 25 para. 1 TTDSG.

If you use our Facebook fan page to contact us (e.g. by creating your own posts, reacting to one of our posts or by sending us private messages), we process the data you provide exclusively to process your contact. The legal basis for the processing of your personal data is therefore Art. 6 para. 1 sentence 1 lit. f GDPR. It is our legitimate interest to process your data transmitted to us in order to contact you. The data will be stored until it is no longer required to achieve the purpose of the conversation with you and the request for your contact has been comprehensively clarified. You can inform us at any time (see section 1 above) that we should delete the data provided in the course of the conversation. In this case, as far as permissible, all personal data of the conversation will be deleted and a continuation of the conversation is not possible.

8.2    Website on LinkedIn

We operate a website on the social media portal LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (hereinafter referred to as "LinkedIn")), which we link to on our website via the LinkedIn icon. As long as you do not click on the link, LinkedIn will not receive any data from you. If you click on the link, for example, to view our website on LinkedIn, LinkedIn will receive data from you (which data LinkedIn receives also depends on whether you are logged in to LinkedIn with your user profile while you click on the page or not). In addition, LinkedIn uses so-called cookies, which are stored on your device when you visit our company website, even if you do not have your own LinkedIn profile or are not logged in during your visit to our company page. These cookies allow LinkedIn to provide its own services, determine the performance of the services, and display relevant ads (including job ads) inside and outside of LinkedIn. Cookies remain on your device until you delete them. You can find more information about the cookies used by LinkedIn at https://de.linkedin.com/legal/cookie-policy?trk=homepage-basic_footer-cookie-policy

According to its own information, LinkedIn uses this data for a wide variety of purposes and transmits it to a wide variety of recipients, including those who are not based within the EU. LinkedIn relies on various legal bases for this data processing, which you can find in LinkedIn's privacy policy. The privacy policy can be found at the following link: https://de.linkedin.com/legal/privacy-policy

While LinkedIn uses this data on its own responsibility for various purposes, we can only see aggregated data, i.e. statistics that no longer have any personal reference, on our LinkedIn website. These are called "Page Insights". You can find more information about the "Page Insights" on LinkedIn's corresponding information page at https://www.linkedin.com/help/linkedin/answer/4499/linkedin-page-analytics-overview?lang=de

In addition, if you decide to become a follower when you visit our LinkedIn website, we will also receive your name and position in the company according to the information in your LinkedIn user profile, as well as the time at which you became our follower. https://www.linkedin.com/help/linkedin/answer/4499/linkedin-page-analytics-overview?lang=en

In accordance with the requirements of the GDPR, we are jointly responsible with LinkedIn for data processing on our LinkedIn website (Art. 26 GDPR). Accordingly, we have entered into an agreement with LinkedIn provided by LinkedIn that regulates this joint responsibility. You can find the agreement at the following link: https://legal.linkedin.com/pages-joint-controller-addendum

As a result, LinkedIn is primarily responsible for the aggregated insight data. In addition, LinkedIn will comply with all obligations under the GDPR with regard to the processing of Insight data (including Art. 12-22 GDPR and Art. 32-34 GDPR). If you send us an enquiry regarding our LinkedIn website, we will inform LinkedIn in a timely manner. LinkedIn will respond to the request in accordance with our agreement.

Our legitimate interests in the processing of personal data lie in the use and linking of different communication channels, marketing via high-reach social media platforms and the analysis and evaluation of the success of our communication and marketing efforts. The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. f GDPR. If you consent to data processing (in particular to the setting of cookies), the processing is also carried out on the basis of Art. 6 para. 1 sentence 1 lit. a DSGVO or § 25 para. 1 TTDSG.

If you use our LinkedIn presence to contact us (e.g. by creating your own posts, reacting to one of our posts or by sending us private messages), we process the data you provide exclusively for the purpose of processing your contact. The legal basis for the processing of your personal data is therefore Art. 6 para. 1 sentence 1 lit. f GDPR. It is our legitimate interest to process your data transmitted to us in order to contact you. The data will be stored until it is no longer required to achieve the purpose of the conversation with you and the request for your contact has been comprehensively clarified. You can inform us at any time (see section 1 above) that we should delete the data provided in the course of the conversation. In this case, as far as permissible, all personal data of the conversation will be deleted, and a continuation of the conversation is not possible.

