Privacy policy

  • Basic provisions
  • Visitors to our website
  • Network partners
  • Customers and interested parties
  • Suppliers and service providers
  • Applicants and employees
  • General provisions

BASIC PROVISIONS

This privacy policy is intended to inform the data subject of the type, scope, and purpose of collection and processing of personal data by POLYRACK TECH GROUP Holding GmbH & Co.KG. POLYRACK TECH GROUP GmbH & Co.KG takes protection of personal data very seriously and treats them confidentially and according to the legal data protection regulations. Since this privacy policy may be updated due to new technology and the ongoing development of procedures and methods of data processing, we recommend that you reread the privacy policy in regular intervals. For definitions of the terms used hereunder (e.g. “personal data” or “processing”), please refer to art. 4 GDPR

How to contact us

The Controller responsible for collecting and processing your personal data and thus for compliance with the requirements under data protection law is POLYRACK TECH GROUP GmbH & Co. KG. Our contact details are as follows:

Responsible controller in accordance with the GDPR

Horst Rapp, Andreas Rapp

Steinbeisstraße 4
75334 Straubenhardt, Germany
Telefon +49 (0)7082 7919-0
info@polyrack.com

Data protection officer (external)

Klaus Meissner
+49 (0)7082 7919-909
datenschutzbeauftragter@polyrack.com

If you have any questions, complaints or ideas regarding data protection, feel free to contact us. If you need to, you may also contact our Data Protection Officer (see item no. 2 hereunder) for this purpose.

The data protection supervisory authority competent for us:

  • The State Officer for Data Protection and Freedom of Information of Baden-Württemberg

1. VISITORS TO OUR WEBSITE

1.1 Type of data collected/purpose of data collection

We need your personal data for the following reasons:

  • To be able to provide you with the required content
  • To be able to ensure proper operation of our website
  • To be able to optimise our website to be more user-friendly

Access data

Data about access to the website are saved as “server log files”. The following data are logged:

  • Website visited
  • Date and time of access
  • Amount of sent data in bytes
  • Browser used (type and version)
  • Operating system used
  • IP address used (anonymised)

The server log files will be retained for up to 6 months and erased afterwards. User IP addresses are anonymised and stored in the log files on the server. These data cannot be associated with a specific person. These data are not combined with other data sources. We reserve the right to check these data subsequently in the event of concrete indications of unlawful use. In the event that data need to be retained as evidence, they are exempt from being erased until the matter in question has been dealt with in full.

Use of cookies

Our website uses so-called “cookies”. These are small text files which are stored on your end device through your browser. They do not cause any damage to your device. The location in which the cookies are stored depends on the user’s browser settings. We use cookies to make our website user friendly. Some cookies are stored on your end device until you delete them. They allow us to recognise your browser when you next visit our website. The information will not be provided to any third party since cookies are used for the purposes indicated above only. Most browsers are set so that they accept cookies automatically. If you do not want this to happen, you can adjust your browser settings so that you are notified of the use of cookies and only allow them in individual cases. If you choose to deactivate cookies, the functionality of our website may be restricted.
A simple note on cookies is implemented and links to the Privacy Policy. Unless it is closed actively, it is displayed every time a page is loaded. If it is closed, a persistent cookie “cookieconsent_dismissed” is created. It is stored for one year; during this time, the note is no longer displayed.
For the download portal, two session cookies (“PHPSESSID” and “fe_typo_user”) are created upon the page being opened. After you have successfully logged in, only the “fe_typo_user” cookie is stored.
The VIDEOS section of the website contains YouTube videos; therefore, persistent cookies (“CONSENT”, “GPS”, “IDE”, “PREF”, “VISITOR_INFO1_LIVE”) and a session cookie (“YSC”) are placed.

SSL certificate

Polyrack.com has a SSL certificate. I.e. data transferred between the user and the website and vice versa are encrypted on principle. Any access using “http” is redirected to “https” on principle.

Browser plug in

By changing your browser settings accordingly, you may prevent cookies from being stored; however, please note that you may not have full access to all website functions in this case. In addition, you may prevent any transmission to and processing of data created by the cookie and relating to website usage on your part (including your IP address) by Google by downloading and installing the browser plug-in available at the link below: tools.google.com/dlpage/gaoptout

Web analysis by means of Google Analytics

This website uses the functions of the web analysis service Google Analytics using three persistent cookies (“_ga”, “_gat” and “_gid”). The provider is Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA. Cookies are text files stored on your computer allowing them to analyse how you use our website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

Linkedin Insight Tag Services

1.1 Due to our legitimiate interest in the analysis, optimisation and economic operation of our online offer and for these purposes the so-called LinkedIn Insight Tag of the social network LinkedIn, which is operated by LinkedIn Inc, Wilton Place, Dublin 2, Ireland ("Facebook"), is used within our online offer.

