Data protection notice
In the following, we inform you about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail address, usage behaviour.
Responsible
The responsible party pursuant to Art. 4 (7) of the EU General Data Protection Regulation (GDPR) is KEIMFARBEN GMBH, KeimstraΓe 16, 86420 Diedorf, Germany, Phone +49 821 4802-0, info@keimfarben.de.
You can reach our data protection officer via e-mail at datenschutz@keimfarben.de or by post with the addition "the data protection officer".
Contact form and e-mail
Our website contains information that enables you to contact our company quickly and electronically and to communicate directly with us. When you contact us by e-mail or via the contact form, the data you provide will be stored by us in order to answer your personal message to us.
We delete the data accruing in this context, if the enquiry is assigned to a contract, after the time limits for the term of the contract, otherwise after completion of the contact enquiry, or restrict the processing if there are legal obligations to retain data. In the case of a contract, our legal basis for processing is Art. 6 Para. 1 lit. b GDPR, in all other cases Art. 6 Para. 1. lit. f. Our and your interest lies in the simple and uncomplicated establishment of contact.
Mateo WebChat/WhatsApp
On our website, we use the MATEO web widget (hereinafter βWebChatβ) from the company MATEO Estate GmbH, www.hellomateo.de, Dresdener Str. 121, 10999 Berlin, Germany.
You can use our WebChat like a contact form to chat with us. When you use the MATEO WebChat on our website, the following personal data is processed
- the date and time of the call
- Browser type and browser version
- your IP address
- the operating system used
- URL of the previously visited website
- Your first and last name
- your e-mail and
- content sent by you.
Depending on the course of the conversation in our WebChat, further personal data may be processed if you provide it. The nature of this data depends on your request or the problem you describe to us.
When you access the website, the chat widget is loaded in the form of a JavaScript file from Supabase. The chat widget is the source code that runs on your computer and enables you to chat with us.
βThe purpose of the processing is to use the data recorded via WebChat to process and respond to your enquiries.
The legal basis for the processing of your personal data is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR.
Your personal data will be stored by us for as long as is necessary for the fulfilment of our relationship regarding communication with you and in accordance with the applicable statutory retention periods. Your personal data will not be transferred to third countries. The data is stored on our behalf on Mateo servers in Germany.
The WhatsApp service is operated by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (βWhatsAppβ), a group company of Meta Platforms, Inc. (formerly Facebook).
WhatsApp processes the data in accordance with its privacy policy. The communication content is end-to-end encrypted. WhatsApp may also collect other so-called βmetadataβ, which may contain information about the identity of the sender and recipient, as well as device information, telephone number and information about the use of WhatsApp (e.g. duration and frequency). WhatsApp also uses this data for its own purposes, such as improving the WhatsApp service. Further information can be found in the WhatsApp privacy policy. We have no knowledge of the details of this data processing and have no influence on it.
This also includes the standard contractual clauses approved in advance by the European Commission to safeguard the level of data protection in the third country. WhatsApp LLC also complies with the requirements of the Data Privacy Framework Programme and is therefore covered by the adequacy decision on data sharing between the European Union and the United States for non-HR data.
The legal basis is your consent in accordance with Art. 6 para. 1 lit. a GDPR. If you no longer wish to use this service, you are free to delete your user account yourself at any time within your user profile or by simply notifying us. Your user account will be retained until you delete it.
Online application
Purposes
We use your personal data exclusively for the execution and processing of your online application. If you consent, we will also use your application for future selection procedures.
Legal basis
In the context of your online application, we process personal data to carry out pre-contractual measures on the basis of Art. 6 para. 1 lit. b in conjunction with. Art. 88 para. 1 GDPR in conjunction with. Β§ 26 para. 1 p. 1 BDSG (Federal data protection act). In the event of your consent to longer storage for use in the context of future selection procedures, the legal basis is Art. 6 para. 1 lit. a GDPR.
When processing application data in the context of legal disputes, our legal basis is Art. 6 (1) lit. f GDPR. Our legitimate interest lies in the assertion, exercise or defence of legal claims.
Recipients
Your personal data will be forwarded to the departments responsible for the specific application procedure (HR department and specialist department). If necessary, your application documents will also be forwarded to other specialist departments if we consider your applicant profile to be suitable for another internal position. Under no circumstances will your application documents be passed on to other companies or third parties.
