In the following, we inform you about the collection of personal data when using this website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behaviour.

1. Data controller and contact

Data controller as per the General Data Protection Regulation (hereinafter called GDPR, German DS-GVO):

KLB Kötztal Lacke + Beschichtungen GmbH

Günztalstraße 25
89335 Ichenhausen
Germany

Phone +49 8223 9692-0
Fax   +49 8223 9692-100
E-mail info@klb-koetztal.com

Represented by the Managing Directors Artur Kehrle, Patrick Kehrle, Dr Julian Kehrle

You can reach our data protection officer as follows:

By mail: to the above-mentioned address with the addition of Data Protection Officer
By email: to datenschutz@klb-koetztal.de

2. Your rights when using the website

• In accordance with Art. 15 GDPR, you have the right to receive information about your data stored by us, which is collected during your visit to the website and use of the web store.
• In accordance with Art. 16 GDPR, you have the right to demand the correction of incorrect or completion of your personal data stored by us.
• In accordance with Art. 17 GDPR, you have the right to request the deletion of your personal data stored by us, unless the processing is required for compliance with a legal obligation, or for the assertion, exercise or defence of legal claims.
• In accordance with Art. 7(3) GDPR, you have the right to revoke your consent to processing at any time. This has the consequence that we may no longer continue the data processing based on this consent in the future. The lawfulness of the processing carried out on the basis of consent until revocation by the data subject shall remain unaffected.
• In accordance with Art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that the data be transferred to another data controller.
• In accordance with Art. 77 GDPR, you have the right to complain to the competent data protection supervisory authority if you believe that your right to informational self-determination has been violated by the processing of personal data collected during your visit to our website. The Bavarian State Office for Data Protection Supervision (BayLDA) is responsible for KLB Kötztal Lacke + Beschichtungen GmbH.
• If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 para. 1 p. 1 lit. f GDPR, you have the right, in accordance with Art. 21 GDPR, to object to the processing of your personal data if there are reasons for doing so which arise from your particular situation or if the objection is directed against direct advertising. In the latter case, you have a general right of objection, which we will implement without specifying a particular situation.

3. Data security

We maintain up-to-date technical measures to ensure data security, in particular to protect your personal data from risks during data transmissions and from third parties gaining knowledge. These measures are adapted to the current state of the art in each case.

4. Processing of personal data

4.1. Collection of personal data when visiting our website

General use of the website

In the case of mere informational use of the website, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is required from a technical point of view in order for us to display our website to you and to ensure stability and security (the legal basis is Art. 6 para. 1 p. 1 lit. f GDPR)

• IP address
• Date and time of the request
• Time zone difference from Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Access status/HTTP status code
• Data volume transferred in each case
• Website from which the request comes
• Browser
• Operating system and its interface
• Language and version of the browser software.

Use of cookies

Our website uses cookies, which are stored by the browser on your device and which contain certain settings for the use of the website (e.g. for the current session). Cookies serve to make our offer more user-friendly, more effective and safer. Cookies are small text files which are stored on your computer by your browser. The legal basis is Art. 6 para. 1 p. 1 lit. f GDPR.

You can configure your browser settings according to your preferences. However, we would like to point out that you might then not be able to use all the functions of this website.

4.2. Other functions and offers on our website

In addition to the purely informational use of our website, we offer various services that you can use if you are interested. This usually requires you to provide further personal data, which we use to provide the respective service.

Contact via e-mail / contact form

For requests of any kind, we offer you the option of contacting us via the e-mail address specified on the website or via the contact form. In this case, the personal data of the sender, i.e. the user, transmitted with the request will be stored. The legal basis for the processing of this data, which is transmitted in the course of a request, is Art. 6 para. 1 lit f) GDPR (our legitimate interests as the data controller). If the aim of the request is to conclude a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b) GDPR (fulfilment of a contract). Processing of this personal data serves us solely to process the contact.

Within our company, access to your data is given to those departments that need it to process your request. The user has the option to object to data processing. The objection must be sent to the contact details provided under No. 1. All personal data stored in the course of contacting us will be deleted in this case.

Newsletter subscription

By providing your consent, you can subscribe to our newsletter, in which we will inform you about our current interesting offers. The legal basis is Art. 6 para. 1 p. 1 lit. a GDPR. We use the double-opt-in procedure to sign up for our newsletter. This means that, after registering, we will send you an e-mail to the e-mail address you provided, in which we will ask you to confirm that you wish to receive the newsletter. If you do not confirm this, your registration will be automatically deleted. If you confirm your wish to receive the newsletter, we will store your email address until you unsubscribe. In addition, we store your IP addresses and the times of registration and confirmation.

