Privacy policy

We take the protection and security of your (hereinafter “you” or “user”) personal data (hereinafter “pd”) as defined by Art. 4 no. 1 General Data Protection Regulation (hereinafter “GDPR”) and any other applicable data protection regulations seriously. Therefore, KANZAN Spezialpapiere GmbH (hereinafter “we” or “KANZAN”) processes pd on its website exclusively within the limits of the GDPR and any other applicable data protection regulations.

This Privacy Policy (“PP“) uses the terms of the GDPR; the corresponding definitions are, for instance, available under dejure.org/gesetze/DSGVO/4.html.

I. Name and address of the controller

The controller in terms of the General Data Protection Regulation and other national data protection laws of the member states and any other data protection regulations is:
KANZAN Spezialpapiere GmbH
Nippesstraße 5
52349 Düren
Germany
Tel.: +49 (0) 2421 5924-0
Email: info@kanzan.de
Website: www.kanzan.de

II. Name and address of the data protection officer

The data protection officer of the controller is:

Georg W. Baumann
Rechtsanwalt 
Datenschutzbeauftragter – DSB TÜV
Datenschutzauditor – DSA TÜV

Georg Baumann Informationssysteme GmbH
Geschäftsführer RA Georg Baumann
Amtsgericht Köln HRB 44838
Eichholzer Str. 80
50389 Wesseling
Telefon:  +49 2236 9292-0
Telefax:  +49 2236 9292-22
E-Mail: dsb@kanzan.de
Website: www.frag-den-dsb.de

III. General information on data processing

Generally, we only process pd of our users if and to the extent this is necessary for providing a functional website and presenting our contents and goods and services. 
As a rule, we only process personal data of our users with their prior consent except in cases where it is impossible for factual reasons to obtain the user’s prior consent and processing of the data is permitted by law. 

The pd of the data subject is deleted or blocked as soon as the purpose of data storage ceases to exist. Data may be stored beyond that time where this is provided for by European or national legislation in appropriate European Union regulations, laws or other provisions which the controller is obliged to observe and comply with. The data is also blocked or deleted if and as soon as the storage period prescribed by any of the aforesaid regulations expires unless further storage of the data is necessary for the conclusion or performance of a contract.

In detail: 

IV. Provision of the website and creation of log files

1. Description and scope of data processing 

Every time a user accesses our website as well as in the case of a download of documents we offer there, our system automatically collects data and information from the computer system of the accessing computer.

Thereby, the following data is collected:

• IP address (anonymized, last digits are blackened)
• Date and time of the visit
• Pages visited/ files called up
• Browser used
• Operating system

This data is not stored together with other pd of the user.

2. Purpose of data processing 

The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. For such purpose, the IP address of the user must be stored for the duration of the session. 
The data is stored in log files to ensure the functionality of the website. Moreover, the data helps us optimize the website and ensure the security of our information technology systems. The data is not analysed for marketing purposes in this context. 

3. Legal basis

The legal basis for the data processing is Art. 6 subs. 1 f) GDPR. The purposes stated above constitute our legitimate interest in the data processing.

4. Duration of storage

Log files are deleted automatically after four weeks. 

V. Filing of application documents

1. Description and scope of data processing

On our website we offer vacancies on the page “Jobs”. Application documents can also be filed by email to the email address stated there. The data which is processed in this context is pd in terms of Art. 4 no. 1 GDPR.

2. Purpose of data processing

The data is processed to determine the qualification and aptitude of the applicant for the vacancy to be filled by KANZAN.

3. Legal basis for data processing 

The legal basis for the processing including but not limited to the temporary storage of the data contained in the application documents is § 26 BDSG (German Federal Data Protection Act).

4. Duration of storage

If the application is rejected, the data will be deleted after six months. If the applicant is employed/ engaged by KANZAN, the application documents will be transferred and adopted into a personnel file. 

VI. Contact by email

1. Description and scope of data processing 

You can contact KANZAN via the email addresses provided on the website. In this case, the technical data and pd of the user which is transferred with the email is stored.

2. Purpose of data processing

We process the pd from the user’s email exclusively for the purpose of processing the user request.

3. Legal basis for data processing 

The legal basis for the processing of the data which is transferred in the context of an email contact is Art. 6 subs. 1 f) GDPR. Where the email contact is intended to bring about the conclusion of a contract, the processing is also based on Art. 6 subs. 1 b) GDPR as an additional legal basis.

4. Duration of storage

The data is deleted as soon as it is no longer necessary to achieve the purpose of data collection. For pd which is transferred by email, this is the case when and as soon as the relevant communication with the user is terminated. Communication is deemed terminated when it can be concluded from the circumstances that the case in question is finally settled, that the data need not be stored under any other legal provisions and no restriction according to Art. 17 subs. 3 GDPR applies. 

VII. Request for brochures

1. Description and scope of data processing 

Any interested user may request us to provide him or her with information material. For such purpose, the user may send an email to sales@kanzan.de. When the user sends an information request, the name and address of the user is processed.

