Responsible within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:
First COMPOSITES GmbH
Phone.: +49 2638 948342
We take the protection of your personal data very seriously. With this data protection declaration, we would like to inform you about the type and scope of collecting and using of your personal data when you visit our website and when you contact us via e-mail on these pages.
The legal basis can be found in the General Data Protection Regulation. We have implemented numerous technical and organizational measures to ensure the most complete protection as possible for the data processed via this website.
Nevertheless, internet-based data transmissions can generally have security gaps. For this reason, every person concerned is free to use other means, e.g., by phone, to transmit to us.
You can exercise the following rights at any time using the contact details of our data protection officer:
- Information about your data stored by us and their processing (Art. 15 GDPR),
- Correction of incorrect personal data (Art. 16 GDPR),
- Deletion of your data stored by us (Art. 17 GDPR),
- Restriction of data processing if we are not yet allowed to delete your data due to legal obligations (Art. 18 GDPR),
- Objection to the processing of your data by us (Art. 21 GDPR) and
- Data portability, provided you have consented to the data processing or have concluded a contract with us (Art. 20 GDPR).
You can contact a supervisory authority with a complaint at any time, e.g., to the competent supervisory authority of the federal state of your place of residence or to the authority responsible for us as the responsible institution.
A list of the supervisory authorities (for the non-public area) with addresses can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
SSL – encryption
We use an SSL certificate for your connection to our website to increase the connection security. You can recognize this by the fact that the address line of the browser changes from http: // to https: //. This means that your data cannot be read by third parties.
Collection of general information by visiting our website
When you access our website, i.e., if you do not register or otherwise transmit information, information of a general nature is automatically recorded. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address, and the like.
Tthey are processed for the following purposes:
- Ensuring a problem-free connection to the website,
- Ensuring that our website can be used problem-free,
- Evaluation of system security and stability as well as
- to optimize our website.
We do not use your data to draw conclusions about you personally. Information of this kind may be statistically evaluated anonymously by us in to optimize our website and the technology behind it.
The processing takes place in accordance with Art. 6 Para. 1 lit.f GDPR based on of our legitimate interest in improving the stability and functionality of our website.
The recipients of the data may be technical service providers who act as processors for the operation and maintenance of our website.
The data will be deleted as soon as they are no longer required for the purpose of the survey. For the data used to provide the website, this is generally the case when the respective session has ended.
However, we reserve the right to use the log data retrospectively in the event of a legitimate suspicion of illegal use of our pages to take appropriate measures (e.g., criminal complaint, civil law prosecution).
The provision of the aforementioned personal data is neither legally nor contractually required. Without the IP address, however, the service and functionality of our website cannot be guaranteed. In addition, individual services may not be available or restricted. For this reason, no contradiction is possible.
If you call up our website via a link on another page, the referrer URL (the previously visited page) will also be saved. The referrer URL may contain the search terms that you specified when you made a request to a search engine immediately before.
We ourselves usually do not use the log data at all and our web host only uses it for statistical evaluations for the purpose of operation, security, and optimization of the offer, with no individualization taking place. Normally the log files are deleted after a few days.
If you contact us using our contact form, the data you have entered will be stored for the purpose of individual communication with you. To do this, it is necessary to provide a valid email address and your name. This is used to assign the request and then answer it. The specification of further data is optional.
The processing of the data entered in the contact form takes place on basis of a legitimate interest (Art. 6 Para. 1 lit. f GDPR).
By providing the contact form, we would like to make it easy for you to contact us. The information you provide will be stored for the purpose of processing the request and for possible follow-up questions.
If you contact us to ask for an offer, the data entered in the contact form will be processed to carry out pre-contractual measures (Art. 6 Para. 1 lit. b GDPR).
The recipients of the data may be contract processors.
Data will be deleted no later than 6 months after the request has been processed.
If there is a contractual relationship, we are subject to the statutory retention periods according to HGB and delete your data after these periods have expired.
The provision of your personal data is voluntary. However, we can only process your request if you provide us with your name, email address and the reason for the request.
