Privacy Policy

Data protection declaration

Zschimmer & Schwarz is committed to the conscientious protection and security of your personal data. Below, we would like to inform you about the processing of personal data when using our website. Personal data are all information that can be related to you personally, e.g. name, address, e-mail addresses, user behaviour.

I. Responsible controller for data processing and data protection officer

The responsible controller according to Art. 4 para. 7 EU General Data Protection Regulation (GDPR) is:

Zschimmer & Schwarz GmbH & Co KG Chemische Fabriken
Max-Schwarz-Strasse 3–5
56112 Lahnstein | DE

T +49 2621 12-0
F +49 2621 12-407
info@zschimmer-schwarz.com

Data Protection Officer
We have appointed a data protection officer for our company:

DEUDAT GmbH
Zehntenhofstrasse 5b
65201 Wiesbaden | DE
T +49 611 950008-33

You can contact our data protection officer at Datenschutz@zschimmer-schwarz.com or via the above postal address, to the attention of "Data protection officer".

II. Collection of personal data when visiting our website

1. Transmitting of data via the internet
When using the website for purely informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect such personal data that is transmitted from your browser to your internet provider and from there to our server. If you want to view our website, we collect the following data:

• IP address
• Date, time, time zone difference to Greenwich Mean Time (GMT)
• Information on the subpages of our website that you have accessed: content of the request (specific page)
• Access status / HTTP status code
• Amount of data transferred in each case
• Address of the website from which you came to our website (referrer URL)
• Browser type and version of the browser
• Operating system

We process these data, so that you can load our website, for the purpose of checking and, if necessary, restoring system security and stability, as well as for statistical purposes (see below). The legal basis for this processing is Art. 6 para. 1 f) GDPR. We have a legitimate interest in ensuring that our website is displayed correctly on your screen and that we can determine and correct the causes in the event of malfunctions.

The above mentioned data will be stored in log files for a maximum of 30 days. Longer storage only takes place only if necessary to assert and defend our legal claims, for example after a hacker attack.

The provision of the above data is neither required by law nor by contract and is not required to conclude a contract with us. However, for technical reasons, it would not be possible to visit our website without processing this data.

Duration of storage:

Personal data will be deleted after the statutory retention period has expired, provided that they are no longer required to fulfil or initiate a contract.

2. Matomo (formerly called Piwik)
This website uses the open source web analysis service Matomo. Matomo uses technologies that make it possible to recognize the user across multiple pages with the aim of analyzing the user patterns. The information recorded by Matomo about the use of this website will be stored on our server. Prior to archiving, the IP address will first be anonymized.

Through Matomo, we are able to collect and analyse data on the use of our website by website visitors. This enables us to find out, for instance, when which page views occurred and from which region they came. In addition, we collect various log files (e.g. IP address, referrer, browser, and operating system used) and can measure whether our website visitors perform certain actions (e.g. clicks, purchases, etc.).

The use of this analysis tool is based on Art. 6 Sect. 1 lit. f GDPR. The website operator has a legitimate interest in the analysis of user patterns, in order to optimize the operator’s web offerings and advertising.

Hosting

We host Matomo by an external service provider (host). Personal data collected on this website are stored on the servers of the host. Our host will only process your data to the extent necessary to fulfil its performance obligations and to follow our instructions with respect to such data.

Execution of a contract data processing agreement

We have concluded a contract for order processing with these third-party providers, which guarantees that the data collected with Matomo will be processed exclusively according to our instructions and in accordance with the GDPR.

3. Business relationships
We are allowed to process data on the basis of Art. 6 para.1 b) GDPR if this is necessary for the performance of a contract between you and us or for the implementation of pre-contractual measures, that were carried out at your request. In this respect, we process your data in particular for contract management, communication with you, order acceptance, shipping, invoicing, and if necessary, for collection and for the enforcement and defence of legal claims.

We use your data to the extent permitted to send advertising by post and, if you have provided us with your e-mail address, e-mail advertising for our products and services. The legal basis is Art. 6 para. 1 f) GDPR. We have a legitimate interest in sending direct mail (for your right of objection, see V.).

The provision of personal data is not required by law nor by contract. However, in order to conclude a contract with us, it is necessary to process your name or company name, your e-mail address and your postal address. Without these data, sending e-mails to you, e.g. for sending contractual documents or offers, invoicing and possibly the assertion of justified claims, would not be possible.

