durlum data privacy statement
We, the durlum group, are happy about your visit to our website as well as your interest in our company and our products. We take the protection of your private data seriously. Therefore we carry out our activities in compliance with the applicable legal provisions on the protection of personal data and on data security.
You can contact our data protection officer at the following address:
durlum GmbH
c/o Datenschutzbeautragter
An der Wiese 5
79650 Schopfheim
datenschutz@durlum.de
In the following we would like to inform you about the collection of personal data when using our websites www.durlum.com, www.durlum.de and durlum.ch.
Collection and processing of personal data as well as type and purpose of their use
If you visit our web pages, by default our web servers store the IP address assigned to you by your internet provider, the website from which you visit us, the web pages you visit, the operating system, date and duration of your visit as well as the web browser used by you. Beyond that, personal data are only stored if indicated by you voluntarily (e.g. registration, survey, enquiry).
durlum uses your personal data for the purpose of technical administration of the websites, provision of the services required by you, assurance that our website is presented as effectively as possible, customer administration, product surveys and marketing.
The legal basis for the data processing is Article 6 (1) f GDPR. Our legitimate interest is derived from the purposes of data collection listed above. In no event we use the data collected in order to draw conclusions on your person.
Transfer of data
durlum uses the data only within the scope of the given approval and only within the durlum group of companies. Among the eligible affiliated companies of durlum GmbH are the following:
durlum Group GmbH, An der Wiese 5, 79650 Schopfheim, Germany
durlum AG, Steinhaldenstrasse 28, 8954 Geroldswil, Switzerland
durlum Nederland B.V., Maroastraat 4, 1060 LG Amsterdam, Netherlands
durlum Tavan ve Aydınlatma Sistemleri San. ve Tic. A.Ş., 34746 Ataşehir/İstanbul, Turkey
ZI-Jena GmbH, Moritz-von-Rohr-Straße 4, 07745 Jena, Germany
ZI Austria GmbH, Josef-Wilberger-Straße 1, 6020 Innsbruck, Austria
Furthermore durlum only transfers your personal data to any third parties if pursuant to Art. 6 (1) Cl. 1 a GDPR you have given your explicit consent to it, if the transfer is necessary pursuant to Art. 6 (1) Cl. 1 f GDPR for the establishment, exercise or defence of legal claims and if there are no grounds for assuming that you have an overriding legitimate interest in the non-disclosure of your data in the event of legal obligation pursuant to Art. 6 (1) Cl. 1 c GDPR to the extent permitted by law and required pursuant to Art. 6 (1) Cl. 1 b GDPR for the performance of a contract with you.
durlum transfers your personal data to external companies entrusted with technical maintenance work or working on our behalf, for instance for the provision of customer services, sending of marketing information about our products, services and offers. All these companies and representatives are obliged to comply with the stipulations of our privacy policy.
Bodies involved in the processing of personal data:
Furthermore durlum only transfers your personal data to any third parties if you have given your explicit consent to this pursuant to Art. 6 (1) Cl. 1 a GDPR, if the transfer is necessary pursuant to Art. 6 (1) Cl. 1 f GDPR for the establishment, exercise or defence of legal claims and if there are no grounds for assuming that you have an overriding legitimate interest in the non-disclosure of your data in the event of legal obligation pursuant to Art. 6 (1) Cl. 1 c GDPR to the extent permitted by law and required pursuant to Art. 6 (1) Cl. 1 b GDPR for the performance of a contract with you.
Newsletter and tracking
On the legal basis of Art. 6 (1) Cl. 1 a GDPR, durlum provides the possibility to subscribe to a newsletter. Our company’s newsletter can principally only be received by the data subject if (1) the data subject has a valid e-mail address and (2) the data subject confirms the newsletter dispatch. Moreover, further information can be transmitted voluntarily, such as title, first name and surname, industry, country and language.
For the registration for our newsletter we use the so-called double opt-in procedure. It means that after your registration we will send you an e-mail to the indicated e-mail address asking you for confirmation that you want to receive the newsletter. Furthermore we save your IP addresses used and the times of registration and confirmation. The purpose of the procedure is to prove your registration and, where necessary, to be able to clarify a potential misuse of your personal data.
The personal data collected in the context of newsletter subscription are used for sending our newsletter and general customer information. Furthermore, subscribers can be informed provided that this is necessary for the operation of the newsletter service or an associated registration.
You can revoke your consent to the newsletter dispatch at any time and unsubscribe from the newsletter. You can declare the revocation by clicking the link provided in every newsletter e-mail. Alternatively, you can send your unsubscribe request at any time by e-mail to: newsletter@durlum.de.
