We, ceronas GmbH & Co.KG, appreciate your interest in our company.
We attach great importance to the protection and security of your data. Your personal data are processed exclusively in accordance with the statutory provisions of data protection law, especially of the European General Data Protection Regulation (hereinafter referred to as "GDPR").
I. Controller, Data Protection Officer
Responsible for the data processing (controller):
ceronas GmbH & Co.KG
Tel.: +49 (0) 67 63 - 6 33 50 0
Fax: +49 (0) 67 63 - 6 33 50 99
Please feel free to contact us if you have any questions or suggestions concerning data protection.
Web pages and services of our providers that our website links to are designed and operated by third parties. We do not have any influence on the design, content and function of such third-party services. Please note that the third-party web pages linked to by our website may install their own cookies on your device or collect personal data. We do not have any influence on this. If necessary, please obtain information about this directly from the providers of these linked third-party web pages.
II. Subject Matter of the Data Protection
Data protection comprises the protection of personal data. This includes all information that refers to an identified or identifiable natural person ("data subject"). For example, this includes details such as the name, address, telephone number and e-mail address as well as information that is necessarily collected while using our website, such as information about the start, end and scope of the use.
III. Type, Scope, Purpose and Legal Basis of the Processing of Data and Storage Period
Below we provide an overview of the type, scope, purpose and legal basis of the processing of data by our website.
1. Processing of Data on Our Website
1.1. Provision of Our Website
When you access our website with your device, we process the following data:
- Date and time of the access
- Duration of the visit
- Type of device
- Operating system
- Functions you use
- Amount of data sent
- Type of the incident
- IP address
Wir verarbeiten diese Daten, um Ihnen unsere Website zur Nutzung bereitzustellen, den technischen Betrieb sicherzustellen, zum Zwecke der Fehlerdiagnose, zur Störungsbeseitigung und zum Zwecke des Marketings.
We process these data in order to enable you to use our website, to ensure the technical operation, to diagnose errors, for troubleshooting purposes and for marketing purposes. The legal basis for the processing of these data is point (f) of Art. 6 (1) GDPR. The processing of data is necessary for the protection of our legitimate interest in enabling our customers and others to use our website and ensuring its technical operability.
These data are processed automatically when our website is accessed. The provision of these data is not prescribed by law or contract and is not required for the conclusion of a contract. Without providing the data, however, you cannot use our services.
We usually erase these data after seven days, unless, by way of exception, we need them for a longer period for the above-mentioned purposes. In such a case, we will erase the data without delay once the purpose no longer applies.
1.2. Log Files
During visits and use of our website, our web server logs certain information about this in a file (log file). Log files especially contain the following information:
- Accessed URL
- IP address of the user
- Time and date of the access
- Amount of data transmitted
- Web page from which the user accessed the requested page ("referrer")
- Web pages that are accessed by the user's system via our website
- http status
- Information on the browser type and version
- Operating system of the user
- Internet service provider of the user
The users' IP addresses are anonymised by stripping the last octet a short while after the connection to the website is terminated. We only analyse these data records for statistical purposes, to improve the website, for system security reasons (e.g. to prevent abuse) and for troubleshooting purposes.
The data are also saved to our system's log files. These data are not stored together with other personal data of the user.
The purpose of the temporary storage of the IP address is to enable the display of the website on the user's computer. For this, the user's IP address needs to be stored for the duration of the session.
The legal basis for the temporary storage of the data (and of the log files) is point (f) of Art. 6 (1) GDPR. ceronas GmbH & Co.KG has a legitimate interest in ensuring the operability of the website. Moreover, we use the data to optimise the website and to ensure the security of our information technology systems. In this connection, the data are not analysed for any marketing purposes.
The data are erased as soon as the purpose is achieved, and the IP address is anonymised. Where the data are collected to provide the website, this is the case upon termination of the respective session. Where data are stored in log files, the erasure takes place after four weeks, at the latest. Longer storage is possible. However, in this case the users' IP addresses are erased or anonymised so that they can no longer be associated with the respective client.
If you do not wish that our cookies are stored on your computer, please disable the storage of cookies for our website in your browser or configure your browser in such a way that no cookies at all are stored on your computer.
1.4. Statistical Analyses
No direct personal analysis is performed with your data. However, we reserve the right to analyse pseudonymised or anonymised data records to improve the website and for statistical purposes. In this context, general information is logged to TYPO3, e.g. which of our web pages was accessed or which page was visited most frequently.
The legal basis for the temporary storage of the data is point (f) of Art. 6 (1) GDPR.
Your data will be stored until the purpose no longer applies.
2. Functions on Our Website
The newsletter, which contains information on new products, offers or services, is delivered by e-mail. When subscribing to our (free) newsletter, the following personal data are transmitted to us from the input screen: salutation, first name, surname, company/organisation, e-mail, language selection (German/English).
If you subscribe to our newsletter, we will send a confirmation link to the e-mail address you specified. You will only receive our newsletter once you have activated this confirmation link (double opt-in procedure).
The e-mail address is required for the purpose of delivering the newsletter. Other personal data are required during the subscription process in order to prevent abuse of the services or of the specified e-mail address.
If you no longer wish to receive the newsletter, you can unsubscribe at any time. To do so, simply click the unsubscribe link provided in each of our newsletters.
Your data will be stored as long as the newsletter subscription is active. Thus, they will be erased as soon as they are no longer required for the achievement of this purpose.