4. Use of our contact form or other contact
When you contact us by e-mail or by using our contact form, the data you provide (your e-mail address, possibly your name and telephone number) will be processed by us in order to answer your questions.

We process your e-mail address and your message, which you enter in our contact form or send us by e-mail, in accordance with Art. 6 para. 1 f) GDPR. We have a legitimate interest in processing your inquiries. We process other data based on your consent (Art. 6 para. 1 a) GDPR), provided, that you have consented to this processing by clicking the "Send" button. If you enter sensitive information that contains special categories of data in the "Message" field, you also consent to the processing of these data. If you are our customer at the same time, Art. 6 para. 1 b) GDPR will be the legal basis for such processing.

The provision of these data is not mandatory and not necessary for the conclusion of a contract. However, in order to use the contact form, you must provide an e-mail address, otherwise we will not be able to respond to you. If you provide further data, this is done voluntarily.

III. Sources of data

We usually receive your data from yourself. In some cases, the following data may come from other sources, provided we are authorised to collect the data in this way:

• Public trade and association registers (company name, addresses)
• Address investigators, credit agencies (names, addresses), if we cannot reach you at your address

IV. Recipients of your data

We partially transmit the above data to these processors for the following purposes:

• V8 Werbeagentur, Rothenburger Strasse 35, 90443 Nuernberg, Germany and hgs5 GmbH, Schwabacher Strasse 117, 90763 Fuerth, Germany (design and implementation of the website)
• JK-Computer GmbH, Trinkbornstrasse 24, 56281 Doerth, Germany (hosting)
• if necessary, further processors from the areas of web hosting, IT services, printing and data carrier destruction

Processors process data only on our instructions and not for their own purposes. In order to ensure data protection compliant processing, we have concluded an order processing contract with our website hoster.

In certain cases, some of your data may be passed on to other recipients if you have given your consent (Art. 6 para. 1 a) GDPR), if we are legally obliged to do so (Art. 6 para. 1 c) GDPR) or if it is necessary for the protection of legitimate interests (Art. 6 para. 1 f) GDPR):

• Post, shipping and telecommunications companies to ship items and communicate with you
• Law enforcement agencies, courts to enforce or defend legal claims
• Auditors, lawyers or tax advisors
• Insurance companies to handle claims
• LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA (company-own fan site of Zschimmer & Schwarz Chemie GmbH)
• LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA (company-own fan site of Lefatex Chemie GmbH)

V. Your data protection rights

Under the conditions of Art. 15 GDPR, you can request information from us about whether and which data we process from you. You can request the correction and, under certain circumstances, the completion of your data in accordance with Art. 16 GDPR. You have the right that we delete your data under the conditions of Art. 17 GDPR or block them under the conditions of Art. 18 GDPR. According to Art. 20 GDPR, you have the right to receive your data transmitted to us on the basis of a consent or a contract, provided that the processing is automated. If you wish and if this is possible on a technical level, we will transfer these data to a third party. According to Art. 21 GDPR, you have the right to object at any time to the processing of personal data relating to you based on Art. 6 para. 1 e) or f) GDPR for reasons that arise from your particular situation. Under certain conditions, your rights may be restricted or excluded by law.

If you have consented to data processing for a specific purpose, you have the right to revoke your consent at any time. The revocation does not affect the legality of the processing until the revocation. The revocation can be declared via e-mail to info@zschimmer-schwarz.com. After revocation, we will no longer process your data unless we are legally entitled or obliged to do so. You have the right to submit data protection complaints to a data protection authority, in particular to the State Commissioner for Data Protection and Freedom of Information Rhineland-Palatinate, P.O. Box 30 40, 55020 Mainz, Germany.

If we process data exclusively in accordance with Art. 6 para. 1 f) GDPR to safeguard our interests, you have the right to object to the processing of your data for reasons that arise from your particular situation. If you object, we will no longer process these data, unless we can prove compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to enforce legal claims. Objections can for example be declared via e-mail to info@zschimmer-schwarz.com.

Change of our data protection regulations

We reserve the right to change our security and data protection measures insofar as this becomes necessary due to technical developments. In these cases, we will also adapt our information on data protection accordingly. Therefore, please note the current version of our data protection declaration.

Version: 01/2021