Privacy policy

We are delighted that you are interested in our company. Data protection is a particularly high priority for the management of KRAIBURG TPE. 
Below, we explain how we handle your personal data.

Information about the responsible party

The responsible party within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:

KRAIBURG TPE GmbH & Co. KG
Friedrich-Schmidt-Str. 2
84478 Waldkraiburg

Phone: +49 (0) 8638 9810-0
Email: info@kraiburg-tpe.com
Website: www.kraiburg-tpe.com 

Information on the data protection officer (DPO)

We have appointed the following person as our data protection officer:

Data Protection Officer
KRAIBURG TPE GmbH & Co. KG
Friedrich-Schmidt-Str. 2
84478 Waldkraiburg 

Tel.: +49 (0) 8638 9810-0
Email: Datenschutz@kraiburg-tpe.com

Any data subject may contact our data protection officer directly at any time with any questions or suggestions regarding data protection.

§ 1    Your Rights

You can exercise the following rights at any time using the contact details provided:

• Information about your data stored by us and its processing (Art. 15 GDPR),
• Correction of inaccurate personal data (Art. 16 GDPR),
• Deletion of your data stored by us (Art. 17 GDPR),
• Restriction of data processing if we are not yet permitted to delete your data due to legal obligations (Art. 18 GDPR)
• Object to the processing of your data by us (Art. 21 GDPR) and
• Data portability, provided that you have consented to data processing or have concluded a contract with us (Art. 20 GDPR).

If you have given us your consent, you can revoke it at any time with effect for the future. You can lodge a complaint with a supervisory authority at any time, e.g. with the competent supervisory authority of the federal state in which you reside or with the authority responsible for us as the controller.

A list of supervisory authorities (for the non-public sector) with addresses can be found at: www.bfdi.bund.de/DE/Service/Anschriften/anschriften_table.html

§ 2    Server Log Files

(1)    Type and purpose of processing: When you access our website, i.e., when you do not register or otherwise submit information, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address, and similar information.

It is processed in particular for the following purposes:

• Ensuring a smooth connection to the website
• Ensuring smooth use of our website
• Ensuring and evaluating system security and stability, in particular for the detection of misuse
• Ensuring error-free presentation and optimization of our website

We do not use your data to draw conclusions about your person. However, we reserve the right to check the server log files retrospectively if there are concrete indications of illegal use.

(2)    Legal basis: Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website and ensuring system security and misuse detection.
(3)    Recipients: Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.
(4)    Third country transfer: No transfer to third countries takes place. The data are processed exclusively in the EU/EEA. 
(5)    Storage duration: Data is stored in server log files in a form that allows the identification of the data subjects for a maximum period of 7 days, unless a security-related event occurs (e.g., a DDoS attack).
In the event of such an incident, server log files will be stored until the security-related incident has been resolved and fully clarified.
(6)    Provision mandatory or required: The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website cannot be guaranteed. In addition, individual services may not be available or may be restricted.
(7)    Right to object: Please read the information about your right to object below.
 

§ 3    Contact

(1)    Type and purpose of processing: Our website features a contact form that can be used to contact us electronically. If a user chooses to do so, the data entered in the input mask will be transmitted to us and stored.

The following data is also stored when the message is sent:

• Date and time of the request
• URL from which the request was made

You can also contact us using the email addresses provided. In this case, the personal data transmitted with the email will be stored. This includes the date and time the email was sent, the email address, IP addresses, and information about the servers involved in the email communication.
You can also contact us using the telephone number provided. In this case, we collect log data that includes your telephone number and the duration of the call.
Regardless of the type of communication you choose, we collect the content of your request. Your data is stored for the purpose of individual communication with you.
(2)    Legal basis: The data entered in the contact form is processed on the basis of a legitimate interest (Art. 6 para. 1 lit. f GDPR). Our legitimate interest in processing your data is to enable you to contact us easily.
If you contact us to request a quote, the data entered in the contact form will be processed for the purpose of taking steps prior to entering into a contract (Art. 6 para. 1 lit. b GDPR).
(3)    Recipients: Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.
(4)    Third country transfer: There is no transfer to third countries. The data are processed exclusively in the EU/EEA. 
(5)    Storage period: Data will be deleted no later than 6 months after processing of the request. If a contractual relationship is established, we are subject to the statutory retention periods. These are generally 6 or 10 years for reasons of proper accounting and tax law requirements.
(6)    Provision mandatory or required: The provision of your personal data is voluntary. However, we can only process your request if you provide us with the necessary data and the reason for your request.
(7)    Right to object: Please read the information about your right to object below.

§ 4    Newsletter

(1)    Type and purpose of processing: For the delivery of our newsletter or similar information, we collect personal data that is transmitted to us via an input mask. For effective registration, we require a valid email address. To verify that a registration has actually been made by the owner of an email address, we use the "double opt-in" procedure. For this purpose, we log the registration for the newsletter at , the sending of a confirmation email, and the receipt of the response requested therein. No further data are collected.

