Privacy notice in accordance with Article 13 GDPR

Name and Address of the Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states, as well as other data protection provisions, is:

Gesellschaft für Wolfram Industrie mbH
Wolframstraße 1
83365 Nußdorf
Germany

Name and Address of the Data Protection Officer

The data protection officer of the controller is:

Peggy Glass
Human Resources
Gesellschaft für Wolfram Industrie mbH
Wolframstr. 1
83365 Nußdorf
Germany

E-mail: datenschutzbeauftragter@wolfram-industrie.de

General Information on Data Processing

Legal Basis for the Processing of Personal Data

In accordance with Art. 13 GDPR, we inform you of the legal bases for our data processing. Where the legal basis is not specifically stated in this privacy notice, the following applies:

The legal basis for obtaining consent is Art. 6(1)(a) in conjunction with Art. 7 GDPR. The legal basis for processing to perform our services and carry out contractual measures, as well as to respond to inquiries, is Art. 6(1)(b) GDPR. The legal basis for processing to fulfil our legal obligations is Art. 6(1)(c) GDPR. If the processing of your data is necessary to safeguard a legitimate interest of our company or of a third party, and the interests, fundamental rights, and fundamental freedoms of the data subject do not override the aforementioned interest, then Art. 6(1)(f) GDPR serves as the legal basis for the processing. Should the vital interests of the data subject or of another natural person require the processing of personal data, Art. 6(1)(d) GDPR serves as the legal basis.

Data Deletion and Storage Period

We adhere to the principles of data minimisation pursuant to Art. 5(1)(c) GDPR and storage limitation pursuant to Art. 5(1)(e) GDPR. We store your personal data only for as long as is necessary to achieve the purposes stated herein, or as required by statutory retention periods. Once the respective purpose ceases to apply, or upon expiry of these retention periods, the corresponding data will be deleted without undue delay.

External Links

This website may contain links to third-party websites or to other websites for which we are not responsible. If you follow a link to a website outside our responsibility, please note that such websites have their own privacy notices. We accept no responsibility or liability for these third-party websites and their privacy notices. Before using such websites, please check whether you agree with the privacy policies provided there.

External links can be identified either by their differing colour compared to the rest of the text, or by underlining. Your cursor will indicate an external link when you hover over it. Your personal data is only transferred to the destination of the link once you click on an external link. In doing so, the operator of the other website receives, in particular, your IP address, the time at which you clicked the link, the page on which you clicked the link, as well as further information which you can find in the respective provider's privacy notice.

Please also note that certain links may result in data being transferred outside the European Economic Area. This could allow foreign authorities to gain access to your data. You may not have any legal remedies against such access to your data. If you do not want your personal data to be transferred to the link's destination, or to be exposed to access by foreign authorities without your consent, please do not click on such links.

Rights of the Data Subject

As a data subject within the meaning of the GDPR, you have the option of exercising various rights. The rights of data subjects arising from the GDPR are the right of access (Article 15), the right to rectification (Article 16), the right to erasure (Article 17), the right to restriction of processing (Article 18), the right to object (Article 21), the right to lodge a complaint with a supervisory authority, and the right to data portability (Article 20).

Right to Withdraw Consent:

Certain data processing operations can only take place with your express consent. You have the right to withdraw your consent at any time. The lawfulness of the data processing carried out prior to the withdrawal remains unaffected.

Right to Object:

Where processing is based on Art. 6(1)(e) or (f) GDPR, you, as a data subject, have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you. This right also applies to profiling based on these provisions within the meaning of Art. 4(4) GDPR. Unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defence of legal claims, we will cease processing your data following your objection.

Where personal data is processed for the purposes of direct marketing, you also have the right to object at any time. The same applies to profiling insofar as it is related to such direct marketing. In this case too, we will no longer process your personal data once you have objected.

Right to Lodge a Complaint with a Supervisory Authority:

If you believe that the processing of personal data concerning you infringes the GDPR, you have the right, without prejudice to any other administrative or judicial remedy, to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work, or the place of the alleged infringement.

Right to Data Portability:

Where your data is processed automatically on the basis of consent or in performance of a contract, you have the right to receive that data in a structured, commonly used, and machine-readable format. You also have the right to request that the data be transmitted and made available to another controller, insofar as this is technically feasible.

Right to Access, Rectification, and Erasure:

You have the right to obtain information about your processed personal data regarding the purpose of processing, the categories of data, the recipients, and the duration of storage. If you have any questions on this or other topics relating to personal data, please feel free to contact us using the contact details provided in the imprint.

Right to Restriction of Processing:

You may request the restriction of the processing of your personal data at any time. To do so, one of the following conditions must be met:

You contest the accuracy of the personal data. For the duration of the verification of accuracy, you have the right to request restriction of processing.

If the processing is unlawful, you may request the restriction of the use of the data instead of its erasure.