8.3    Internet presence on XING

We have a company page on the social media portal XING (New Work SE, Dammtorstraße 29-32, 20354 Hamburg, hereinafter referred to as "XING"), which we link to our website via the XING icon. As long as you do not click on the link, XING will not receive any data from you. If you click on the link, for example, to view our company presence on XING, XING receives data from you (which data XING receives also depends on whether you are logged in to XING with your user profile while you click on the page or not). In addition, XING uses so-called cookies, which are stored on your device when you visit our company website, even if you do not have your own XING profile or are not logged into one during your visit to our company website. These cookies allow XING, among other things, to use tracking tools and display personalized advertising (inside and outside of Xing). Cookies remain on your device until you delete them. You can find more information about the cookies used by Xing at https://privacy.xing.com/de/datenschutzerklaerung/druckversion

According to its own information, XING uses this data for a wide variety of purposes and transmits it to a wide variety of recipients, including those who are not based within the EU. XING relies on various legal bases for this data processing, which you can find in detail in XING's privacy policy. The privacy policy can be found at the following link: https://privacy.xing.com/de/datenschutzerklaerung/druckversion

While Xing uses this data on its own responsibility for various purposes, we can only see aggregated data, i.e. statistics that no longer have any personal reference, on our corporate website.

In addition, if you are logged in with your user profile when you visit our XING corporate presence, we may receive additional information about you. To what extent we collect such additional information about you (e.g. your name, activity information, time of your visit to the site) depends on the settings you have made in your XING user profile. You can use your XING user profile to control in detail which data we receive about you personally.

Our legitimate interests in the processing of personal data lie in the use and linking of different communication channels, marketing via high-reach social media platforms and the analysis and evaluation of the success of our communication and marketing efforts. The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. f GDPR. If you consent to data processing (in particular to the setting of cookies), the processing is also carried out on the basis of Art. 6 para. 1 sentence 1 lit. a DSGVO.

If you use our Xing presence to contact us (e.g. by creating your own posts, reacting to one of our posts or by sending us private messages), we process the data you provide exclusively to process your contact. The legal basis for the processing of your personal data is therefore Art. 6 para. 1 sentence 1 lit. f GDPR. It is our legitimate interest to process your data transmitted to us in order to contact you. The data will be stored until it is no longer required to achieve the purpose of the conversation with you and the request for your contact has been comprehensively clarified. You can inform us at any time (see section 1 above) that we should delete the data provided in the course of the conversation. In this case, as far as permissible, all personal data of the conversation will be deleted, and a continuation of the conversation is not possible.

8.4    YouTube

We operate a corporate presence on the video-sharing platform YouTube. YouTube is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. In the following, the term "YouTube" is used for the video-sharing platform, the term "Google" for the operator of the platform.

When you visit our YouTube site, Google receives data from you (which data Google receives also depends on whether you are logged in to YouTube with your user profile while you click on the page or not). In addition, Google uses so-called cookies, which are stored on your device when you visit our company website, even if you do not have your own YouTube profile or are not logged into it during your visit to our company website. These cookies allow Google, among other things, to collect and analyze data on target group interactions and website statistics (inside and outside of YouTube). Cookies remain on your device until you delete them. You can find more information about the cookies used by Google at https://policies.google.com/technologies/cookies?hl=de&utm_source=ucb  

According to its own information, Google uses this data for a wide variety of purposes and transmits it worldwide, both internally to affiliated companies and to companies, organizations or persons outside Google. Google relies on various legal bases for this data processing, which you can find in detail in Google's privacy policy. Google's privacy policy can be found at the following link: https://policies.google.com/privacy?hl=de.