Storage period
After the end of the application process, we delete the data of your online application after six months if your application was unsuccessful. This does not apply if legal regulations prevent deletion. If you have consented to longer storage for future selection procedures, we will delete your application data after consultation, but at the latest after three years. In the event of a successful application, we will transfer your application data to the personnel file in compliance with legal admissibility.
Obligation to provide data
There is no legal or contractual obligation to provide us with personal data. Please note that application data that is not meaningful cannot be considered for the application process. For sending your online application documents to us by e-mail, we recommend that you encrypt your e-mail address. The PGP key for the application email address bewerbung@keimfarben.de is available for download below:
β Download PGP key here
Web server usage data
In the case of mere informational use of the website, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure its stability and security (legal basis is Art. 6 para. 1 p. 1 lit. f GDPR. Our legitimate interest follows from the data collection purposes listed above):
- IP address
- Date and time of the request
- Time zone difference to Greenwich Mean Time (GMT)
- Content of the request (specific page)
- Access status/HTTP status code
- Amount of data transferred in each case
- Website from which the request came
- Browser software
- Operating system and its interface
- Language and version of the browser software
- Directory protection user
The IP addresses are stored anonymously. For this purpose, the last three digits are removed, i.e. 127.0.0.1 becomes 127.0.0.*. IPv6 addresses are also anonymised. The anonymised IP addresses are retained for 60 days. Details of the directory protection user used are anonymised after one day. Web server usage data on erroneous page views are deleted after seven days.
Technically necessary cookies
To enable you to use our website comfortably and securely, we use technically necessary cookies. These cookies are deleted again after the end of the session or have longer storage periods. In the case of the objection cookie, the storage period is 50 years. The technically necessary cookies do not store any personal data. The legal basis for the use of these technically necessary cookies is Art. 6 para. 1 lit. f GDPR. Our legitimate interests as a website operator result from the above-mentioned purposes.
Newsletter
We process your email address to send you the KEIM newsletter. If you have provided your name, it will be used for the personal salutation. Your other personal data will be used to create recipient profiles by individually measuring, storing and evaluating opening rates and click-through rates to design future newsletters according to your interests. The legal basis for this is your consent according to Art. 6 Para. 1 lit. a DS-GVO. As soon as you unsubscribe from the newsletter, we delete your personal data collected as part of the newsletter registration and the associated recipient profiles.
Face-to-face seminars, workshops (KEIM Academy) and online seminars
We process the data you provide when registering as part of the organization and implementation of the seminar you have booked, e.g. for invitation management, seminar confirmations and certificates. In addition, for the follow-up and further development of our seminars.
The legal basis for the processing of your data in the context of booking seminars and events is Art. 6 para. 1 letter b GDPR.
We delete your personal data 3 years after your last seminar participation, unless there are retention periods under commercial and tax law (e.g. for invoice data). Retention periods for invoice data are generally 10 years.
We conduct online seminars via the platform of our service provider GoTo Webinar. you can find GoTo Webinar's privacy policy here.
You can find our conditions of participation here.
Social media channels
In our online offer you will find links to social networks such as Facebook, Google+, the two career networks Xing (DACH region) and LinkedIN (worldwide) as well as the video portal YouTube. You can recognise the links by the respective logo of the provider.
Clicking on the links opens the corresponding social media pages, for which this data protection declaration does not apply. For details of the provisions applicable there, please refer to the corresponding data protection declarations of the individual providers; you will find these at:
- Facebook/Instagram: www.facebook.com/policy.php
- Google+: https://policies.google.com/privacy/update?hl=de
- Xing: https://privacy.xing.com/de/datenschutzerklaerung
- LinkedIn: www.linkedin.com/legal/privacy-policy
- YouTube: policies.google.com/privacy;
YouTube videos
YouTube is a service of the provider Google LLC, 1600 Amphiteatre Parkway, Mountain View, CA 94043, USA. In the European Economic Area (EEA) and Switzerland, Google services are offered by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").
We have integrated YouTube videos into our online offer, which are stored on www.YouTube.com and can be played directly from our website. These are all integrated in "extended data protection mode", i.e. no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos will the data mentioned in the next paragraph be transferred. We have no influence on this data transmission. The legal basis for the display of the videos is Art. 6 para. 1 p. 1 lit. a GDPR, i.e. the integration only takes place after your consent.
By visiting the website, YouTube receives the information that you have accessed the corresponding sub-page of our website. In addition, the data mentioned under "Web server usage data" in this statement, such as IP address, are transmitted. This occurs regardless of whether YouTube provides a user account via which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want your data to be associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or designing its website in line with requirements. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact YouTube to exercise this right.