The purpose of the procedure is to be able to prove your registration and, if necessary, to clarify any misuse of your personal data. The only mandatory information for sending the newsletter is the e-mail address. The provision of further information is voluntary. Specified first and last names are used to personalise the newsletter. The data voluntarily provided will also be completely deleted upon revocation.

You can revoke your consent to receive the newsletter and unsubscribe at any time. You can revoke your consent by clicking on the link provided in every newsletter, via e-mail to datenschutz@klb-koetztal.de or by sending a message to the contact details provided under No. 1. The data you provide will not be disclosed to third parties.

5. Integration of Google Maps

We use the Google Maps service on this website. This allows us to show you interactive maps directly on the website and enables you to use the map function conveniently.

By visiting the website, Google receives the information that you have accessed the corresponding sub-page of our website. In addition, the data mentioned under No. 5.1. of this policy will be transmitted. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data is directly assigned to your account. If you do not wish to be associated with your Google profile, you must log out of your user account. Google stores your data as usage profiles and uses it for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) for the provision of tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right. The integration of Google Maps is necessary for the needs-based design of our website. This is our interest in data processing in accordance with Art. 6 para. 1 lit. f GDPR.

For more information on the purpose and scope of data collection and its processing by the plug-in provider, please refer to the provider’s privacy policy. There you will also receive further information about your rights in this regard and setting options for protecting your privacy: http://www.google.co.uk/intl/en/policies/privacy.

6. Integration of Google Analytics

If you have given your consent, this website uses Google Analytics, a web analytics service provided by Google LLC. The responsible service provider in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

Scope of processing

Google Analytics uses cookies that enable an analysis of your use of our websites. The information collected by means of cookies about your use of this website is usually transferred to a Google server in the USA and stored there.

We use the function ‘anonymizeIP’ (IP masking): Due to the activation of IP anonymization on this website, your IP address will be truncated by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google.

During your visit to the website, the following data, among others, is collected:

• The pages you have accessed, your “click path”
• Achieving “website goals” (conversions, e.g. newsletter sign-ups, downloads, purchases)
• Your user behaviour (e.g. clicks, dwell time, bounce rates)
• Your approximate location (region)
• Your IP address (in shortened form)
• Technical information about your browser and the end devices you use (e.g. language setting, screen resolution)
• Your internet provider
• The referrer URL (via which website/advertising medium you came to this website)

Puposes of processing

On behalf of the operator of this website, Google will use this information for the purpose of evaluating your (pseudonymous) use of the website and compiling reports on website activity. The reports provided by Google Analytics are used to analyse the performance of our website.

Recipient

The recipient of the data is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Transmission to third countries

A transfer of data to the USA cannot be ruled out.

Storage period

The data sent by us and linked to cookies is automatically deleted after 14 months. The deletion of data whose retention period has been reached takes place automatically once a month.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google, as well as the processing of this data by Google, by:

• Not giving your consent to the setting of the cookie.
• Downloading and installing the browser add-on to deactivate Google Analytics HERE.

You can also prevent the storage of cookies by selecting the appropriate settings on your browser software. However, if you configure your browser to reject all cookies, you may experience limited functionality on this and other websites.

Legal basis and possibility of revocation

The legal basis for this data processing is your consent, Art. 6 para. 1 p. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by accessing the cookie settings HERE and changing your selection there.

You can find more information on the terms of use of Google Analytics and on data protection at Google at https://marketingplatform.google.com/about/analytics/terms/gb/ and at https://policies.google.com/?hl=en.

7. Integration of Google Fonts

Our website uses web fonts provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland for the uniform display of fonts. When you access a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.

For this purpose, the browser you are using must connect to Google’s servers. This gives Google knowledge that our website has been accessed via your IP address. Google Web Fonts are used in the interest of a uniform and appealing presentation of our website.

These processing operations are only carried out when explicit consent is given in accordance with Art. 6 para. 1 lit. a GDPR.

Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy https://www.google.com/policies/privacy/.

8. Integration of YouTube

We have integrated YouTube components on this website. YouTube is an internet video portal that allows video publishers to post video clips free of charge and other users to view, rate and comment on them free of charge. YouTube allows the publication of all kinds of videos, which is why complete film and television programmes, but also music videos, trailers or videos made by users themselves can be accessed via the internet portal.

The operating company of YouTube is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Each time you access one of the individual pages of this website operated by us on which a YouTube component (YouTube plug-in) has been integrated, the internet browser on your IT system is automatically prompted by the respective YouTube component to download a representation of the corresponding YouTube component from YouTube. Further information on YouTube can be accessed via https://www.youtube.com/intl/en/about/. Within the scope of this technical procedure, YouTube and Google receive information about which specific sub-page of our website is visited by you.