While Google uses this data on its own responsibility for various purposes, we can only see aggregated data, i.e. statistics (e.g. playbacks, playback times and types of access sources) on our corporate website, which no longer have any personal reference. This performance data is analyzed using the "YouTube Analytics" tool. You can find more information about the performance data on Google's corresponding information page under the following link: https://support.google.com/youtube/answer/9002587?hl=de

Our legitimate interests in the processing of personal data lie in the use and linking of different communication channels, marketing via high-reach social media platforms and the analysis and evaluation of the success of our communication and marketing efforts. The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. f GDPR. If you consent to data processing (in particular to the setting of cookies), the processing is also carried out on the basis of Art. 6 para. 1 sentence 1 lit. a DSGVO or, if cookies are set, § 25 para. 1 TTDSG.

If you use our YouTube presence to contact us (e.g. by creating your own posts, reacting to one of our posts or by sending us private messages), we process the data you provide exclusively to process your contact. The legal basis for the processing of your personal data is therefore Art. 6 para. 1 sentence 1 lit. f GDPR. It is our legitimate interest to process your data transmitted to us in order to contact you. The data will be stored until it is no longer required to achieve the purpose of the conversation with you and the request for your contact has been comprehensively clarified. You can inform us at any time (see section 1 above) that we should delete the data provided in the course of the conversation. In this case, as far as permissible, all personal data of the conversation will be deleted, and a continuation of the conversation is not possible.

8.5    Kununu

We have a company page on the Kununu platform (XING kununu Prescreen GmbH, Schottenring 2-6, 1010 Vienna, hereinafter referred to as "Kununu"), which we link to our website via the Kununu icon. On this page you can see our current employer rating. As long as you do not click on the link, Kununu will not receive any data from you. If you click on the link, for example, to view our company presence on Kununu, Kununu receives data from you (which data Kununu receives also depends on whether you are logged in to Kununu with your user profile while you click on the page or not). In addition, Kununu uses so-called cookies, which are stored on your device when you visit our company website, even if you do not have your own Kununu profile or are not logged into it during your visit to our company website. These cookies allow Kununu, among other things, to use tracking tools and display personalized advertising (inside and outside Kununu). Cookies remain on your device until you delete them. More information about the cookies used by Kununu can be found at https://privacy.xing.com/en/privacy-policy

According to its own information, Kununu uses this data for a wide variety of purposes and transmits it to a wide variety of recipients, including those who are not based within the EU. Kununu relies on various legal bases for this data processing, which you can find in detail in XING's privacy policy. The privacy policy can be found at the following link: https://privacy.xing.com/en/privacy-policy
 
While Kununu uses this data on its own responsibility for various purposes, we can only see aggregated data, i.e. statistics that no longer have any personal reference, on our company website. More information on the above statistics can be found under https://arbeitgeber-support.kununu.com/hc/de/articles/5140290478993-Statistiken-zum-Firmenprofil.

Our legitimate interests in the processing of personal data lie in the use and linking of different communication channels, marketing via high-reach social media platforms and the analysis and evaluation of the success of our communication and marketing efforts. The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. f GDPR. If you consent to data processing (in particular to the setting of cookies), the processing is also carried out on the basis of Art. 6 para. 1 sentence 1 lit. a DSGVO.

9.    Integration of YouTube videos and Google Fonts on our website

We integrate videos from YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) for the purpose of making our website appealing. In the following, the term "YouTube" is used for the video portal, the term "Google" for the operator of this portal.

When embedding YouTube videos, we use the extended data protection mode, in which, according to the provider, information about you is only shared with Google if you activate the video by clicking on the play button of the video.

If you activate the video, Google may use cookies to collect information for analysis purposes and to improve user-friendliness. According to Google, the data is processed pseudonymously. However, especially if you are logged in to your Google or YouTube account, the data may be linked directly to these accounts.

According to its own information, Google uses this data for a wide variety of purposes and transmits it to a wide variety of recipients, including those who are not based within the EU. Google relies on various legal bases for this data processing. An overview is provided by Google's privacy policy, which you can access at the following link: https://policies.google.com/privacy?hl=en

In addition, it may be that when the video is played, so-called. Google Fonts (fonts provided by Google).

We have embedded YouTube videos on our website in such a way that they are only loaded if you have given your consent. The legal basis for the integration of the YouTube service on our website and the associated processing of your data is therefore your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

If YouTube sets cookies when you actively click on and play a YouTube video on our site, we process your data on the basis of consent (§ 25 para. 1 TTDSG or Art. 6 para. 1 sentence 1 lit. a DSGVO).