1.2 LinkedIn is certified under the Privacy Shield Agreementand thus offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active). For more information about LinkedIn's privacy policy, please visit www.linkedin.com/legal/privacy-policy. You may opt out of the collection of data at any time by logging in to LinkedIn. You can find the link to deactivate it here: www.linkedin.com/psettings/enhanced-advertising

1.3Using the LinkedIn Insight tag, LinkedIn is able to identify visitors to our website as a target group for the display of ads. Furthermore, the LinkedIn Insight tag allows you to receive anonymous reports on the performance and effectiveness of the ads. By embedding the LinkedIn Insight tag on our homepage, a connection to the LinkedIn server will be established, if our online offer is visited and you are logged in on LinkedIn.

Facebook, Custom Audiences, and Facebook Marketing Services

1.1 Within our online offer, the so-called "Facebook pixel" of the social network Facebook, which is operated by Facebook Inc, 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are resident in the EU, Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"), is used due to our legitimate interests in analysis, optimization and economic operation of our online offer and for these purposes.

1.2 Facebook is certified under the Privacy Shield Agreement and thus offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).

1.3 With the help of the Facebook pixel, on the one hand, Facebook is able to determine the visitors of our online offer as a target group for the presentation of ads (so-called "Facebook ads"). Accordingly, we use the Facebook Pixel in order to display the Facebook Ads placed by us only to those Facebook users who have also shown an interest in our online offer or who exhibit certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited) that we transmit to Facebook (so-called "Custom Audiences"). With the help of the Facebook pixel, we also want to ensure that our Facebook Ads correspond to the potential interest of the users and do not appear annoying. With the help of the Facebook Pixel, we can also track the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users are redirected to our website after clicking on a Facebook ad (so-called "conversion").

Objection to collection of data

You can prevent Google Analytics from collecting your data by clicking on the following link. This places an opt-out cookie which prevents the future collection of your data when visiting this website: Deactivate Google Analytics Please refer to the privacy policy of Google for further information about the handling of user data at Google Analytics: support.google.com/analytics/answer/6004245

Newsletter

The newsletter is managed by the American service provider Mailchimp. It provides a code snippet for registration on the website which is implemented on www.polyrack.com. You have to provide several pieces of information to register for the newsletter. Last name, company name, your e-mail address and a declaration of consent are required. As soon as at least the required information has been provided, registration to the newsletter is initiated using the “Subscribe to the newsletter” button in a double opt-in procedure. After confirming the e-mail used for the registration, you can unsubscribe from the newsletter using a link after you received the first newsletter. The data themselves are all stored by Mailchimp; they are transmitted to the USA for this purpose. They may be erased upon request. Mailchimp has a Privacy Shield certification and is therefore compliant with all necessary legal provisions in compliance with GDPR.

Contact form

There are no personal data stored for the contact form. The contact form is only provided for interested parties to contact us. The various forms’ content is identical; the only thing changing is the addressee, depending on the location previously selected. Last name, first name, the company name, position, country, city, street, post code, your e-mail address and a declaration of consent are required. After submitting the form using the button “Submit form”, the e-mail is sent directly to the addressee. The sender does not receive an e-mail. The data are forwarded to internal marketing for making contact; they are not disclosed to third parties.

Download portal

The download portal offers the option to view and download the company’s publications and 3D drawings of products. The user can freely register for the download portal; they must provide required information (preferred user name, e-mail, first name and last name, password, company, country and language) using the registration form secured by SSL. Additional information such as post code and city is optional. In addition, the user is required to confirm the declaration of consent with reference to the privacy policy. After the information was entered in all required fields and was submitted using the “Create account” button, the data are stored in the data base, and the user is initially set as inactive. Registration for the download portal is made by double opt-in, i.e. after registering, an e-mail is first sent to the e-mail address provided by the user. They must then click on the confirmation link it contains to confirm the registration and unlock the account. The user may not delete their account themselves; however, it can be deleted upon request at any time. If a publication or drawing is requested for download, a temporary file is created on the POLYRACK server (file.polyrack.com). This file contains information about the requested file, the e-mail address and the last name of the person requesting the download. After the requested file was sent, the file is deleted.

1.2 Legal basis

We process your personal data on the following legal basis:

Article 6 (1) lit a GDPR

“... the data subject has given his or her consent for the processing of his or her personal data for one or more specific purposes.” and/or

Article 6 (1) lit f GDPR

for the protection of legitimate interest of the controller.

1.3 Legitimate interest of the controller

All procedures described in item 2.1 hereunder are intended to provide the requested content and optimising the website to make it more user-friendly.

By anonymising the IP address, it is ensured that it cannot be associated with individual visitors within the scope of analysis. The website visitor may deactivate web analysis and cookies using the methods indicated in item 2.1 hereunder; however, this may be associated with restricted display and use of the content under certain circumstances.