At the time of the DOI confirmation, the following data is also stored:

• Date and time
• Country and language

(2)    Legal basis: Based on your express consent (Art. 6 para. 1 lit. a GDPR), we will regularly send you our newsletter or similar information by email to the email address you provided.
(3)    Recipient: We use a service provider who acts as our processor for sending the newsletter.
(4)    Third country transfer: No transfer to third countries takes place. The data are processed exclusively in the EU/EEA. 
(5)    Storage period: The data will only be processed in this context for as long as the corresponding consent has been given.
(6)    Provision mandatory or required: The provision of your personal data is voluntary and based solely on your consent. Without your consent, we cannot send you our newsletter.
(7)    Withdrawal of consent: You can withdraw your consent to the storage of your personal data and its use for sending the newsletter at any time with effect for the future. You can unsubscribe via the link contained in every email or via the contact information provided in this privacy policy.

§ 5    Newsletter Tracking

(1)    Type and purpose of processing: KRAIBURG TPE newsletters contain so-called tracking pixels. A tracking pixel is a miniature graphic that is embedded in emails sent in HTML format to enable log file recording and log file analysis. This allows a statistical evaluation of the success or failure of online marketing campaigns to be carried out. The embedded tracking pixel enables KRAIBURG TPE to determine whether and when an email was opened by a data subject and which links in the email were accessed by the data subject.
(2)    Legal basis: Processing is based on your express consent (Art. 6 para. 1 lit. a GDPR).
(3)    Recipients: We use a service provider who acts as our processor to send the emails.
(4)    Third country transfer: There is no transfer to third countries. The data are processed exclusively in the EU/EEA. 
(5)    Storage period: The data will only be processed in this context for as long as the relevant consent has been given.
(6)    Provision mandatory or required: The provision of your personal data is voluntary and based solely on your consent. 
(7)    Withdrawal of consent: You can withdraw your consent to the storage of your personal data and its use for newsletter tracking at any time with future effect. Withdrawal is also effected by unsubscribing. This can be requested via the link contained in every email or via the contact information listed in this privacy policy.

§ 6    Job Applications

(1)    Type and purpose of processing: You can send us your application documents by email and via job portals. We will process the data you provide exclusively for the purpose of assessing your professional suitability and contacting you.
(2)    Legal basis: Processing is carried out for the purpose of establishing an employment relationship within the scope of pre-contractual measures taken at your request, Art. 6 para. 1 lit. b GDPR.
Processing within the applicant pool is based on your consent in accordance with Art. 6 (1) (a) GDPR.
(3)    Recipients: Within the companies, those departments that require your data to fulfill contractual, legal, and regulatory obligations and to protect legitimate interests will have access to your data. In addition, we use service providers who act as processors to manage the application process.
(4)    Third country transfer: There is no transfer to third countries. The data are processed exclusively in the EU/EEA. 
(5)    Storage period: If your application is rejected, your data will be deleted six months after notification of the decision. If an employment relationship is established, the application documents will be stored for at least the duration of your employment with us.
If you give your consent to the processing of your data within the applicant pool, we will store your data until you withdraw your consent, but for no longer than 12 months.
(6)    Provision mandatory or required: The provision of personal data is neither required by law nor contractually required. However, without this information, it is not possible to process your application. The provision of your data for the purpose of the applicant pool is voluntary.
 

§ 7    Webinars

(1)    Type and purpose of processing: The personal data provided during registration will be processed exclusively for the purpose of conducting the webinar.
(2)    Legal basis: The legal basis for this is Art. 6 (1) (f) GDPR, the practical and user-friendly implementation of the webinar, including a good user experience for the purpose of presenting the company to the outside world. 
(3)    Recipients: With regard to the transfer of data to recipients outside our company, it should first be noted that we only transfer necessary personal data in compliance with the applicable data protection regulations. Under these conditions, recipients of personal data may include, for example:

• Public authorities and institutions (e.g., tax authorities, law enforcement authorities) if there is a legal or official obligation to do so,
• Credit and financial services institutions (payment processing)
• Tax advisors, auditors, and payroll tax/tax auditors (statutory audit mandate)
• Furthermore, technical service providers for registration management within the scope of order processing and service providers for conducting webinars (GoTo Technologies Ireland Unlimited Company)

All service providers are contractually obliged to treat your data confidentially.
(4)    Third country transfer: No third country transfer takes place. The data is processed exclusively in the EU/EEA. 
(5)    Storage period: Registration data will be deleted once it is no longer required. Data is generally deleted from our system after a maximum storage period of six months.
Exceptions to the above deletion criteria apply to data

• that are required to fulfill legal retention obligations, e.g., the German Commercial Code (HGB) and the German Fiscal Code (AO). The retention and documentation periods specified therein are generally six to ten years.

(6)    Provision mandatory or necessary: The provision of your personal data is voluntary. We can only offer the webinar if we are able to carry out the associated processing.
(7)    Right to object: Please read the information about your right to object below.