If you are logged in to YouTube at the same time, YouTube recognises which specific sub-page of our website you are visiting when you access a sub-page that contains a YouTube plug-in. This information is collected by YouTube and Google and assigned to your YouTube account.

YouTube and Google always receive information via the YouTube component that you have visited our website if you are logged into YouTube at the same time as accessing our website; this takes place regardless of whether you click on a YouTube video or not. If you do not want this information to be transmitted to YouTube and Google, you can prevent the transmission by logging out of your YouTube account before accessing our website.

YouTube is used in the interest of convenient and easy use of our website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

The privacy policy published by YouTube, which can be accessed at https://www.google.co.uk/intl/en/policies/privacy/, provides information on the collection, processing and use of personal data by YouTube and Google.

9. Duration of the storage of personal data

We process and store your data as long as it is necessary for the fulfilment of the aforementioned purposes, in particular our contractual and legal obligations. If the data is no longer required for the fulfilment of these purposes and our obligations, it is deleted on a regular basis, unless its – temporary – further processing is necessary for the following purposes: Fulfilment of retention obligations under commercial and tax law: In particular, the German Commercial Code and the German Fiscal Code should be mentioned. The time limits specified there for storage and documentation are six to ten years. Preservation of evidence within the framework of the statutory limitation provisions. According to Sections 195 et seq. of the German Civil Code (BGB), these limitation periods can be up to 30 years, with the regular limitation period being three years.

10. Privacy policy for the Facebook account

The company uses the technical platform and services of Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland. On our website, a hyperlink to Facebook is indicated by a logo at the bottom of the page. After clicking on it, Facebook opens in a new tab of the browser.

According to a ruling of the European Court of Justice dated 5 June 2018, the operator of a Facebook page is responsible together with Facebook for the processing of personal data within the meaning of Art. 26 of the General Data Protection Regulation (German DS-GVO).

When you visit our Facebook page, Facebook collects, among other things, your IP address and other information that is present on your PC in the form of cookies. This data is used to provide us, as operators of the Facebook pages, with statistical information about the use of the Facebook page. Further information is available on Facebook via the following link: https://www.facebook.com/help/pages/insights. We have no influence on the generation and presentation of the information.

The data collected about you in this context will be processed by Meta Platforms Ireland Ltd. and may be transferred to countries outside the European Union. Facebook describes in general what information it receives and how it is used in its data use policy. There you will also find information on how to contact Facebook as well as on the settings for advertisements. The data usage guidelines are available via the following link: https://www.facebook.com/about/privacy.

Facebook’s full data policy can be found here: https://www.facebook.com/full_data_use_policy

In what way Facebook uses the data from visits to Facebook pages for its own purposes, to what extent activities on the Facebook page are assigned to individual users, how long Facebook stores this data and whether data from a visit to the Facebook page is passed on to third parties is not conclusively and clearly stated by Facebook and is not known to us.

When accessing a Facebook page, the IP address assigned to your end device is transmitted to Facebook. According to Facebook, this IP address is anonymised (for “German” IP addresses) and deleted after 90 days. Facebook also stores information about the end devices of its users (e.g. as part of the “registration notification” function); this may enable Facebook to assign IP addresses to individual users.

If you are currently logged in to Facebook as a user, there is a cookie with your Facebook ID on your end device. This enables Facebook to track that you have visited this page and how you have used it. This also applies to all other Facebook pages. Facebook buttons embedded in websites enable Facebook to record your visits to these web pages and assign them to your Facebook profile. This data can be used to offer content or advertising tailored to you.

If you want to avoid this, you should log out of Facebook or deactivate the “stay logged in” function, delete the cookies on your device and close and restart your browser. In this way, Facebook information through which you can be directly identified is deleted. This allows you to use our Facebook page without revealing your Facebook ID. A Facebook login screen will appear when you access interactive features of the site (Like, Comment, Share, Message, etc.). After logging in, you will once again be recognisable to Facebook as a specific user.

For information on how to manage or delete information about you, please visit the following Facebook support pages: https://www.facebook.com/about/privacy

Facebook has assumed primary responsibility for the processing of Insights data and, among other things, for the exercise of the rights of data subjects in accordance with Art. 15 et seq. GDPR. Please contact Facebook directly for information requests or other questions about your rights, such as the deletion of data, as only they have full access to your user data. If we receive any requests about this directly, we will pass them on to Facebook.

We do not collect and process any further data from your use of the company’s own Facebook page.