Note on data transfers to the USA:

However, Google Ireland Ltd. is a subsidiary of the US group Google, so it may also be used to transfer your personal data to US group companies of Google (in particular Google Ireland Ltd.). Google LLC) and Google servers located in the USA. The USA is a third country within the meaning of the GDPR for which an adequacy decision has been issued by the EU Commission (the so-called "EU-US Data Privacy Framework" or "EU-US DPF"). Google LLC is certified as a U.S. company under the EU-US DPF, cf. https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active. However, according to the prevailing view of the German authorities, there is still a lack of a sufficient level of data protection in the USA. In particular, according to the data protection authorities, when transferring personal data to the USA, there is a risk that US security authorities could access this data on the basis of the powers to which they are entitled, without you, as the data subject, having adequate legal remedies against this.

Since the USA may not offer an adequate level of protection despite the existence of an adequacy decision, we will only show you YouTube videos if you have consented to this (Art. 49 para. 1 sentence 1 lit. a GDPR).

You can revoke your consent in accordance with the aforementioned legal bases at any time by changing the data protection setting on our website.

10.    WiredMinds

We use the analysis tool "LeadLabs" from WiredMinds GmbH, Lindenspürstraße 32, 70176 Stuttgart, Germany, on our website. With the help of the technology offered by WiredMinds, we can recognize which companies visit our website and thus obtain information about the pages visited by the company on our website.

WiredMinds does not use cookies. WiredMinds only provides us with company-related information that does not allow any conclusions to be drawn about natural persons. Via the IP address of the website visitor, LeadLabs can recognize whether it is a natural person or whether the IP address is assigned to a company. If WiredMinds recognizes that it is a private visitor, his IP address will be deleted immediately. In this case, the IP address of the private visitor is only processed for a short time. As a result, the surfing behavior of the private visitor is not analyzed.

The legal basis for the short-term processing of the IP address of private visitors is Art. 6 para. 1 sentence 1 lit. f GDPR. In view of the low intensity of the intervention (short-term processing of the IP address for a limited processing purpose), it is in our legitimate interest to use the analysis tool "LeadLabs" to measure the success of our website and generate business ("B2B") leads. The short-term processing of your IP address by WiredMinds takes place on the basis of an order processing contract pursuant to Art. 28 GDPR.

11.    Cookie Consent Management Tool

In order to obtain and document the consent of our visitors to the cookies and services we use, we use the cookie consent plugin "EU Cookie Directive Pro" from ACRIS E-Commerce GmbH, Am Pfenningberg 60, 4040 Linz, Austria ("ACRIS"). When you visit our subpage https://kluthe.com/magazin, we use the cookie consent tool from Borlabs,  Benjamin A. Bornschein, Rübenkamp 32, 22305 Hamburg, Germany ("Borlabs") in order to obtain and document your consent to the cookies and services we use.

In this context, ACRIS and Borlabs use technically necessary cookies to store the cookie settings that you have chosen when entering the website. You can find more information about cookies in our cookie information. If you wish to revoke this consent, simply delete the cookie in your browser. When you re-enter/reload the website, you will be asked for your cookie consent again.  

We would like to point out that Borlabs does not process any personal data and that the following information is stored in the cookie set by Boralbs:

•    Cookie Runtime
•    Cookie Version
•    Domain and path of the WordPress website
•    Consent
•    UID

The UID is a randomly generated ID and not personal information. For details, see https://borlabs.io/kb/what-information-does-borlabs-cookie-store/

The legal basis for the use of ACRIS and Borlabs is Art. 6 para. 1 sentence 1 lit. f GDPR, as it is in our legitimate interest to use the services of professional service providers to manage and document the cookie settings of our visitors.

12.    Google Analytics 4

The analysis service Google Analytics 4 is implemented on our website, which is offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland for users from the European Economic Area, Switzerland and Liechtenstein and by Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (hereinafter: "Google Analytics 4") for all other users.