§ 8    On-Demand Webinar Recordings

(1)    Type and purpose of processing: Your data will be used exclusively to give you access to the recording of the webinar you attended.
In order to verify that access is actually granted to the owner of an email address, we use the "double opt-in" procedure (DOI procedure) for online registration. This means that after registering, you will receive an email in which you must confirm your registration again.

The following data is also stored at the time of DOI confirmation:

• Place, date, and time of registration
• IP address
• Email
• Title, first name, last name, if applicable

(2)    Legal basis: The legal basis for this processing is your consent, Art. 6 (1) (a) GDPR.
(3)    Recipients: We use service providers who act as our processors to maintain the website and send the recordings. Your data will not be passed on beyond this.
All service providers are contractually obliged to treat your data confidentially.
(4)    Third country transfer: No transfer to third countries takes place. The data are processed exclusively in the EU/EEA. 
(5)    Storage period: The data will only be stored for as long as the purpose of use and your consent are valid.
(6)    Provision mandatory or required: The provision of your personal data is voluntary and based solely on your consent. Without your consent, we unfortunately cannot send you our webinar recordings or the access code.
(7)    Right of withdrawal: You can withdraw your consent to the storage of your personal data and its use for the provision of the recording at any time. A link to do so is provided in every communication. You can also withdraw your consent using the other contact options provided on the website.

§ 9    Reach Measurement

(1)    Type and purpose of processing: Reach measurement is used to evaluate visitor flows to our online offering and may include behavior, interests, or demographic information about visitors, such as age or gender, as pseudonymous values. With the help of reach analysis, we can, for example, identify at what times our online offering or its functions or content are used most frequently or invite reuse. We can also identify which areas require adjustment.

We use the locally installed analysis tool Matomo (based on log files) to measure reach. With the help of this tool, we evaluate user behavior locally on the server. Matomo does not collect the data itself, but accesses the web server's database. The web server shortens every requesting IP address before storing it in the log file. This means that the database is sufficiently anonymized and no conclusions can be drawn about individual persons.

(2)    Legal basis: Processing is carried out in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest. The measurement of reach and the resulting information are suitable for adapting the website.
(3)    Recipients: We use technical service providers for the operation and maintenance of our website, who act as our processors.
(4)    Storage period: Information on the storage period can be found in the information on the tools used below.
(5)    Third country transfer: No transfer to third countries takes place. The data are processed exclusively in the EU/EEA. 
(6)    Provision mandatory or required: The provision of data is neither legally nor contractually required.
(7)    Objection: Please read the information on your right to object under Article 21 GDPR below.

§ 10    Cookies

Like many other websites, we also use so-called "cookies." Cookies are small text files that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our website.
You can delete individual cookies or your entire cookie history. You can also find information and instructions on how to delete these cookies or block them from being stored in advance at . Depending on your browser provider, you will find the necessary information under the following links:

• Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-loeschen-daten-von-websites-entfernen 
• Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies 
• Google Chrome: https://support.google.com/accounts/answer/61416?hl=de
• Opera: http://www.opera.com/de/help 
• Safari: https://support.apple.com/kb/PH17191?locale=de_DE&viewlocale=en_US

§ 10a    Technically Necessary Cookies

(1)    Type and purpose of processing: We use cookies to make our website more user-friendly. Some elements of our website require that the browser used can be identified even after a page change.
The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change.
We require cookies for the following applications:
-    Consent management
(2)    Legal basis: Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in a user-friendly design of our website.
(3)    Recipients: Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.
(4)    Third country transfer: No third country transfer takes place. The data is processed exclusively in the EU/EEA. 
(5)    Storage period: For more information, please refer to the information on the individual tools in Section 10 of this privacy policy.
(6)    Provision mandatory or required: The provision of the aforementioned personal data is neither legally nor contractually required. However, without this data, the service and functionality of our website cannot be guaranteed. In addition, individual services may not be available or may be restricted.
(7)    Right to object: Please read the information about your right to object below.

§ 10b    Cookies that are not Technically Necessary

(1)    Type and purpose of processing: We also use cookies to tailor the content of our website to the interests of our visitors or to improve it in general on the basis of statistical analyses.
Please refer to the information below on the display, tracking, remarketing, and web analysis technologies used to find out which providers set cookies.
(2)    Legal basis: The legal basis for this processing is your consent, Art. 6 para. 1 lit. a GDPR.
(3)    Recipients: Recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.
For further recipients, please refer to the information below on the display, tracking, remarketing, and web analysis technologies used.
(4)    Third country transfer: Please refer to the information below for details.
(5)    Storage period: You can find more detailed information in the notes on the individual tools below.
(6)    Provision mandatory or required:  You can, of course, view our website without cookies. Web browsers are usually set to accept cookies. In general, you can disable the use of cookies at any time via your browser settings (see Revocation of consent).
Please note that individual functions of our website may not work if you have disabled the use of cookies.
(7)    Withdrawal of consent: You can withdraw your consent at any time via our cookie consent tool.
 

