Source: https://www.caparol.de/en/privacy-policy.html
Timestamp: 2018-12-14 04:54:56
Document Index: 417847957

Matched Legal Cases: ['Art. 6', '§ 195', '§ 147', '§ 257', '§ 238', '§ 147', '§ 257', '§ 238', '§ 147', '§ 257', '§ 238', 'Art. 28', 'Art. 29', 'Art. 28', 'Art. 28']

Privacy policy: Caparol
Data protection information of the DAW SE Group
The responsible party in the sense of the General Data Protection Regulation (GDPR), of the data protection regulations holding good in the member states of European Union and of other regulations with a legal data-protecting character is the company specified in the imprint (in the following: "we" or "us" or "our").
The data protection officer of the responsible party for the processing is:
8. Collecting of additional data and information
Data protection with applications and application processes
Data protection regulations on the application and use of LinkedIn Plug-Ins
Our websites use a plug-in of the social network LinkedIn. LinkedIn is an offer of LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA (hereinafter referred to as "LinkedIn"). You can recognize the LinkedIn plug-in by the corresponding logo or the "Recommend" button. Please note that the plug-in establishes a connection between your respective Internet browser and LinkedIn's server when you visit our websites. LinkedIn is thus informed that our website has been visited with your IP address. By clicking on the "Recommend button" of LinkedIn and being logged into your LinkedIn account at the same time, you have the option of linking content from our website on your LinkedIn profile page. In doing so, you enable LinkedIn to identify you through your visit on our websites or through your user account. We do not have knowledge about the content of the transmitted data that is used by LinkedIn.
For further information regarding the collection of the data and your legal options and setting options, please contact LinkedIn. These are made available to you trough http://www.linkedin.com/static?key=privacy_policy&trk=hb_ft_priv.
Data protection regulations on the application and use of Xing Plug-Ins
Our websites have integrated the "Share-Button" from XING. Therefore, when you access our websites via your browser, a connection to the servers of XING AG, Gänsemarkt 43, 20354 Hamburg, Germany, is established. This enables the share functions (e.g. display of the counter value). We do not store any personal data about you when you visit our websites. In particular, XING does not store any IP addresses. Likewise, your usage behaviour is not evaluated. The current information on data protection regarding the "Share-Button" as well as further relevant information can be called up at https://www.xing.com/app/share?op=data_protection
Cookies -Description and scope of the data processing
In addition, the following third party cookies are used by visiting our site
For the purposes of marketing and optimization, products and services of wiredminds GmbH (www.wiredminds.de), Lindenspürstraße 32, 70176 Stuttgart, are used on this website. In the context, data is collected, processed and stored from which user profiles are created under a pseudonym. The user profiles will be made completely anonymous, as far as this is possible and reasonable. Cookies may be used for this purpose. The collected data, which may also contain personal data, is transmitted to wiredminds or collected directly by wiredminds. The data obtained in this way will not be used to identify you personally without your separate consent. Furthermore, the data are not combined with personal data about the bearer of the pseudonym. If IP addresses are collected, they will be made anonymous immediately after collection by deleting the last number block. The collection, processing and storage of data can be revoked at any time with effect for the future under the following link: <a onclick="alert('You are now excluded from tracking.');" href="javascript:wiredminds.optOut()">Exclude from tracking.</a>
Data protection regulations on the application and use of Twitter Plug-Ins
You can change your data protection settings at Twitter in the account settings under: http://twitter.com/account/settings
Data protection regulations on the application and use of Pinterest Plug-Ins
In addition our website uses social plug-ins ("plug-ins") of the social network Pinterest, which is operated by Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103, USA ("Pinterest"). The plug-ins can be identified by buttons with the "Pint it" symbol on a white or red background, for example. An overview of the Pinterest plug-ins and their appearance can be found here: https://developers.pinterest.com/docs/getting-started/introduction/
When you visit a page of our website that contains such a plug-in, your browser establishes a direct connection to Pinterest's servers. The content of the plug-in is transmitted by Pinterest directly to your browser and integrated into the page. The integration gives Pinterest the information that your browser has called up the corresponding page of our website, even if you do not have a profile at Pinterest or are not currently logged in at Pinterest. This information (including your IP address) is transmitted directly from your browser to a Pinterest server in the USA and stored there. If you are logged in to Pinterest, Pinterest can immediately associate your visit to our website with your Pinterest profile. If you interact with the plug-ins, for example by pressing the "Pin it" button, the corresponding information is also transmitted directly to a Pinterest server and stored there. The information is also published on Pinterest and displayed to your contacts. Please refer to Pinterest's privacy policy for the purpose and scope of data collection and the further processing and use of the data by Pinterest and your rights and setting options for protecting your privacy: https://about.pinterest.com/de/privacy-policy
To prevent Pinterest from associating the information collected through our website with your profile on Pinterest, you have to log out of Pinterest before visiting our website. You can also completely prevent the loading of Pinterest plug-ins with add-ons for your browser, e.g. with the script blocker "NoScript" (http://noscript.net/) .
