Privacy Policy

Thank you for your interest in our website.
Protecting your personal data when it is collected, processed and used in connection with your visit to our website is very important to us. Your data is protected in accordance with the applicable statutory provisions.
Please take a moment to read the following information. It explains how we handle your personal data, how and for what purposes the data is used, to whom we disclose the data and how we protect your personal data.
Your privacy rights are our highest priority, and we make every effort to protect and safeguard these rights.
The controller responsible for processing your personal data within the meaning of the European General Data Protection Regulation is:
ISOflanges GmbH
Viehtrift 1
29308 Winsen
Telephone: 05143 92349-0
Email: info@isoflanges.de

Data Protection Officer

If you have any questions about data protection, our Data Protection Officer, Dr. Bittner Consulting GmbH & Co. KG, Podbielskistraße 386, 30659 Hannover, will be pleased to assist you (datenschutzteam137@drbg.de).

Collection and Processing of Data

Every access to our website and every retrieval of a file stored on the website is logged. The information is stored for internal system-related and statistical purposes.
The following information is logged:
• name of the file accessed,
• date and time of access,
• volume of data transferred,
• confirmation that access was successful,
• operating system used,
• browser and browser type,
• website from which you were referred,
• internet service provider,
• pages visited, and
• requesting domain.
The IP addresses of the requesting computers are also logged. However, the controller does not use this information to identify any individual.
These data are required solely to display the content of our website correctly, to continuously optimise the content for you and to assist criminal investigations in the event of hacker attacks. The data is processed for these purposes on the basis of our legitimate interests pursuant to Article 6(1), first subparagraph, point (f) GDPR. The processing of the data is necessary for the operation of the website.
The data is stored for as long as it is required to fulfil the relevant purpose and is then deleted automatically.

Rights of Data Subjects

Pursuant to Article 15 GDPR, you have the right to obtain information about the processing of your personal data.
You may also exercise your rights to rectification, erasure or, where erasure is not possible, restriction of processing and data portability pursuant to Articles 16-18 and 20 GDPR. To exercise any of these rights, please contact our Data Protection Officer.
You also have the right to lodge a complaint with the competent supervisory authority at any time. If you believe that your personal data is not being processed in compliance with data protection law, we kindly ask you to contact our Data Protection Officer.
Furthermore, pursuant to Article 21 GDPR, you have the right to object at any time to the processing of your personal data where such processing is based on Article 6(1), first subparagraph, points (e) and (f) GDPR.

Protection of Stored Data

We use technical and organisational security measures to protect the personal data you provide to us against manipulation, loss, destruction or access by unauthorised persons. Our security measures are continuously improved and adapted in line with the state of the art. It cannot be ruled out that data transmitted by you without encryption may be viewed by third parties during transmission. Please note that completely secure transmission cannot be guaranteed when data is transferred over the internet, for example when communicating by email. Sensitive data should therefore either not be transmitted over the internet at all or should only be transmitted using a secure connection (SSL).

Protection of Minors

Consent to the processing of personal data may only be given by an adult. For information society services, a child may validly consent from the age of sixteen pursuant to Article 8 GDPR.

Hosting

The content of this website is hosted by the following provider:
Alfahosting GmbH
Ankerstraße 3b
D-06108 Halle (Saale)
(hereinafter: “Alfahosting”).
We use Alfahosting on the basis of Article 6(1), first subparagraph, point (f) GDPR. Our legitimate interest lies in providing our online services reliably, securely and efficiently. Further information is available in Alfahosting’s privacy policy at the following link:
https://alfahosting.de/datenschutz/
https://alfahosting.de/datenschutz/

Contact by Email, Telephone and Fax

You may contact us via the email address provided on our website. You may also contact us using the telephone or fax number provided on the website. If you use any of these contact options, the personal data transmitted in this context will be stored and will be collected and processed solely for the purpose of handling and responding to your enquiry.
If your enquiry relates to an existing contractual relationship with us or you are interested in a quotation, your personal data will be processed for the performance of a contract or in order to take steps prior to entering into a contract pursuant to Article 6(1), first subparagraph, point (b) GDPR.
In all other cases, your personal data will be processed on the basis of our legitimate interests pursuant to Article 6(1), first subparagraph, point (f) GDPR. Our interest lies in handling enquiries quickly and efficiently. You have the right to object to the processing of your personal data at any time.
Your personal data will not be disclosed to external third parties.
The personal data you provide will not be transferred to a third country or an international organisation, and no such transfer is planned.
The personal data you provide to us will be stored for the duration of the handling of your matter and retained until the applicable statutory retention periods have expired.