The download portal allows us to provide the company’s content for download. Therefore, more detailed data is required to ensure proper handling of such consent; however, like in item 2.1 hereunder, they may be provided with a voluntary declaration of consent in part.

Internal and external disclosure of your personal data

Your personal data will be disclosed internally within the scope of the purpose defined in item 2.1 hereunder according to the principle of data economy and further data protection principles exclusively. Your personal data may be disclosed to third parties under the following circumstances.

  • Commissioning of support services for which access to your personal data is required or may at least not be excluded completely. This includes e.g. EDP services.
  • Your personal data is disclosed to other network partners with your consent only

1.5 Mandatory provision of your personal data and possible consequences if provision is denied

We require the data indicated in item 2.1 hereunder to maintain functionality and continuously improve our website. Without collecting these data, correct use of certain websites is not possible.

2. NETWORK PARTNERS

2.1 Purpose of data collection

We need your personal data for the following reasons:

  • Coordination of possible collaborations
  • Coordination of joint interest
  • Exchange of experiences

2.2 Legal basis

We process your personal data on the following legal basis: Article 6 (1) lit a GDPR: “... the data subject has given his or her consent for the processing of his or her personal data for one or more specific purposes.”

2.3 Legitimate interest of the controller

Coordination and exchange of procedures are possible in a purposeful manner only if a minimum of personal data is available. Coordination and exchange of procedures is important to us to be able to provide the perfect services and products to our customers and keeping up with the market’s development.

2.4 Internal and external disclosure of your personal data

Your personal data will be disclosed internally within the scope of the purpose defined in item 3 hereunder according to the principle of data economy and further data protection principles exclusively. Your personal data may be disclosed to third parties under the following circumstances only:

  • Commissioning of support services for which access to your personal data is required or may at least not be excluded completely. This includes e.g. EDP services.
  • Disclosure of your personal data due to legal obligations.
  • Your personal data is disclosed to other network partners with your consent only

2.5 Mandatory provision of your personal data and possible consequences if provision is denied

Your personal data will be processed within the scope of your formal declaration of consent only. If you do not give your consent or withdraw it, correspondence for collaboration for the purposes indicated in item 3.1 hereunder is impossible.

3. CUSTOMERS AND INTERESTED PARTIES

3.1 Purpose of the data collection

We need your personal data for the following reasons:

  • Processing enquiries
  • Preparing individual offers for work or services requested from us
  • Preparing a service agreement or contract for work and labour
  • Invoicing the contractually agreed performance
  • Rendering the contractually agreed performance

3.2 Legal basis

We process your personal data on the following legal basis:

Article 6 (1) lit b GDPR

“... processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract” If you provide us with your contact information to be informed about products, services or news (without specific interest in an offer or service agreement/contract for work and labour/purchasing agreement), it is processed on the following legal basis

Article 6 (1) lit a GDPR “... the data subject has given his or her consent for the processing of his or her personal data for one or more specific purposes.”

3.3 Legitimate interest of the controller

We need your personal data:

  • To process your enquiries and give you corresponding feedback
  • To prepare offers and transmit them to the employee responsible for this at your company
  • To render contractual services
  • To invoice services rendered and delivered products

3.4 Internal and external disclosure of your personal data

Your personal data will be disclosed internally within the scope of the purpose defined in 4.1 hereunder according to the principle of data economy and further data protection principles exclusively. Your personal data may be disclosed to third parties under the following circumstances.

  • Commissioning of a subcontractor for fulfilling the contractual obligations we have agreed on with you within the scope of collaboration
  • Commissioning of support services for which access to your personal data is required or may at least not be excluded completely. Among others, these include EDP support services, services within the scope of invoicing or the use of tax consulting services
  • If you are interested in our newsletter, they are transferred to the service provider organising sending of the newsletter for us.
  • Disclosure of your personal data due to legal obligations

3.5 Mandatory provision of your personal data and possible consequences if provision is denied

We need the personal data collected from you to render our contractual performance or to prepare an individual offer. Without such personal data, preparing an offer or rendering the desired services and work is impossible. It is only by using their personal data that we can keep parties interested in our products, services and news informed appropriately.

4. SUPPLIERS AND SERVICE PROVIDERS

4.1 Purpose of data collection

We need your personal data for the following reasons:

  • Enquiry in individual offers for work, services or products.
  • Concluding a service agreement, contract for work and labour or executing an order.
  • Making enquiries in work or services rendered or products including processing of complaints.
  • Paying invoices

4.2 Legal basis

We process your personal data on the following legal basis: Article 6 (1) lit b GDPR “... processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.”