Use of Google Maps
We use Google Maps on this website. Google Maps is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter "Google"). This enables us to show you interactive maps directly on the website and enables you to conveniently use the map function. You can find more information about data processing by Google in the Google data protection information: https://policies.google.com/privacy. There you can also change your personal data protection settings in the data protection center.
Detailed instructions how to manage your own data in connection with Google products can be found here: https://www.dataliberation.org
When you visit the website, Google receives information that you have accessed the corresponding subpage of our website. This takes place regardless of whether Google provides a user account that you are logged in to or whether there is no user account. If you are logged in to Google, your data will be assigned directly to your account.
If you do not want the assignment in your Google profile, you must log out of Google before activating the button. Google stores your data as a user profile and uses it for advertising, market research and / or needs-based design of its websites. Such an evaluation takes place (even for users who are not logged in) in particular to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, although you must contact Google to exercise this right.
The provider currently does not offer the option of simply opting out or blocking data transmission. If you want to prevent your activities on our website from being tracked, please withdraw your consent for the corresponding cookie category or for all technically unnecessary cookies and data transfers in the cookie consent tool. In this case, however, you may not be able to use our website or only to a limited extent.
Processing of your data in contracts and pre-contractual measures
Art. 6 I lit. a GDPR serves our company as the legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary to fulfill a contract to which the data subject is a party, as is the case, for example, with processing operations that are necessary for the delivery of goods or the provision of other services or consideration, the processing is based on Art. 6 I lit. b GDPR. The same applies to such processing operations that are necessary to carry out pre-contractual measures, for example in cases of inquiries about our products or services. If our company is subject to a legal obligation which requires the processing of personal data, for example to fulfill tax obligations, the processing is based on Art. 6 I lit. c GDPR. In rare cases, it may be necessary to process personal data to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor to our company were injured and his name, age, health insurance data or other vital information would have to be passed on to a doctor, hospital or other third party. Then the processing would be based on Art. 6 I lit. d GDPR. Ultimately, processing operations could be based on Art. 6 I lit. f GDPR. Processing operations that are not covered by any of the aforementioned legal bases are based on this legal basis if the processing is necessary to safeguard a legitimate interest of our company or a third party, provided that the interests, fundamental rights and freedoms of the person concerned do not prevail. We are particularly permitted to carry out such processing operations because they have been specifically mentioned by the European legislator. In this respect, he took the view that a legitimate interest could be assumed if the person concerned is a customer of the person responsible (recital 47 sentence 2 GDPR).
If the processing of personal data is based on Article 6 I lit.f GDPR, our legitimate interest is the conduct of our business activities for the benefit of all our employees and our shareholders.
The criterion for the duration of the storage of personal data is the respective statutory retention period. After the period has expired, the relevant data is routinely deleted, if that it is no longer required to fulfil or initiate a contract.
We explain to you that the provision of personal data is in part required by law (e.g. tax regulations) or can also result from contractual regulations (e.g. information on the contractual partner). To conclude a contract, it may sometimes be necessary for a data subject to provide us with personal data that we subsequently have to process. For example, the data subject is obliged to provide us with personal data when our company concludes a contract with them. Failure to provide personal data would mean that the contract could not be concluded with the person concerned. Before the person concerned provides personal data, the person concerned must contact one of our employees. Our employee explains to the person concerned on a case-by-case basis whether the provision of the personal data is required by law or contract or is necessary for the conclusion of the contract, whether there is an obligation to provide the personal data and what consequences the failure to provide the personal data would have.
As a responsible company, we do not use automatic decision-making or profiling.
Alternation of our data protection regulations
We reserve the right to adapt this data protection declaration so that it always complies with current legal requirements or to implement changes to our services in the data protection declaration, e.g., when introducing new services. The new data protection declaration will then apply to your next visit.
Questions to the data protection officer
If you have any questions about data protection, please send us an email or contact the person responsible for data protection in our organization directly:
First COMPOSITES GmbH
Attn.: Dirk Kraemer
Phone: +49 2638 948342
The data protection declaration was created with the help of activeMind AG, the experts for external data protection officers (Version # 2020-09-30).
Niederbreitbach, March 2021