11. Privacy policy for the use of Microsoft Forms

The data collected in the online form via Microsoft Forms as part of Microsoft Office 365 will only be used to process your registration for our KLB Academy 2023 and 2024, Work Experience Days 2023 and seminar feedback surveys and feedback surveys for trade fair visitors, which we collect to ensure the quality of our events.

Microsoft Forms is a software developed by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (“Microsoft”) and is available as a web application. The link to the survey form will be sent to the email address you have given us. The survey is anonymous – you do not have to provide any personal information. Nevertheless, Microsoft may collect metadata such as your IP address when you access the web application.
Data processing by Microsoft is usually done in a European data centre. However, if data is nevertheless processed in the United States, the EU standard contractual clauses apply between Microsoft and us. In the event of data transfer to the United States, these ensure a level of data protection that complies with the GDPR.
For more information, please see Microsoft’s privacy policy, which can be found at: https://privacy.microsoft.com/en-us/privacystatement

Upon registration to one of our events, the data you provide will be processed in order for us to be able to organise and hold the respective event and, if necessary, to issue certificates of participation and invoices. In this context, we process the following of your data:

Work Experience Days (free registration):

• First name and family name
• Street and house number
• Telephone number
• E-mail address
• Postcode and town

Seminar at our KLB Academy (with seminar fee):

• Customer number (if available)
• Company name
• Street and house number
• E-mail address
• Postal code and town
• Country
• First name and family name of participants (more than one if required)

We process the collected data on the basis of Art. 6 para. 1 lit. b) GDPR (contract or preliminary contract).

As part of our events, we regularly process the following data from you for our seminar feedback survey:

• First name and family name
• E-mail address

The survey as such is anonymous.

The legal basis for data processing in the survey is our legitimate interest within the meaning of Art. 6 (1) lit. f GDPR in improving our services.

Unless there is a legal obligation to share your data, we will not disclose your data to third parties without your explicit consent. If necessary, we may pass on your data to external service providers who are involved in the organisation and implementation of our events, such as scanning service providers, hosters and other IT services as well as external admins, maintenance and remote maintenance providers, disposers of files/data carriers. Should such a transfer take place, appropriate data protection measures have been taken, e.g. the conclusion of a contract processing agreement in accordance with Art. 28 GDPR. However, if you would like to have a hotel room booked for you for a seminar, we may provide your data to the respective hotel to the extent necessary for this purpose.

We only store your data for as long as there is a legal obligation to retain it or as is required to carry out the surveys. For free events, this is usually the case immediately after the event has been held; and for events for which a fee is charged, this is the case after ten years, taking into account the statutory retention periods and in relation to invoicing. Your contact data and, if applicable, bank details are required in order to process your request to participate in our events. In this respect, you are obliged to provide your data. This obligation arises from a contract or a pre-contractual obligation. If you or a third party registering you do not provide the required data when registering, you cannot enroll or be enrolled to our event.

12. Social media profiles on LinkedIn, Instagram, Xing, Pinterest

We maintain profiles on the social networks LinkedIn, Instagram, Pinterest and Xing in order to communicate with users registered there and to inform them about our products, services and news. When using and accessing our profile in the respective network, the data protection information and terms of use of the respective social media provider apply.

The processing of your personal data when visiting our profiles on LinkedIn, Instagram, Pinterest and Xing is carried out on the basis of our legitimate interests in an external presentation of our company and the use of an effective information opportunity and communication with you. The legal basis is Art. 6 para. 1 lit. f GDPR.

We have no influence on the processing of personal data by the respective social media provider. As a rule, when you visit our profiles, cookies about your usage behaviour or interests are stored in your browser by the social media provider for market research and advertising purposes.

For detailed information on data processing when using our social media profiles and on your rights, please refer to the privacy policies of the social media providers:

• Instagram (provider: part of the Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland)
  Privacy policy/opt-out http://instagram.com/about/legal/privacy/
• LinkedIn (provider: LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland)
  Privacy policy: https://www.linkedin.com/legal/privacy-policy
  Cookie policy and opt-out: https://www.linkedin.com/legal/cookie-policy
• XING (provider: XING SE, Dammtorstraße 30, 20354 Hamburg, Germany)
  Privacy policy/opt-out: https://privacy.xing.com/en/privacy-policy
• Pinterest (provider: Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street Dublin 2, Ireland)
  Privacy policy/opt-out: https://policy.pinterest.com/en-gb/privacy-policy.

13. Obligation to provide data

There is no obligation to provide data by law. However, you cannot use some functions of our website without providing personal data.

14. Amendment of the privacy policy

Due to the further development of our website and offers on it or due to modified legal or official requirements, it may become necessary to amend this privacy policy.