Data protection declaration
Zschimmer & Schwarz is committed to the conscientious protection and security of your personal data. Below, we would like to inform you about the processing of personal data when using our website. Personal data are all information that can be related to you personally, e.g. name, address, e-mail addresses, user behaviour.
Responsible controller for data processing and data protection officer
The responsible controller according to Art. 4 para. 7 EU General Data Protection Regulation (GDPR) is:
Zschimmer & Schwarz Chemie GmbH
56112 Lahnstein | DE
T +49 2621 12-0
F +49 2621 12-407
You can also contact us using our contact form on this website.
Data Protection Officer
We have appointed a data protection officer for our company:
65201 Wiesbaden | DE
T +49 611 950008-40
You can contact our data protection officer at Datenschutz@zschimmer-schwarz.com or via the above postal address, to the attention of "Data protection officer".
Collection of personal data when visiting our website
Transmitting of data via the internet
When using the website for purely informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect such personal data that is transmitted from your browser to your internet provider and from there to our server. If you want to view our website, we collect the following data:
– IP address
– Date, time, time zone difference to Greenwich Mean Time (GMT)
– Information on the subpages of our website that you have accessed: content of the request (specific page)
– Access status / HTTP status code
– Amount of data transferred in each case
– Address of the website from which you came to our website (referrer URL)
– Browser type and version of the browser
– Operating system
We process these data, so that you can load our website, for the purpose of checking and, if necessary, restoring system security and stability, as well as for statistical purposes (see below). The legal basis for this processing is Art. 6 para. 1 f) GDPR. We have a legitimate interest in ensuring that our website is displayed correctly on your screen and that we can determine and correct the causes in the event of malfunctions.
The above mentioned data will be stored in log files for a maximum of 30 days. Longer storage only takes place only if necessary to assert and defend our legal claims, for example after a hacker attack.
The provision of the above data is neither required by law nor by contract and is not required to conclude a contract with us. However, for technical reasons, it would not be possible to visit our website without processing this data.
Duration of storage:
Personal data will be deleted after the statutory retention period has expired, provided that they are no longer required to fulfil or initiate a contract.
The legal basis is Art. 6 para. 1 f) GDPR or, if you have given your consent, Art. 6 para. 1 a) GDPR. We have an interest in making our website user-friendly for you and in optimising our website.
This website uses the following types of cookies:
- Transient cookies:
Transient cookies are automatically deleted when you close the browser. This also includes session cookies. These are deleted when you close the browser. Session cookies allow you to avoid having to re-enter date on our website, even if you visit other websites in between. The purpose of these session cookies is therefore to facilitate the use of our website.
- Persistent cookies:
We also use persistent cookies to statistically record and evaluate the use of our website for the purpose of optimising it. These cookies enable us to better support different languages or devices. Persistent cookies are deleted after 24 months at the latest.
In particular, the following cookies are used for the following purposes:
Logs whether the user has read and confirmed the cookie notice
Use of Matomo (formerly called Piwik)
This website uses the open source web analysis service Matomo. Matomo uses technologies that make it possible to recognize the user across multiple pages with the aim of analyzing the user patterns. The information recorded by Matomo about the use of this website will be stored on our server. Prior to archiving, the IP address will first be anonymized.
Through Matomo, we are able to collect and analyse data on the use of our website by website visitors. This enables us to find out, for instance, when which page views occurred and from which region they came. In addition, we collect various log files (e.g. IP address, referrer, browser, and operating system used) and can measure whether our website visitors perform certain actions (e.g. clicks, purchases, etc.).
The use of this analysis tool is based on Art. 6 Sect. 1 lit. f GDPR. The website operator has a legitimate interest in the analysis of user patterns, in order to optimize the operator’s web offerings and advertising.
We host Matomo by an external service provider (host). Personal data collected on this website are stored on the servers of the host. Our host will only process your data to the extent necessary to fulfil its performance obligations and to follow our instructions with respect to such data.
Execution of a contract data processing agreement
We have concluded a contract for order processing with these third-party providers, which guarantees that the data collected with Matomo will be processed exclusively according to our instructions and in accordance with the GDPR.
We are allowed to process data on the basis of Art. 6 para.1 b) GDPR if this is necessary for the performance of a contract between you and us or for the implementation of pre-contractual measures, that were carried out at your request. In this respect, we process your data in particular for contract management, communication with you, order acceptance, shipping, invoicing, and if necessary, for collection and for the enforcement and defence of legal claims.
We use your data to the extent permitted to send advertising by post and, if you have provided us with your e-mail address, e-mail advertising for our products and services. The legal basis is Art. 6 para. 1 f) GDPR. We have a legitimate interest in sending direct mail (for your right of objection, see "Your data protection rights").