§ 10c    Overview of Cookies and Tools
 

§ 11    External Tools

The following section provides information about the tools from external providers that are integrated into our website.

§ 11a    Google

(1)    Type and purpose of processing: If you have given your consent, Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"), is used on this website. Google Analytics uses cookies that enable us to analyze your use of our website and draw conclusions about user behavior on our website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, due to the activation of IP anonymization on this website, your IP address will be truncated by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On behalf of TPE, Google uses this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website usage.

For more information about data processing by Google, please visit the following link: https://policies.google.com/privacy.

 
(2)    Legal basis: The data is processed on the basis of the user's consent (Art. 6 para. 1 lit. a GDPR).
(3)    Storage duration: The data will be deleted as soon as you revoke your consent or it is no longer necessary for the purpose for which it was collected. The data will generally be deleted 14 months after it has been provided.
(4)    Recipients: Our website is maintained by service providers who act as our processors. All service providers are contractually obliged to treat your data confidentially.
Another recipient of the data is Google LLC in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).
(5)    Third country transfer: As Google's headquarters are in the USA, it cannot be ruled out that the data may be processed on Google's servers in the USA. In order to protect your data even after it has been transferred, we have concluded standard contractual clauses with the service provider.
(6)    Provision mandatory or required: The provision of your personal data is voluntary and based solely on your consent. 
(7)    Withdrawal of consent You can prevent Google Analytics from tracking you on our website by clicking on this link. An opt-out cookie will be installed on your device. This will prevent Google Analytics from collecting data for this website and for this browser in the future, as long as the cookie remains stored in your browser.
(8)    You can also prevent Google from collecting and processing the data generated by the cookie and related to your use of the website (including your IP address) by downloading and installing the browser plugin available at the following link: Browser Add On to disable Google Analytics.

§ 11b    Google Ads

(1)    Type and purpose of processing: We use Google Ads. Google Ads is an online advertising program provided by Google LLC. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA). Google Ads enables us to display advertisements in the Google search engine or on third-party websites when the user enters certain search terms in Google (keyword targeting). Furthermore, targeted advertisements can be displayed based on user data available to Google (e.g., location data and interests) (target group targeting). As the website operator, we can evaluate this data quantitatively, for example, by analyzing which search terms led to the display of our advertisements and how many advertisements led to corresponding clicks.
In addition, Google Ads uses web beacons, which are invisible graphics that enable Google to analyze clicks on this website, traffic on this website, and similar information. This results in an individual cookie, i.e., a small file, being stored on the website user's device.

The following information is stored in this file:

• which web pages the user has visited, what content they are interested in
• which offers the user clicked on
• further technical information about the browser and operating system
• referring websites
• Visiting hours
• Information on the use of the online offer

We also receive an individual "conversion cookie." Google uses the information collected by the cookie to compile conversion statistics for us. However, we only learn the anonymous total number of users who clicked on our ad and were redirected to a page tagged with a conversion tracking tag. We have implemented the "anonymizeIP()" function for this purpose to anonymize your IP address. No data is collected that could be used to identify individual website visitors. User data is processed pseudonymously within the Google advertising network. This means that Google does not store and process the name or email address of users, for example, but processes the relevant data in a cookie-related manner within pseudonymous user profiles. This means that, from Google's perspective, the ads are not managed and displayed for a specifically identified person, but for the cookie holder, regardless of who this cookie holder is. This does not apply if a user has expressly permitted Google to process the data without this pseudonymization.

(2)    Legal basis: The use of this service is based on your consent in accordance with Art. 6 (1) lit. a GDPR and § 25 (1) TTDSG. Consent can be revoked at any time.
(3)    Recipients of the data: Our website is maintained by service providers who act as our processors. All service providers are contractually obliged to treat your data confidentially.
Another recipient of the data is Google LLC in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).
(4)    Third country transfer: The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. For the USA, there is an adequacy decision by the European Commission for companies that are certified under the Data Privacy Framework. Google is certified but does not rely on this framework. We have concluded so-called standard contractual clauses with Google LLC.
(5)    Storage duration: Data will only be processed in this context for as long as the corresponding consent has been given. After that, it will be deleted.
(6)    Provision mandatory or required: The provision of your personal data is voluntary and based solely on your consent. You will not suffer any disadvantages. Without your consent, we cannot show you any advertisements.
(7)    Revocation: You can revoke your consent at any time.