For more information on the purpose and scope of data collection and processing by YouTube, please see YouTube's privacy policy. There you will also find further information on your rights and setting options to protect your privacy: https://www.google.de/intl/de/policies/privacy.
The information collected is stored on Google servers, also in the USA. For these cases, the provider has, according to its own information, imposed a standard on itself that corresponds to the former EU-US Privacy Shield and has promised to comply with applicable data protection laws in the international transfer of data. We have also concluded so-called standard contractual clauses with Google, the purpose of which is to ensure compliance with an appropriate level of data protection in the third country and which can be accessed here https://policies.google.com/privacy/frameworks.
Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Ireland Ltd Gordon House, Barrow Street Dublin 4 ("Google"). Google Analytics uses web memory in the browser, tracking pixels and so-called "cookies", text files that are stored on your computer and enable an analysis of your use of the website. The information generated by this about your use of this website is usually transferred to a Google server in the USA and stored there. In the event that IP anonymisation is activated on this website (see below), however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.
This website also uses Google Analytics for cross-device analysis of visitor flows, which is carried out via a user ID. You can deactivate the cross-device analysis of your usage in your Google customer account under "My data", "Personal data"].
The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.
The legal basis for the use of Google Analytics is your consent (Art. 6 para. 1 p. 1 lit. a GDPR). You can revoke your consent at the top of this page via our Consent banner or install the Google browser add-on, which can be accessed via the following link: https://tools.google.com/dlpage/gaoptout?hl=en
This website uses Google Analytics with the extension "_anonymizeIp()". This means that IP addresses are processed in a shortened form, thus making it impossible to relate them to a specific person. If the data collected about you is related to a person, this is immediately excluded and the personal data is deleted immediately.
We use Google Analytics to analyse and regularly improve the use of our website. The statistics obtained enable us to improve our offer and make it more interesting for you. For the exceptional cases in which personal data is transferred to the USA, the data transfer takes place on the basis of standard contractual clauses, which can be viewed at https://policies.google.com/privacy/frameworks.
Users' personal data stored through tracking is deleted or anonymised as soon as it is no longer needed for our recording purposes. In our case, this happens after 14 months.
Further information on the purpose and scope of the data collection and its processing, as well as further information on your rights in this regard and setting options for protecting your privacy at Google, can be found here: Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001, Overview of data use in Google Analytics: support.google.com/analytics/answer/6004245, Terms of use: https://www.google.com/analytics/terms/de.html, as well as the privacy policy: https://www.google.de/intl/de/policies/privacy.
Google maps
We use the Google Maps service on this website. Google Maps is a service of the provider Google LLC, 1600 Amphiteatre Parkway, Mountain View, CA 94043, USA. In the European Economic Area (EEA) and Switzerland, Google services are offered by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). This allows us to show you interactive maps directly on the website and enables you to use the map function conveniently. The legal basis for the use of the maps is Art. 6 para. 1 p. 1 lit. a GDPR, i.e. the integration only takes place with your consent.
By visiting the website, Google receives the information that you have called up the corresponding sub-page of our website. In addition, the above-mentioned basic data such as IP address and timestamp are transmitted. This takes place regardless of whether Google provides a user account via which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want your data to be associated with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or designing its website in line with requirements. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right.
(3) The information collected is stored on Google servers, including in the USA. For these cases, the provider has, according to its own information, imposed a standard on itself that corresponds to the former EU-US Privacy Shield and has promised to comply with applicable data protection laws in the international transfer of data. We have also agreed so-called standard data protection clauses with Google, the purpose of which is to ensure compliance with an appropriate level of data protection in the third country and which can be accessed here https://policies.google.com/privacy/frameworks.
(4) For further information on the purpose and scope of data collection and its processing by the plug-in provider, please refer to the provider's privacy policy. There you will also find further information on your rights in this regard and setting options for protecting your privacy: www.google.de/intl/de/policies/privacy.
Data subjects' rights
You have the following rights with regard to the personal data concerning you:
- Right to information
- Right to rectification or erasure
- Right to restriction of processing
- Right to object to processing
- Right to data portability
You have the right to revoke an already given consent to the processing of your personal data at any time. The lawfulness of the processing carried out on the basis of the consent until revocation is not affected by this.
To exercise your rights, please contact us by e-mail at info@keimfarben.de.
Right of appeal
You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us. The supervisory authority responsible for our company is the Bavarian State Office for Data Protection Supervision in Ansbach (www.baylda.de).