We would like to point out that in case of newsletter dispatch we evaluate your user behaviour. The purpose of this evaluation is to recognise which contents are particularly interesting for the newsletter recipients in order to optimise future newsletters. For this evaluation the e-mails sent contain so-called web beacons or tracking pixels, i.e. one-pixel image files stored on our website. For evaluation, we link the data mentioned in 2. and the web beacons with your e-mail address and an individual ID. Links comprised in the newsletter also contain this ID. The data are exclusively collected in pseudonymised form, i.e. the IDs are not linked with your other personal data, so that it is not possible to identify any individuals.
Contact form
If you make contact with us via e-mail or the contact form, the information provided by you will be stored on the legal basis of Art. 6 (1) Cl. 1 a GDPR for the purpose of processing the enquiry as well as for possible follow-up questions.
Use of cookies
On the legal basis of Art. 6 (1) Cl. 1 a GDPR, durlum uses cookies in order to adapt the website to user preferences and to optimise the usability. Cookies are small files that are temporarily stored on your hard drive. Our cookies do not contain any personalised information so that your privacy is protected. Most browsers accept cookies automatically. You can inhibit the storage of cookies on your hard drive by selecting *do not accept cookies* in your browser settings. In order to find out how this works in detail, please refer to the instructions of your browser manufacturer. Of course you can view many areas of our website also without any cookies. If you do not accept cookies, however, this may result in a functional impairment of our offers.
External services and contents
durlum uses the following services and contents of external service providers.
(a) Google Analytics
This website uses Google Analytics, a web analysis service by Google Inc. (“Google”). The legal basis for this is Art. 6 (1) f GDPR. The intended purpose is to improve the usability of the website as well as to continuously optimise our pages.
Google Analytics also uses so-called “cookies” - text files which are saved on your computer and allow us to analyse your usage of the website. The information about your usage of the website created by the cookie is usually transferred to a Google server in the USA and stored there. When activating the IP anonymisation on this website, however, your IP address will be shortened by Google within the member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases, the full IP address will be transferred to a Google server in the USA and shortened there. On behalf of the operator of this website Google will use this information in order to evaluate your usage of the website, to compile reports on the website activities and to provide the website operator with further services associated with the website usage and internet usage.
The IP addresses are anonymised so that it is not possible to match them (so-called IP masking).
You can inhibit the storage of cookies by correspondingly setting your browser software; however, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. In addition, you can prevent Google from collecting the data created by the cookie relating to your website usage (including your IP address) as well as from processing this data by downloading and installing the browser plug-in available via the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
You can also prevent the collection of your data by Google Analytics by setting an opt-out cookie, which blocks such collection when visiting the website in the future: Deactivate Google Analytics
Further information and the applicable data protection regulations of Google can be called up at https://www.google.de/intl/de/policies/privacy/ and http://www.google.com/analytics/terms/de.html.
b) Google AdWords
Our website uses the Google conversion tracking for the purpose of better statistical acquisition of the website usage. The legal basis for this is Art. 6 (1) f GDPR.If you have reached our website via an ad placed by Google, Google AdWords sets a cookie on your computer. The cookie for conversion tracking is set if a user clicks on an ad placed by Google. These cookies will loose their validity after 30 days and do not serve for personal identification. If the user uses certain pages of our website and the cookie has not expired yet, we and Google can see that the user clicked the ad and has been redirected to this page. Every Google AdWords customer receives a different cookie. In this way, cookies cannot be traced back using the websites of AdWords customers. The information obtained by means of the conversion cookie serves to create conversion statistics for AdWords customers who have opted for conversion tracking. Customers get to know the total number of users who clicked the ad and were redirected to a page equipped with a conversion tracking tag. However, they will not obtain any information serving to personally identify any users.
If you do not want to participate in the tracking, you can refuse the setting of a cookie required to that end - for example by browser settings which generally deactivate the automatic setting of cookies, or by setting your browser in such a way that cookies by the domain “googleleadservices.com” are blocked.
Further information by Google can be viewed at https://privacy.google.com/businesses/adsservices/.
(c) Linking to YouTube
Our websites use plug-ins of the YouTube site operated by Google. Operator of the sites is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. If you visit one of our pages equipped with a YouTube plug-in, a connection to the YouTube servers is established. In this process, the YouTube server is informed about which one of our pages you visited. If you are logged in to your YouTube account, you enable YouTube to associate your surfing behaviour directly with your personal profile. You can avoid this by logging out from your YouTube account.
YouTube is used in the interest of an attractive presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 (1) f GDPR.
Further information on the handling of user data can be found in the data privacy statement of YouTube at: www.google.de/intl/de/policies/privacy.