We have concluded an order processing agreement with Google Ireland Limited in accordance with Art. 28 GDPR.
Google Analytics 4 s may record the following information, among others:

•    Type of Internet browser used
•    Internet browser version
•    the operating system you are using,
•    selected language,
•    Data on the requesting device,
•    Referrer (previously visited website)
•    Your IP address (according to Google, the IP address is only used temporarily to determine a rough location of the requesting device (city level) and then deleted)
•    (rough) Location data, i.e. city (including its longitude and latitude), continent, country, region and subcontinent of the requesting device,
•    Date and time of the server request,
•    The duration of the session,
•    Click and scrolling behavior, including media playback, internal searches, content sharing,
•    Webshop interactions, such as product views and orders.

Google Analytics 4 uses the IP address only to derive location data. According to Google, IP addresses are otherwise not logged or stored.

Google Analytics 4 only shows us statistics that we use to optimize our website and offers. We have also configured Google Analytics 4 in such a way that Google may not use the data for its own analysis of online trends or to improve its own products and services.

Before we use Google Analytics 4 to analyze your website visit, we obtain your consent to the processing of your personal data (Art. 6 para. 1 sentence 1 lit. a GDPR), the setting of the necessary cookies (§ 25 para. 1 TTDSG) and the data transfer to the USA (Art. 49 para. 1 sentence 1 lit. a GDPR) that may be associated with Google Analytics 4.

For more information about the cookies used, please see our Cookie Information.
The legal basis for the processing of your personal data and the setting of cookies within the framework of Google Analytics 4 is therefore your consent in accordance with Section 25 (1) TTDSG and Art. 6 (1) sentence 1 lit. a GDPR.

The legal basis for the transfer of your personal data to Google servers in the USA that may be associated with Google Analytics 4 is your consent in accordance with Art. 49 para. 1 sentence 1 lit. a GDPR. Please note the following:

Note on data transfers to the USA:

The use of Google Analytics is based on a contract that we have concluded with Google Ireland Ltd. However, Google Ireland Ltd. is a subsidiary of the US group Google, so it may also be used to transfer your personal data to US group companies of Google (in particular Google Ireland Ltd.). Google LLC) and Google servers located in the USA. The USA is a third country within the meaning of the GDPR for which an adequacy decision has been issued by the EU Commission (the so-called "EU-US Data Privacy Framework" or "EU-US DPF"). Google LLC is certified as a U.S. company under the EU-US DPF, cf. https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active. However, according to the predominant view of the German data protection authorities, there is still a lack of a sufficient level of data protection in the USA. In particular, according to the data protection authorities, when transferring personal data to the USA, there is a risk that US security authorities could access this data on the basis of the powers to which they are entitled, without you, as the data subject, having adequate legal remedies against this.

Since the USA may not offer an adequate level of protection despite the existence of an adequacy decision, we only use Google Analytics 4 if you have consented to this (Art. 49 para. 1 sentence 1 lit. a GDPR).

You can revoke your consent in accordance with the aforementioned legal bases at any time by changing the data protection setting on our website.

You can also prevent the collection of your personal data by Google Analytics 4 and the processing of this data by Google by downloading and installing the browser add-on available at the following link (https://tools.google.com/dlpage/gaoptout?hl=de) to deactivate Google Analytics.

You can also prevent the processing of your data within the framework of Google Analytics 4 by clicking on the following link and bringing about an "opt-out": Disable Google Analytics. An "opt-out cookie" is set, which prevents your user data from being collected on this website in the future, unless the opt-out cookie is deleted.

Finally, you can also directly prevent the storage of Google cookies yourself by making the appropriate settings in your browser settings.

13.    Use of service providers

We would like to point out that we may use service providers with whom we have concluded order processing contracts (e.g. for website hosting) when processing your personal data. If processors in a third country (not within the EU) carry out data processing, we ensure that the level of protection of your data guaranteed by the GDPR is not undermined (Art. 44 et seq. GDPR).  The legal basis for the use of service providers is Art. 6 para. 1 sentence 1 lit. f GDPR. The commissioning of service providers (specialists or other service providers in areas that we cannot serve ourselves) corresponds to our legitimate interest. If you would like to receive a copy of the appropriate or appropriate guarantees, please let us know (see section 1 above).