2. Purpose of data processing

The data is processed exclusively for the purpose of providing the user with the requested documents. 

3. Legal basis for data processing 

The legal basis for the processing of the user’s pd is the consent given by the user, Art. 6 subs. 1 a) GDPR.

4. Duration of storage

The data is deleted one year after the documents have been sent to the user unless there are legal provisions requiring further storage and provided no restriction according to Art. 17 subs. 3 GDPR applies.

VIII. Use of cookies and social media 

1. Cookies

a. Description and scope of data processing

Our website uses session ID cookies. Cookies are text files which are stored in the Internet browser or stored by the Internet browser on the computer system of the user. When a user accesses a website, a cookie can be stored on the operating system of the user. This cookie contains a distinctive character string which enables unambiguous identification of the browser when the website is accessed again. 
We use cookies to make our website more user-friendly. Some elements of our website require that it must be possible to identify the accessing browser even after the user has changed the page. 

b. Purpose of data processing

We use cookies which are technically necessary for the purpose of rendering the use of our website easier for the users. Some functions and features of our website cannot be offered without the use of cookies. These functions and features require the browser to be recognized even after the user has changed the page. 

We need cookies to measure the Webcluster Performance.

The user data which is collected by the cookies which are technically necessary are not used to create user profiles.
Cookies are stored on the computer of the user and transferred from that computer to our website. That is why you as the user have full control over the use of cookies. You can adjust the settings in your Internet browser to deactivate or restrict the transfer of cookies. You may also delete cookies that have already been stored, at any time. This can also be done automatically.
If you deactivate cookies for our website, you might be unable to use all functions and features of the website without restrictions. The session cookie which we use on this website is deleted when the user closes the browser.

c. Legal basis for data processing 

The legal basis for the processing of personal data by means of cookies is Art. 6 subs. 1 f) GDPR. Our legitimate interest consists in the provision of a user-friendly and technically optimized website. 

2. Google Maps

In addition, we use plug-ins of the “Google Maps” service to make it easier for the users to find our office premises. “Google Maps” is a service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043. When the user clicks the plug-in on our website, the information which Internet page the user has visited is transferred to the server. In addition, Google stores the IP address of the browser of the terminal of the user of this Internet page. Further information is available in the privacy policies of Google under the following link:
www.google.com/policies/privacy/

IX. Recipients/ Third parties/ Transfer to third countries 

The data may also be received by third parties which process data on behalf of KANZAN or which have access to the data in the context of the services they render to KANZAN. Such third parties are, for instance, IT service providers and shipment service providers. 
We have concluded appropriate agreements for data processing on behalf according to Art. 28 GDPR with all service providers.
The user data is not transferred to third parties (Art. 4 no. 10 GDPR) unless the user gives his or her explicit consent to the transfer. Pd is transferred to government bodies and authorities exclusively within the limits of the law.
All data is stored on servers and/or computers in the European Union. 

X. Rights of data subjects

If your pd is processed, you are a data subject in terms of the GDPR and, if all applicable legal conditions are fulfilled, you have the right at any time to assert the following rights against the controller or its data protection officer (see sec. I and II):

  • Right to access and information according to Art. 15 GDPR regarding the pd which we process. In particular, you have the right to be informed about the purposes of the processing, the categories of pd, the categories of recipients to whom the data is or was disclosed, the intended duration of storage and the rights to which you are entitled in this context and which are explained in this section;
  • Right to rectification without undue delay of any inaccurate or incomplete pd concerning you which we have stored, according to Art. 16 GDPR;
  • Right to erasure of your pd which we have stored, according to Art. 17 GDPR if and to the extent that processing is not necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or even mere potential defence of legal claims.
  • Right to restriction of the processing of your pd according to Art. 18 GDPR where the accuracy of the pd is contested by you, the processing is unlawful and you oppose the erasure of the pd and we no longer need the pd, but the pd is required by you for the establishment, exercise or defence of legal claims or if you have objected to processing pursuant to Art. 21 GDPR; 
  • Right to receive the pd which you have provided to us, in a structured, commonly used and machine-readable format or request transmission of your pd to another controller, according to Art. 20 GDPR;
  • Right to withdraw your consent to data processing at any time according to Art. 7 subs. 3 GDPR by an appropriate declaration to us. In this case, we will not be allowed to continue the data processing which was based on this consent in the future, and
  • Right to lodge a complaint with a supervisory authority according to Art. 77 GDPR. This usually is the supervisory authority of your habitual residence or place of work or of the business domicile of KANZAN.  

Where pd is processed based on legitimate interests according to Art. 6 subs.1 sentence 1 f) GDPR, the data subject has the right to object to the processing of his or her pd according to Art. 21 GDPR, either on grounds relating to his or her particular situation or if the data subject objects to the processing for direct marketing purposes. In the latter case, the data subject has a general right to object to the processing which we will respect and implement without the data subject being required to state grounds for the objection relating to his or her particular situation.