§ 11c    Live Chat

(1)    Type and purpose of processing: KRAIBURG TPE uses a live chat service provided by Userlike UG (limited liability), Probsteigasse 44-46, 50670 Cologne, Germany, on the website kraiburg-tpe.com. Userlike uses "cookies," text files that are stored on your computer and enable you to conduct personal real-time chats on your website. You can use the live chat like a contact form to chat with our employees in near real time. When you start the chat, personal data is processed:

• Date and time of the request,
• browser type/version,
• IP address,
• Operating system used,
• URL of the previously visited website,
• Amount of data sent,
• First name, last name,
• Email

When you visit the website, the chat widget is loaded from AWS Cloudfront in the form of a JavaScript file. The chat widget essentially represents the source code that is executed on your computer and enables the chat. 
In addition, KRAIBURG TPE stores the history of live chats. This serves the purpose of saving you from having to provide extensive explanations of the history of your request and to ensure consistent quality control of our live chat service.
If you do not wish this to happen, please let us know using the contact details provided below. We will then delete the stored live chats immediately.
(2)    Legal basis: Processing is based on your express consent (Art. 6 para. 1 lit. a GDPR).
(3)    Recipients: We use a service provider who acts as our processor for shipping.
(4)    Third country transfer: There is no transfer to third countries. The data are processed exclusively in the EU/EEA. 
(5)    Storage period: The data will only be processed in this context for as long as the corresponding consent has been given.
(6)    Provision mandatory or required: The provision of your personal data is voluntary and based solely on your consent. 
(7)    Withdrawal of consent: You can withdraw your consent to the storage of your personal data and its use for newsletter tracking at any time with future effect. Withdrawal is also effected by unsubscribing. This can be requested via the link contained in every email or via the contact information provided in this privacy policy.

§ 11d    Matomo

(1)    Type and purpose of processing: We use Matomo (with cookies) on this website, an open-source software for statistical analysis of visitor traffic. The provider of the Matomo software is InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand.
If you have given your consent, Matomo uses cookies that enable an analysis of your use of the website. The information generated by the cookie about your use of the website is stored on a server. We have configured Matomo so that no profiling takes place. Matomo is used for the purpose of improving the quality of our website and its content. This allows us to learn how the website is used and thus continuously optimize our offering.
The IP address is anonymized immediately after processing and before storage by truncating the last two bytes.
For more information on the privacy settings of the Matomo software, please visit the following link: https://matomo.org/docs/privacy/.
(2)    Legal basis: The legal basis for this data processing is your consent in accordance with Art. 6 (1) (a) GDPR.
(3)    Recipients: We use technical service providers who act as our processors for the operation and maintenance of our website and for the evaluation of cookies.
(4)    Third country transfer: Processing also takes place outside the EU, namely in New Zealand. An adequacy decision has been made by the European Union for New Zealand. 
(5)    Storage period: The data will be deleted or anonymized as soon as it is no longer required for our recording purposes. In our case, this happens automatically after 180 days.
(6)    Provision mandatory or required: The provision of your personal data is voluntary and based solely on your consent. 
(7)    Withdrawal of consent: You can withdraw your consent in the cookie consent tool for the future.
You also have the option of preventing cookies from being stored in general; see the information on cookies below.

§ 11e    Seismic

(1)    Type and purpose of processing: In order to improve our services, we use the software solution "LiveSend" from Seismic Software, Inc. (Seismic Software, Inc, 12390 El Camino Real, San Diego, CA 92130, USA). LiveSend uses a tracking method that sets cookies. Cookies are only set after consent has been given. Seismic Software provides us with information about what content the user has viewed, when, and for how long. The purpose of Seismic Software is to present our content in the best possible way and to analyze user behavior so that we can continuously improve our products and services and provide users with targeted information.

The following categories of data are processed:

• Date and time of access
• Email
• Location of the user
• Browser type
• Device type
• Name of content viewed
• How many seconds each page/video was viewed

Users can also use the Seismic solution without consenting to the LiveSend function. In this case, no usage behavior will be tracked and the user can still use the Seismic solution with full functionality.
(2)    Legal basis: The legal basis for this data processing is your consent in accordance with Art. 6 (1) (a) GDPR.
(3)    Recipients: We use technical service providers who act as our processors to operate and maintain our website and to evaluate cookies.
We have concluded standard contractual clauses with Seismic Software Inc. You can find further information on Seismic's LiveSend function and the data processor's privacy policy here: https://www.seismic.com/privacy- policy/ 
(4)    Storage period: For the above-mentioned purpose, the data will be stored for a period of two weeks after your consent and then automatically deleted.
(5)    Provision mandatory or required: The provision of your personal data is voluntary and based solely on your consent. 
(6)    Withdrawal of consent: Users can withdraw their consent at any time with future effect by sending an email to Datenschutz@kraiburg-tpe.com.

