1. Data controller and general principles
We, ISO-Chemie GmbH, Röntgenstr. 12, 73431 Aalen, Germany, are the data controller with responsibility for the processing of your personal data as defined in the EU General Data Protection Regulation (GDPR). As the operator of the website at “www.iso-chemie.eu” (also called “Website” below) and the “portal.iso-chemie.eu” (also called “ISO-PORTAL” and “Online Shop” below), ISO-Chemie GmbH is responsible for the data of the user (“You”) of the website, ISO-PORTAL and Online Shop.
Your trust and the protection of your privacy are of particular concern to us. We therefore take the protection and security of your personal data very seriously. Your personal data is only collected, processed and used in accordance with the data protection provisions, particularly the rules of the EU General Data Protection Regulation (GDPR) and the German Teleservices Act (TMG).
To fulfil our duty to inform, we provide you with detailed information below concerning which data is collected from contact with our Service team, direct marketing activities and when You visit our website, ISO-PORTAL or Online Shop and make use of the service and offers provided there and how this data is subsequently processed or used by us. We would also like to inform You about the associated technical and organisational measures we have taken to protect your data.
2. Collection and use of your personal data
Personal data means all personal and factual details about an identified or identifiable natural person. Your personal data thus includes all data that can be assigned to You, such as your name, address, telephone number or e-mail address.
We collect and process your personal data to enable You to use the offer on our website, ISO-PORTAL, in our Online Shop and to take up our services and offers.
We collect and process your personal data in the following circumstances (not an exhaustive list):
- When You contact us directly, e.g. via our website, ISO-PORTAL or Online Shop, and are interested in our products or services, for example, or have a different query.
- When You buy products from us
- When You buy services from us
- When You make your data available to us to attend a course, training, presentation or other event
- When You request information about our products and services
- When You respond to our direct marketing activities (e.g. complete a reply postcard or return fax form or when You provide your data online at our website, ISO-PORTAL or Online Shop)
- When third parties and partner companies make personal data about You available to us in a permitted manner.
We only collect, process and use personal data if and to the extent that You have voluntarily made the relevant data available to us for the specific data collection or use, a statutory regulation permits the specific data collection and/or use or You have previously expressly consented to the specific data collection and/or use.
The type and extent of the collection and use of your data will differ according to whether You visit our website, ISO-PORTAL or Online Shop simply to look up information or to take up the services that we offer.
We save all the information that You provide when You enter it on our website, ISO-PORTAL or Online Shop. It is saved on servers in a country in the European Union. Your data will only be accessed by the offices within our company that are responsible for processing your enquiries and requests. We will not sell, lease or otherwise make your data available to third parties for external use. Your personal data will not be passed on to government bodies and authorities except in order to comply with mandatory national statutory requirements as defined in the EU General Data Protection Regulation (GDPR). We require our employees to maintain the strictest non-disclosure and confidentiality.
Using our website for information
When You use our website purely for information, You do not have to provide any personal data.
We only collect and use the data that your Internet browser automatically transfers, such as the IP address of the enquiring computer, type, language and version and operating system of the Internet browser You use, the pages viewed, date and time of the visit to our website, time difference from Greenwich Mean Time (GMT), volume of data transferred and access status/HTTP status code.
When You visit for information, we collect and use this data exclusively in anonymised form to allow You to visit our website, for statistical purposes and to improve our Internet presence. The last octet (partial segment) of your IP address is removed. This data is not linked to personal data of an identified natural person. We only store your IP address temporarily for the duration of your visit.
In general, no personal data is needed in order to use our website and ISO-PORTAL. It is only when You want to make contact with us that we will need certain personal data.
- Contact form to allow us to respond to your questions about products, news, wishes and suggestions
- Mandatory information: Personal contact with first name, surname and e-mail address
- Optional information: Company, road, town and postcode, telephone and fax number
- Appointment form for scheduling a visit
- Mandatory information: Company name, personal contact with first name, surname, town and postcode, country, telephone number, e-mail address and your request
- Optional information: Preferred date
- Call-back service form so we can call You back and answer your questions about our products
- Mandatory information: First name, surname, telephone number, e-mail address and topic
- Optional information: Company name, town and postcode, country
- Sample request form for product presentation
- Mandatory information: Company, contact, road, town and postcode, telephone, e-mail address
- Optional information: Fax number
- Free mailing voucher form for sending by post
- Mandatory information: Surname, first name, road, town and postcode
- Optional information: Company, e-mail address
We use “session cookies” (also known as temporary cookies); these are stored temporarily only for the duration of your visit to our website. We use these cookies so that You can use the shopping cart, for example, across multiple pages. These session cookies are generally deleted automatically when You end your visit and exit the Internet browser You were using.
We also use persistent cookies which “persist” beyond the current visit; they are deleted after a set period has elapsed. We use persistent cookies so that we know who You are beyond your current browser session. These cookies store your settings so that our website remembers You on your next visit, which makes it more user-friendly for You.
We do not collect or store personal data in cookies in this context. We also do not use any techniques that link information obtained by cookies with user data.
You can change the settings in your browser to determine whether cookies can be set and accessed. In your browser, You can deactivate the storage of cookies entirely, restrict it to certain websites or configure your browser so that it automatically notifies You when a cookie needs to be set and asks You to confirm that it can be done. However, for technical reasons, if you want to use all the functions on our website, You will need to permit the use of session cookies.