By subscribing to our newsletter, your e-mail address will be used for our own advertising purposes until you log out. You will receive regular information by e-mail on current topics as well as e-mails for special occasions, for example special promotions. These e-mails can be personalized and individualized based on our information about you. If you have not given us your written consent to subscribe to our newsletter, we will use the double-opt-in process, i.e. we will not send you a newsletter by e-mail until you have expressly confirmed to us beforehand that we should activate the newsletter dispatch. Then we will send you a notification e-mail and ask you to confirm that you would like to receive our newsletter by clicking on a link contained in this e-mail. If you do not wish to receive any more newsletters from us, you can object to this at any time without incurring any costs other than the transmission costs according to the basic rates. Therefore you only have to use the unsubscribe link contained in each newsletter or send a message to us or our data protection officer.
Data protection regulations on the application and use of Google +1 Plug-Ins
Our websites contain the Google +1 button. Google +1 is a social network. This is provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. With Google +1 you have the possibility to publish personalized content on the Internet. However, Google will save information about the content you clicked +1. Google will also store information about your visit to the website that you have viewed. Your +1 clicks can and will usually be used in your +1 profile and other Google services, such as Google's search engine search results, or otherwise on pages on the Internet or Internet ads.
Google stores information about your activities on Google +1 and requires you to create a public profile and profile name on Google in order to use the +1 button. Google +1 and all Google services will use your profile name. Your identity behind the profile may be disclosed to anyone who has knowledge of your email address or other information with which you can be identified.
According to its own statements and in compliance with its data protection regulations, Google uses the information transmitted by you. Google also compiles statistics on Google +1 activities, which may be published and shared with third parties.
- No collection and processing of your personal data on a regular basis
- Collection and processing of your personal data in exceptional cases
9.3 Right to restriction of the processing
9.4.1 Deletion obligation
9.4.2 Information to third parties
9.4.3 Exceptions
9.8 Right to withdraw from the declaration of consent under data protection law
9.9 Automated decision-making in individual cases including profiling
9.10 Right to complain at a supervisory authority
9. Modifications of this data protection information
Customer information, as well as right of access by the data subject
Chief Executive Director, Head of data processing
Dr. Christoph Hahner, Dr. Ralf Murjahn (CEO), Dr. Thomas Späth, Daniel Weber and Michael Wendler (COO).
Mr. Jens Engelhardt (attorney-at-law) and his deputy Mr. Prof. Sven Kolja Braune (attorney-at-law),
Tel: 06151-15369-0
Fax: 06151-15369-99
Since 1895 DAW has developed, produced and sold innovative coating systems. As an independent family company in its fifth generation, we have continued to grow to become the third largest manufacturer of building paints in Europe and for decades we have been the market leader in Germany, Austria and Turkey.
The DAW Group is the home to numerous stalwart brands. It is the driver of innovation in coating materials, thermal insulation and building protection and is a reliable partner for its customers and suppliers. The business purpose is the manufacture and sale of the aforementioned products. The DAW Group has ist own holding companies in various countries as well as outside Europe, e.g. Russia, United Arab Emirates and Turkey etc.: A list of foreign locations can be found at www.daw.de/unternehmen/wer-wir-sind/unsere-standorte/daw-weltweit.html
The purpose of processing of your personal data is necessary and does only happen for the performance of a contract to which the data subject is a party or in order to take steps at the request of the data subject prior to entering into a contract (purchase, delivery and service relationship), in this case with you as the customer.
Legitimate interest according to Art. 6 Para. 1 lit. f GDPR (e.g. direct marketing for existing customers, exercise domiciliary rights; Assertion of legal claims and defense in legal disputes; Safeguarding the IT security and operation of DAW SE; Prevention and detection of criminal offences; Collecting evidence of criminal offences through video surveillance. They thus serve to protect customers and employees as well as exercising domicilarty rights; Action to protect the facility security (e.g. limited access control).
Recipient and categories of recipients
Independent offices abroad, as long as your delivery and demand relates to them
If you enquire our products or services abroad, mostly Europe or in a third country, your personal data will be transferred to such office of the DAW Group. Some third countries such as Russia, United Arab Emirates or Turkey do not comply with the GDPR and further have no adequate level of protection of personal data. In this case we ask for your explicit consent for a transfer of your data to a third country.