§ 11f    YouTube Videos

(1)    Type and purpose of processing: We embed YouTube videos on our website. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (hereinafter "YouTube"). YouTube, LLC is a subsidiary of Google LLC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043, USA (hereinafter "Google"). When you visit a page on our website that has a YouTube video embedded, a connection to the YouTube or Google servers is automatically established. Depending on your settings, various data (e.g., your IP address) is transmitted. When a YouTube video is started, the provider sets cookies that store, for example, your IP address and URL.
If you are logged into your Google or YouTube account, YouTube can associate your browsing behavior with you personally. If you are not logged into a Google or YouTube account, less data is stored. However, Google stores data with a unique identifier that is linked to your device, browser, or app.
Further information on the purpose and scope of data collection and its processing by YouTube can be found in the provider's privacy policy. There you will also find further information on your rights in this regard and settings options for protecting your privacy https://policies.google.com/privacy.
(2)    Legal basis: The legal basis for this data processing is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.  
(3)    Recipients: We use technical service providers who act as our processors to operate and maintain our website and to evaluate cookies.
Another recipient of the data is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC uses Google LLC in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) as a service provider.
(4)    Third country transfer: As Google's headquarters are in the USA, it cannot be ruled out that the data may be processed on Google servers in the USA. To protect your data even after it has been transferred, we have concluded standard contractual clauses with the service provider.
(5)    Storage period: The data will be stored until you withdraw your consent.
(8)    Provision mandatory or required: The provision of your personal data is voluntary. However, we can only display the embedded videos if you give your consent.
(6)    Withdrawal of consent: You can withdraw your consent at any time in the cookie settings for the future.

§ 11g    Hotjar

(1)    Type and purpose of processing: Our website uses the web analytics service Hotjar from Hotjar Ltd. Hotjar Ltd. is a company headquartered in the European Union - Malta (Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta), which is subject to the requirements of the GDPR.
We use Hotjar to better understand the needs of our users and to optimize the offerings on this website. With the help of Hotjar's technology, we gain a better understanding of our users' experiences (e.g., how much time users spend on which pages, which links they click on, what they like and dislike, etc.), which helps us tailor our offerings to our users' feedback. With Hotjar, we can record your mouse and scroll movements and clicks, among other things. Hotjar can also determine how long you have remained with the mouse pointer on a specific spot. Hotjar uses this information to create so-called heat maps, which can be used to determine which areas of the website are preferred by website visitors. Furthermore, we can determine how long you stayed on a page and when you left it. We can also determine at which point you abandoned your entries in a contact form (so-called conversion funnels). 
In addition, Hotjar can be used to obtain direct feedback from website visitors. This function serves to improve the website operator's web offerings. Hotjar uses technologies that enable user recognition for the purpose of analyzing user behavior (e.g., cookies or device fingerprinting). Hotjar uses cookies and other technologies to collect information about the behavior of our users and their end devices (in particular, the IP address of the device (only collected and stored in anonymized form), screen size, device type (unique device identifiers), information about the browser used, location (country only), preferred language for displaying our website). 
Hotjar stores this information in a pseudonymized user profile. The information is not used by Hotjar or us to identify individual users or to merge it with other data about individual users.
(2)    Legal basis: The legal basis for this data processing is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. 
(3)    Recipients: We use technical service providers who act as our processors to operate and maintain our website and to evaluate cookies.
For more information about Hotjar and the data collected, please refer to the following link: https://www.hotjar.com/privacy or Hotjar's privacy policy: https://www.hotjar.com/legal/policies/privacy

We have entered into a contract processing agreement with Hotjar to implement European data protection regulations.
(4)    Third country transfer: No third country transfer takes place. The data is processed exclusively in the EU/EEA.
(5)    Storage period:  Your data will be deleted after 365 days at the latest. You can consent to the storage of a user profile and information about your visit to our website by Hotjar, as well as the setting of Hotjar cookies in our cookie banner, and revoke your consent there at any time with future effect. 
(6)    Provision mandatory or required: The provision of your data is voluntary, based on your consent. 
(9)    Withdrawal of consent: If you wish to disable Hotjar's data collection in general, you can also click on the following link and follow the instructions there: https://www.hotjar.com/opt-out. Please note that Hotjar must be disabled separately for each browser or device.
 

§ 12    Social Media Presence

The following section contains information about our various company profiles on social networks:

§ 12a    Facebook and Instagram

(1)    Type and purpose of processing: We operate a company page on Facebook and Instagram. The provider of the platforms is Meta Platforms Ireland Limited, "Meta" (4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland).
As a user, you use our company page and its functions at your own risk. This applies in particular to interactive functions (e.g., commenting, sharing, liking). Meta processes personal data via your account, your IP address, and the devices you use. Cookies are also used to collect data. 
If you have a Facebook/Instagram profile and are logged in, Meta can, for example, analyze your usage behavior and create a usage profile based on this behavior. This user data is regularly processed for market research and (personalized) advertising purposes. If you want to avoid this, you should log out of your Facebook/Instagram profile or deactivate the "stay logged in" function, delete the cookies on your device, and close and restart your browser. This will delete the Facebook/Instagram information that can be used to identify you directly. This allows you to use our Facebook/Instagram page without revealing your Facebook/Instagram ID. If you access interactive features of the page (like, comment, share, message, etc.), a Facebook/Instagram login screen will appear. After you log in, Meta will recognize you again as a specific user.
(2)    Legal basis: Processing is carried out in accordance with Art. 6 (1) lit. f) GDPR on the basis of our legitimate interest. The legitimate interest we pursue lies in establishing contact with (potential) customers and interested parties, presenting our company to the public, and providing information about our products and services.
(3)    Recipients: For more information about Meta Ireland's processing of your data, including the storage period and your rights, please refer to Meta's privacy policy, which you can view at https://www.facebook.com/privacy/policy/. 
Information on how you can change your privacy settings can be found at https://www.facebook.com/help/instagram/196883487377501?cms_id=196883487377501.   
(4)    Duration of storage: We do not store any personal data processed on social networks on our servers. 
(5)    Provision mandatory or required: The provision of your data is voluntary. If you wish to interact with us, there are alternative ways to contact us, for example by email and telephone.
(6)    Third country transfer: The recipient of the data is Meta Platforms Ireland Limited. The parent company Meta Platforms Inc. is based in the USA, so a transfer to the USA cannot be ruled out. Meta is certified under the EU-US Privacy Shield Framework and bases the transfer to the USA on the adequacy decision.
(7)    Right to object: Please read the information on your right to object in accordance with Art. 21 GDPR below. You also have the option of lodging an objection with the respective platform operator: https://de-de.facebook.com/help/2069235856423257 and https://www.facebook.com/help/contact/1994830130782319 
If you wish to request information or exercise your user rights, you can assert these rights against us or Meta.

 § 12b    WhatsApp

If you contact us via the WhatsApp messenger service, we will use your phone number to communicate with you via WhatsApp. In addition, we process other personal data stored on WhatsApp, in particular your first and last name, your device, profile picture, and messages and files that you send to us via the app.
We process your mobile number to identify you. Your nickname and profile picture provided via WhatsApp are used for display purposes. Your communication with us is stored as a conversation transcript. This serves the purpose of using previous communication with you as context for future conversations. The transcript also includes confirmation of receipt and read receipts. These serve to ensure smooth receipt and to clean up inactive contacts.
WhatsApp collects data independently. For the purpose and scope of data collection by WhatsApp, the further processing of your data by WhatsApp, as well as your rights and settings options for protecting your privacy, please refer to https://www.whatsapp.com/legal/#privacy-policy or directly in the WhatsApp app.
The controller for the WhatsApp messenger service within the meaning of the GDPR is WhatsApp Ireland, and the competent supervisory authority under the GDPR is the Irish Data Protection Commission. We would like to point out that WhatsApp stores data in third countries outside the EU and exchanges it with other services of the provider when you use the service. We have no influence over this.
Your data will be used exclusively for communication purposes and deleted after one year. You also have the option of contacting the operator directly and requesting the deletion of your data.
The legal basis for processing is Art. 6 (1) lit. f GDPR.

§ 12c    LinkedIn

The data controller has integrated components from LinkedIn Corporation on this website. LinkedIn is an Internet-based social network that enables users to connect with existing business contacts and establish new business contacts. Over 400 million registered users use LinkedIn in more than 200 countries. This makes LinkedIn currently the largest platform for business contacts and one of the most visited websites in the world. LinkedIn is operated by LinkedIn Corporation, 2029 Stierlin Court Mountain View, CA 94043, USA. The data protection officer responsible for data protection issues outside the USA is.
Each time you visit our website that contains a LinkedIn component (LinkedIn plug-in), this component causes the browser used by the data subject to download a corresponding representation of the LinkedIn component. Further information about LinkedIn plug-ins can be found at https://developer.linkedin.com/plugins. As part of this technical process, LinkedIn receives information about which specific subpage of our website is visited by the data subject.
If the person is logged into LinkedIn at the same time, LinkedIn recognizes which specific subpage of our website the person visits each time they access our website and for the entire duration of their visit to our website. This information is collected by the LinkedIn component and assigned by LinkedIn to the person's LinkedIn account. If the person clicks on a LinkedIn button integrated into our website, LinkedIn assigns this information to the personal LinkedIn user account of the person and stores this personal data.
LinkedIn always receives information via the LinkedIn component that the person has visited our website if the person is logged into LinkedIn at the same time as visiting our website; this happens regardless of whether the person clicks on the LinkedIn component or not. If the data subject does not want this information to be transmitted to LinkedIn, they can prevent this by logging out of their LinkedIn account before visiting our website.
LinkedIn offers the option to unsubscribe from email messages, SMS messages, and targeted ads
and manage ad settings. LinkedIn also uses partners such as Quantcast, Google Analytics, BlueKai, DoubleClick, Nielsen, Comscore, Eloqua, and Lotame, which may set cookies. Such cookies can be rejected at
https://www.linkedin.com/legal/cookie-policy. LinkedIn's applicable privacy policy is available at
https://www.linkedin.com/legal/privacy-policy. LinkedIn's cookie policy is available at https://www.linkedin.com/legal/cookie-policy.