14.    Your rights

If we process your data, you are a "data subject" within the meaning of the GDPR. You have the following rights: right to information, right to rectification, right to restriction of processing, right to deletion, right to information and right to data portability. In addition, you have a right of objection, a right of revocation and the right to complain to the supervisory authority.

Below are some details about each right:

14.1    Right to information

You have the right to request confirmation from us as to whether we are processing your personal data. If we process your personal data, you have the right, in particular, to obtain information about processing purposes, categories of personal data, recipients or categories of recipients, and, if applicable, storage period. 

14.2    Right of rectification

You have the right to have the data we hold about you corrected and/or completed if this data is incorrect or incomplete. We will make the correction or completion without delay.

14.3    Right to restriction of processing

Under certain conditions, you have the right to request that we restrict the processing of your personal data. An example of this is that you dispute the accuracy of your personal data, and we need to verify the accuracy for a certain period of time. For the duration of the check, your data will only be processed to a limited extent. Another example of the restriction is that although we no longer need your data, you need it for a legal dispute.

14.4    Right of deletion

In certain situations, you have the right to demand that we delete your personal data without undue delay. This is the case, for example, if we no longer need your personal data for the purposes for which we collected the data or if we have processed your data unlawfully. Another example would be that we process your data on the basis of your consent, you withdraw your consent and we do not process the data on another legal basis. However, your right to deletion does not always exist. For example, we may process your personal data to comply with a legal obligation or because we need it for a legal dispute. 

14.5    Right to information

If you have asserted your right of rectification, deletion or restriction against us, we are obliged to notify all recipients to whom we have disclosed your personal data of the correction, deletion or restriction of the processing of your data, unless this proves impossible or involves a disproportionate effort.

14.6    Right to data portability

Under certain conditions, you have the right to receive the personal data you have provided to us in a structured, common and machine-readable format and the right to have this data transmitted to another person responsible. This is the case if we process the data either on the basis of your consent or on the basis of a contract with you and that we process the data using automated procedures.

You have the right to request that we transfer your personal data directly to another person responsible, insofar as this is technically feasible and the freedoms and rights of other persons are not affected by this.

14.7    Right of objection

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6 (1) (e) or (f) of the GDPR. This also applies to profiling referred to in these provisions.

After an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising. This also applies to profiling to the extent that it is related to direct marketing. If you object to the processing of your personal data for direct marketing purposes, we will no longer process it for these purposes.

14.8    Withdrawal

Pursuant to Art. 7 (3) GDPR, you have the right to revoke your consent at any time. The withdrawal of consent does not retroactively invalidate the lawfulness of the processing.

14.9    Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a supervisory authority, without prejudice to any other administrative or judicial remedy. In particular, you may exercise your right of appeal in the Member State of your place of residence, your place of work or the place of the alleged infringement if you believe that the processing of your personal data violates the GDPR.

An overview of the respective state data protection officers of the federal states and their contact details can be found under the following link:

https://www.bfdi.bund.de/EN/Service/Anschriften/Laender/Laender-node.html

15.    Use of our whistleblower system

We have integrated a whistleblower system into our website that allows persons (hereinafter referred to as "reporting person") to provide us with information on breaches. If you use this system as a reporting person, you transmit the following data to us:

• Topic of the report
• Subject
• Description of the facts

We process the information you provide in order to assess the reported facts internally and, if necessary, to take follow-up measures (e.g. internal investigations, submission to the competent authority). After submitting your information, the content of your report will be stored in a password-protected PDF document for your records only. It is not mandatory to provide contact details when submitting your report, which means that reports can also be submitted anonymously. In the case of an anonymous report, the legal basis for processing the information contained in the report is Art. 6 para. 1 sentence 1 lit. e GDPR in conjunction with §§ 10 and 16 para. 1 sentence 4 HinSchG (Hinweisgeberschutzgesetz - German Whistleblower Protection Act).

If you choose to provide us with your contact information, you are submitting the following data to us:

• Name, and/or
• E-mail address, and/or
• Telephone number.