Newsletter

If you subscribe to our electronic newsletter, your personal data will be processed solely for the regular distribution of our newsletter on the basis of Article 6(1), first subparagraph, point (a) GDPR. After you register, we will send you a confirmation email that enables us to verify your identity and reconfirm your consent.
The registration procedure is logged on the basis of our legitimate interests pursuant to Article 6(1), first subparagraph, point (f) GDPR and serves as evidence of consent to receive the newsletter.
The newsletters contain a so-called “web beacon”, i.e. a pixel-sized file that is retrieved from the email service provider’s server when the newsletter is opened. As part of this retrieval, technical information is initially collected, such as information about your browser and system, as well as your IP address and the time of access. This information is used to technically improve the services based on the technical data or to analyse the target groups and their reading behaviour based on the locations from which the newsletter is accessed (which can be determined using the IP address) or the times of access. This processing is carried out on the basis of your consent pursuant to Art. 6(1), first subparagraph, lit. (a) GDPR and Section 25(1) TDDDG.
The statistical analysis also includes determining whether the newsletters are opened, when they are opened, and which links are clicked. This information is anonymised, meaning that it cannot be linked back to your email address. We use these analyses to identify the reading habits of our users and to tailor our content accordingly or to send different content based on our users’ interests.
The newsletters are sent with the involvement of our service provider Brevo:
Brevo GmbH
Köpenicker Str. 126
D-10179 Berlin
https://www.brevo.com/de/legal/privacypolicy/
Your personal data will not be disclosed to external third parties. The personal data you provide will not be transferred to a third country or an international organisation, and no such transfer is planned.
You have the right to withdraw your consent at any time with effect for the future. The lawfulness of data processing carried out before the withdrawal remains unaffected.
The personal data you provide when subscribing to the newsletter will be stored until you withdraw your consent to receive the newsletter and will be removed from the distribution list after you unsubscribe.

Cookies and Similar Technologies

When you use our website, cookies are stored on your device. Cookies are items of information consisting of a cookie name and an associated value. This information is generally stored in your browser. Persistent cookies are stored until their predefined lifetime expires, while session cookies are stored until you close the browser completely.
Where the storage of and access to cookies is necessary to provide essential website functions, this takes place on the basis of Section 25(2) no. 2 TDDDG and our legitimate interests pursuant to Article 6(1), first subparagraph, point (f) GDPR. These essential functions include, for example, logins, shopping baskets and consent management. You have the right to object at any time to processing based on Article 6(1), first subparagraph, point (f) GDPR.
In all other cases, this takes place on the basis of your consent pursuant to Section 25(1) TDDDG. Such cases include, for example, the integration of third-party services for media playback or analytics and tracking services. You have the right to withdraw your consent at any time through the website’s consent management system. The lawfulness of data processing carried out before the withdrawal remains unaffected.

YouTube (Video Plugin)

The YouTube.de/YouTube.com plugins used on our website are operated by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter: “Google”).
When the plugins on our website are accessed, a connection is established to Google’s servers. This transmits information to Google’s server about which of our web pages you have visited. If you are logged in to YouTube, Google can associate this information, including videos viewed and comments, with your personal user account. You can prevent your data from being collected in this way by logging out.
If you have consented to data processing by YouTube, your consent pursuant to Article 6(1), first subparagraph, point (a) GDPR and Section 25(1) TDDDG – where the consent within the meaning of the TDDDG relates to the placement of cookies or access to information on your device – forms the legal basis for the processing. You have the right to withdraw your consent at any time with effect for the future. The lawfulness of data processing carried out before the withdrawal remains unaffected.
When this Google service is used, personal data may be transferred to the USA. Please note that we have no knowledge of the content of the data transmitted or of how Google uses it. Further information is available at: www.google.de/intl/de/policies/privacy/
Google LLC is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards when data is processed in the USA. Every company that has obtained DPF certification undertakes to comply with these data protection standards. Further details are available at the following link:
https://www.dataprivacyframework.gov/participant/5780