§ 12d    Xing

The controller has integrated components from Xing on this website. Xing is an Internet-based social network that allows users to connect with existing business contacts and establish new ones. Companies can, for example, create company profiles or publish job offers on Xing. The operating company of Xing is XING AG, Dammtorstraße 30, 20354 Hamburg, Germany.
Each time one of the individual pages of this website operated by the controller and on which a Xing component (Xing plug-in) has been integrated is accessed, the Internet browser on the information technology system of the data subject is automatically prompted by the respective Xing component to download a representation of the corresponding Xing component from Xing. Further information on Xing plug-ins can be found at https://dev.xing.com/plugins. As part of this technical process, Xing receives information about which specific subpage of our website is visited by the data subject.
If the person is logged in to Xing at the same time, Xing recognizes which specific subpage of our website the person is visiting each time they visit our website and for the entire duration of their visit to our website. This information is collected by the Xing component and assigned by Xing to the person's Xing account. If the person clicks on one of the Xing buttons integrated into our website, for example the "Share" button, Xing assigns this information to the personal Xing user account of the person and stores this personal data.
Xing always receives information via the Xing component that the person has visited our website if the person is logged into Xing at the same time as visiting our website; this happens regardless of whether the person clicks on the Xing component or not. If the person does not want this information to be transferred to Xing, they can prevent this by logging out of their Xing account before visiting our website.
person concerned, they can prevent this by logging out of their Xing account before visiting our website.
The privacy policy published by Xing, which can be accessed at https://www.xing.com/privacy, provides information about the collection, processing, and use of personal data by Xing. Furthermore, Xing has published privacy information for the XING share button at https://www.xing.com/app/share?op=data_protection.

§ 12e    Google

The controller has integrated the Google+ button as a component on this website. Google+ is a social network. A social network is an Internet-based social meeting place, an online community that generally allows users to communicate with each other and interact in a virtual space. A social network can serve as a platform for exchanging opinions and experiences or enable the Internet community to provide personal or company-related information. Google+ enables users of the social network to connect with each other via friend requests.
The operating company of Google+ is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA. Each time one of the individual pages of this website, which is operated by the controller responsible for and on which a Google+ button has been integrated, is accessed, the Internet browser on the information technology system of the data subject is automatically prompted by the respective Google+ button to download a representation of the corresponding Google+ button from Google. As part of this technical process, Google becomes aware of which specific subpage of our
website is being visited by the data subject. More detailed information about Google+ is available at https://developers.google.com/+.
If the person is logged into Google+ at the same time, Google recognizes which specific subpage of our website the person is visiting each time they access our website and for the entire duration of their visit to our website. This information is collected by the Google+ button and assigned by Google to the person's Google+ account.
If the data subject clicks on one of the Google+ buttons integrated into our website and thereby submits a Google+1 recommendation, Google will assign this information to the personal Google+ user account of the data subject and store this personal data. Google stores the Google+1 recommendation of the data subject and makes it publicly available in accordance with the terms and conditions accepted by the data subject in this regard. A Google+1 recommendation made by the person on this website will subsequently be stored and processed together with other personal data, such as the name of the Google+1 account used by the person and the photo stored in it, in other Google services, for example in the search engine results of the Google search engine, the Google account of the person or in other places, such as on websites or in connection with advertisements. Furthermore, Google is able to link the visit to this website with other personal data stored by Google. Google also records this personal information for the purpose of improving or optimizing the various Google services.

Google receives information that the data subject has visited our website whenever the Google+ button is clicked while the data subject is logged into Google+, regardless of whether the data subject clicks on the Google+ button or not.

If the data subject does not want personal data to be transmitted to Google, they can prevent such transmission by logging out of their Google+ account before visiting our website.

Further information and Google's applicable privacy policy can be found at https://www.google.de/intl/de/policies/privacy/.
Further information from Google on the Google+1 button can be found at https://developers.google.com/+/web/buttons-policy.
 

§ 13    Information about your Right to Object under Art. 21 GDPR

Right to object in individual cases
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6 para. 1 lit. f GDPR (data processing based on a balancing of interests); this also applies to profiling based on this provision within the meaning of Art. 4 No. 4 GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.

Recipients of an objection
The objection can be made informally with the subject "Objection" and stating your name, address, or other identifying features to:

Data Protection Officer
KRAIBURG TPE GmbH & Co. KG
Friedrich-Schmidt-Str. 2
84478 Waldkraiburg

Tel.: +49 (0) 8638 9810-0
Email: Datenschutz@kraiburg-tpe.com
 

§ 14    Automated Decision-Making and Profiling

As a responsible company, we refrain from automated decision-making or profiling. 

§ 15    Final Provisions

(1)    Data security (TLS): To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g., TLS) via HTTPS.
(2)    Changes to our privacy policy: We reserve the right to amend this privacy policy to ensure that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g., when introducing new services. The new privacy policy will then apply to your next visit.
(3)    Questions about data protection: If you have any questions about data protection, please send us an email at: datenschutz@kraiburg-tpe.com.