The provision of personal data is not required by law nor by contract. However, in order to conclude a contract with us, it is necessary to process your name or company name, your e-mail address and your postal address. Without these data, sending e-mails to you, e.g. for sending contractual documents or offers, invoicing and possibly the assertion of justified claims, would not be possible.
Use of our customer portal
If you would like to use our customer portal, you need to register by entering your e-mail address, a password of your choice, your last name and your company name. We use the so-called double opt-in procedure for registration. This means that your registration is only complete when you confirm your registration by clicking on the link contained in a confirmation e-mail sent to you for this purpose.
When you use our customer portal, we process the data you provide, so that you can log in to the customer portal and view product data sheets. The purpose of processing such data is also to facilitate communication with you when carrying out pre-contractual measures, provided that you are interested in our products. You can change all information in the protected customer portal.
If you are our customer or interested in our products, the legal basis is Art. 6 para. 1 b) GDPR, otherwise Art. 6 para. 1 f) GDPR. We have a legitimate interest in making certain information such as product data sheets is only available to registered users of our customer portal in order to protect this information from uncontrolled dissemination on the internet. If the information is voluntary, the legal basis is your consent (Art. 6 para. 1 a) GDPR).
The provision of these data is not mandatory and not necessary for the conclusion of a contract. However, the use of the customer portal requires, that you provide at least an e-mail address, a password, your last name and your company name. If you provide further data, this is done voluntarily.
Use of our contact form or other contact
When you contact us by e-mail or by using our contact form, the data you provide (your e-mail address, possibly your name and telephone number) will be processed by us in order to answer your questions.
We process your e-mail address and your message, which you enter in our contact form or send us by e-mail, in accordance with Art. 6 para. 1 f) GDPR. We have a legitimate interest in processing your inquiries. We process other data based on your consent (Art. 6 para. 1 a) GDPR), provided, that you have consented to this processing by clicking the "Send" button. If you enter sensitive information that contains special categories of data in the "Message" field, you also consent to the processing of these data. If you are our customer at the same time, Art. 6 para. 1 b) GDPR will be the legal basis for such processing.
The provision of these data is not mandatory and not necessary for the conclusion of a contract. However, in order to use the contact form, you must provide an e-mail address, otherwise we will not be able to respond to you. If you provide further data, this is done voluntarily.
If you have subscribed to a newsletter, we will process the data you entered when you registered for the newsletter.
We process your e-mail address or postal address for the purpose of sending our newsletters on a regular basis. After ordering the e-mail newsletter, you will receive an e-mail from us with a link to verify your e-mail address. The legal basis is your consent, which you gave us when you subscribed to the newsletter (Art. 6 para. 1 a) GDPR).
If you no longer wish to receive the newsletter in the future, you can revoke your consent to receiving the newsletter at any time and without giving reasons by sending an e-mail to email@example.com (for more information on the right of withdrawal see "Your data protection rights"). Alternatively, you can unsubscribe from the newsletter by clicking on "Unsubscribe".
The data you provided when you subscribed to the newsletter will be deleted as soon as you have withdrawn your consent or unsubscribed from the newsletter.
Our newsletter is a voluntary offer. However, you must provide your e-mail address to send the e-mail newsletter or your address to send the postal newsletter. Further information is not required for sending the newsletter.
If you apply for a job in our organisation, your data will be processed for the purpose of deciding whether to establish an employment relationship. The legal basis for processing your data is Art. 88 GDPR in conjunction with Paragraph 26 (1) (1) FDPA (German Federal Data Protection Act). For the purpose of carrying out the application process, we will store the data for a maximum of 6 months after receipt of the application and will then delete it. Processing beyond this period is permitted for the purpose of establishing and carrying out an employment relationship in accordance with the legal basis mentioned above, provided that you start an employment with us after completing the application process. The provision of your data is neither contractually nor legally required.
Sources of data
We usually receive your data from yourself. In some cases, the following data may come from other sources, provided we are authorised to collect the data in this way:
- Public trade and association registers (company name, addresses)
- Address investigators, credit agencies (names, addresses), if we cannot reach you at your address
Recipients of your data
We partially transmit the above data to these processors for the following purposes:
- Creativ clicks GmbH, Schönherrstrasse 8, 09113 Chemnitz, Germany (website programing)
- JK-Computer GmbH, Trinkbornstrasse 24, 56281 Doerth, Germany (hosting)
- if necessary, further processors from the areas of web hosting, IT services, printing and data carrier destruction
Processors process data only on our instructions and not for their own purposes. In order to ensure data protection compliant processing, we have concluded an order processing contract with our website hoster.