If we no longer need your personal data for the purposes of processing, but you require the data for the establishment, exercise, or defence of legal claims, you may request restriction of processing instead of erasure.

If you have lodged an objection to processing pursuant to Art. 21(1) GDPR, a balancing of your interests against ours will be carried out. Pending the outcome of this assessment, you have the right to request restriction of processing.

A restriction of processing means that, apart from being stored, the personal data may only be processed with your consent, or for the establishment, exercise, or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or of a member state.

Provision of the Website (Web Host)

Our website is hosted by:

creoline GmbH
Bergstraße 9a
48341 Altenberge
Germany

When you access our website, we automatically collect and store information in what are known as server log files. This information is automatically transmitted to our server, or to the server of our hosting provider, by your browser.

This includes:

IP address of the website visitor's device
Device used
Host name of the accessing computer
Operating system of the visitor
Browser type and version
Name of the file accessed
Time of the server request
Amount of data transferred
Information on whether the retrieval of the data was successful

This data is not merged with other data sources.

Instead of operating this website on our own server, we may also have it operated on the server of an external service provider (hosting company), which we have named above. The personal data collected via this website is then stored on the servers of the hosting company. In addition to the data listed above, the web host may also store, on our behalf, contact inquiries, contact details, names, website access data, meta and communication data, contract data, and other data generated through the use of a website.

The legal basis for the processing of this data is Art. 6(1)(f) GDPR. Our legitimate interest lies in the technically flawless presentation and optimisation of this website. Where the website is accessed for the purpose of entering into contractual negotiations with us or concluding a contract, Art. 6(1)(b) GDPR serves as an additional legal basis. Where we have engaged a hosting company, a data processing agreement is in place with that service provider.

Use of Local Storage Items, Session Storage Items, and Cookies

Our website uses local storage items, session storage items, and/or cookies. Local storage is a mechanism that allows data to be stored within the browser on your device. This data usually contains user preferences, such as the "day" or "night mode" of a website, and remains stored until you delete it manually. Session storage is very similar to local storage, except that the storage period only lasts for the duration of the current session, i.e. until the current tab is closed. After that, session storage items are deleted from your device. Cookies are pieces of information that a web server (a server that provides web content) stores on your device in order to identify that device. They are either deleted temporarily for the duration of a session (session cookies) after your visit to a website ends, or stored permanently (persistent cookies) on your device until you delete them yourself or they are automatically deleted by your web browser.

These objects may also be stored on your device by third-party companies when you visit our website (third-party requests). This enables us, as the operator, and you, as the visitor to this website, to make use of certain services provided by third parties integrated into this website. Examples include the processing of payment services or the display of videos.

These mechanisms have a wide range of applications. They can improve the functionality of a website, control shopping cart functions, increase the security and convenience of website use, and enable analysis of visitor flows and behaviour. Depending on their specific function, these are classified differently under data protection law. Where they are necessary for the operation of the website and for providing certain functions (e.g. shopping cart function), or serve to optimise the website (e.g. cookies used to measure visitor behaviour), their use is based on Art. 6(1)(f) GDPR. As the website operator, we have a legitimate interest in the storage of local storage items, session storage items, and cookies for the technically flawless and optimised provision of our services. In all other cases, the storage of local storage items, session storage items, and cookies takes place only with your express consent (Art. 6(1)(a) GDPR).

Where local storage items, session storage, or cookies are used by third-party companies or for analytical purposes, we inform you of this separately within this privacy notice. Your required consent is requested and may be withdrawn at any time.

Use of External Services

External services are in use on our website. External services are services provided by third-party providers that are used on our website. This may occur for various reasons, for example to embed videos or for the security of the website. When using these services, personal data is also transmitted to the respective providers of these external services. Where we have no legitimate interest in the use of such services, we obtain your consent, which may be withdrawn at any time, as a visitor to our website prior to their use (Art. 6(1)(a) GDPR).

Consent Management

In order to comply with data protection requirements, we use a consent management tool on our website. We use this tool to obtain the necessary consents for setting cookies or using external services. The consents given are stored.

This processing is necessary for compliance with a legal obligation to which the controller (website operator) is subject. Art. 6(1)(c) GDPR is therefore used as the legal basis for this processing.

Usercentrics

We use the service Usercentrics on our website. The provider of this service is Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany.

Further information can be found in the provider's privacy policy at the following URL: https://usercentrics.com/de/datenschutzerklaerung.

The service stores the following data in the browser's local or session storage:

Name	Storage Period	Type	Purpose
ucData	Persistent	1st-party local storage	Stored by Usercentrics on the local device.
ucData_RYiFnwe5Z2MVsB	Persistent	3rd-party local storage, web.cmp.usercentrics.eu	Stored by Usercentrics on the local device.
ucString	Persistent	1st-party local storage	Stored by Usercentrics on the local device.