4.3 Legitimate interest of the controller

We need your personal data:

  • To make enquiries and address them to the persons responsible
  • To request offers and provide the information required for them
  • To conclude service agreements, contracts for work and labour or purchasing agreements
  • To pay invoices
  • To address complaints if required

4.4 Internal and external disclosure of your personal data

Your personal data will be disclosed internally within the scope of the purpose defined in item 1.1 hereunder according to the principle of data economy and further data protection principles exclusively.

  • Your personal data may be disclosed to third parties under the following circumstances.
  • In the event of commissioning of another service provider/supplier for fulfilling the contractual obligations we have agreed on with you within the scope of collaboration.
  • Commissioning of support services for which access to your personal data is required or may at least not be excluded completely. Among others, these include EDP support services, services within the scope of payment of invoices or the use of tax consulting services.
  • Disclosure of your personal data due to legal obligations.

4.5 Mandatory provision of your personal data and possible consequences if provision is denied

We need the personal data collected from you to order the desired products and services or to request an individual offer. Otherwise, ordering desired products and services or requesting an individual offer would not be possible.

5. APPLICANTS AND EMPLOYEES

5.1 Purpose of data collection

We need your personal data for the following reasons:

  • Assessment and processing of applications we receive
  • Holding job interviews
  • Making a selection between applicants
  • Concluding an employment agreement (establishing employment)
  • Maintaining employment
  • Terminating employment

5.2 Legal basis

We process your personal data on the following legal basis: Art. 26 (1) BDSG [German Federal Data Protection Act] (as updated)

5.3 Legitimate interest of the controller

We need your personal data

  • To enable fair selection between participants
  • To assess the professional, methodological and social skills in the application process
  • To conclude a legally sound employment agreement
  • To implement the provisions agreed in the employment agreement
  • for the further development and training of employees to comply with our legal obligations with regard to health/social insurance and tax laws
  • if necessary, to terminate the employment relationship

5.4 Internal and external disclosure of your personal data

Your personal data will be disclosed internally within the scope of the purpose defined in item 5.1 hereunder according to the principle of data economy and further data protection principles exclusively. Your personal data may be disclosed to third parties under the following circumstances only:

  • Disclosure of your personal data (contact information) to contractors, subcontractors or cooperation partners within the scope of managing the employment if required to fulfil orders. Possible disclosures will be restricted to the required extent in all cases. Where possible, your personal data will not be disclosed.
  • Commissioning of support services for which access to your personal data is required or may at least not be excluded completely. Among others, these include EDP support services, services within the scope of payroll accounting or the use of tax consulting services.
  • Disclosure of your personal data (contact information) within the scope of supplier management if required to fulfil orders. Possible disclosures will be restricted to the required extent in all cases. Where possible, your personal data will not be disclosed.
  • Disclosure of your personal data due to legal obligations to authorities and public health insurance providers.

5.5 Mandatory provision of your personal data and possible consequences if provision is denied

On the one hand, we are bound by law to process your personal data (this includes their disclosure, e.g. to authorities or public health insurance providers); on the other hand, we need the data collected from you for deciding on who to employ and for establishing, maintaining and terminating the employment. Without the collected data, making a decision and establishing, maintaining and terminating an employment would not be possible.

6. GENERAL PART

6.1 Your rights

On principle, you have the following rights with regard to your personal data:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art 18 GDPR)
  • Right to data portability (Art. 20 GDPR)

6.2 Storage period and erasure of your personal data

The legislators have issued numerous retention periods with which we comply with extreme care; we receive consultation to ensure that we fulfil these obligations. On principle, this context requires that we only store your personal data for the period allowed by the defined purpose or provided for by legislation for verification purposes. If we wish to store your data longer than described above, we would request you to confirm this within the scope of a voluntary declaration of consent.

6.3 Automated decision-making and profiling

There is no automated decision-making and profiling with regard to you personally. We do not perform any profiling by means of the personal data collected from you.

6.4 Change of purpose

If we intend to change the purpose for which your personal data were originally collected, we will advise you of this in detail and in a transparent manner. In this case, we will naturally provide you with all legally required information. If the change of purpose involved processing of personal data on the legal basis of a voluntary declaration of consent, we will advise you accordingly and request your formal consent.

6.5. Transfer of your data to a third country (outside of the European Union) or an international organisation

Your data will be transferred to third countries outside of the European Union in exceptional cases only (see item 1.1 Newsletter above). There are no data transferred to internationally operating organisations. If this is required, we would advise you of this in advance and ensure that all necessary measures for maintaining an appropriate level of data protection are taken.

6.6 Data economy

In all of this, we always comply with the imperative of data economy and do not collect any personal data we do not need at all costs according to item 1 hereunder. If we wish to collect further personal data not included in item 1 hereunder, we would ask you for a voluntary declaration of consent in this regard.

Last updated: 06.03.2020