We process your contact information for the aforementioned purposes (assessment of the reported facts, including in order to contact you in the event of queries regarding your report, and taking follow-up action). If you have provided your contact details, we will also process the information in order to send you an acknowledgement of receipt of the report within seven days of that receipt. In addition, we will provide you with feedback on the planned and already taken follow-up measures and the reasons for these within three months from the acknowledgement of receipt of the report or, if no acknowledgement was sent to you, no later than three months and seven days after receipt of the report. The legal basis for the processing of the reporting person's data and the information contained in their report is Art. 6 para. 1 sentence 1 lit. c GDPR in conjunction with §§ 10 and 12 HinSchG.

The contact information and other information, from which the identity of the reporting person may be deduced, will be treated confidentially and only passed on to the competent authorities in the event of a legal obligation (e.g. disclosure in criminal proceedings at the request of the law enforcement authorities, disclosure to competent authorities due to a court decision). The legal basis is Art. 6 para. 1 sentence 1 lit. c GDPR in conjunction with §§ 10, 12, 9 para. 2 HinSchG.  Beyond these cases, we only pass on the contact information of the reporting person or other information, from which the identity of the reporting person may be deduced, if this is necessary for follow-up measures (e.g. internal investigations, submission to the competent authority) and subject to the consent  of the reporting person (Art. 6 para. 1 sentence 1 lit. a GDPR).

Information about the identity of persons who are the subject of a report and of other persons named in the report will also be treated confidentially and will only be passed on to the competent authorities in the event of a legal obligation (Art. 6 para. 1 sentence 1 lit. c GDPR in conjunction with §§ 10, 12, 9 para. 4 no. 2 to 6 HinSchG) or with their consent (Art. 6 para. 1 sentence 1 lit. a GDPR).

We generally store the data that you have provided to us as part of your report for the duration of three years after the conclusion of the procedure . Beyond this, we only store the data in order to fulfil our legal obligations (e.g. our retention obligations) (Art. 6 para. 1 sentence 1 lit. c GDPR). In this case, we block your data to the extent that it is only processed for the necessary purposes.

Our whistleblowing system is provided by the third-party provider whistle.law GmbH, Georgenstraße 27, 82054 Sauerlach, Germany. The processing of your data by whistle.law is carried out on our behalf on the basis of a data processing agreement pursuant to Art. 28 GDPR.

16.    Status and up-to-dateness of this data protection information

As of February 2024

Cookie information

Please note the following: You can ensure that no cookies are stored on your computer at all, or that only certain cookies are allowed to be stored. You can select this in your internet browser settings. You can also view and delete the stored cookies there.

If you block all cookies, you may not be able to use all the functions of our website.

We use cookies on our website. Cookies are text files that are sent from our web server to your browser when you visit our website and are stored on your computer for later retrieval. A cookie can therefore be used to identify your Internet browser when you visit the website again.

There are session cookies, which are those that are deleted when the browser is closed, and there are persistent cookies that are stored on the hard drive until their preset expiration date is reached or until they are actively removed by you.

Some of the cookies we use on our website come from third parties that help us analyze the impact of our website content and the interests of our visitors, measure the performance and performance of our website, or place on-demand advertising and other content on our or other websites. As part of our website, we use both first-party cookies (only visible from the domain you are currently visiting) and third-party cookies (visible across domains and regularly set by third parties).

In this context, we use the following types of cookies:

Technically necessary cookies: These are absolutely necessary to move around the website, to use basic functions and to ensure the security of the website; they do not collect information about you for marketing purposes, nor do they store which websites you have visited. The legal basis for the setting of technically necessary cookies is § 25 para. 2 TTDSG.

Optional cookies: We also use so-called analysis and marketing cookies on our website. Analysis cookies collect information about how you use our website, which pages you visit and, for example, whether errors occur when using the website. Marketing cookies are used to show you needs-based advertising on the website or offers from third parties and to measure the effectiveness of these offers. These are cookies that are not technically necessary.  The legal basis for the setting of these cookies is therefore your consent in accordance with § 25 para. 1 TTDSG.

Possibility of revocation and removal

As stated in the introduction of this section, you can enable or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been stored by your Internet browser can be deleted there at any time. If cookies are restricted or deactivated for our website, it may not be possible to use all functionalities.

Information on the cookies set:

16.1    Status and timeliness of this cookie information

As of August 2023