Source: https://www.kanzan.de/en/privacy-policy.html
Timestamp: 2019-04-24 20:34:25+00:00

Document:
We take the protection and security of your (hereinafter “you” or “user”) personal data (hereinafter “pd”) as defined by Art. 4 no. 1 General Data Protection Regulation (hereinafter “GDPR”) and any other applicable data protection regulations seriously. Therefore, KANZAN Spezialpapiere GmbH (hereinafter “we” or “KANZAN”) processes pd on its website exclusively within the limits of the GDPR and any other applicable data protection regulations.
Generally, we only process pd of our users if and to the extent this is necessary for providing a functional website and presenting our contents and goods and services.
As a rule, we only process personal data of our users with their prior consent except in cases where it is impossible for factual reasons to obtain the user’s prior consent and processing of the data is permitted by law.
The pd of the data subject is deleted or blocked as soon as the purpose of data storage ceases to exist. Data may be stored beyond that time where this is provided for by European or national legislation in appropriate European Union regulations, laws or other provisions which the controller is obliged to observe and comply with. The data is also blocked or deleted if and as soon as the storage period prescribed by any of the aforesaid regulations expires unless further storage of the data is necessary for the conclusion or performance of a contract.
Every time a user accesses our website as well as in the case of a download of documents we offer there, our system automatically collects data and information from the computer system of the accessing computer.
This data is not stored together with other pd of the user.
The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. For such purpose, the IP address of the user must be stored for the duration of the session.
The data is stored in log files to ensure the functionality of the website. Moreover, the data helps us optimize the website and ensure the security of our information technology systems. The data is not analysed for marketing purposes in this context.
The legal basis for the data processing is Art. 6 subs. 1 f) GDPR. The purposes stated above constitute our legitimate interest in the data processing.
Log files are deleted automatically after four weeks.
On our website we offer vacancies on the page “Jobs”. Application documents can also be filed by email to the email address stated there. The data which is processed in this context is pd in terms of Art. 4 no. 1 GDPR.
The data is processed to determine the qualification and aptitude of the applicant for the vacancy to be filled by KANZAN.
The legal basis for the processing including but not limited to the temporary storage of the data contained in the application documents is § 26 BDSG (German Federal Data Protection Act).
If the application is rejected, the data will be deleted after six months. If the applicant is employed/ engaged by KANZAN, the application documents will be transferred and adopted into a personnel file.
You can contact KANZAN via the email addresses provided on the website. In this case, the technical data and pd of the user which is transferred with the email is stored.
We process the pd from the user’s email exclusively for the purpose of processing the user request.
The legal basis for the processing of the data which is transferred in the context of an email contact is Art. 6 subs. 1 f) GDPR. Where the email contact is intended to bring about the conclusion of a contract, the processing is also based on Art. 6 subs. 1 b) GDPR as an additional legal basis.
The data is deleted as soon as it is no longer necessary to achieve the purpose of data collection. For pd which is transferred by email, this is the case when and as soon as the relevant communication with the user is terminated. Communication is deemed terminated when it can be concluded from the circumstances that the case in question is finally settled, that the data need not be stored under any other legal provisions and no restriction according to Art. 17 subs. 3 GDPR applies.
Any interested user may request us to provide him or her with information material. For such purpose, the user may send an email to sales@kanzan.de. When the user sends an information request, the name and address of the user is processed.
The data is processed exclusively for the purpose of providing the user with the requested documents.
The legal basis for the processing of the user’s pd is the consent given by the user, Art. 6 subs. 1 a) GDPR.
The data is deleted one year after the documents have been sent to the user unless there are legal provisions requiring further storage and provided no restriction according to Art. 17 subs. 3 GDPR applies.
Our website uses session ID cookies. Cookies are text files which are stored in the Internet browser or stored by the Internet browser on the computer system of the user. When a user accesses a website, a cookie can be stored on the operating system of the user. This cookie contains a distinctive character string which enables unambiguous identification of the browser when the website is accessed again.
We need cookies to measure the Webcluster Performance.
The user data which is collected by the cookies which are technically necessary are not used to create user profiles.
If you deactivate cookies for our website, you might be unable to use all functions and features of the website without restrictions. The session cookie which we use on this website is deleted when the user closes the browser.
The legal basis for the processing of personal data by means of cookies is Art. 6 subs. 1 f) GDPR. Our legitimate interest consists in the provision of a user-friendly and technically optimized website.
The data may also be received by third parties which process data on behalf of KANZAN or which have access to the data in the context of the services they render to KANZAN. Such third parties are, for instance, IT service providers and shipment service providers.
We have concluded appropriate agreements for data processing on behalf according to Art. 28 GDPR with all service providers.
The user data is not transferred to third parties (Art. 4 no. 10 GDPR) unless the user gives his or her explicit consent to the transfer. Pd is transferred to government bodies and authorities exclusively within the limits of the law.
All data is stored on servers and/or computers in the European Union.
Right to erasure of your pd which we have stored, according to Art. 17 GDPR if and to the extent that processing is not necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or even mere potential defence of legal claims.
Right to lodge a complaint with a supervisory authority according to Art. 77 GDPR. This usually is the supervisory authority of your habitual residence or place of work or of the business domicile of KANZAN.
Where pd is processed based on legitimate interests according to Art. 6 subs.1 sentence 1 f) GDPR, the data subject has the right to object to the processing of his or her pd according to Art. 21 GDPR, either on grounds relating to his or her particular situation or if the data subject objects to the processing for direct marketing purposes. In the latter case, the data subject has a general right to object to the processing which we will respect and implement without the data subject being required to state grounds for the objection relating to his or her particular situation.

References: Art. 4
 Art. 6
 Art. 4
 § 26
 Art. 6
 Art. 6
 Art. 17
 Art. 6
 Art. 17
 Art. 6
 Art. 28
 Art. 17
 Art. 77
 Art. 6
 Art. 21