The other personal data from the subscription process are usually erased within seven days.
2.2. Google Maps
Our website uses Google Maps on a number of pages to display interactive maps and to provide directions. Due to the use of Google Maps, information about the use of this website including your IP address and the (start) address entered in the context of the route planning function may be transmitted to Google in the USA.
When you access a page that contains Google Maps, your browser establishes a direct connection to the Google servers. The map content is transmitted directly from Google to your browser, which integrates it in the web page. Thus, we do not have any influence on the scope of the data collected by Google in this way.
The purpose and the legal basis of the processing of data is a legitimate interest pursuant to point (f) of Art. 6 (1) GDPR. We have a legitimate interest in providing the Google Maps service.
In this connection, we will store your personal data as long as necessary to achieve the purpose.
2.3.1. Contact Form
We process these data on the basis of point (f) of Art. 6 (1) GDPR. We have a legitimate interest in duly processing your contact request.
We will erase the data collected via the contact form without delay after processing the contact request. The personal data collected additionally during the transmission procedure will be erased after a period of seven days, at the latest.
2.3.2. Contact by E-Mail
Instead of using our contact form, you can also contact us via the e-mail addresses specified on our website. In this case, the data you send and your e-mail address will be stored. The data will not be forwarded to any third parties.
The legal basis for processing the data that are transmitted in the course of an e-mail transmission is point (f) of Art. 6 (1) GDPR. We have a legitimate interest in processing of the conversation and conclusively fulfilling your contact request.
The data will be erased as soon as they are no longer needed for the purpose for which they were collected. For the personal data sent by e-mail, this is the case as soon as the respective conversation with you ends. This will be assumed as soon as the circumstances show that the respective matter has been dealt with conclusively.
2.4. Customer Platform
On our website, our distributors can use a separate login zone. In this context, the following personal data are collected: preferred user name, password, first name, surname, company, e-mail address.
When initiating or executing a contractual relationship between you and us, the legal basis for the processing of data is point (b) of Art. 6 (1) GDPR.
We only collect and process the usage data that accumulate within the scope of the use of the login zone for abuse control and troubleshooting purposes and to uphold the operability. The data will not be used for any other purposes and will not be forwarded to any third parties without authorisation.
The data will be erased from the customer platform as soon as they are no longer needed. Apart from this, data are stored for the term of the business relationship.
IV. Recipients of Personal Data
The following groups of persons receive the said personal data:
Within our company, access is only granted to persons who need such for the purposes specified in section III above. These are:
- Sample Shipping department
- Laboratory: Research & Development; Application Technology
We will only forward your personal data to external recipients outside ceronas GmbH & Co.KG if this is necessary in order to handle or process your request, if another statutory permission is on hand or if you have given us your consent to do so. External service providers who process data for us are subject to strict contractual regulations in line with data protection law and are not deemed to be third parties in the meaning of data protection law.
Possible external recipients:
Processors: Service providers that we engage for the provision of services in the field of HR or that take care of the maintenance of IT systems. These processors are carefully selected by us and are regularly reviewed in order to make sure that your employee data are in good hands. The service provider is only permitted to use the employee data for the purpose specified by us.
IT system: LineSoft
Time tracking: GDI-Zeit; ELV
Production control: GRP
Staff coaching: peB Personal
Private entities: Private entities that we send your data to, e.g.:
Payslips: Kneip Tax Consultancy
For information on how long personal data are stored, please refer to the respective chapter concerning the processing of data. As a general rule, we will only store your personal data as long as necessary to achieve the respective purpose or, if you have given your consent, as long as you do not revoke your consent. If you object, we will erase your personal data unless their further processing is permitted according to relevant statutory provisions. We will also erase your personal data if we are required to do so for legal reasons.
VI. Rights of Data Subjects
As a data subject, you have the following rights:
Right to information: You have the right to request information on the data we store concerning you.
Right to rectification and erasure: You can request us to rectify inaccurate data and, if the statutory conditions are fulfilled, to erase your data.
Restriction of processing: If the statutory conditions are fulfilled, you can request us to restrict the processing of your data.
Data portability: If you provided us with data on the basis of a contract or consent, you can, if the statutory conditions are fulfilled, request us to give you the data provided by you in a structured, common and machine-readable format or to transmit them to another controller.
Objections to the processing of data on the basis of "legitimate interest": You have the right to object to the processing of your personal data on grounds relating to your particular situation at any time on the legal basis of "legitimate interest". If you exercise your right to object, we will discontinue the processing of your data, unless we can demonstrate compelling legitimate grounds for the further processing, which override your rights.
Revocation of consent: If you have given us your consent to the processing of your data, you can revoke it at any time with effect for the future. This will not affect the lawfulness of the processing of your data prior to the revocation.
Right to lodge a complaint with the supervisory authority: You can also lodge a complaint with the responsible supervisory authority if you consider that the processing of your data infringes applicable law. For this purpose, you may contact the data protection authority responsible for your place of residence or country or the data protection authority responsible for us.
Contact us: If you have any questions concerning the processing of your personal data, your rights as a data subject and any consent you may have given, please feel free to contact us free of charge. To exercise all your aforementioned rights, please contact info(at)ceronas.de or send a letter to the address specified in section 1. above. When doing so, please make sure that we can clearly identify you.
Revision: 12 February 2019