(d) Google Maps
We use the offer of Google Maps. In this way we can directly display interactive maps on the website for you and enable you to use the comfortable map function. The legal basis for this is Art. 6 (1) f GDPR. In order to use the functions of Google Maps it is required to store your IP address and to transmit it to a Google server, usually in the USA. More information on the handling of user data can be found in the data privacy statement of Google: https://www.google.de/intl/de/policies/privacy/.
By visiting the website, the third-party supplier receives the information that you viewed the respective sub-page of our website. This happens regardless of whether this third-party supplier provides a user account via which you are logged in or whether there is no user account. If you are logged in with Google, these data are directly assigned to your account.
Google saves these data as a usage profile and uses them for the purpose of advertising, market research and/or the need-based design of their own website. The data are evaluated particularly (also for unlogged users) in order to provide need-based advertisements and to inform other users of the social network about their activities on our website. You have a right of objection to the formation of these user profiles, where you have to address yourself to Google LLC in order to assert this right.
Further information on the purpose and scope of the data collection and data processing carried out by Google is available in the data privacy statement of Google disclosed in the following. There you can also obtain further information on your rights in this respect and on setting options in order to protect your privacy. Address and URL with data protection notices: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
(e) Google Web Fonts
For a uniform and attractive representation of fonts, durlum uses so-called Web Fonts provided by Google. The legal basis for this is Art. 6 (1) f GDPR. When you call up a page, your browser loads the required Web Fonts in your browser cache in order to display texts and fonts correctly. For this purpose, the browser used by you must establish a connection to the Google servers. Hereby Google is informed that our website was called up via your IP address.
Further information on Google Web Fonts can be found at developers.google.com/fonts/faq and in the data privacy statement of Google: https://www.google.com/policies/privacy/.
By visiting the website, the third-party supplier receives the information that you viewed the respective sub-page of our website. This happens regardless of whether this third-party supplier provides a user account via which you are logged in or whether there is no user account. If you are logged in with Google, these data are directly assigned to your account.
Google saves these data as a usage profile and uses them for the purpose of advertising, market research and/or the need-based design of their own website. The data are evaluated particularly (also for unlogged users) in order to provide need-based advertisements and to inform other users of the social network about their activities on our website. You have a right of objection to the formation of these user profiles, where you have to address yourself to Google LLC in order to assert this right.
Further information on the purpose and scope of the data collection and data processing carried out by Google is available in the data privacy statement of Google disclosed in the following. There you can also obtain further information on your rights in this respect and on setting options in order to protect your privacy. Address and URL with data protection notices: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Publications of vacancies and electronic application
We provide the possibility to inform yourself of vacancies at durlum on our website. In the event of application it is understood that durlum collects and processes the personal data of applicants in order to handle the application process. The processing may also be carried out by electronic means. This is particularly the case if the applicant submits the relevant application documents by electronic means, for example by e-mail. If durlum concludes an employment contract with an applicant, the transmitted data will be stored for the purpose of handling the employment relationship with due regard to legal regulations. If no employment contract is concluded with the applicant, the application documents will automatically be deleted three months after notification of the rejection decision unless barred by other legitimate interests of the controller responsible for the processing. Other legitimate interests to that effect are, for instance, a burden of proof in a lawsuit according to the General Act on Equal Treatment (AGG).
Data security
We use technical and organisational security measures to protect your data administered by us against accidental or deliberate manipulations, loss, deletion or access by unauthorised persons. In the event of collection and processing of personal data, the information is transferred in encrypted form in order to prevent misuse of the data by third parties. Our safety measures are continuously improved in accordance with the technological evolution.
Your rights and contact
Regarding the processing of your personal data, you have comprehensive rights. First of all, you have an extensive right of access and can demand the rectification and/or erasure and/or inhibition of your personal data, as the case may be. You can also request a restriction of processing and have a right to object as well as a right to data portability. If you want to assert one of your rights and/or to get further details about this, please contact us via datenschutz@durlum.de
Furthermore you have a right to lodge a complaint with a supervisory authority. If you have any questions, comments or enquiries regarding the collection, processing and use of your personal data by us, please also address yourself to us using the indicated contact details.
On request we will let you know according to applicable law whether and which personal data about you are stored by us. If despite our efforts to ensure data correctness and topicality we have stored wrong information, we will rectify them on request: Please contact us at: datenschutz@durlum.de
Data retention
We only store your personal data as long as it is required to render a service requested by you or to which you have given your consent unless otherwise stipulated by law.
Modifications to these data privacy regulations
We reserve the right to modify these data privacy regulations at any time with future effect. A current version of the data privacy statement can be here found on our website.