1. General Information
The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data is any data by which you can be personally identified. For detailed information on the subject of data protection, please refer to our privacy policy set out below.
Data processing on this website is carried out by the website operator. You can find the operator's contact details in the legal notice of this website. On the one hand, your data is collected when you provide it to us (e.g. via a contact form). Other data is collected automatically by our IT systems when you visit the website. This is primarily technical data (e.g. internet browser, operating system or time of page access).
2. Responsible Party
The party responsible for data processing on this website
Gesellschaft für technische Kunststoffe mbH
Kottenforstweg 3
D-53359 Rheinbach-Flerzheim
Phone +49 (0) 22 25 / 91 57-0
Email mail@gftk-info.de
The responsible party is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, email addresses, etc.).
3. Data Collection on Our Website
Server Log Files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us
- IP address of the requesting computer
- Browser type and browser version
- Operating system used
- Referrer URL (the previously visited page)
- Date and time of the server request
- Hostname of the accessing computer
This data cannot be attributed to specific individuals. This data is not merged with other data sources. We reserve the right to check this data retrospectively if we become aware of concrete evidence of unlawful use. The legal basis for the data processing is Art. 6 (1) (f) GDPR.
The log data is used exclusively to ensure trouble-free operation and is automatically deleted after 30 days at the latest.
Hosting
This website is hosted by Railway Corporation, 2261 Market Street, San Francisco, CA 94114, USA. On our behalf, the provider processes the technically necessary connection data (see server log files) so that the pages can be delivered at all. We have concluded a data processing agreement with the provider in accordance with Art. 28 GDPR. Access from the USA, for example in the course of maintenance and support, cannot be ruled out; such transfers are safeguarded by standard contractual clauses. The legal basis is our legitimate interest in the secure and reliable operation of this website (Art. 6 (1) (f) GDPR).
Contact Form
If you send us inquiries via the contact form, your details from the inquiry form, including the contact data you provide there (name, email address, telephone number), will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not pass on this data without your consent.
The processing of the data entered in the contact form therefore takes place exclusively on the basis of your consent (Art. 6 (1) (a) GDPR). You can revoke this consent at any time. An informal message by email to us is sufficient for this.
Your enquiry is additionally stored in the administration interface of this website so that no message is lost, and is sent to us by email. We use Microsoft 365 for sending emails and for our mailboxes; incoming messages first pass through the spam and virus filter operated by Hornetsecurity GmbH. We delete your enquiry as soon as the matter has been dealt with and no statutory retention obligations prevent this. Such obligations do exist for business-related enquiries: commercial and tax law require retention for six and ten years respectively (Section 257 German Commercial Code, Section 147 German Fiscal Code).
Spam Protection with Cloudflare Turnstile
To protect our contact form against abusive automated requests (spam), we use Cloudflare Turnstile, a service provided by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Turnstile checks whether an input originates from a human or from an automated program. For this purpose, technical characteristics such as IP address, browser information and interaction data may be processed and transmitted to Cloudflare servers, which may include transfers to the USA. Cloudflare bases such transfers on the EU-US Data Privacy Framework and standard contractual clauses. Processing is based on our legitimate interest in protecting our website against misuse (Art. 6 (1) (f) GDPR).
4. Cookies
Our website uses cookies. Cookies are small text files that are stored on your device and saved by your browser. They do no harm and contain no viruses.
We use technically necessary cookies to make our offering more user-friendly. Some cookies remain stored on your device until you delete them. They enable us to recognise your browser on your next visit.
Consent via the Cookie Banner
We only use statistics cookies if you have given your consent via our cookie banner (“Accept all”). In that case, processing is based on Art. 6 (1) (a) GDPR. You can withdraw your consent at any time with effect for the future by clicking “Cookie settings” at the bottom of the page and choosing “Essential only”.
Which cookies we set
Without your consent we only set the following technically necessary cookies. They are set by this website itself and are not transmitted to third parties.
- gftk_consent – stores your decision in the cookie banner so that we do not have to ask you again on every visit. Lifetime 180 days.
- gftk_lang – remembers the selected language of the website. Lifetime 180 days.
- gftk_session – only for logged-in staff in the editorial area; maintains the login and protects against form abuse. Lifetime 7 days.