Privacy Policy for Social Media Accounts

We would like to stay in contact with you and with other interested parties, customers and users. For this purpose, we use various social networks. The individual social networks we use are listed in the following section.
As a rule, data is collected for market research and advertising purposes. Such data includes linking your visit to our website with your user account on the social network or linking it by means of stored cookies or your IP address. This is usually done by creating user profiles and determining the resulting interests. This enables personalised advertising to be displayed both within and outside the social network. As a result, cookies may be placed on your device when social networks are used. However, we would like to point out that, as a general rule, we have no influence over what data is collected.
Through our social media accounts, we aim to provide you with information as simply and quickly as possible or enable you to share such information. Therefore, unless you have consented to data processing on the relevant platform, the legal basis is our legitimate interest pursuant to Article 6(1), first subparagraph, point (f) GDPR. If you have consented on the relevant platform, your consent pursuant to Article 6(1), first subparagraph, point (a) GDPR and Section 25(1) TDDDG – where the consent within the meaning of the TDDDG relates to the placement of cookies or access to information on your device – forms the legal basis for the processing. You have the right to withdraw your consent at any time with effect for the future. The lawfulness of data processing carried out before the withdrawal remains unaffected.
If you withdraw your consent, ask us to erase your data or the purpose for storing the data no longer applies, we will erase your data unless mandatory statutory provisions require otherwise. Cookies stored on your device will remain there until you delete them.
Data processed as a result of your visit to our accounts on social media websites is classified as processing initiated by us and is therefore subject to joint controllership with the operator of the social media website pursuant to Article 26 GDPR. Joint controllership is limited to processing operations for which the purposes and means of processing are jointly determined. If you wish to exercise your rights as a data subject, you may do so against either us or the operator of the social media website.
We also point out that your data may be processed outside the European Union and that this may create a risk that you will not be able to enforce your rights effectively.
You have the right at any time to obtain, free of charge, information about the source, recipients and purpose of your stored personal data. You also have the right to object, the right to data portability and the right to lodge a complaint with the competent supervisory authority. You may also request the rectification, blocking or erasure of your personal data and, in certain circumstances, restriction of its processing.

YouTube

We maintain an account on the YouTube video platform. YouTube is a service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter: “Google”).
When this Google service is used, personal data may be transferred to the USA. Please note that we have no knowledge of the content of the data transmitted or of how Google uses it. Further information is available at: www.google.de/intl/de/policies/privacy/
Google LLC is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards when data is processed in the USA. Every company that has obtained DPF certification undertakes to comply with these data protection standards. Further details are available at the following link:
https://www.dataprivacyframework.gov/participant/5780

LinkedIn

We maintain an account on the professional social network LinkedIn, which is operated exclusively by LinkedIn Ireland Unlimited Company (Wilton Place, Dublin 2, Ireland; hereinafter: “LinkedIn”).
The transfer of data to the USA is based on the EU Standard Contractual Clauses. Details are available here:
https://www.linkedin.com/legal/l/dpa and
https://www.linkedin.com/legal/l/eu-sccs
LinkedIn Corporation is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards when data is processed in the USA. Every company that has obtained DPF certification undertakes to comply with these data protection standards. Further details are available at the following link: https://www.dataprivacyframework.gov/participant/5448
Please note that we have no knowledge of the content of the data transmitted or of how LinkedIn uses it. The following link takes you to LinkedIn’s privacy policy:
http://de.linkedin.com/legal/privacy-policy
http://de.linkedin.com/legal/privacy-policy