4. Google Analytics
Our website uses Google Analytics, a web analysis service from Google Inc. ("Google"). Google Analytics uses "cookies” - text files which are stored on your computer and are used to analyse your use of the website. The information about your use of this website (including your IP address) generated by the cookie is generally sent to a Google server in USA and stored there. If IP anonymization is activated on this website, Google will, however, first shorten your IP address within Member States of the European Union or in other signatory countries of the Agreement on the European Economic Area. Only in exceptional circumstances will the full IP address be sent to a Google server in the USA and shortened there. Google uses this information on our behalf to evaluate your use of the website, to compile reports about website activities and to provide further services connected with website and Internet usage for the website operator.
The IP address sent by your Internet browser in association with Google Analytics is not combined with other data from Google.
You can prevent the storage of cookies by setting your browser software accordingly, but we would like to point out that such settings may prevent You making full use of all the functions of this website.
Please note that Google Analytics is used on this website with the extension “_anonymizeIp()” and your IP address is thus always further processed in its shortened form to exclude the possibility of establishing a direct link to a specific person.
You can also, at any time, prevent any future recording at Google of data relating to your use of the website (including your IP address) that is generated by the cookie and any processing of this data by Google. To do this, download and install the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
5. Third party content
Our website incorporates third party content, such as map materials from Google Maps. This requires the suppliers of such content to be able to detect the user’s IP address in order to send the content to the user’s browser. We take every effort to use only content whose suppliers use the IP address solely to deliver their content. However we are unable to prevent suppliers from storing the IP address for statistical purposes, for example.
6. Data security
We employ technical and organisational security measures to protect personal data that is provided or collected, particularly against accidental or intentional manipulation, loss, destruction or attack by unauthorised persons. Our security measures are continuously improved to take account of technological developments.
Our website uses SSL encryption to prevent access by third parties. You can identify a secure transfer by the “https://” protocol designation and by the reference to a trusted certificate on the URL line.
7. Your rights
If You have any questions concerning our use of your personal data, please contact us in writing, if possible enclosing a copy of your identity card; either write to ISO-Chemie GmbH, Röntgenstr. 12, 73431 Aalen, or send an e-mail to firstname.lastname@example.org, Germany.
You can also contact the responsible data protection officer. You will find the contact details under Data Protection contacts.
As the individual person affected by the processing of your data, You can also assert certain rights against us in accordance with the GDPR and other applicable data protection provisions. The next section explains your rights as an individual under the GDPR. Depending on the type and scope of your enquiry, please send this to us in writing.
Rights of individuals
According to the GDPR, You have the following rights as an individual against ISO-Chemie GmbH:
The right to be informed (Art. 15 GDPR):
You can ask us for information about the data we keep about You at any time. This information relates to the categories of data that we process, the purposes for which we process this data, the origin of the data if we have not obtained it directly from You and, where applicable, the recipients to whom we have sent your data. You can obtain a copy of your data from us free of charge. If You would like further copies, we reserve the right to invoice You for the further copies.
The right to rectification (Art. 16 GDPR):
You can ask us to correct your data. We will take reasonable measures to ensure that the data we hold about You and which we process on an ongoing basis is correct, complete and current, based on the latest information that is available to us.
The right to erasure (Art. 17 GDPR):
You can ask us to erase your data if the statutory requirements for erasure are fulfilled. This may be the case under Art. 17 GDPR if:
- the data is no longer needed for the purposes for which it was collected or otherwise processed;
- You withdraw your consent that was the basis for the data processing and there is no other legal basis for the processing;
- You raise your objection to the processing of your data and there are no overriding justified reasons for the processing or if You object to the data processing for direct marketing purposes;
- the data was being processed unlawfully;
- the processing is not needed in order to fulfil a statutory obligation that requires us to process your data; particularly with respect to statutory retention periods; in order to assert, exercise or defend legal claims.
The right to restrict processing (Art. 18 GDPR):
You can ask us to restrict the processing of your data if:
- You dispute that the data is correct; in this case the restriction applies for the time we need to check whether the data is correct;
- the processing is unlawful and You refuse the erasure of your data and request restriction of use instead;
- we no longer need your data, but You need it in order to assert, exercise or defend legal claims;
- You have objected to the processing and until it has been determined whether our justified reasons outweigh yours.
The right to data portability (Art. 20 GDPR):
If it is technically possible to do so, we will, upon request, transfer your data to another data controller. You may only exercise this right, however, if the data processing is dependent upon your consent or if it is needed in order to implement a contract. Rather than receiving a copy of your data, You can also ask us to send the data directly to another data controller as specified by You.
The right to object (Art. 21 GDPR):
You can at any time object to the processing of your data for reasons that arise from your particular situation, provided that the data processing is based upon your consent or upon our justified interests or those of a third party. In this case, we shall no longer process your data. The latter case will not apply if we are able to demonstrate compelling legitimate reasons for the processing that override your interests or that we need your data to assert, exercise or defend legal claims.
Periods for fulfilling individual rights
We endeavour to respond to all requests within 30 days. It may however occasionally be necessary to extend this period for reasons associated with the specific individual right or the complexity of your request.
Restriction of information when fulfilling individual rights
In certain situations legal requirements may prevent us from providing You with information about all of your data. In such a case, if we have to refuse your information request, we will also inform You of the reasons for refusal.
Complaint to supervisory authorities
ISO-Chemie GmbH takes your concerns and rights very seriously. However, if You feel that we have not handled your complaints or concerns adequately, You have the right to lodge a complaint with a responsible data protection authority.
Version dated: 25.05.2018
Your contact for data protection matters
Data protection officer
Phone +49 (0)7361 94 90-9846
Mail to DSB@iso-chemie.de
Version dated: 25.05.2018