Only after your consent are the cookies of the statistics services listed below added (PostHog: ph_…, Google Analytics: _ga, _gid). If you withdraw your consent, these cookies are deleted immediately and data collection stops at once.
Web Analytics with PostHog
This website uses PostHog, a web analytics service provided by PostHog Inc. We use PostHog with servers located in the European Union (EU cloud). PostHog uses cookies and similar technologies that enable an analysis of the use of the website (e.g. pages visited, clicks, time spent). It is only loaded after you have given your consent via the cookie banner.
PostHog does not create person profiles for anonymous visitors; only the use of the pages is analysed. The data is automatically deleted in line with the retention periods configured in our PostHog account and is not kept longer than necessary for the analysis.
Web Analytics with Google Analytics
This website also uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies that enable an analysis of the use of the website. The IP address is anonymised. The information generated may be transferred to and stored on Google servers, which may include transfers to the USA. Google bases such transfers on the EU-US Data Privacy Framework and standard contractual clauses. It is only loaded after you have given your consent via the cookie banner.
The event data collected by Google Analytics is automatically deleted after 14 months at the latest.
5. Third-Party Services
Google Maps (only on click)
On our contact page we offer a map from the mapping service Google Maps, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The map is not loaded automatically: you initially see only a placeholder and decide for yourself whether to display the map via the “Load map” button. Only then is a connection to Google established and your IP address and browser information transmitted to Google, which may include transfers to the USA. Google bases such transfers on the EU-US Data Privacy Framework and standard contractual clauses. The legal basis is your consent given by clicking the button (Art. 6 (1) (a) GDPR). As long as you do not click, no data is transmitted to Google.
Web Fonts
The fonts used on this website are delivered from our own server. No connection is made to Google Fonts servers or other providers, and no data is transmitted to third parties.
6. Recipients of Your Data
We do not pass on your data to third parties for marketing purposes. However, to provide this website and to process your enquiries we use carefully selected service providers who act for us as processors under Art. 28 GDPR and are bound by our instructions:
- Railway Corporation (USA) – hosting of this website
- Microsoft Ireland Operations Ltd. – email mailboxes and dispatch (Microsoft 365)
- Hornetsecurity GmbH (Hanover, Germany) – spam and virus filtering for incoming email
- Cloudflare, Inc. (USA) – spam protection for the contact form (Turnstile)
- PostHog Inc. – web analytics, only with your consent
- Google Ireland Ltd. – web analytics and map display, only with your consent
Where data is transferred to the USA in this context, we base this on the EU Commission’s standard contractual clauses and, where the providers are certified under it, on the EU-US Data Privacy Framework. Beyond this, we only pass on data where we are legally obliged to do so.
7. Your Rights
Within the framework of the applicable statutory provisions, you have the right at any time to
- Information about your personal data stored by us (Art. 15 GDPR)
- Correction of incorrect or incomplete personal data (Art. 16 GDPR)
- Erasure of your personal data stored by us (Art. 17 GDPR)
- Restriction of the processing of your personal data (Art. 18 GDPR)
- Data portability Release of your data in a structured, commonly used and machine-readable format (Art. 20 GDPR)
- Withdrawal of a consent you have given, with effect for the future (Art. 7 (3) GDPR) – you can withdraw your consent to statistics cookies at any time via “Cookie settings” at the bottom of the page
- Objection to the processing of your personal data (Art. 21 GDPR)
If you believe that the processing of your data violates data protection law or that your data protection rights have otherwise been infringed in some way, you can lodge a complaint with the competent supervisory authority.
The supervisory authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Kavalleriestrasse 2-4, 40213 Duesseldorf, Germany.
8. Data Security and Automated Decisions
This website is delivered exclusively via encrypted HTTPS; your entries in the contact form are therefore protected against interception by third parties while in transit. Access to the administration interface is password-protected and restricted to a small group of people.
Automated decision-making including profiling within the meaning of Art. 22 GDPR does not take place. Providing your data is neither required by law nor by contract; however, without the mandatory details in the contact form we cannot answer your enquiry.
9. Contact for Data Protection Questions
If you have any questions about data protection, please send us an email at
Gesellschaft für technische Kunststoffe mbH
Kottenforstweg 3
D-53359 Rheinbach-Flerzheim