In certain cases, some of your data may be passed on to other recipients if you have given your consent (Art. 6 para. 1 a) GDPR), if we are legally obliged to do so (Art. 6 para. 1 c) GDPR) or if it is necessary for the protection of legitimate interests (Art. 6 para. 1 f) GDPR):
- Post, shipping and telecommunications companies to ship items and communicate with you
- Law enforcement agencies, courts to enforce or defend legal claims
- Auditors, lawyers or tax advisors
- Insurance companies to handle claim
- LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA (company-own fan site of Zschimmer & Schwarz GmbH & Co KG Chemische Fabriken)
Audio and video conferencing
We use online conference tools to communicate with our customers. The tools we use are listed below. If you communicate with us via video or audio conference via the internet, your personal data will be recorded and processed by us and the provider of the respective conference tool.
The conference tools collect all data that you provide / use to use the tools (e-mail address and / or your telephone number). The conference tools also process the duration of the conference, start and end (time) of participation in the conference, number of participants and other “context information” in connection with the communication process (metadata).
Furthermore, the provider of the tool processes all technical data, that are required to handle online communication. This includes in particular IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or loudspeaker, as well as the type of connection.
If content is exchanged, uploaded or made available in any other way within the tool, it is also stored on the server of the tool provider. Such content includes in particular cloud recordings, chat / instant messages, voicemails, uploaded photos and videos, files, whiteboards and other information that is shared while using the service.
Please note that we do not have full influence on the data processing operations of the tools used. Our options are largely based on the company policy of the respective provider. Further information on data processing by the conference tools can be found in the data protection declarations of the tools used, which we have listed below.
Purpose and legal basis
The conference tools are used to communicate with prospective or existing contractual partners or to offer certain services to our customers (Art. 6 para. 1 b) GDPR). Furthermore, the use of the tools serves to generally simplify and accelerate communication with us or our company (legitimate interest within the meaning of Art. 6 para. 1 f) GDPR). If consent has been requested, the tools concerned are used on the basis of this consent (Art. 6 para. 1 a) GDPR); the consent can be revoked at any time with effect for the future.
The data collected directly by us via the video and conference tools will be deleted from our systems as soon as you ask us to delete them, revoke your consent to storage or the purpose for data storage no longer applies. Saved cookies remain on your device until you delete them. Mandatory statutory retention periods remain unaffected. We have no influence on the storage period of your data which are stored by the operators of the conference tools for their own purposes. For details, please contact the operators of the conference tools directly.
Conference tools used
We use the following conference tools:
The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://zoom.us/privacy
Conclusion of an order processing contract
We have concluded an order processing contract with the provider of Zoom and fully implement the strict requirements of the German data protection authorities when using Zoom.
Skype for Business
Conclusion of an order processing contract
We have concluded an order processing contract with the provider of Skype for Business and fully implement the strict requirements of the German data protection authorities when using Skype for Business.
Conclusion of an order processing contract
We have concluded an order processing contract with the provider of Microsoft Teams and fully implement the strict requirements of the German data protection authorities when using Microsoft Teams.
Video surveillance at the Lahnstein site
We use video surveillance measures at our location in Lahnstein, Germany to safeguard our house rights, to protect life of our employees and visitors and our property. If necessary, is this measure also used for clarification and criminal prosecution. The legal basis of such video surveillance Art. 6 para. 1 d) and f) GDPR together with Paragraph 4 FDPA (German Federal Protection Act). The storage period for the video recordings is 30 days. A transfer of the recordings to third parties is not planned.
Your data protection rights
Under the conditions of Art. 15 GDPR, you can request information from us about whether and which data we process from you. You can request the correction and, under certain circumstances, the completion of your data in accordance with Art. 16 GDPR. You have the right that we delete your data under the conditions of Art. 17 GDPR or block them under the conditions of Art. 18 GDPR. According to Art. 20 GDPR, you have the right to receive your data transmitted to us on the basis of a consent or a contract, provided that the processing is automated. If you wish and if this is possible on a technical level, we will transfer these data to a third party. According to Art. 21 GDPR, you have the right to object at any time to the processing of personal data relating to you based on Art. 6 para. 1 e) or f) GDPR for reasons that arise from your particular situation. Under certain conditions, your rights may be restricted or excluded by law.
If you have consented to data processing for a specific purpose, you have the right to revoke your consent at any time. The revocation does not affect the legality of the processing until the revocation. The revocation can be declared via e-mail to firstname.lastname@example.org. After revocation, we will no longer process your data unless we are legally entitled or obliged to do so. You have the right to submit data protection complaints to a data protection authority, in particular to the State Commissioner for Data Protection and Freedom of Information Rhineland-Palatinate, P.O. Box 30 40, 55020 Mainz, Germany.
If we process data exclusively in accordance with Art. 6 para. 1 f) GDPR to safeguard our interests, you have the right to object to the processing of your data for reasons that arise from your particular situation. If you object, we will no longer process these data, unless we can prove compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to enforce legal claims. Objections can for example be declared via e-mail to email@example.com.
Change of our data protection regulations
We reserve the right to change our security and data protection measures insofar as this becomes necessary due to technical developments. In these cases, we will also adapt our information on data protection accordingly. Therefore, please note the current version of our data protection declaration.