Storage duration, erasure of personal data
If necessary, we process and store your personal data for the duration of our business relationship, which also includes, for example, the initiation and processing of a contract. In addition, we are subject to various storage and documentation obligations arising from the German Commercial Code (HGB), the Fiscal Code (AO), the German Banking Act (KWG) and the Money Laundering Act (GwG), among others. The periods for storage and documentation specified there range from two to ten years. Additionally the storage duration is influenced by legal limitation periods, which can range from e.g. according to §§ 195 ff. of the German Civil Code (BGB) three to in certain cases even 30 years.
Business correspondence: 10 Years, § 147 Para. 1 No. 4,5 in connection with Para. 3 the Fiscal Code (AO); § 257 Para. 1 No. 1, 4 in connection with § 238 Para. 1 the German Commercial Code (HGB)
Contracts: 10 Years, § 147 Para. 1 No. 4,5 in connection with Para. 3 the Fiscal Code (AO); § 257 Para. 1 No. 1, 4 in connection with § 238 Para. 1 the German Commercial Code (HGB)
Accounting records: 10 Years, § 147 Para. 1 No. 4,5 in connection with Para. 3 the Fiscal Code (AO); § 257 Para. 1 No. 1, 4 in connection with § 238 Para. 1 the German Commercial Code (HGB)
Existence of a right of access by the data subject
11. If you provide us with personal data of your customers for further processing, e.g. within the scope of the fulfilment of so-called drop shipments, that is usually not qualified as a processing in the sense of Art. 28 par. 3 GDPR, but a data transmission, because we process the data for our own purposes, namely to fulfil our delivery obligation and under instruction-free determination of our own resources. In order to ensure legal conformity, we establish the following mutual processing rule:
(1) Contractor and Principal are obliged to process personal data only in accordance with the basic EU data protection regulation (GDPR) and the Federal Data Protection Act (BDSG-new) and, if applicable, other special legal standards.
(2) The employees of contractors and Principal as well as their vicarious agents are subject to data confidentiality in accordance with Art. 29 GDPR in conjunction with the Federal Data Protection Act-new (BDSG-new). As far as the Contractor or the Principal uses a processor for the processing of personal data within the scope of the order, he shall - in accordance with Art. 28 GDPR - be carefully selected with regard to the guaranteed level and obliged and checked accordingly within the scope of a data processing agreement. The same applies if the Contractor and the Principal make use of another third party for the fulfilment of the order by way of the transfer of functions. The obligations arising from the confidentiality obligation/ data processing agreement relate to all individual details of a person's personal and material circumstances as well as to all protective measures for this information. In particular, the Contractor and the Principal are obliged not to process any personal data without authorization.
(3) The Contractor will only use personal data which he receives from the Principal and/or from third parties within the scope of the execution of the order or which he collects himself for the purpose of the execution of the order. The Principal declares his agreement with this purpose limited processing. The use of this personal data outside the joint execution of the order (change of purpose) requires a separate, prior written consent of the Principal.
(4) In the event of the transfer of personal data to the Contractor assures the Principal that he is entitled to do so on the basis of an authorization under the GDPR, the BDSG-new or a special legal standard.
(5) If the Contractor and/or the Principal violate these obligations, the other party reserves the right to assert a resulting claim for damages and/or recourse.
(6) In the internal relationship, the Contractor and the Principal are only liable if the violation is within their own area of responsibility. In the event of a violation that is within the joint area of responsibility, the Contractor and the Principal shall be mutually liable in proportion to their respective share of fault and/or responsibility.
(7) If one party is held responsible by an affected party or the supervisory authority (liability, damages, fines, etc.), although the other party is responsible for the violation giving rise to the claim, the responsible party is obliged to indemnify the claimed party upon first request.
(8) The obligations of Contractor and Principal shall be apply beyond the end of the contract.
Supplier information, at the same time information
for data processing in accordance with Articles 12, 13, 14 ff. and 21 GDPR
The purpose of processing of your personal data is necessary and does only happen for the performance of a contract to which the data subject is a party or in order to take steps at the request of the data subject prior to entering into a contract (purchase, delivery and service relationship), in this case with you as the supplier.
If you offer your products or other services for a certain country, we transfer your data to our affiliated companies of the DAW Group abroad, above all within the EU, but also outside the EU in accordance with your offer. Some of these countries, such as Russia, the United Arab Emirates or Turkey, are considered third countries within the meaning of the GDPR and do not have adequate legislation for the protection of personal data. Therefore, we ask for your explicit consent for a transfer of your data to a third country.
11. If we provide you with data from our customers for further processing, e.g. as part of the performance of so-called drop shipments, that is usually not qualified as a processing in the sense of Art. 28 par. 3 GDPR, but a data transmission, because you process the data for your own purposes, namely to fulfil your delivery obligation and under instruction-free determination of your own resources. In order to ensure legal conformity, we establish the following mutual processing rule: